GET 1xlite-178009.top/_nuxt/check-ob.js
200 OK 274 B URL GET HTTP/2 1xlite-178009.top/_nuxt/check-ob.js
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
File type ASCII text, with very long lines (341)
Hash 51c38d7f8ad860f8b5bc7010ea8fdb7e
d8800c25a96238ea8eb8a087b9285b7ebf617a01
9dc59b4e91c1aada81294c54029320042844fe6f142eb8ad393b97227db7f531
GET /_nuxt/check-ob.js HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:01 GMT
content-type: application/javascript; charset=utf-8
content-length: 274
last-modified: Tue, 26 Dec 2023 15:28:35 GMT
vary: Accept-Encoding
etag: "658af123-112"
content-encoding: gzip
expires: Wed, 27 Dec 2023 20:06:56 GMT
cache-control: max-age=86400
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=
accept-ranges: bytes
X-Firefox-Spdy: h2
GET 1xlite-178009.top/polyfills.js
200 OK 0 B URL GET HTTP/2 1xlite-178009.top/polyfills.js
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /polyfills.js HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:01 GMT
content-type: text/javascript; charset=utf-8
content-length: 0
vary: user-agent
cache-control: public, max-age=2678400, s-maxage=2678400
etag: W/"0-2jmj7l5rSw0yVb/vlWAYkK/YBwk"
x-time-ng: 0.005
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.034
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/css/f899c592.css
200 OK 6.8 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/f899c592.css
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (51140), with no line terminators
Hash e284631a4669d0963d46e3850eeb8266
0b140cf9e8b9bdad6a0d493387be567c378c7887
9e619d73096e26023a15995a8e084b23b54ca4b7f5973005f68c3b837b0b842d
GET /_nuxt/desktop/default/css/f899c592.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:01 GMT
content-type: text/css
content-length: 6815
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-1a9f"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:34 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-01c20cb5e97d9034cb6bcbd3fcb0775b-287e3836353c5c75-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:34+00:00, 2023-12-27T09:15:47+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/Page.Betting.Main-ef2a322e.js
200 OK 47 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/Page.Betting.Main-ef2a322e.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (64289), with no line terminators
Hash a3cbb390b52bbfd030adef72f559ea18
1d4ab46ed1b428f247040c3abd46abbc0a557b50
dc9e8951471f6b35755c2fcd39cfcd0196ea618fb4caae59126e284796dd43f3
GET /_nuxt/desktop/default/Page.Betting.Main-ef2a322e.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:01 GMT
content-type: application/javascript; charset=utf-8
content-length: 47217
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-b871"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:34 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-7a6419f07089b4d5075bc44c5bea17cb-570e5ef8ce368793-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:34+00:00, 2023-12-27T09:19:53+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/runtime-d92f5550.js
200 OK 16 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/runtime-d92f5550.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (50643), with no line terminators
Hash e0874a34b60693e17477dc4131010428
96acde000bf884301283e8f2d112671067269a9d
38f371f13f51064bf77e07b60c3420bc2b8345ed8c1ff48105ab0404e09b08cd
GET /_nuxt/desktop/default/runtime-d92f5550.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:01 GMT
content-type: application/javascript; charset=utf-8
content-length: 16019
last-modified: Wed, 27 Dec 2023 10:10:58 GMT
etag: "658bf832-3e93"
content-encoding: gzip
expires: Thu, 28 Dec 2023 11:07:51 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-530bff822c83bcb16c37bc7799f73fbd-1ddad8fac280cfa5-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T11:07:51+00:00, 2023-12-27T11:10:33+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/vendors/Page.Betting.Main/Page.Betting.Main.Asian/registration.Main/user.userRegistration-e61b07e2.js
200 OK 10 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/Page.Betting.Main/Page.Betting.Main.Asian/registration.Main/user.userRegistration-e61b07e2.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (34615), with no line terminators
Hash 25f85940236e9845587c691df0af7a2f
ec5c666c3e106cb7b1572a3aa0ed4c1f19f8ca47
