Overview

URLlite-1x86926289.top/us/landing-page/landing_first_deposit_bet26_p45_ar1
IP 178.253.14.164 (Iran)
ASN#0
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2022-11-28 04:10:51 UTC
StatusLoading report..
IDS alerts0
Blocklist alert38
urlquery alerts No alerts detected
Tags None

Domain Summary (18)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
firefox.settings.services.mozilla.com (2) 867 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 782 2374 34.102.187.140
ocsp.pki.goog (9) 175 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3087 6300 142.250.74.35
lite-1x86926289.top (38) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 27855 895847 178.253.14.164
ocsp.digicert.com (4) 86 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1364 2742 93.184.220.29
content-signature-2.cdn.mozilla.net (1) 1152 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 413 5844 34.160.144.191
ocsp.sectigo.com (5) 487 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1700 4815 104.18.32.68
v3.traincdn.com (27) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 11428 2220133 8.247.218.250
fonts.gstatic.com (4) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1957 60947 216.58.207.195
radar.cedexis.com (1) 3035 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 376 19103 45.54.49.5
region1.google-analytics.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 751 566 216.239.34.36
r3.o.lencr.org (7) 344 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 2366 6204 23.36.77.32
fonts.googleapis.com (1) 8877 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 574 2906 142.250.74.10
img-getpocket.cdn.mozilla.net (7) 1631 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3801 59116 34.120.237.76
www.googletagmanager.com (1) 75 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 389 45430 142.250.74.168
stats.g.doubleclick.net (1) 96 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 615 711 142.251.1.155
contile.services.mozilla.com (1) 1114 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 333 229 34.117.237.239
www.google-analytics.com (1) 40 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 376 20685 142.250.74.174
push.services.mozilla.com (1) 2140 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 606 127 35.167.231.108

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
 No alerts detected

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed
2022-11-28 medium lite-1x86926289.top Sinkholed


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 1 reports on IP: 178.253.14.164
Date UQ / IDS / BL URL IP
2022-11-28 04:10:51 UTC 0 - 0 - 38 lite-1x86926289.top/us/landing-page/landing_f (...) 178.253.14.164


Last 5 reports on ASN:
Date UQ / IDS / BL URL IP
2023-06-05 23:22:26 UTC 0 - 2 - 2 18.154.185.11/ 18.154.185.11
2023-06-05 23:13:14 UTC 0 - 0 - 2 103.139.192.56/ 103.139.192.56
2023-06-05 23:05:45 UTC 0 - 4 - 1 103.186.148.79/googleCloud/svchost.exe 103.186.148.79
2023-06-05 23:01:47 UTC 0 - 0 - 13 45.230.84.37/ 45.230.84.37
2023-06-05 22:47:10 UTC 0 - 0 - 0 t23e7v6uz8idz87ehugwq.skyrage.de/qqqqqqqqq 95.214.27.172


Last 1 reports on domain: lite-1x86926289.top
Date UQ / IDS / BL URL IP
2022-11-28 04:10:51 UTC 0 - 0 - 38 lite-1x86926289.top/us/landing-page/landing_f (...) 178.253.14.164


No other reports with similar screenshot

JavaScript

Executed Scripts (34)

Executed Evals (1)
#1 JavaScript::Eval (size: 5062) - SHA256: 6450f646354403d3c05a07f7a4d73160ca861a00afa51a4b40da2f89d792fed0
function _0x3ff5(_0x7d7987, _0x29f587) {
    var _0x18a5d1 = _0x2689();
    return _0x3ff5 = function(_0x53a662, _0x4e124a) {
        _0x53a662 = _0x53a662 - (-0xcf4 * -0x1 + -0x2 * -0xaba + -0x20f0);
        var _0x47b377 = _0x18a5d1[_0x53a662];
        return _0x47b377;
    }, _0x3ff5(_0x7d7987, _0x29f587);
}

function _0x2689() {
    var _0x188e16 = [')+$', 'tri', 'lxw', '3232RaqJVQ', '(((', 'Goa', '8vjFlLq', '2542254MrsfMx', '9', 'mmC', 'dfV', '1351716UyOGtj', 'jqQ', 'sea', 'g', 'FP_', '5373ebOQdT', '6', 'URL', 'f', '/', '3350FvBbtg', 'toS', '3182938YMSgKj', '5azWEIk', '2383152BKwzKP', '192681lxcstS', 'eQB', '10297zGqqJP', 'yuR', 'uHM', 'str', 'Yzu', 'rch', '24yszHla', '+)+', 'con'];
    _0x2689 = function() {
        return _0x188e16;
    };
    return _0x2689();
}(function(_0x426c3c, _0x1ed8b2) {
    var _0x77b304 = {
            _0x2f1fd9: 0x153,
            _0x5c78cb: 0x158,
            _0x4ee236: 0x162,
            _0x27ea04: 0x167,
            _0x130cca: 0x155,
            _0xd5fd5e: 0x145,
            _0x550043: 0x14f,
            _0x335a2f: 0x171,
            _0x1bd75f: 0x16a,
            _0xc142b4: 0x15a,
            _0x415184: 0x15d,
            _0x17f9b3: 0x14a,
            _0x1325ed: 0x158,
            _0x253b37: 0x166,
            _0x417e5b: 0x159
        },
        _0x30e3f8 = _0x426c3c();

    function _0x46eabc(_0x42c880, _0x154043) {
        return _0x3ff5(_0x154043 - -0x2e6, _0x42c880);
    }
    while (!![]) {
        try {
            var _0x1b76d5 = -parseInt(_0x46eabc(-0x15c, -_0x77b304._0x2f1fd9)) / (0x19c7 * 0x1 + 0xaeb + -0x24b1) + parseInt(_0x46eabc(-0x149, -0x156)) / (0x1 * 0x1c5 + 0x1 * 0x865 + -0x104 * 0xa) + -parseInt(_0x46eabc(-_0x77b304._0x5c78cb, -_0x77b304._0x4ee236)) / (0x1de3 * 0x1 + 0x153f + 0x239 * -0x17) * (parseInt(_0x46eabc(-_0x77b304._0x5c78cb, -_0x77b304._0x27ea04)) / (0xf76 + -0x25e8 + -0xa * -0x23f)) + -parseInt(_0x46eabc(-0x168, -_0x77b304._0x130cca)) / (-0x17d * 0x13 + -0x47 * -0x17 + 0x15eb) * (-parseInt(_0x46eabc(-_0x77b304._0xd5fd5e, -0x154)) / (0x585 * 0x6 + -0x781 * 0x1 + -0x1997)) + -parseInt(_0x46eabc(-_0x77b304._0x550043, -0x151)) / (0xbae + 0x29 * -0x7c + -0xb * -0xbf) * (-parseInt(_0x46eabc(-_0x77b304._0x335a2f, -_0x77b304._0x1bd75f)) / (0x94 * -0x2 + -0x943 + 0xa73)) + parseInt(_0x46eabc(-_0x77b304._0xc142b4, -_0x77b304._0x415184)) / (0x1 * 0x14ff + -0x6ad * 0x1 + -0xe49) * (-parseInt(_0x46eabc(-_0x77b304._0x17f9b3, -_0x77b304._0x1325ed)) / (0x117b + -0xa9f * 0x1 + 0x1 * -0x6d2)) + -parseInt(_0x46eabc(-0x171, -_0x77b304._0x253b37)) / (0x1e34 + -0x22b8 + -0x48f * -0x1) * (parseInt(_0x46eabc(-_0x77b304._0x417e5b, -0x14b)) / (0x1b5 + -0x4b * 0x33 + 0xd48));
            if (_0x1b76d5 === _0x1ed8b2) break;
            else _0x30e3f8['push'](_0x30e3f8['shift']());
        } catch (_0x3cacc1) {
            _0x30e3f8['push'](_0x30e3f8['shift']());
        }
    }
}(_0x2689, 0x3d0c * 0x25 + -0xbbd5e + 0x52d91 * 0x3), (function() {
    var _0x3c7e27 = {
            _0x2b6cd9: 0x165,
            _0x42288c: 0x175,
            _0x20a9d1: 0x186,
            _0x174d70: 0x15c,
            _0x2ee3d2: 0x16f,
            _0x352987: 0x15c,
            _0x5a600c: 0x16b,
            _0x5a1273: 0x15e,
            _0x41fdfa: 0x15a,
            _0x40e70f: 0x177,
            _0x27aa3: 0x170,
            _0x557001: 0x164,
            _0x11cf85: 0x157,
            _0x376a35: 0x161,
            _0x348f5a: 0x16a
        },
        _0x42bb02 = {
            _0x281f6d: 0x27
        },
        _0x45a01c = {
            _0x574610: 0x11e,
            _0x1e828b: 0x121,
            _0x10bc1e: 0x12e,
            _0x1ce362: 0x126,
            _0x22e3f5: 0x116,
            _0x550672: 0x11c
        },
        _0x500f66 = {
            'mmCWM': _0x1fe511(0x156, _0x3c7e27._0x2b6cd9) + '.+)' + _0x1fe511(_0x3c7e27._0x42288c, _0x3c7e27._0x20a9d1) + _0x1fe511(0x152, 0x159),
            'yuRoT': function(_0x19c86a, _0x5b9f52, _0xa12a5) {
                return _0x19c86a(_0x5b9f52, _0xa12a5);
            },
            'dfVCh': function(_0x3d128c) {
                return _0x3d128c();
            },
            'lxwEu': function(_0x2695ed, _0x5a5275) {
                return _0x2695ed + _0x5a5275;
            },
            'hlzYx': function(_0x3f692f, _0x2286d0) {
                return _0x3f692f + _0x2286d0;
            },
            'jqQlB': '8',
            'eQBYg': function(_0x19c3ef, _0x13e9d2) {
                return _0x19c3ef + _0x13e9d2;
            },
            'uHMgz': _0x1fe511(0x165, _0x3c7e27._0x174d70),
            'AbkRG': _0x1fe511(0x163, 0x16f),
            'GoaLS': '37437984de335c1d3bc07b1957bed4cdf03',
            'Yzumh': function(_0x42825b, _0x2d021c) {
                return _0x42825b + _0x2d021c;
            }
        },
        _0x4a3213 = (function() {
            var _0x792b6e = !![];
            return function(_0x57fbb4, _0x136ee5) {
                var _0x5ef05f = _0x792b6e ? function() {
                    if (_0x136ee5) {
                        var _0x3c78d5 = _0x136ee5['app' + 'ly'](_0x57fbb4, arguments);
                        return _0x136ee5 = null, _0x3c78d5;
                    }
                } : function() {};
                return _0x792b6e = ![], _0x5ef05f;
            };
        }()),
        _0x263c10 = _0x500f66[_0x1fe511(_0x3c7e27._0x2ee3d2, 0x180) + 'oT'](_0x4a3213, this, function() {
            function _0x60a6a5(_0x4a4b20, _0x31a1d5) {
                return _0x1fe511(_0x31a1d5 - -0x289, _0x4a4b20);
            }
            return _0x263c10[_0x60a6a5(-_0x45a01c._0x574610, -0x121) + 'tri' + 'ng']()[_0x60a6a5(-_0x45a01c._0x1e828b, -0x12a) + 'rch'](_0x500f66[_0x60a6a5(-0x124, -_0x45a01c._0x10bc1e) + 'WM'])[_0x60a6a5(-0x130, -_0x45a01c._0x1e828b) + _0x60a6a5(-_0x45a01c._0x1ce362, -0x136) + 'ng']()[_0x60a6a5(-0x143, -0x138) + _0x60a6a5(-0x122, -0x118) + 'uct' + 'or'](_0x263c10)['sea' + _0x60a6a5(-0x126, -_0x45a01c._0x22e3f5)](_0x500f66[_0x60a6a5(-_0x45a01c._0x550672, -0x12e) + 'WM']);
        });
    _0x500f66[_0x1fe511(_0x3c7e27._0x352987, 0x15e) + 'Ch'](_0x263c10);
    var _0x3de0b3 = _0x500f66[_0x1fe511(0x154, 0x154) + 'Eu'](_0x500f66['lxw' + 'Eu'](_0x1fe511(0x166, 0x155), _0x1fe511(0x160, _0x3c7e27._0x5a600c)), '/'),
        _0x367187 = _0x500f66[_0x1fe511(0x154, 0x15a) + 'Eu'](_0x500f66['hlz' + 'Yx'](_0x500f66[_0x1fe511(_0x3c7e27._0x5a1273, 0x15e) + 'lB'], '5'), _0x1fe511(_0x3c7e27._0x41fdfa, 0x16c)),
        _0x5c9373 = _0x500f66[_0x1fe511(0x16d, _0x3c7e27._0x40e70f) + 'Yg'](_0x500f66[_0x1fe511(_0x3c7e27._0x27aa3, _0x3c7e27._0x557001) + 'gz'] + _0x500f66['Abk' + 'RG'], _0x500f66[_0x1fe511(_0x3c7e27._0x11cf85, 0x14f) + 'LS']);