aa9e376ec335ec39a53cac4b95592a9346a4eef75bff37275249389b3f4446f3
GET /_nuxt/desktop/default/vendors/Page.Betting.Main/Page.Betting.Main.Asian/registration.Main/user.userRegistration-e61b07e2.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:01 GMT
content-type: application/javascript; charset=utf-8
content-length: 10118
last-modified: Wed, 27 Dec 2023 07:05:45 GMT
etag: "658bccc9-2786"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:34 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-2d085fda2b9188da3060de5988f6a701-797bc48fba96542a-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:34+00:00, 2023-12-27T09:16:50+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/Page.Betting.Main/Page.Betting.Main.Asian/Page.Betting.TeamGames/Page.NewCyber.CyberApp/Page.NewCybe/681b90be-c32e6ed8.js
200 OK 9.4 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/Page.Betting.Main/Page.Betting.Main.Asian/Page.Betting.TeamGames/Page.NewCyber.CyberApp/Page.NewCybe/681b90be-c32e6ed8.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (31857), with no line terminators
Hash 986698271401679d04d0d85e314a55d5
60a24f04eea773ba6abd579617d2dd8a1424645a
717a27683c5879938938c4b0349a52ae40f655d38c4fee18b521f92e1fc02774
GET /_nuxt/desktop/default/Page.Betting.Main/Page.Betting.Main.Asian/Page.Betting.TeamGames/Page.NewCyber.CyberApp/Page.NewCybe/681b90be-c32e6ed8.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:01 GMT
content-type: application/javascript; charset=utf-8
content-length: 9357
last-modified: Wed, 27 Dec 2023 07:05:45 GMT
etag: "658bccc9-248d"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:34 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-af608afcb35a23f4fd36052850bd9ac3-c50cf02128721171-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:34+00:00, 2023-12-27T09:19:53+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/vendors/Page.Betting.Main/Page.Betting.TeamGames-1bde91db.js
200 OK 8.2 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/Page.Betting.Main/Page.Betting.TeamGames-1bde91db.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (32036), with no line terminators
Hash 4ae9c89eea2b14fcece8c0bf40466f04
f05673acc88ea37155417782ef596b49a63f791a
95e2750fd114cb7cf8ce52056c6cc8870f1543b5b25033ba157ceefab99a5ec8
GET /_nuxt/desktop/default/vendors/Page.Betting.Main/Page.Betting.TeamGames-1bde91db.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:01 GMT
content-type: application/javascript; charset=utf-8
content-length: 8244
last-modified: Wed, 27 Dec 2023 07:05:45 GMT
etag: "658bccc9-2034"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:34 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-64339961c2e5e4c02d380d4e171ed697-5c43a542244f33f8-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:34+00:00, 2023-12-27T09:19:53+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/version.json
200 OK 44 B URL GET HTTP/2 v3.traincdn.com/version.json
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
Hash 8667ce74a433b8c3a12579fb7a0174d1
3d575c71002f9586f6512c0cece59ecced94363c
cec2407a463851918d01470ca9db6bacb01e5f6264aaca22d1add6bb81f1f9ae
GET /version.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-178009.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:01 GMT
content-type: application/json
content-length: 44
last-modified: Wed, 27 Dec 2023 10:15:45 GMT
etag: "658bf951-2c"
content-encoding: gzip
expires: Wed, 27 Dec 2023 11:04:40 GMT
cache-control: max-age=60, max-age=60, s-maxage=60
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-4529be4d7805dab9b0810e54446af277-f69a25f81a6eec91-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T11:03:40+00:00, 2023-12-27T12:09:52+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/css/2fc62149.css
200 OK 1.5 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/2fc62149.css
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (7649), with no line terminators
Hash 83bbcaa18914b98d714d6a8cc04c07a1
3c4c8e70af66cb2dec8dea84d3ecc6ec69eae24f
87b2457640c522d9711ae0b7059fdcbbd07141d9b2920e35d1c086e7abd13ad6
GET /_nuxt/desktop/default/css/2fc62149.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:01 GMT
content-type: text/css
content-length: 1484
last-modified: Tue, 26 Dec 2023 12:38:33 GMT
etag: "658ac949-5cc"
content-encoding: gzip
expires: Wed, 27 Dec 2023 13:31:42 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-61d1f465b9592a8d1dc09781b4bc7236-7075413444e3b3cc-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-26T13:31:42+00:00, 2023-12-27T08:43:51+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/css/a7906856.css
200 OK 336 B URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/a7906856.css
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (1099), with no line terminators
Hash 6921418ff9395c44037498a4cf17ee66
31879049279e2cb5bc06b249d80d1735ef112b19
e6de221b29f3b4e47505c877067f28565ab5e1b419dc5003aca29c49596e73ab
GET /_nuxt/desktop/default/css/a7906856.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:01 GMT
content-type: text/css
content-length: 336
last-modified: Mon, 25 Dec 2023 09:46:56 GMT
etag: "65894f90-150"
content-encoding: gzip
expires: Wed, 27 Dec 2023 08:52:36 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-e43777befa3d5007264e37efe3424742-94237ce2272bcef4-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-26T08:52:36+00:00, 2023-12-27T08:43:51+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/css/6c0ba418.css
200 OK 1.5 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/6c0ba418.css
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (8368), with no line terminators
Hash 598bce1b7503141b27171c8d85190114
1abe8e76cc41fe616b66db696b0abc0a27e0a8f7
408917592dc5675052fa757886c6e740161263d882098a4afcdd8233ed4f7ab7
GET /_nuxt/desktop/default/css/6c0ba418.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:01 GMT
content-type: text/css
content-length: 1460
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-5b4"
content-encoding: gzip
expires: Thu, 28 Dec 2023 07:54:45 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-abb56a278dd1e2cb3dc334334ee06da8-2015fb79dff37eab-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T07:54:45+00:00, 2023-12-27T08:43:51+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/Page.Betting.Main.BettingLeftAside/Page.NewCyber.CyberChamps/Page.NewCyber.CyberDashboard/Page.NewCy/adc1b632-fe4049c7.js
200 OK 3.5 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/Page.Betting.Main.BettingLeftAside/Page.NewCyber.CyberChamps/Page.NewCyber.CyberDashboard/Page.NewCy/adc1b632-fe4049c7.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (13868), with no line terminators
Hash 5836aab24a1b141d8edaf6bad0bc0360
43047313544e6cc4bcb4cb2a7401126f8e20d8f3
b48f939ff047c8c7a08d698bd1e046da226dab47d71226be7710ce049965f4bf
GET /_nuxt/desktop/default/Page.Betting.Main.BettingLeftAside/Page.NewCyber.CyberChamps/Page.NewCyber.CyberDashboard/Page.NewCy/adc1b632-fe4049c7.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:01 GMT
content-type: application/javascript; charset=utf-8
content-length: 3509
last-modified: Wed, 27 Dec 2023 07:05:45 GMT
etag: "658bccc9-db5"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:36 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-87a1419bb1e5ac7a8cccfcd7c6ec5642-721456fbf778dcd0-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:36+00:00, 2023-12-27T09:19:53+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/css/b112c66d.css
200 OK 2.7 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/b112c66d.css
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (20755), with no line terminators
Hash 4c796b35dab15dc27b6108243a93b96e
774073cec8e7344b1e7ca0040585eac370959d20
e896377b85b76aff560ba77cf488107a11e2d238f9d14fffac67ec1608f05df5
GET /_nuxt/desktop/default/css/b112c66d.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:01 GMT
content-type: text/css
content-length: 2693
last-modified: Mon, 25 Dec 2023 09:46:56 GMT
etag: "65894f90-a85"
content-encoding: gzip
expires: Wed, 27 Dec 2023 08:53:44 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-59530753399db223a54d82bd19ca1ec8-028317e66f04c685-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-26T08:53:44+00:00, 2023-12-27T08:43:51+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/vendors/Page.Betting.Main.BettingLeftAside-b2253659.js
200 OK 6.6 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/Page.Betting.Main.BettingLeftAside-b2253659.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (24353), with no line terminators
Hash 0bf411134875496a34eba8e07eccea8f
5fcd5a50421d2b50322175e95f6127944f42ba39
4baf0cfc02abf2aa8de9e9ac511237fad6f29f3a58efd15d3ee3c25c592ed175
GET /_nuxt/desktop/default/vendors/Page.Betting.Main.BettingLeftAside-b2253659.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:01 GMT