    function _0x1fe511(_0x281ee7, _0x169362) {
        return _0x3ff5(_0x281ee7 - -_0x42bb02._0x281f6d, _0x169362);
    }
    window[_0x1fe511(_0x3c7e27._0x376a35, 0x153) + _0x1fe511(0x164, 0x166) + '_NE' + 'W'] = _0x500f66[_0x1fe511(0x172, _0x3c7e27._0x348f5a) + 'mh'](_0x3de0b3, _0x367187) + _0x5c9373;
}()));

Executed Writes (0)


HTTP Transactions (112)


Request Response
                                        
                                            GET /us/landing-page/landing_first_deposit_bet26_p45_ar1 HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             178.253.14.164
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                            
Server: nginx
Date: Mon, 28 Nov 2022 04:10:38 GMT
Content-Length: 162
Connection: close
Location: https://lite-1x86926289.top/us/landing-page/landing_first_deposit_bet26_p45_ar1


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

Blocklists:
  - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "72937C756D3FEEAE6D04A6F445398B0436BDF559F8C7437E3A3233263943900E"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10062
Expires: Mon, 28 Nov 2022 06:58:20 GMT
Date: Mon, 28 Nov 2022 04:10:38 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4706
Cache-Control: 'max-age=158059'
Date: Mon, 28 Nov 2022 04:10:38 GMT
Last-Modified: Mon, 28 Nov 2022 02:52:12 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "4FD46B0B6A2EA24F5CE175985A3933C04B4C01BD3E32BEE2E50A61A65EEF7AF4"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8761
Expires: Mon, 28 Nov 2022 06:36:39 GMT
Date: Mon, 28 Nov 2022 04:10:38 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 28 Nov 2022 03:19:31 GMT
cache-control: public,max-age=3600
age: 3067
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    567df7db606cf5d0871aa5bc9311b6da
Sha1:   4263faac7cbab2fcaf6661911dcad5091c06be17
Sha256: e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: RrbG4zuI/0TOuLG1vzNy2bzEWnCGludbbKpGAnqQwsiyhzhQnIAPlu/s4PWImC2LqvlrUAjtDnk=
x-amz-request-id: 7C73XB1FR51QSSFV
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 28 Nov 2022 03:44:53 GMT
age: 1545
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "F7E2680F00EAB605DF14D421305322DD4F79F2E5910FC55D8F8D700E6830829D"
Last-Modified: Sun, 27 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10617
Expires: Mon, 28 Nov 2022 07:07:35 GMT
Date: Mon, 28 Nov 2022 04:10:38 GMT
Connection: keep-alive

                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:38 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 28 Nov 2022 03:11:12 GMT
cache-control: public,max-age=3600
age: 3566
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4287
Cache-Control: max-age=108460
Date: Mon, 28 Nov 2022 04:10:39 GMT
Etag: "638328ac-1d7"
Expires: Tue, 29 Nov 2022 10:18:19 GMT
Last-Modified: Sun, 27 Nov 2022 09:06:52 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 04:10:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /css2?family=Righteous&family=Roboto+Condensed:ital,wght@0,300;0,400;0,700;1,300;1,400;1,700&family=Roboto:ital,wght@0,100;0,300;0,400;0,500;0,700;0,900;1,100;1,300;1,400;1,500;1,700;1,900&display=swap HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.10
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 28 Nov 2022 04:10:39 GMT
date: Mon, 28 Nov 2022 04:10:39 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   2160
Md5:    eb929cb635515b60adc09bd0570df0ef
Sha1:   045ba79e263c623d799c48e6c65d6a981b4f64cb
Sha256: d837f8675302f107945e88f7b564d8e2f453bb544f040eb9e47b3f67de9df345
                                        
                                            GET /static-promotion/2547d7e.modern.js HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/promo-frame/us/landing-page/landing_first_deposit_bet26_p45_ar1
Cookie: platform_type=desktop; SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; lng=us; auid=sv0OpGOENL+Xqoj4BDXLAg==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:39 GMT
content-length: 4504
last-modified: Sat, 26 Nov 2022 13:54:58 GMT
vary: Accept-Encoding
etag: "63821ab2-1198"
content-encoding: gzip
expires: Mon, 28 Nov 2022 05:10:39 GMT
cache-control: max-age=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (8450), with no line terminators
Size:   4504
Md5:    be48c9d2aed2aae123785bee4d5d1809
Sha1:   93bcd602282d864208fc7c75d657d4e08ed0ed1a
Sha256: 8f112ba0b4284d636916b5c004efce1da374a925d466fa08f227db3717d11213

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /static-promotion/43014a8.modern.js HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/promo-frame/us/landing-page/landing_first_deposit_bet26_p45_ar1
Cookie: platform_type=desktop; SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; lng=us; auid=sv0OpGOENL+Xqoj4BDXLAg==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:39 GMT
content-length: 80493
last-modified: Sat, 26 Nov 2022 13:54:58 GMT
vary: Accept-Encoding
etag: "63821ab2-13a6d"
content-encoding: gzip
expires: Mon, 28 Nov 2022 05:10:39 GMT
cache-control: max-age=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65485)
Size:   80493
Md5:    f2ff4b220c7fb76b7f0dbee278b1bd5a
Sha1:   11a444a7dd2255ae88dd5e9fa65dfda1d63ecc2c
Sha256: 5798ce52fb6419d27e804d9df7cb4b6ce15128aac862b21f09420d93666fe34f

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /static-promotion/2c17dbf.modern.js HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/promo-frame/us/landing-page/landing_first_deposit_bet26_p45_ar1
Cookie: platform_type=desktop; SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; lng=us; auid=sv0OpGOENL+Xqoj4BDXLAg==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:39 GMT
content-length: 99499
last-modified: Sat, 26 Nov 2022 13:54:58 GMT
vary: Accept-Encoding
etag: "63821ab2-184ab"
content-encoding: gzip
expires: Mon, 28 Nov 2022 05:10:39 GMT
cache-control: max-age=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (65405)
Size:   99499
Md5:    63655f20282fe8dd39aef2624ce8559e
Sha1:   bd5514f692ac64b0ba95b53cbbe020810d5ec990
Sha256: 01c074c719613a4c27967fd1b370739a8733888095d17dbef92f228afde17f5a

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /static-promotion/009bd2a.modern.js HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/promo-frame/us/landing-page/landing_first_deposit_bet26_p45_ar1
Cookie: platform_type=desktop; SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; lng=us; auid=sv0OpGOENL+Xqoj4BDXLAg==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:39 GMT
content-length: 130403
last-modified: Sat, 26 Nov 2022 13:54:58 GMT
vary: Accept-Encoding
etag: "63821ab2-1fd63"
content-encoding: gzip
expires: Mon, 28 Nov 2022 05:10:39 GMT
cache-control: max-age=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (64918), with no line terminators
Size:   130403
Md5:    7cf7f0ac4b4abc102965d67df2737bb1
Sha1:   95a9abc66a6f1a33536dc5f1ba67313709a77157
Sha256: 758296e9a905844be4f36874ac505187ef20242969e9ed213359e2b19d4baaae

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 3P/E6gMuJ4cNLbv+2nuLaA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             35.167.231.108
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: NI3nxVSLzwB862F8c9Kv9zwKwJM=

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 04:10:39 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 15:03:06 GMT
Expires: Sun, 04 Dec 2022 15:03:05 GMT
Etag: "aa5fcd224b345e4f59c9b45f362d8ca630d3804e"
Cache-Control: max-age=556945,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7710414d1a19b512-OSL

                                        
                                            GET /_nuxt/desktop/default/265bc171.modern.js HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             8.247.218.250
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Mon, 28 Nov 2022 04:10:39 GMT
content-length: 533300
cache-control: max-age=86400
content-encoding: gzip
etag: "63831f02-82334"
expires: Mon, 28 Nov 2022 08:44:57 GMT
last-modified: Sun, 27 Nov 2022 08:25:38 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 69943
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   533300
Md5:    fee06e1b75894be84a0f889b7e45c87f
Sha1:   3b814d62efaad007a466f5124dd6a6b2f5b10b1b
Sha256: dc0b5efbb99d403aa349da823f17b903e8e4b9cd6db002a3930c2838870a762a
                                        
                                            GET /_nuxt/desktop/default/css/6f22b392.css HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.247.218.250
HTTP/2 200 OK
content-type: text/css
                                            
date: Mon, 28 Nov 2022 04:10:39 GMT
content-length: 217
cache-control: max-age=86400
content-encoding: gzip
etag: "6381d6d7-d9"
expires: Mon, 28 Nov 2022 08:32:17 GMT
last-modified: Sat, 26 Nov 2022 09:05:27 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 70702
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (408), with no line terminators
Size:   217
Md5:    2919a82ca1101572edf5510b83ab9804
Sha1:   6a276686d4a07a24347e3287f74824d17c200856
Sha256: 6fa9791ee17a6e3546381e4df7a59fc62b17fd0eec052a61e88d60c18ad85f08
                                        
                                            GET /genfiles/cms/pg/285/images/e2e1a81329ec0acf4e446b6fc70e4cf1.svg HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.247.218.250
HTTP/2 200 OK
content-type: image/svg+xml
                                            
date: Mon, 28 Nov 2022 04:10:39 GMT
content-length: 698
cache-control: public, max-age=120, s-maxage=600
content-encoding: gzip
etag: W/"7cca3986f7a5c4c164144ff11df71073"
expires: Mon, 28 Nov 2022 04:08:40 GMT
last-modified: Thu, 13 Jan 2022 14:28:56 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 240
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (1224), with no line terminators
Size:   698
Md5:    baf96800254904a05eee2ff49c94a801
Sha1:   847efb3449a8d7857f004192310aa2164a71d530
Sha256: 0ba137aa5f655e712ac40a592f366d1bd3b53b0a6b71c2cff4e7e0090f440335
                                        
                                            GET /_nuxt/desktop/default/css/8c439d72.css HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             8.247.218.250
HTTP/2 200 OK
content-type: text/css
                                            
date: Mon, 28 Nov 2022 04:10:39 GMT
content-length: 48550
cache-control: max-age=86400
content-encoding: gzip
etag: "6381d6d7-bda6"
expires: Mon, 28 Nov 2022 08:28:59 GMT
last-modified: Sat, 26 Nov 2022 09:05:27 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 70901
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   48550
Md5:    3e873710ef49cd86bb7fcad31400b810
Sha1:   2ad2afd41cd45cdb28412fb3f06f03ad9f156e59
Sha256: a0131225a6e64e48ad62e143cf6c8a41cf6f05f05ec9b03185cd311c2805bb13
                                        
                                            GET /_nuxt/desktop/default/95bde23c.modern.js HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             8.247.218.250
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Mon, 28 Nov 2022 04:10:39 GMT
content-length: 660314
cache-control: max-age=86400
content-encoding: gzip
etag: "63831f02-a135a"
expires: Mon, 28 Nov 2022 09:23:27 GMT
last-modified: Sun, 27 Nov 2022 08:25:38 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 67632
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65479)
Size:   660314
Md5:    d566542baef88a2f9a51f5a8186de5bb
Sha1:   1465b129e62ace12856c835cc4a8f3676b82b7ea
Sha256: 0eb01ed460f954cc5474f04258d8c6c36256ea06cb47365159cd8a57ef1a6741
                                        
                                            GET /_nuxt/desktop/default/12df164d.modern.js HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.247.218.250
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Mon, 28 Nov 2022 04:10:39 GMT
content-length: 1823
cache-control: max-age=86400
content-encoding: gzip
etag: "63831f02-71f"
expires: Mon, 28 Nov 2022 12:15:29 GMT
last-modified: Sun, 27 Nov 2022 08:25:38 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 57310
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (4622), with no line terminators
Size:   1823
Md5:    0c087d2b530f536f7ef18543abe42152
Sha1:   97fdcb15aeba8ad5983c7cd587fcd942be0b2995
Sha256: 6d53ca0fea85d37f8dea0683e55101d435b51eae4edbf7f103153988c9fcd374
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 04:10:39 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 15:03:06 GMT
Expires: Sun, 04 Dec 2022 15:03:05 GMT
Etag: "aa5fcd224b345e4f59c9b45f362d8ca630d3804e"
Cache-Control: max-age=556945,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7710414d1b520b06-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 04:10:39 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 15:03:06 GMT
Expires: Sun, 04 Dec 2022 15:03:05 GMT
Etag: "aa5fcd224b345e4f59c9b45f362d8ca630d3804e"
Cache-Control: max-age=556945,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7710414d1d35b523-OSL

                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 04:10:39 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 15:03:06 GMT
Expires: Sun, 04 Dec 2022 15:03:05 GMT
Etag: "aa5fcd224b345e4f59c9b45f362d8ca630d3804e"
Cache-Control: max-age=556945,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7710414d19440b3d-OSL

                                        
                                            GET /_nuxt/desktop/default/d4b35b6a.modern.js HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             8.247.218.250
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Mon, 28 Nov 2022 04:10:39 GMT
content-length: 93447
cache-control: max-age=86400
content-encoding: gzip
etag: "63831f02-16d07"
expires: Mon, 28 Nov 2022 09:23:27 GMT
last-modified: Sun, 27 Nov 2022 08:25:38 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 67632
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Algol 68 source text\012- Pascal source, Unicode text, UTF-8 text, with very long lines (65466)
Size:   93447
Md5:    b28624baf16e9233cc758e307d9f6ca2
Sha1:   cbef4dfe30c4af52b64bfde1cb4b2b6b02895a20
Sha256: b853cdd13e13b38861c0ba12f2d54a4437c83ea9e480060f432c8413583f82eb
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 04:10:39 GMT
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 27 Nov 2022 15:03:06 GMT
Expires: Sun, 04 Dec 2022 15:03:05 GMT
Etag: "aa5fcd224b345e4f59c9b45f362d8ca630d3804e"
Cache-Control: max-age=556945,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7710414d1ed9b509-OSL

                                        
                                            GET /_nuxt/desktop/default/css/4859ddb3.css HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             8.247.218.250
HTTP/2 200 OK
content-type: text/css
                                            
date: Mon, 28 Nov 2022 04:10:39 GMT
content-length: 84417
cache-control: max-age=86400
content-encoding: gzip
etag: "63831f02-149c1"
expires: Mon, 28 Nov 2022 09:23:30 GMT
last-modified: Sun, 27 Nov 2022 08:25:38 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 67632
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   84417
Md5:    8221793c110e14a0e1cfbb52f1ef36db
Sha1:   7aafe0364ba395958f922f8fc6cb88729da341e5
Sha256: 99615c2de27fc399156c626254c3a4d94d2c2a9179ee4c157fe1ed14b19fe301
                                        
                                            GET /_nuxt/desktop/default/02b93193.modern.js HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             8.247.218.250
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Mon, 28 Nov 2022 04:10:39 GMT
content-length: 6567
cache-control: max-age=86400
content-encoding: gzip
etag: "63831f02-19a7"
expires: Mon, 28 Nov 2022 09:23:30 GMT
last-modified: Sun, 27 Nov 2022 08:25:38 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 67632
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (17080), with no line terminators
Size:   6567
Md5:    dac3acea98b75cc5eee2c7746964cf02
Sha1:   74be6789f1989c1f2ffbc3ec80cd622a30d59ab6
Sha256: 420906a7db3c30c4f655d450163812c104e37243a5204afb5a61c2c6b87e0a9a
                                        
                                            GET /version.json HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lite-1x86926289.top
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             8.247.218.250
HTTP/2 200 OK
content-type: application/json
                                            
date: Mon, 28 Nov 2022 04:10:39 GMT
content-length: 44
cache-control: max-age=60, s-maxage=60
content-encoding: gzip
etag: "63832023-2c"
expires: Mon, 28 Nov 2022 04:10:42 GMT
last-modified: Sun, 27 Nov 2022 08:30:27 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 57
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   44
Md5:    72331dc68cc4aec9403a486e263714fd
Sha1:   d8821982075adaadce50f07910d58bcce40c5129
Sha256: 462dcdf9735f2c52810899a254158e8a16310f4fbef49b89599897fc7cdc155d
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 04:10:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lite-1x86926289.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 19:34:08 GMT
expires: Thu, 23 Nov 2023 19:34:08 GMT
cache-control: public, max-age=31536000
age: 376591
last-modified: Wed, 11 May 2022 19:24:48 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Size:   15744
Md5:    15d9f621c3bd1599f0169dcf0bd5e63e
Sha1:   7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
Sha256: f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 04:10:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 04:10:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lite-1x86926289.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 14:07:32 GMT
expires: Thu, 23 Nov 2023 14:07:32 GMT
cache-control: public, max-age=31536000
age: 396187
last-modified: Wed, 11 May 2022 19:24:45 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Size:   15920
Md5:    3a44e06eb954b96aa043227f3534189d
Sha1:   23cef6993ddb2b2979e8e7647fc3763694e2ba7d
Sha256: b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
                                        
                                            GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lite-1x86926289.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 18:53:49 GMT
expires: Thu, 23 Nov 2023 18:53:49 GMT
cache-control: public, max-age=31536000
age: 379010
last-modified: Wed, 11 May 2022 19:24:42 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Size:   15860
Md5:    e9f5aaf547f165386cd313b995dddd8e
Sha1:   acdef5603c2387b0e5bffd744b679a24a8bc1968
Sha256: f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 04:10:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /genfiles/cms/pg/default/images/c6805d21f8fccbfc75df5c556571fc74.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us/landing-page/landing_first_deposit_bet26_p45_ar1
Cookie: platform_type=desktop; SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; lng=us; auid=sv0OpGOENL+Xqoj4BDXLAg==
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:39 GMT
content-length: 352
last-modified: Wed, 10 Aug 2022 11:26:08 GMT
x-rgw-object-type: Normal
etag: "7dff72d4146e35a8262e6845d13a8df0"
x-amz-storage-class: STANDARD
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Size:   352
Md5:    7dff72d4146e35a8262e6845d13a8df0
Sha1:   a291af970d3955b35c314e85712ceea3aca25d54
Sha256: a467e6a3d8e443bbbade9f04324268de101625412c1135b4cec0864a55101a78