content-type: application/javascript; charset=utf-8
content-length: 6582
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-19b6"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:36 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-47ccfc565ebef393a0df71fde6a396b9-1eaca2e08297998b-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:36+00:00, 2023-12-27T09:19:53+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/Page.Betting.Main/Page.Betting.Main.BettingLeftAside/Page.Betting.TeamGames/betting.SportMenuApp-5347cb2e.js
200 OK 3.0 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/Page.Betting.Main/Page.Betting.Main.BettingLeftAside/Page.Betting.TeamGames/betting.SportMenuApp-5347cb2e.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (10440), with no line terminators
Hash 584bf0795ae6e5499157ba38f3b3a747
ac0780bd699b5a0b04514a03e7b854dacc366a00
0958d7bedc1f0751d10dbd25d9385d31d5d0c09ca9b7a8d0e9f6ace0664dd0ba
GET /_nuxt/desktop/default/Page.Betting.Main/Page.Betting.Main.BettingLeftAside/Page.Betting.TeamGames/betting.SportMenuApp-5347cb2e.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:01 GMT
content-type: application/javascript; charset=utf-8
content-length: 2952
last-modified: Wed, 27 Dec 2023 07:05:45 GMT
etag: "658bccc9-b88"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:34 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-07e6160a5b0e522a770370d5c688c0bb-503b1f3246811883-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:34+00:00, 2023-12-27T09:19:53+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/Page.Betting.Main.BettingLeftAside-1c6430c9.js
200 OK 17 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/Page.Betting.Main.BettingLeftAside-1c6430c9.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65113), with no line terminators
Hash f1a4145397c18539590c40ace9c19d81
f859256ea8452c709b128b1a3b7ed6c800678cb6
d9f35564f1af5eb19d6d0b575d7b2f382494ab2bdf237ce27c465b7f68f2bf7b
GET /_nuxt/desktop/default/Page.Betting.Main.BettingLeftAside-1c6430c9.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:01 GMT
content-type: application/javascript; charset=utf-8
content-length: 17404
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-43fc"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:36 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-16bb71f670b52d0521d41e8112f2812d-3838aa8dfe48d18d-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:36+00:00, 2023-12-27T09:19:53+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/css/64a6de4e.css
200 OK 204 B URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/64a6de4e.css
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (502), with no line terminators
Hash 1f02b8463ec288496d7b1ccc18c2cd9b
90633342134fc525352e60666e7ecd91d09c5d88
5e7585ad750a636350d96c16842be6fe71d50815a9ef401c5caed5e8d3ca1258
GET /_nuxt/desktop/default/css/64a6de4e.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:01 GMT
content-type: text/css
content-length: 204
last-modified: Tue, 26 Dec 2023 15:30:55 GMT
etag: "658af1af-cc"
content-encoding: gzip
expires: Wed, 27 Dec 2023 18:47:19 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-07f99a1ce1efa89c37a48ca27428e127-d1a7a9400798500b-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-26T18:47:19+00:00, 2023-12-27T08:43:51+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/Page.Betting.Main.BettingLeftAside/betting.SportMenuApp-9e07fb78.js
200 OK 14 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/Page.Betting.Main.BettingLeftAside/betting.SportMenuApp-9e07fb78.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (52763), with no line terminators
Hash ed8f7f3cd1cd3e3e652c28b03fe9d867
5eb82ecd6f6f788972425cff15d06654ef6c7a0d
a47daebef6af6b54c2209f984951c068565ef6f6b8fb5cedd1b5655d7cb30d0c
GET /_nuxt/desktop/default/Page.Betting.Main.BettingLeftAside/betting.SportMenuApp-9e07fb78.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:01 GMT
content-type: application/javascript; charset=utf-8
content-length: 13602
last-modified: Wed, 27 Dec 2023 07:05:45 GMT
etag: "658bccc9-3522"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:36 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-2da251365e42e0c47690cdc260d9f0b9-f9ff8e87b394bfc1-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:36+00:00, 2023-12-27T09:19:53+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/Page.Betting.Main.BettingContent-96cb21ab.js
200 OK 644 B URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/Page.Betting.Main.BettingContent-96cb21ab.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (1334), with no line terminators
Hash 183dd66c166ca400b140fb77e9009c15
cd75612c0e48f2ca5fb936b7def2491b851f219c
e226507a12b8034a308547a3d093242520b74703e326851d3312f48869748d92
GET /_nuxt/desktop/default/Page.Betting.Main.BettingContent-96cb21ab.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:01 GMT
content-type: application/javascript; charset=utf-8
content-length: 644
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-284"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:36 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-2a6f4cf6d70d50b93fd3eb6aa3575ceb-c7ea0d30865c0eaf-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:36+00:00, 2023-12-27T09:19:53+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/css/c1ae3820.css
200 OK 1.4 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/c1ae3820.css
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (7592), with no line terminators
Hash 80d822002048c569e488a7c9b0a208fe
084ba85491a073b694df75ed75d19ab16fd8f064
2add226414afb8170d04a6a4a7e9b6c0e4a4306af6b2a6cd7a12fcf9896b2f6e
GET /_nuxt/desktop/default/css/c1ae3820.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:01 GMT
content-type: text/css
content-length: 1426
last-modified: Tue, 26 Dec 2023 09:49:28 GMT
etag: "658aa1a8-592"
content-encoding: gzip
expires: Wed, 27 Dec 2023 11:46:49 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-6310c9823233231ebcdf8a5cd60c43a4-7f9ac5ca8796431c-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-26T11:46:49+00:00, 2023-12-27T08:43:51+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/Layout.Betting.ExpressDay-7f808fe4.js
200 OK 9.2 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/Layout.Betting.ExpressDay-7f808fe4.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (33958), with no line terminators
Hash 59d186fad4e6e072d91c4b54c84c28f2
d8084a7e7a786b0c3b395d524248239f4caadbb0
ee647e43c62982e5eaa4faa3aeb89abc061f4ff948c12e14c5dadb51ca1245b9
GET /_nuxt/desktop/default/Layout.Betting.ExpressDay-7f808fe4.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:01 GMT
content-type: application/javascript; charset=utf-8
content-length: 9236
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-2414"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:37 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-c4becc0d7b5b690b9b4c484042d987a8-5b836f36f5ae52e9-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:37+00:00, 2023-12-27T09:19:53+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/commons/app-14ca0f8c.js
200 OK 46 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/commons/app-14ca0f8c.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (65476)
Hash cd0341d65ff7214ce40d53589d64ebfe
302b3fe9f2823ac2fb47928098eebcd632f6d62a
23cf832ad808296ebce7f0d5e5d23905e571142ef57160030982370fdc752ec2
GET /_nuxt/desktop/default/commons/app-14ca0f8c.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:01 GMT
content-type: application/javascript; charset=utf-8
content-length: 46094
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-b40e"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:34 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-5068a57ad5ba70cc9ce754157cdca1aa-60eec001d354599f-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:34+00:00, 2023-12-27T09:16:09+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/css/e989eca1.css
200 OK 14 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/e989eca1.css
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 6c96c6b74fc14719c160d811ebf5ec71
206f9492a0444efe8c37286f19345aac5c76aed4
b259cbb2d7a52c877751cf125867903da61351d78fe2b6ced2d091c7131f9f72
GET /_nuxt/desktop/default/css/e989eca1.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:01 GMT
content-type: text/css
content-length: 14462
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-387e"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:34 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-bf1d6154b5e90c5a9b6caada27d4ab0b-8c111762e671f4cd-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:34+00:00, 2023-12-27T09:15:47+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/css/1a0ec6b9.css