Blocklists:
  - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3511
Expires: Mon, 28 Nov 2022 05:09:11 GMT
Date: Mon, 28 Nov 2022 04:10:40 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3511
Expires: Mon, 28 Nov 2022 05:09:11 GMT
Date: Mon, 28 Nov 2022 04:10:40 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3511
Expires: Mon, 28 Nov 2022 05:09:11 GMT
Date: Mon, 28 Nov 2022 04:10:40 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "0E943AACB4A46480AB031EF294A0E089976EC125C331C15116B6C79F6B0F2FF0"
Last-Modified: Sat, 26 Nov 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3511
Expires: Mon, 28 Nov 2022 05:09:11 GMT
Date: Mon, 28 Nov 2022 04:10:40 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd18bfa3f-3214-4f84-8a7e-d219428f5242.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 10813
x-amzn-requestid: 5a3c9584-1389-45ac-968d-0a2301f82eda
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_KG00oAMFpig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d860-6ffc3ff67f7f7e75399834e8;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: pyXmSrIJ5ookfmhWY2xPXv374JfY2fFkcgiz5q8iFpWV4Rm0f0zXtg==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:51:04 GMT
age: 22776
etag: "238a7439d887fb3aa7f1302eeb43fce62f08441a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10813
Md5:    005e5ba3c9588cf389a58195001b64e3
Sha1:   238a7439d887fb3aa7f1302eeb43fce62f08441a
Sha256: d75dd5b6f57d9c9290725c5be76cc7d7a39682ca569bea18eceb9bdc13d444f9
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74165307-11fe-455f-9c90-106d24a6495f.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6498
x-amzn-requestid: 2499eb0e-74c9-4c04-ba58-3e65fc452c34
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR8IwHU4oAMFaAg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383da37-12f14e7a30bc1a75499cb272;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:44:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: m5GSRli35fewn4l-k0jyFEcru1VKJlDYddCrLEpp5YiQwaLXsXsQDw==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:02:23 GMT
age: 22097
etag: "771d38e18cdfa54052f7cb150b73c03154eb4368"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6498
Md5:    1bb306213437ea24ab879adc9e3b6da4
Sha1:   771d38e18cdfa54052f7cb150b73c03154eb4368
Sha256: d4cce7533fd59ef11fb8fec4bc114d5be0bacaa9134e3f1536e0d6bac1f58ffb
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a11c6ec-01ab-453a-a13d-c7804535dc69.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8771
x-amzn-requestid: 995d3904-9be1-4b40-9813-ff47e60639ec
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_MEAPoAMF0xw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d861-3fdb7958064e0c4b1aed2136;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vrBB4JkuL3nbZnDWitQ4dvTruO9M6hSt8mw9NuJliCmcNOw8xvfWhw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:20:34 GMT
age: 21006
etag: "3da359b1ba09138a425094715b9f3a2f8d0257fe"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8771
Md5:    b0bd385532089b45a14e461abbecc1af
Sha1:   3da359b1ba09138a425094715b9f3a2f8d0257fe
Sha256: 803001528f2aefc1ea90e585d48de435975862861a1cbe8d898e5cd7ebd297dd
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F887b04ff-c782-4045-b122-5f0fda800771.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 5652
x-amzn-requestid: 24915481-2902-4776-b489-7741957424f8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMozvEfioAMFUJg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381bb4a-7846a98a5fb3d0786cb84130;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 07:07:54 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -DsRBfO-yxwm29z7mDDNkK69aQb_fpEzVY0vuVUWZrx6-aubx7a3YA==
via: 1.1 2e20768704c71ff3ce2e677251d27f3c.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 07:39:44 GMT
age: 73856
etag: "e9a69711e04e8028f11082285a405bafc61c5b20"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5652
Md5:    d407d1a700a02f6422a0415be9648354
Sha1:   e9a69711e04e8028f11082285a405bafc61c5b20
Sha256: dfc27a9aea46df1e218ee485296392c5a6c03756e91487f37212c69d4b30a418
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd6c93814-fbc2-4f60-a417-7cb6ff99a2ef.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 6263
x-amzn-requestid: 5c3da401-eb9e-4904-a7e9-5e74648b8b77
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_KFfWoAMF99A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d860-3110d65625e883502a5078a9;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: EpU6HS6f0BpRceJVfwhBhOgKMTMvdMZj4ST9DMATiqfA10pNplyPtQ==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:51:04 GMT
age: 22776
etag: "c033d1ecdb9e7640f3df044e39053bed8292fcbc"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6263
Md5:    b24e349e9d22fb30fbc80497b512cead
Sha1:   c033d1ecdb9e7640f3df044e39053bed8292fcbc
Sha256: 2d77e3c39c60a3563613b1ba97ec0b1a256f41ad09936ba49b23d8cf22f8a7a8
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 9430
x-amzn-requestid: 454ca8bd-a256-45f2-8b41-feee86c5af82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR7wyGCIIAMFhgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d99e-1488f8ce71a91ebc3ad6b7e0;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ibLuLI6j9EWh0dgk51O7kiPBRyURZ0UdNtlgbBD-SXnDg_GT_tJm8Q==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:16 GMT
age: 22164
etag: "075531f525e625b117b2497f31139c9824d0e9c5"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9430
Md5:    1f434933b5bd6377d299ada22d1ae7ef
Sha1:   075531f525e625b117b2497f31139c9824d0e9c5
Sha256: b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c
                                        
                                            GET /_nuxt/desktop/default/css/6f22b392.css HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us/landing-page/landing_first_deposit_bet26_p45_ar1
Cookie: platform_type=desktop; SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; lng=us; auid=sv0OpGOENL+Xqoj4BDXLAg==
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: text/css
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:40 GMT
content-length: 217
last-modified: Sun, 27 Nov 2022 08:25:38 GMT
vary: Accept-Encoding
etag: "63831f02-d9"
content-encoding: gzip
expires: Mon, 28 Nov 2022 05:10:40 GMT
cache-control: max-age=3600
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (408), with no line terminators
Size:   217
Md5:    7daedfd2e5d51a6d32dad0ebc8670b9b
Sha1:   8188bcb32337c1db47695dd3fd1df0ad2710ce91
Sha256: bb735f470af34179f2b18d7c55ea895ce7e5595a64f67e98fcbd169176b33745

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /genfiles/cms/maintenance_mode/settings.json?timestamp=1669608640328 HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us/landing-page/landing_first_deposit_bet26_p45_ar1
Cookie: platform_type=desktop; SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; lng=us; auid=sv0OpGOENL+Xqoj4BDXLAg==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:40 GMT
content-length: 145
last-modified: Thu, 17 Nov 2022 07:57:48 GMT
x-rgw-object-type: Normal
etag: "55385fdddab661013ad8f678cd75ac88"
cache-control: public,max-age=60,s-maxage=60
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   145
Md5:    55385fdddab661013ad8f678cd75ac88
Sha1:   bd36ac4197e34b4d5022498bc319e6f51dff2329
Sha256: d5af3be5580e1f59ebf83be6961804f2a1f09732719085c04ace46c76df2106b

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /pwa HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lite-1x86926289.top/us/landing-page/landing_first_deposit_bet26_p45_ar1
Connection: keep-alive
Cookie: platform_type=desktop; SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; lng=us; auid=sv0OpGOENL+Xqoj4BDXLAg==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:40 GMT
content-length: 15
etag: W/"f-65jex68GXYCho925nLPjwJGaqFI"
server-timing: dt_285;dur=2
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   15
Md5:    0e4766fd1b2ba2e236fd9364587f99ab
Sha1:   eb98dec7af065d80a1a3ddb99cb3e3c0919aa852
Sha256: 4612305c0c6077857c88e831688c8bb34594e16c567ed45a3a330c14fa7c627b

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /_nuxt/desktop/default/abf3835a.modern.js HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.247.218.250
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Mon, 28 Nov 2022 04:10:41 GMT
content-length: 1083
cache-control: max-age=86400
content-encoding: gzip
etag: "63831f02-43b"
expires: Mon, 28 Nov 2022 12:12:44 GMT
last-modified: Sun, 27 Nov 2022 08:25:38 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 57477
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2510), with no line terminators
Size:   1083
Md5:    776645d2326a07da88bdde59af23c88d
Sha1:   34c041c3ab883d227b2e4d6a7563a2d231ad8a8f
Sha256: 232ed4d24c5fdb317230eee2ec2a46986002e6972a86a2ba757d8b6b5645a3a1
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 04:10:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gtag/js?id=UA-178408567-1 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                            
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 28 Nov 2022 04:10:41 GMT
expires: Mon, 28 Nov 2022 04:10:41 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 44713
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1921)
Size:   44713
Md5:    b78f4533b0315655ab14bfd6972ae7a6
Sha1:   331175020299838620f6d091c79ab0c8c0a44377
Sha256: 5f548e14ba75b3253cf5751d87b6e5928d01ad4f16fb834f3dbc76122f9c0bfc
                                        
                                            GET /version.json?timestamp=1669608640522 HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x86926289.top/us/landing-page/landing_first_deposit_bet26_p45_ar1
Cookie: platform_type=desktop; SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; lng=us; auid=sv0OpGOENL+Xqoj4BDXLAg==; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:41 GMT
content-length: 44
last-modified: Sun, 27 Nov 2022 08:30:27 GMT
vary: Accept-Encoding
etag: "63832023-2c"
content-encoding: gzip
expires: Mon, 28 Nov 2022 04:11:41 GMT
access-control-allow-origin: *
cache-control: max-age=60, max-age=60, s-maxage=60
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   44
Md5:    72331dc68cc4aec9403a486e263714fd
Sha1:   d8821982075adaadce50f07910d58bcce40c5129
Sha256: 462dcdf9735f2c52810899a254158e8a16310f4fbef49b89599897fc7cdc155d

Blocklists:
  - quad9: Sinkholed
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 04:10:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /1593429750/radar.js HTTP/1.1 
Host: radar.cedexis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             45.54.49.5
HTTP/1.1 200 OK
Content-Type: application/javascript
                                            
Server: nginx
Date: Mon, 28 Nov 2022 04:10:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 29 Jun 2020 11:30:33 GMT
Vary: Accept-Encoding
ETag: W/"5ef9d0d9-af5c"
Expires: Mon, 12 Dec 2022 04:10:41 GMT
Cache-Control: max-age=1209600, public
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (1782)
Size:   18746
Md5:    2acb3c3179b2646943d1a8f5166743cc
Sha1:   56aa31a4027fec3dd8cc78114c6b0f3604716c14
Sha256: 0ac8b27ab0fd5f6440f4fc51e98694a417ae1402a3ca4feb224643327c079595
                                        
                                            GET /_nuxt/svg-sprites/common-698f8a6f34d490918d634efec2d8f268.svg HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us/landing-page/landing_first_deposit_bet26_p45_ar1
Cookie: platform_type=desktop; SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; lng=us; auid=sv0OpGOENL+Xqoj4BDXLAg==; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/svg+xml
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:41 GMT
vary: Accept-Encoding
last-modified: Sun, 27 Nov 2022 08:25:38 GMT
etag: W/"63831f02-196ca"
expires: Mon, 28 Nov 2022 23:43:51 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (65536), with no line terminators
Size:   40683
Md5:    99a829e8a772aad078540e0f077c1e40
Sha1:   d15d0e736b9082445b64a64dc45dd3000c7912e0
Sha256: 993175bba9fe17eedf7edb260e2da91fd9244e7e1302b192de5c0bd500d4331c

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /_nuxt/desktop/default/css/c2b74bc7.css HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.247.218.250
HTTP/2 200 OK
content-type: text/css
                                            
date: Mon, 28 Nov 2022 04:10:41 GMT
content-length: 454
cache-control: max-age=86400
content-encoding: gzip
etag: "6381d6d7-1c6"
expires: Mon, 28 Nov 2022 08:29:07 GMT
last-modified: Sat, 26 Nov 2022 09:05:27 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 70896
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1429), with no line terminators
Size:   454
Md5:    38ab8312925719bbf27c9f9ce1acf908
Sha1:   e1bad84acb2e6396a4e55fdbd8e58727ccdb444f
Sha256: f79ed2de7ff2155a501cad024d7a47fd85996f9403cefc8088300718fdbf090d
                                        
                                            GET /_nuxt/svg-sprites/qatar-fce482452f0624ce31de0cfe3caf302b.svg HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us/landing-page/landing_first_deposit_bet26_p45_ar1
Cookie: platform_type=desktop; SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; lng=us; auid=sv0OpGOENL+Xqoj4BDXLAg==; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/svg+xml
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:41 GMT
vary: Accept-Encoding
last-modified: Sun, 27 Nov 2022 08:22:21 GMT
etag: W/"63831e3d-4873"
expires: Mon, 28 Nov 2022 16:58:25 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (18547), with no line terminators
Size:   9192
Md5:    468ccec3e070064da1408049cdf082c6
Sha1:   a861f24b3d29e0538a16bfe67cc4dd36ade06bcd
Sha256: ce501973dba779bc899663dfbdfa7d8cff2cc958e70b86573dc55c909b44d84e

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /_nuxt/desktop/default/e7ea6c61.modern.js HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.247.218.250
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Mon, 28 Nov 2022 04:10:41 GMT
content-length: 16803
cache-control: max-age=86400
content-encoding: gzip
etag: "63831f02-41a3"
expires: Mon, 28 Nov 2022 12:12:45 GMT
last-modified: Sun, 27 Nov 2022 08:25:38 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 57477
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (41008), with NEL line terminators
Size:   16803
Md5:    646526cb77d985135898799955da04a3
Sha1:   0c6f345e1cce13c2084204b9eec16bb2ee3ba509
Sha256: 8b3d80e4982430d135192cd8aa7f18c0c81c48b77c2d9f05ffd8551dc7b57b84
                                        
                                            GET /_nuxt/desktop/default/96e6ff21.modern.js HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.247.218.250
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Mon, 28 Nov 2022 04:10:41 GMT
content-length: 3905
cache-control: max-age=86400
content-encoding: gzip
etag: "63831f02-f41"
expires: Mon, 28 Nov 2022 12:12:45 GMT
last-modified: Sun, 27 Nov 2022 08:25:38 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 57477
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (17802), with no line terminators
Size:   3905
Md5:    e3f81cc800c5cd212c1cbea67575fdbc
Sha1:   eadc125cf0dbf93bfe7d7d99bdc647097e40bb1d
Sha256: a9eb7f8b3282694637a51cfe126761a5117af65357532d46d67851ee661024f1
                                        
                                            GET /s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://lite-1x86926289.top
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             216.58.207.195
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 9628
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 06:19:49 GMT
expires: Fri, 24 Nov 2023 06:19:49 GMT
cache-control: public, max-age=31536000
age: 337852
last-modified: Wed, 11 May 2022 19:24:42 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 9628, version 1.0\012- data
Size:   9628
Md5:    d9ac47c7e500fb7083b8d595eaf6fe12
Sha1:   112a2fc5f4ff9b85ee3a706fa9b8c47f79b05933
Sha256: 495d38d4b9741e8aa4204002414069e2d8db9f3c60b60e195e4d74381462dee9
                                        
                                            GET /_nuxt/desktop/default/f0cdb63c.modern.js HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.247.218.250
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Mon, 28 Nov 2022 04:10:41 GMT
content-length: 1061
cache-control: max-age=86400
content-encoding: gzip
etag: "63831f02-425"
expires: Mon, 28 Nov 2022 09:23:49 GMT
last-modified: Sun, 27 Nov 2022 08:25:38 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 67613
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (2451), with no line terminators
Size:   1061
Md5:    b3891985de1832945a87c1ab8db6c71e
Sha1:   527836872393c1e10db39fdcde5925dc99948085
Sha256: 9ca8d26c24145db4e4d847140ccf7117a41a6a10030c5116aa46a2ab1aaf031f
                                        
                                            GET /domain-api/api/v1/domains/lite-1x86926289.top HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x86926289.top/us/landing-page/landing_first_deposit_bet26_p45_ar1
Cookie: platform_type=desktop; SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; lng=us; auid=sv0OpGOENL+Xqoj4BDXLAg==; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/vnd.api+json
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:41 GMT
content-length: 86
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   86
Md5:    6cfdac3a8d33b2508c9406e2ab1f3b5c
Sha1:   e3ac8dd93bdb3e0740eaaf7c20ce1ed4832bd8ed
Sha256: af551b631c9a3990820bad4fee5ddc2e7ce66907c2e798347b77ba2a4935f02a

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /_nuxt/desktop/default/390ec237.modern.js HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.247.218.250
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Mon, 28 Nov 2022 04:10:41 GMT
content-length: 5378
cache-control: max-age=86400
content-encoding: gzip
etag: "63831f02-1502"
expires: Mon, 28 Nov 2022 09:24:10 GMT
last-modified: Sun, 27 Nov 2022 08:25:38 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 67597
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (13517), with no line terminators
Size:   5378
Md5:    8cae159105c530eae2abc3d0e2886fe5
Sha1:   41e5028961e12aa601e5e84bc348dbdcdf4bdd27
Sha256: 31c64d32adf4c1368837e40aa2d54874ef3550c38b9fce5b5a16715c678432c8
                                        
                                            GET /_nuxt/desktop/default/b0ff0115.modern.js HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.247.218.250
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                            
date: Mon, 28 Nov 2022 04:10:41 GMT
content-length: 26112
cache-control: max-age=86400
content-encoding: gzip
etag: "63831f02-6600"
expires: Mon, 28 Nov 2022 09:23:44 GMT
last-modified: Sun, 27 Nov 2022 08:25:38 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
age: 67622
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Size:   26112
Md5:    b37cdeceb55e4e0c1d5f1c3dcffd5ae5
Sha1:   f999b330840129d7f4cc1db45d310c3b0c30fd36
Sha256: 7d58c82cf8be3c37bbbf3d0117a8ff201afef6718ebd52771e5787f45c224d85
                                        
                                            GET /frontend-api/seo/seoText?url=https%3A%2F%2Flite-1x86926289.top%2Fus%2Flanding-page%2Flanding_first_deposit_bet26_p45_ar1&language=us HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x86926289.top/us/landing-page/landing_first_deposit_bet26_p45_ar1
Cookie: platform_type=desktop; SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; lng=us; auid=sv0OpGOENL+Xqoj4BDXLAg==; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:41 GMT
content-length: 38
access-control-allow-origin: *
etag: W/"26-4nTdj/dbFNi30ths6luLxBXeWKw"
server-timing: requestTime; dur=39.248805999999995; desc="req_t", renderTime; dur=39.255395; desc="rend_t", total; dur=39.765367999999995; desc="Total Response Time"
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   38
Md5:    7e5f0649cceedb563f3037fcd2dc2629
Sha1:   e274dd8ff75b14d8b7d2d86cea5b8bc415de58ac
Sha256: cc2d7c3416bb5bbb515f151fbf694edbc44b497fca10f87b61fb31ab0b43a548

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /checker/redirect/stat/run/ HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x86926289.top/us/landing-page/landing_first_deposit_bet26_p45_ar1
Cookie: platform_type=desktop; SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; lng=us; auid=sv0OpGOENL+Xqoj4BDXLAg==; window_width=1280; che_g=74d78da5-fed6-bd71-fb82-5b9f032a4a6d
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:41 GMT
content-length: 49
cache-control: private
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   49
Md5:    b7a9075de81cdb1a9fa74fa71b5126dd
Sha1:   9d651f649e1c5eab95d3b0ca7cc9b02dec41df61
Sha256: 86877f86c7d18d59e54d73c43e6709a91a7f0a6a86980cada7f4b7e69c13cf20

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /web-api/external-api/getColorTheme HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://lite-1x86926289.top/promo-frame/us/landing-page/landing_first_deposit_bet26_p45_ar1
Cookie: platform_type=desktop; SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; lng=us; auid=sv0OpGOENL+Xqoj4BDXLAg==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:41 GMT
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=46, dt_285;dur=754
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   15156
Md5:    830072e159519c1f86ce31609df94ac7
Sha1:   7f6a06990d5eaafc19b8b48e54fb96a92d943405
Sha256: 6148a52552e442e034f5a5f5c46d8019ef6a6189d059d3d057decb93401e6895

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /genfiles/cms/1-285/desktop/footer/logos/can-2019-en.png HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.247.218.250
HTTP/2 200 OK
content-type: image/png
                                            
date: Mon, 28 Nov 2022 04:10:41 GMT
content-length: 8120
cache-control: public, max-age=120, s-maxage=600
etag: "d2998762f0b00c9d1bcd90c28f0a5731"
expires: Mon, 28 Nov 2022 04:04:51 GMT
last-modified: Fri, 06 Nov 2020 12:55:12 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 511
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 243 x 144, 8-bit colormap, non-interlaced\012- data
Size:   8120
Md5:    d2998762f0b00c9d1bcd90c28f0a5731
Sha1:   95553e4eff474b6a05ad4a6e00826ba4ab9b2c4e
Sha256: 09050bbfb49f160886714942b619eb95dbd92f2f6862f38aa685538f420591b8
                                        
                                            GET /web-api/external-api/getFirstDepositBonus HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x86926289.top/us/landing-page/landing_first_deposit_bet26_p45_ar1
Cookie: platform_type=desktop; SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; lng=us; auid=sv0OpGOENL+Xqoj4BDXLAg==; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:41 GMT
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=45, dt_285;dur=47
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   18799
Md5:    612bd9c1a38a890da47e0b23d57fbb45
Sha1:   807d9d32328d729a4c7530e375a869aebd3b560c
Sha256: 99d98bf916fb9cdd1532c9633c35832b9e7eb05e9038753db22c241dadebcb95

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /web-api/external-api/getFirstDepositBonus HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x86926289.top/us/landing-page/landing_first_deposit_bet26_p45_ar1
Cookie: platform_type=desktop; SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; lng=us; auid=sv0OpGOENL+Xqoj4BDXLAg==; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:41 GMT
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=49, dt_285;dur=54
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   33452
Md5:    2d8bee35fdd3accdd126b80e12535494
Sha1:   07c7519f24a522d41763db3e7a013f8f02ada641
Sha256: 4e6ff2efd96a93be1f681964e1abfa153d3ef31203fe3fd0ae94894a94a5ec4f