200 OK 77 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/1a0ec6b9.css
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash ad6fc452bffa59a9a5486698e41ae120
6c62122bd0e7205bed551fbe9757e1bc272a35d2
f519f45ea208dfead0458e38a36312407370ebe3aededcf181065a903407ec8c
GET /_nuxt/desktop/default/css/1a0ec6b9.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:01 GMT
content-type: text/css
content-length: 77311
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-12dff"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:34 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-db80a725534da87fa1c0a9974cc51a3b-f4585cdc058fc3ef-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:34+00:00, 2023-12-27T09:15:47+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/vendors/app-ee84d146.js
200 OK 267 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/app-ee84d146.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (61101)
Size 267 kB (267233 bytes)
Hash 2befa20ac229637a49dca354858286f8
2f4723cfaab3c8075a33d31ea0f4c1b350275c17
f8a59b0f134b62f2309e7bf956244d1a5407cddadfd7386f8ec24790d4d865bb
GET /_nuxt/desktop/default/vendors/app-ee84d146.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:01 GMT
content-type: application/javascript; charset=utf-8
content-length: 267233
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-413e1"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:34 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-b9a4dbf6cdc5224a6a2dcedf51b38b0f-cb64613649bc5a9d-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:34+00:00, 2023-12-27T09:16:09+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/app-78f40b38.js
200 OK 224 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/app-78f40b38.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (64816), with no line terminators
Size 224 kB (224386 bytes)
Hash 0708010629470bcae04918a5dd15b70c
e8cb78916b9848f18bfd203f4c03522aa5a1d163
f7e0a3f3fbf170eda38505992513855754935c7f83efc73c7582858ca89e1b21
GET /_nuxt/desktop/default/app-78f40b38.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:01 GMT
content-type: application/javascript; charset=utf-8
content-length: 224386
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-36c82"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:34 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-d596d4a22e698a2a1ce7b983886781a5-e6200b5fb9b37ba9-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:34+00:00, 2023-12-27T09:16:09+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2
200 OK 64 kB URL GET HTTP/2 v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 63748, version 1.0
Hash 6887b6f24414dbc612dbf42ccdc76b70
8068d3abfbc6cbf35b55919da45b1f4d2d136238
fc5c015fc32518f1ed810fa84ca28941eb9d5a3c81acc8df69a4dbbeedef7b0c
GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-178009.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:02 GMT
content-type: font/woff2
content-length: 63748
last-modified: Wed, 14 Jun 2023 09:49:53 GMT
etag: "6887b6f24414dbc612dbf42ccdc76b70"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-8517514297ab8dd5241a4bd907a2ed4e-73df9d3418cbc615-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-18T07:13:59+00:00, 2023-12-27T11:28:00+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Medium.woff2
200 OK 65 kB URL GET HTTP/2 v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Medium.woff2
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 64732, version 1.0
Hash 3ac5d40d1b3966fc5eb09ecca74d9cbf
a69f32357765dd321519889aeacba5e9ca893bb0
3310766b8f58538d07abded74a2babe1acbe1a3ee820d5b8c8265da666f4fb0c
GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Medium.woff2 HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-178009.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:02 GMT
content-type: font/woff2
content-length: 64732
last-modified: Wed, 14 Jun 2023 09:49:53 GMT
etag: "3ac5d40d1b3966fc5eb09ecca74d9cbf"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-f95b2f860a4266cbf9eefceffb685c82-11e50a8f6b05d30d-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-18T07:56:30+00:00, 2023-12-27T11:31:22+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2
200 OK 64 kB URL GET HTTP/2 v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 63920, version 1.0