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /genfiles/cms/1-285/desktop/footer/logos/K23_2020_lightmode.png HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.247.218.250
HTTP/2 200 OK
content-type: image/png
                                            
date: Mon, 28 Nov 2022 04:10:41 GMT
content-length: 168437
cache-control: public, max-age=120, s-maxage=600
etag: "514efcaa096bc870bbb55a0910327b9c"
expires: Mon, 28 Nov 2022 04:11:56 GMT
last-modified: Wed, 01 Jun 2022 12:17:09 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 66
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 4455 x 2151, 8-bit/color RGBA, non-interlaced\012- data
Size:   168437
Md5:    514efcaa096bc870bbb55a0910327b9c
Sha1:   05f80f59b5eeb2e4cf409fc4b9d96ddec64b3e6f
Sha256: a541dec3a5acfa154ce5716014bb463c6be72db6bf5ffb88dde95929e9670942
                                        
                                            GET /genfiles/cms/1-285/desktop/footer/logos/logo-losc.png HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.247.218.250
HTTP/2 200 OK
content-type: image/png
                                            
date: Mon, 28 Nov 2022 04:10:41 GMT
content-length: 119254
cache-control: public, max-age=120, s-maxage=600
etag: "0b72a6591ead9e9b95a118b411b9556a"
expires: Mon, 28 Nov 2022 04:07:50 GMT
last-modified: Fri, 09 Sep 2022 14:12:38 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 292
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 2052 x 1962, 8-bit/color RGBA, non-interlaced\012- data
Size:   119254
Md5:    0b72a6591ead9e9b95a118b411b9556a
Sha1:   6d43538a7c2167e9046d418e0707dba8f361fd1c
Sha256: 012b4965e861f6073a0496f55677715279f5799468c9aa4c3d92bdbbc5e0b67b
                                        
                                            GET /genfiles/cms/1-285/desktop/footer/logos/tundra_esports_white_300.png HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.247.218.250
HTTP/2 200 OK
content-type: image/png
                                            
date: Mon, 28 Nov 2022 04:10:41 GMT
content-length: 4787
cache-control: public, max-age=120, s-maxage=600
etag: "a5890bc0bcaec72aa20c8aff34d9b780"
expires: Mon, 28 Nov 2022 04:07:28 GMT
last-modified: Fri, 28 Oct 2022 09:52:52 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 313
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 300 x 333, 8-bit colormap, non-interlaced\012- data
Size:   4787
Md5:    a5890bc0bcaec72aa20c8aff34d9b780
Sha1:   5838db8aa1e45633a318302673e01b096f6a94d9
Sha256: 5b67017abd98aa5a6fe3c86aa2f74ef39ac53a6067aa4d9515f413813bd16857
                                        
                                            GET /genfiles/cms/1-285/desktop/footer/logos/mibr_white-logo.png HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.247.218.250
HTTP/2 200 OK
content-type: image/png
                                            
date: Mon, 28 Nov 2022 04:10:41 GMT
content-length: 9904
cache-control: public, max-age=120, s-maxage=600
etag: "c14d0b72d2885c8ae4975e64ddb29a6f"
expires: Mon, 28 Nov 2022 04:04:51 GMT
last-modified: Thu, 04 Aug 2022 17:36:40 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 511
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 834 x 434, 8-bit/color RGBA, non-interlaced\012- data
Size:   9904
Md5:    c14d0b72d2885c8ae4975e64ddb29a6f
Sha1:   3c31e0bb67f15daada51baf892c89ef0cd061146
Sha256: 657992cd544e48630d90afc0b957014f0ac4fad15789c7c18a937d5b71231967
                                        
                                            GET /genfiles/cms/1-285/desktop/footer/logos/logo-fcb.png HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.247.218.250
HTTP/2 200 OK
content-type: image/png
                                            
date: Mon, 28 Nov 2022 04:10:41 GMT
content-length: 7420
cache-control: public, max-age=120, s-maxage=600
etag: "8ea23d2a7c2e152564a43453425b3301"
expires: Mon, 28 Nov 2022 04:04:51 GMT
last-modified: Fri, 06 Nov 2020 12:55:12 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 511
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 169 x 183, 8-bit colormap, non-interlaced\012- data
Size:   7420
Md5:    8ea23d2a7c2e152564a43453425b3301
Sha1:   f6e61dbb4b90ab17f23130d79af095a1267b01c3
Sha256: e193b50c6e3a1657a7c7e1100b941a43c90eeda8f9d56763318ac624eeba2cbd
                                        
                                            GET /genfiles/cms/1-285/desktop/footer/logos/og_red_bull.png HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.247.218.250
HTTP/2 200 OK
content-type: image/png
                                            
date: Mon, 28 Nov 2022 04:10:41 GMT
content-length: 149244
cache-control: public, max-age=120, s-maxage=600
etag: "ab837a9cb89291146ad8b371c052fe8d"
expires: Mon, 28 Nov 2022 04:04:51 GMT
last-modified: Wed, 25 May 2022 11:38:09 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 511
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 2187 x 3222, 8-bit/color RGBA, non-interlaced\012- data
Size:   149244
Md5:    ab837a9cb89291146ad8b371c052fe8d
Sha1:   bf89d8ec4fa8ac43004ceb74bd49199aa3436ca2
Sha256: 14a017c6bf332ef819755c66546f9847b291c056239bc0289d92063fcd17648b
                                        
                                            GET /sfiles/games-images/ico-logo/white/desk/169.svg HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.247.218.250
HTTP/2 200 OK
content-type: image/svg+xml
                                            
date: Mon, 28 Nov 2022 04:10:41 GMT
content-length: 72004
cache-control: max-age=86400
content-encoding: gzip
etag: W/"f6505dc3eba72dc86dd6f5d3ad3783e6"
expires: Mon, 28 Nov 2022 14:21:34 GMT
last-modified: Wed, 16 Nov 2022 15:19:41 GMT
server: nginx
vary: Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-amz-meta-origin-date-iso8601: 2022-11-16T14:16:25.000Z
age: 49763
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (34355)
Size:   72004
Md5:    652a248846360cfc753157ac135e3833
Sha1:   546906b1e3df5ce7a3adefd3fcc937e20be9c3d2
Sha256: 10ccd9e4e374dbd44ba53c31bc581f964075da48cb728a07256e13839d8cc5b5
                                        
                                            GET /genfiles/cms/1-285/desktop/footer/logos/caf-confederation-en.png HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.247.218.250
HTTP/2 200 OK
content-type: image/png
                                            
date: Mon, 28 Nov 2022 04:10:41 GMT
content-length: 14740
cache-control: public, max-age=120, s-maxage=600
etag: "70e5105d03a74cc00cd9a0386fde303e"
expires: Mon, 28 Nov 2022 04:07:50 GMT
last-modified: Fri, 07 May 2021 11:29:03 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 292
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 387 x 230, 8-bit colormap, non-interlaced\012- data
Size:   14740
Md5:    70e5105d03a74cc00cd9a0386fde303e
Sha1:   ffcd4fbcd486825d0d31e41cada108335b012d81
Sha256: baabca03d9695b9475d7d0b4d736fbb093d21f2c03228a7704097e2bfb8e583a
                                        
                                            GET /genfiles/cms/1-285/desktop/footer/logos/team_spirit_black.png HTTP/1.1 
Host: v3.traincdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             8.247.218.250
HTTP/2 200 OK
content-type: image/png
                                            
date: Mon, 28 Nov 2022 04:10:41 GMT
content-length: 169025
cache-control: public, max-age=120, s-maxage=600
etag: "ba6cf2e79cb532a105c8f34b1efbcb26"
expires: Mon, 28 Nov 2022 04:12:41 GMT
last-modified: Wed, 01 Jun 2022 12:16:40 GMT
server: nginx
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-rgw-object-type: Normal
age: 329
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 4000 x 4000, 8-bit/color RGBA, non-interlaced\012- data
Size:   169025
Md5:    ba6cf2e79cb532a105c8f34b1efbcb26
Sha1:   f05ff0a3895400ac928ac1cce6153f657e6f6d8f
Sha256: 8e3e826321588ba9cca7ed55a8c23ee2e64e007775a40f9f8878340b2788864e
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.174
HTTP/2 200 OK
content-type: text/javascript
                                            
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Mon, 28 Nov 2022 02:41:08 GMT
expires: Mon, 28 Nov 2022 04:41:08 GMT
cache-control: public, max-age=7200
age: 5373
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   20039
Md5:    47e6f374ca946fddd5b59871b325736c
Sha1:   baa9282efc8785e84d247c3bff518eaa45f101c4
Sha256: 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
                                        
                                            GET /genfiles/cms/maintenance_mode/settings.json?timestamp=1669608641411 HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x86926289.top/us/landing-page/landing_first_deposit_bet26_p45_ar1
Cookie: platform_type=desktop; SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; lng=us; auid=sv0OpGOENL+Xqoj4BDXLAg==; window_width=1280; che_g=74d78da5-fed6-bd71-fb82-5b9f032a4a6d
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:41 GMT
content-length: 145
last-modified: Thu, 17 Nov 2022 07:57:48 GMT
x-rgw-object-type: Normal
etag: "55385fdddab661013ad8f678cd75ac88"
cache-control: public,max-age=60,s-maxage=60
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   145
Md5:    55385fdddab661013ad8f678cd75ac88
Sha1:   bd36ac4197e34b4d5022498bc319e6f51dff2329
Sha256: d5af3be5580e1f59ebf83be6961804f2a1f09732719085c04ace46c76df2106b

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /web-api/api/internal/v1/proof_of_age HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/vnd.api+json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x86926289.top/us/landing-page/landing_first_deposit_bet26_p45_ar1
Cookie: platform_type=desktop; SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; lng=us; auid=sv0OpGOENL+Xqoj4BDXLAg==; window_width=1280; che_g=74d78da5-fed6-bd71-fb82-5b9f032a4a6d
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 204 No Content
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:42 GMT
cache-control: no-cache, private
server-timing: p;dur=43, dt_285;dur=49
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    d41d8cd98f00b204e9800998ecf8427e
Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709
Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Blocklists:
  - quad9: Sinkholed
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 04:10:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-178408567-1&cid=1591737896.1669608642&jid=1054944097&gjid=2087871467&_gid=1173194502.1669608642&_u=aGBAAUACQAAAACAAI~&z=239718254 HTTP/1.1 
Host: stats.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://lite-1x86926289.top
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             142.251.1.155
HTTP/2 200 OK
content-type: text/plain
                                            
access-control-allow-origin: https://lite-1x86926289.top
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Mon, 28 Nov 2022 04:10:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  very short file (no magic)
Size:   1
Md5:    c4ca4238a0b923820dcc509a6f75849b
Sha1:   356a192b7913b04c54574d18c28d46e6395428ab
Sha256: 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Mon, 28 Nov 2022 04:10:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /web-api/external-api/config/all HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Origin: https://lite-1x86926289.top
Connection: keep-alive
Referer: https://lite-1x86926289.top/promo-frame/us/landing-page/landing_first_deposit_bet26_p45_ar1
Cookie: platform_type=desktop; SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; lng=us; auid=sv0OpGOENL+Xqoj4BDXLAg==; window_width=1280; che_g=74d78da5-fed6-bd71-fb82-5b9f032a4a6d; tzo=0; _ga=GA1.1.1591737896.1669608642; _gid=GA1.2.1173194502.1669608642; _ga_5671CMJ6T4=GS1.1.1669608641.1.0.1669608641.0.0.0; _ga_7JGWL9SV66=GS1.1.1669608641.1.0.1669608641.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:42 GMT
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=62, dt_285;dur=65
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (36947), with no line terminators
Size:   8806
Md5:    8c9e4c803af0b981a9b533799249f761
Sha1:   f05803b4229b42683ff78a11fe0643a7ba8c5cb1
Sha256: 286596edfdd1e8b2d15b22735245cca1347eb2da7780cbd96b43857ce55a4b49

Blocklists:
  - quad9: Sinkholed
                                        
                                            POST /g/collect?v=2&tid=G-7JGWL9SV66&gtm=2oeb90&_p=1766993980&cid=1591737896.1669608642&ul=en-us&sr=1280x1024&_s=1&sid=1669608641&sct=1&seg=0&dl=https%3A%2F%2Flite-1x86926289.top%2Fus%2Flanding-page%2Flanding_first_deposit_bet26_p45_ar1&dt=1XBET.COM%20Bookmaker.%20High%20Odds.%2024-Hour%20Customer%20Service&en=page_view&_fv=1&_ss=1 HTTP/1.1 
Host: region1.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lite-1x86926289.top
Connection: keep-alive
Referer: https://lite-1x86926289.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

                                        
                                             216.239.34.36
HTTP/2 204 No Content
content-type: text/plain
                                            
access-control-allow-origin: https://lite-1x86926289.top
date: Mon, 28 Nov 2022 04:10:42 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            GET /genfiles/web-app-v2/dictionary2/v3_landings/us/dictionary_519eda9366ff81209b4c2c6cd0857c85.json HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://lite-1x86926289.top/promo-frame/us/landing-page/landing_first_deposit_bet26_p45_ar1
Cookie: platform_type=desktop; SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; lng=us; auid=sv0OpGOENL+Xqoj4BDXLAg==; window_width=1920; che_g=74d78da5-fed6-bd71-fb82-5b9f032a4a6d; tzo=0; _ga=GA1.1.1591737896.1669608642; _gid=GA1.2.1173194502.1669608642; _ga_5671CMJ6T4=GS1.1.1669608641.1.0.1669608641.0.0.0; _ga_7JGWL9SV66=GS1.1.1669608641.1.0.1669608641.0.0.0; _gat_gtag_UA_178408567_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/json; charset=utf-8
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:42 GMT
content-length: 492
last-modified: Sun, 27 Nov 2022 10:06:15 GMT
x-rgw-object-type: Normal
etag: "39b2956fc0ad88842ccc08dce259606a"
cache-control: max-age=31536000
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (492), with no line terminators
Size:   492
Md5:    39b2956fc0ad88842ccc08dce259606a
Sha1:   22169406f6747850a35eb0e03f883064074cd0a2
Sha256: d921e7d4b9d5dc184dacf399f6d8d84b86f33fa3ff41368bbc3c469c22743cf8

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /web-api/external-api/config/getLangs HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://lite-1x86926289.top/promo-frame/us/landing-page/landing_first_deposit_bet26_p45_ar1
Cookie: platform_type=desktop; SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; lng=us; auid=sv0OpGOENL+Xqoj4BDXLAg==; window_width=1280; che_g=74d78da5-fed6-bd71-fb82-5b9f032a4a6d; tzo=0; _ga=GA1.1.1591737896.1669608642; _gid=GA1.2.1173194502.1669608642; _ga_5671CMJ6T4=GS1.1.1669608641.1.0.1669608641.0.0.0; _ga_7JGWL9SV66=GS1.1.1669608641.1.0.1669608641.0.0.0; _gat_gtag_UA_178408567_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:42 GMT
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=20, dt_285;dur=22
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (6941), with no line terminators
Size:   2394
Md5:    3734c256a68a0986eb72f600faa1de18
Sha1:   a39539031421edff7ce47cba9707f5d959e8d97a
Sha256: 11c75e73c4957208d6fd7bfc6bca0ec14c97ae3411063610af1dc8bdff50ae6a

Blocklists:
  - quad9: Sinkholed
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 1277
Cache-Control: max-age=111915
Date: Mon, 28 Nov 2022 04:10:43 GMT
Etag: "638341f1-116"
Expires: Tue, 29 Nov 2022 11:15:58 GMT
Last-Modified: Sun, 27 Nov 2022 10:54:41 GMT
Server: ECS (amb/6B93)
X-Cache: HIT
Content-Length: 278

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 1277
Cache-Control: max-age=111915
Date: Mon, 28 Nov 2022 04:10:43 GMT
Etag: "638341f1-116"
Expires: Tue, 29 Nov 2022 11:15:58 GMT
Last-Modified: Sun, 27 Nov 2022 10:54:41 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 278

                                        
                                            GET /web-api/api/v3/landings/landing_first_deposit_bet26_p45_ar1 HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://lite-1x86926289.top/promo-frame/us/landing-page/landing_first_deposit_bet26_p45_ar1
Cookie: platform_type=desktop; SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; lng=us; auid=sv0OpGOENL+Xqoj4BDXLAg==; window_width=1280; che_g=74d78da5-fed6-bd71-fb82-5b9f032a4a6d; tzo=0; _ga=GA1.1.1591737896.1669608642; _gid=GA1.2.1173194502.1669608642; _ga_5671CMJ6T4=GS1.1.1669608641.1.0.1669608641.0.0.0; _ga_7JGWL9SV66=GS1.1.1669608641.1.0.1669608641.0.0.0; _gat_gtag_UA_178408567_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:43 GMT
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=153, dt_285;dur=154
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (27258), with no line terminators
Size:   5808
Md5:    8a988e9ce0773da4faead0e7f0df1086
Sha1:   f6a7817c48d0b08d6d08162d167c460bd6c57cb4
Sha256: c7764f229c76a326626c0030ab22239c88a63ae328dc3c4378db13d900ad641a

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /web-api/external-api/getColorTheme HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://lite-1x86926289.top/promo-frame/us/landing-page/landing_first_deposit_bet26_p45_ar1
Cookie: platform_type=desktop; SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; lng=us; auid=sv0OpGOENL+Xqoj4BDXLAg==; window_width=1280; che_g=74d78da5-fed6-bd71-fb82-5b9f032a4a6d; tzo=0; _ga=GA1.1.1591737896.1669608642; _gid=GA1.2.1173194502.1669608642; _ga_5671CMJ6T4=GS1.1.1669608641.1.0.1669608641.0.0.0; _ga_7JGWL9SV66=GS1.1.1669608641.1.0.1669608641.0.0.0; _gat_gtag_UA_178408567_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:42 GMT
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=35, dt_285;dur=37
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   5132
Md5:    12c4276ee498dd51f940fc1f9adf1785
Sha1:   fbc6c394ec893049766c5d6f0fc1fbdd38387af6
Sha256: e4cf8c2044cfc59a7601eb936fb9d216e9840f70f679da3e03628d01ba4163fa

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /genfiles/cms/landings/1/background/75d5201f86cd721062ca3cece8cccef2.jpg HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/promo-frame/us/landing-page/landing_first_deposit_bet26_p45_ar1
Cookie: platform_type=desktop; SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; lng=us; auid=sv0OpGOENL+Xqoj4BDXLAg==; window_width=1280; che_g=74d78da5-fed6-bd71-fb82-5b9f032a4a6d; tzo=0; _ga=GA1.1.1591737896.1669608642; _gid=GA1.2.1173194502.1669608642; _ga_5671CMJ6T4=GS1.1.1669608641.1.0.1669608641.0.0.0; _ga_7JGWL9SV66=GS1.1.1669608641.1.0.1669608641.0.0.0; _gat_gtag_UA_178408567_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/jpg
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:43 GMT
content-length: 213335
last-modified: Thu, 30 Jul 2020 08:35:25 GMT
x-rgw-object-type: Normal
etag: "5bc5c598ad0496b414449329bd96c894"
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 1920x960, components 3\012- data
Size:   213335
Md5:    5bc5c598ad0496b414449329bd96c894
Sha1:   e4ef3956711d1f70af92264218d3644211a656d1
Sha256: 0e5b7015215ce7efeeaf7265679087cc7255747764d6d66d0ad21d2a05d93a92

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /genfiles/cms/landings/1/promo_block/a5585c7d10920cdd1359f362a3e17af3.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/promo-frame/us/landing-page/landing_first_deposit_bet26_p45_ar1
Cookie: platform_type=desktop; SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; lng=us; auid=sv0OpGOENL+Xqoj4BDXLAg==; window_width=1280; che_g=74d78da5-fed6-bd71-fb82-5b9f032a4a6d; tzo=0; _ga=GA1.1.1591737896.1669608642; _gid=GA1.2.1173194502.1669608642; _ga_5671CMJ6T4=GS1.1.1669608641.1.0.1669608641.0.0.0; _ga_7JGWL9SV66=GS1.1.1669608641.1.0.1669608641.0.0.0; _gat_gtag_UA_178408567_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:43 GMT
content-length: 1631
last-modified: Thu, 30 Jul 2020 08:35:25 GMT
x-rgw-object-type: Normal
etag: "2f002d83a39c0006f16d56c0299716ed"
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 68 x 73, 8-bit/color RGBA, non-interlaced\012- data
Size:   1631
Md5:    2f002d83a39c0006f16d56c0299716ed
Sha1:   43e07f06140060cdfe0a3e6fcb89d7c6bbb7b5d3
Sha256: 7bd8249d406a4619ad5be8b919ba4a5072300ddf0dc3f3b1632d4d9664b0e341