Hash a65527fcb58f66a7cfbc0e6b160538b4
45d260e7fa343401b5bb0df982a014f53e2d253b
fb13c3a1cbac60649b76f7d7f85c1645d35ac69b85ce5f4eb0692505ecc2cd45
GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-178009.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:02 GMT
content-type: font/woff2
content-length: 63920
last-modified: Wed, 14 Jun 2023 09:49:53 GMT
etag: "a65527fcb58f66a7cfbc0e6b160538b4"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-b1e3446022df5ca4a63657006318b635-ef1aa1dfbeb8152d-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-18T07:54:39+00:00, 2023-12-27T11:39:14+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/1da51baa342984a84ca1ac8dd900998b.png
200 OK 653 B URL GET HTTP/2 v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/1da51baa342984a84ca1ac8dd900998b.png
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Hash e6f0766cbd95db33da44e7a9140648f2
5f196b1bfe8c3f92bd2ebcd67124e72e81ae6aaf
c0399d478788d5d483f104a2e8cb7c32f41cb40e9df0c22e831b2bfa2db63ec0
GET /genfiles/cms/1-285/desktop/media_asset/1da51baa342984a84ca1ac8dd900998b.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:02 GMT
content-type: image/png
content-length: 653
last-modified: Tue, 25 Apr 2023 13:43:56 GMT
etag: "e6f0766cbd95db33da44e7a9140648f2"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-b2aaef0741f1d518db8c68bd0b2a78bd-aebd7c1b649570c8-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-18T07:12:59+00:00, 2023-12-27T11:53:57+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/css/85fdbd9b.css
200 OK 204 B URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/85fdbd9b.css
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (502), with no line terminators
Hash 220ac0e19dd32e88325ee563113b9c9c
ee2d0a5aa83d252886854910aabfbdef084c0215
0ae54ce6f5b046155afe5ef48231953dbd80506a21049681f0274acb6f2d399e
GET /_nuxt/desktop/default/css/85fdbd9b.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:02 GMT
content-type: text/css
content-length: 204
last-modified: Tue, 26 Dec 2023 15:30:55 GMT
etag: "658af1af-cc"
content-encoding: gzip
expires: Wed, 27 Dec 2023 18:50:18 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-c03696ceccc1376eced0972d93453bb1-c6620563d307bf4e-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-26T18:50:18+00:00, 2023-12-27T10:09:51+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/Page.Betting.Asia.BettingContent-cabe2e46.js
200 OK 635 B URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/Page.Betting.Asia.BettingContent-cabe2e46.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (1236), with no line terminators
Hash fdb7dde3984aec5b6967ec87d6345af6
74d4202876d2e929c987b9a6c40e9ed778fc7f3c
0858ff75facf7b80737013c9621331670c5840325942721f636d6163f36c5516
GET /_nuxt/desktop/default/Page.Betting.Asia.BettingContent-cabe2e46.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:02 GMT
content-type: application/javascript; charset=utf-8
content-length: 635
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-27b"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:36 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-e51d04ee8f890ee339a9b0f17e8c7381-08438d0026a274e6-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:36+00:00, 2023-12-27T09:19:55+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/Page.Betting.Asia.BettingLeftAside/Page.Betting.Main.Asian/betting.CentralMenuApp/betting.SportsMenuCompact-b039ecec.js
200 OK 4.2 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/Page.Betting.Asia.BettingLeftAside/Page.Betting.Main.Asian/betting.CentralMenuApp/betting.SportsMenuCompact-b039ecec.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (14578), with no line terminators
Hash e11556888e45d8899e4cb4a715dbaf5a
06951924c74557e01ee7cf8d683d04448f240eb6
2fe47db8cb1165bd1fdfc66d388afd455f9734da2bb099a11aa9ba4a1604e2f7
GET /_nuxt/desktop/default/Page.Betting.Asia.BettingLeftAside/Page.Betting.Main.Asian/betting.CentralMenuApp/betting.SportsMenuCompact-b039ecec.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:02 GMT
content-type: application/javascript; charset=utf-8
content-length: 4190
last-modified: Wed, 27 Dec 2023 07:05:45 GMT
etag: "658bccc9-105e"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:36 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-97d66bb7bd43b2b6ffb4fee7173bc2a3-4971efc5868c087f-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:36+00:00, 2023-12-27T09:19:55+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/css/5d14afec.css