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /genfiles/cms/landings/1/promo_block/04494d922ba6a61f11e879cd153436b4.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/promo-frame/us/landing-page/landing_first_deposit_bet26_p45_ar1
Cookie: platform_type=desktop; SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; lng=us; auid=sv0OpGOENL+Xqoj4BDXLAg==; window_width=1280; che_g=74d78da5-fed6-bd71-fb82-5b9f032a4a6d; tzo=0; _ga=GA1.1.1591737896.1669608642; _gid=GA1.2.1173194502.1669608642; _ga_5671CMJ6T4=GS1.1.1669608641.1.0.1669608641.0.0.0; _ga_7JGWL9SV66=GS1.1.1669608641.1.0.1669608641.0.0.0; _gat_gtag_UA_178408567_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:43 GMT
content-length: 2320
last-modified: Thu, 30 Jul 2020 08:35:25 GMT
x-rgw-object-type: Normal
etag: "1af84ad0257f8dd762719dc38067f600"
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced\012- data
Size:   2320
Md5:    1af84ad0257f8dd762719dc38067f600
Sha1:   9007c4e66ec90171179a4d32810047f9103f7fc8
Sha256: 00a3719f93f2e7a32e9c44d0bba2177c10f39164bc616c84145951723b2bf8e3

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /genfiles/cms/landings/1/promo_block/5543e4485225f5aa96ce55f167d574da.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/promo-frame/us/landing-page/landing_first_deposit_bet26_p45_ar1
Cookie: platform_type=desktop; SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; lng=us; auid=sv0OpGOENL+Xqoj4BDXLAg==; window_width=1280; che_g=74d78da5-fed6-bd71-fb82-5b9f032a4a6d; tzo=0; _ga=GA1.1.1591737896.1669608642; _gid=GA1.2.1173194502.1669608642; _ga_5671CMJ6T4=GS1.1.1669608641.1.0.1669608641.0.0.0; _ga_7JGWL9SV66=GS1.1.1669608641.1.0.1669608641.0.0.0; _gat_gtag_UA_178408567_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:43 GMT
content-length: 3728
last-modified: Thu, 30 Jul 2020 08:35:25 GMT
x-rgw-object-type: Normal
etag: "b12826d25ed15e1d17a187b9c15960fe"
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 69 x 76, 8-bit colormap, non-interlaced\012- data
Size:   3728
Md5:    b12826d25ed15e1d17a187b9c15960fe
Sha1:   cb181377448ab5925dd549ccb7ed570f92dfe69f
Sha256: 57b4ed9dfcb5bb2787b1bc71bc6c7795e15ac52c9cc811f70046797b4ae63c4f

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /genfiles/cms/landings/1/promo_block/5b89caa14a3131e0db3d9d97b684bf1b.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/promo-frame/us/landing-page/landing_first_deposit_bet26_p45_ar1
Cookie: platform_type=desktop; SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; lng=us; auid=sv0OpGOENL+Xqoj4BDXLAg==; window_width=1280; che_g=74d78da5-fed6-bd71-fb82-5b9f032a4a6d; tzo=0; _ga=GA1.1.1591737896.1669608642; _gid=GA1.2.1173194502.1669608642; _ga_5671CMJ6T4=GS1.1.1669608641.1.0.1669608641.0.0.0; _ga_7JGWL9SV66=GS1.1.1669608641.1.0.1669608641.0.0.0; _gat_gtag_UA_178408567_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:43 GMT
content-length: 2809
last-modified: Thu, 30 Jul 2020 08:35:25 GMT
x-rgw-object-type: Normal
etag: "64bd2abaa6fb6fbe0a195955f684de79"
access-control-allow-origin: *
cache-control: public,max-age=120,s-maxage=600
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 77 x 80, 8-bit colormap, non-interlaced\012- data
Size:   2809
Md5:    64bd2abaa6fb6fbe0a195955f684de79
Sha1:   192d8248e7c81840401e3e1567049c45bd34dba7
Sha256: 5a5ed431d157bbe2d84d51dc795605b10d4b8920bb754e815d36c14a54f000ad

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /web-api/external-api/games/banner?whence=55&ref=1&gr=285&lng=us&fCountry=137 HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x86926289.top/us/landing-page/landing_first_deposit_bet26_p45_ar1
Cookie: platform_type=desktop; SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; lng=us; auid=sv0OpGOENL+Xqoj4BDXLAg==; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:41 GMT
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=96, dt_285;dur=98
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   46190
Md5:    55fb5e87d8db13bd6fdd603a15621e32
Sha1:   4bbc484504a1b0cf96dc287938a7e11606937041
Sha256: 7f0cc8fc4b8ccc1d9b1f8c6682606040a33863ad854f784b69f0fd376c8310b6

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /static-promotion/img/info_one_2.0953b4a.png HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/promo-frame/us/landing-page/landing_first_deposit_bet26_p45_ar1
Cookie: platform_type=desktop; SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; lng=us; auid=sv0OpGOENL+Xqoj4BDXLAg==; window_width=1280; che_g=74d78da5-fed6-bd71-fb82-5b9f032a4a6d; tzo=0; _ga=GA1.1.1591737896.1669608642; _gid=GA1.2.1173194502.1669608642; _ga_5671CMJ6T4=GS1.1.1669608641.1.0.1669608641.0.0.0; _ga_7JGWL9SV66=GS1.1.1669608641.1.0.1669608641.0.0.0; _gat_gtag_UA_178408567_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: image/png
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:43 GMT
content-length: 84546
last-modified: Sat, 26 Nov 2022 13:54:58 GMT
etag: "63821ab2-14a42"
strict-transport-security: max-age=63072000; includeSubDomains; preload
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 725 x 645, 8-bit/color RGBA, non-interlaced\012- data
Size:   84546
Md5:    ae2439f89e885326af7b19a25a88abc2
Sha1:   02a368a0c0c7a66870d40dd6321209b93c38f745
Sha256: 12583aa385542195dc44716d31f39c4f5fb95577584c30e398366edc7d137bfe

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /translation-api/by-lang/us HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: https://lite-1x86926289.top/promo-frame/us/landing-page/landing_first_deposit_bet26_p45_ar1
Cookie: platform_type=desktop; SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; lng=us; auid=sv0OpGOENL+Xqoj4BDXLAg==; window_width=1920; che_g=74d78da5-fed6-bd71-fb82-5b9f032a4a6d; tzo=0; _ga=GA1.1.1591737896.1669608642; _gid=GA1.2.1173194502.1669608642; _ga_5671CMJ6T4=GS1.1.1669608641.1.0.1669608641.0.0.0; _ga_7JGWL9SV66=GS1.1.1669608641.1.0.1669608641.0.0.0; _gat_gtag_UA_178408567_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/vnd.api+json
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:42 GMT
cache-control: no-cache, private
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-max-age: 1728000
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- data
Size:   71046
Md5:    6fff7912821e3415f7deee8404a20ae1
Sha1:   67f284e057865f7f1e1a58d3f2f5606050d34b43
Sha256: ca21235c0a8cb97495d3de6bc0ededc7b12788aa93ab9c5ce7e058a8c753bc90

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e33decf-55e5-425f-bb8d-5e1ca290e633.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 4254
x-amzn-requestid: 9c63d2a1-e805-4114-8875-fc1dc022c047
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR8IwHopoAMFq0g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383da37-395ca7b76b364c11172fbdd6;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:44:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: tFKbj-Jui_NW_73l_-W1Ja9sHqNKCSA3P8O3IZR38idkSAACjsnIMw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:56:49 GMT
etag: "55c9d2899b16945f329d0dacc021161038629988"
age: 22438
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4254
Md5:    300ba2bd11eefb4b5b9ba5b9d56c6cca
Sha1:   55c9d2899b16945f329d0dacc021161038629988
Sha256: a866abff0b6b5c6ed6758f1208f106d8f00c7f16fa07f2a676301cce8301e964
                                        
                                            GET /us/landing-page/landing_first_deposit_bet26_p45_ar1 HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:39 GMT
accept-ranges: none
content-encoding: gzip
server-timing: total;dur=495;desc="Nuxt Server Time", dt_285;dur=502
set-cookie: platform_type=desktop; Path=/; Expires=Thu, 01 Dec 2022 04:10:38 GMT SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; Path=/; HttpOnly; Secure; SameSite=Lax lng=us; Path=/ auid=sv0OpGOENL+Xqoj4BDXLAg==; expires=Tue, 28-Nov-23 04:10:39 GMT; path=/
vary: User-Agent, Accept-Encoding
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /web-api/api/converslon/load HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Is-srv: false
Connection: keep-alive
Referer: https://lite-1x86926289.top/us/landing-page/landing_first_deposit_bet26_p45_ar1
Cookie: platform_type=desktop; SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; lng=us; auid=sv0OpGOENL+Xqoj4BDXLAg==; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:41 GMT
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=28, dt_285;dur=31
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 

Blocklists:
  - quad9: Sinkholed
                                        
                                            POST /web-api/external-api/config/all HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Origin: https://lite-1x86926289.top
Connection: keep-alive
Referer: https://lite-1x86926289.top/promo-frame/us/landing-page/landing_first_deposit_bet26_p45_ar1
Cookie: platform_type=desktop; SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; lng=us; auid=sv0OpGOENL+Xqoj4BDXLAg==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:40 GMT
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=70, dt_285;dur=73
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 

Blocklists:
  - quad9: Sinkholed
                                        
                                            GET /promo-frame/us/landing-page/landing_first_deposit_bet26_p45_ar1 HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://lite-1x86926289.top/us/landing-page/landing_first_deposit_bet26_p45_ar1
Cookie: platform_type=desktop; SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; lng=us; auid=sv0OpGOENL+Xqoj4BDXLAg==
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:39 GMT
content-encoding: gzip
etag: "130d-ufE1HZAKlvtuN9B7jrneLvpL/Z8"
server-timing: dt_285;dur=3
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 

Blocklists:
  - quad9: Sinkholed
                                        
                                            POST /web-api/g/859f637437984de335c1d3bc07b1957bed4cdf03 HTTP/1.1 
Host: lite-1x86926289.top
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://lite-1x86926289.top/us/landing-page/landing_first_deposit_bet26_p45_ar1
X-Requested-With: XMLHttpRequest
Content-Type: application/json
Origin: https://lite-1x86926289.top
Content-Length: 31240
Connection: keep-alive
Cookie: platform_type=desktop; SESSION=a2ff5d06b3c9e33cd127d6d361b222a4; lng=us; auid=sv0OpGOENL+Xqoj4BDXLAg==; window_width=1280; che_g=74d78da5-fed6-bd71-fb82-5b9f032a4a6d; tzo=0; _ga=GA1.1.1591737896.1669608642; _gid=GA1.2.1173194502.1669608642; _ga_5671CMJ6T4=GS1.1.1669608641.1.0.1669608641.0.0.0; _ga_7JGWL9SV66=GS1.1.1669608641.1.0.1669608641.0.0.0; _gat_gtag_UA_178408567_1=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             178.253.14.164
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Mon, 28 Nov 2022 04:10:43 GMT
cache-control: no-cache, private
content-encoding: gzip
server-timing: p;dur=28, dt_285;dur=30
vary: Accept-Encoding
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 

Blocklists:
  - quad9: Sinkholed