200 OK 1.3 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/5d14afec.css
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (6774), with no line terminators
Hash e26ef5c86e087ea190eb009f70ea6df0
1f006f52ccd864c71d2bf342ea0dc4fe0634df7c
ee3b0ce7b6d7dd3e04e62c01d2dd1e2fe064aefacb5c059447bcfd7f20cad32f
GET /_nuxt/desktop/default/css/5d14afec.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:02 GMT
content-type: text/css
content-length: 1310
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-51e"
content-encoding: gzip
expires: Thu, 28 Dec 2023 08:52:41 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-42d7ac02c9cfb213948ad87ddf627d39-e9c97b18cddea59f-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T08:52:41+00:00, 2023-12-27T12:00:43+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/Page.Betting.Asia.BettingLeftAside-f509e229.js
200 OK 10 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/Page.Betting.Asia.BettingLeftAside-f509e229.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (37954), with no line terminators
Hash b3dd64417adcaff211e964e576ac4a48
1493b51dabadccd0af42ebfaa96e4883fd7fcc27
7d6a713fc5536ef87731f02cff1e6cb71d53bf0e650781ca34ec9df392801382
GET /_nuxt/desktop/default/Page.Betting.Asia.BettingLeftAside-f509e229.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:02 GMT
content-type: application/javascript; charset=utf-8
content-length: 10437
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-28c5"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:36 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-ce20bde294364fbd872a0d2a996bf214-8ed1a1ee7b5f1317-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:36+00:00, 2023-12-27T09:19:55+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/vendors/Page.Betting.Asia.Homepage-d31796d7.js
200 OK 6.4 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/Page.Betting.Asia.Homepage-d31796d7.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (22045), with no line terminators
Hash e39750f773e4106da5cdab7a065a47fa
c324e18c677a760eb987a6bb1a10b1d5e271738d
ceb8113c44cb045fdf017a1260878d744410ec66294267bff36e291ba1614d7f
GET /_nuxt/desktop/default/vendors/Page.Betting.Asia.Homepage-d31796d7.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:02 GMT
content-type: application/javascript; charset=utf-8
content-length: 6360
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-18d8"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:34 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-b6de154e5ef94a795633da5427fc53e4-438fc8a35b022c3a-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:34+00:00, 2023-12-27T09:19:55+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/Page.Betting.Asia.Homepage/betting.GamesSliderApp-ce5ab32f.js
200 OK 4.2 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/Page.Betting.Asia.Homepage/betting.GamesSliderApp-ce5ab32f.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (13445), with no line terminators
Hash 33dab2dba37c661ea60fc8c7131db23c
a0b4da85981c53c7220ef7b66b933c77038e155b
8d01df6a73b2c8fa3a447bf28080d29146ff3183f7115f61a7417c393b20764d
GET /_nuxt/desktop/default/Page.Betting.Asia.Homepage/betting.GamesSliderApp-ce5ab32f.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:02 GMT
content-type: application/javascript; charset=utf-8
content-length: 4244
last-modified: Wed, 27 Dec 2023 07:05:45 GMT
etag: "658bccc9-1094"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:34 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-89b48394a30f8106ce90284b60500fca-d3e54e3c23b5a15b-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:34+00:00, 2023-12-27T09:19:55+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/css/65f4907e.css
200 OK 6.1 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/65f4907e.css
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (48025), with no line terminators
Hash ecf9495ec353a583d893253ea143ad0b
8d64147db96e260694da011440bd8068dab13999
7a8c0002b75e3590dc0c4d2777d30b0df75cbb142ebe4f84850a60f8be6e3944
GET /_nuxt/desktop/default/css/65f4907e.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:02 GMT
content-type: text/css
content-length: 6061
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-17ad"
content-encoding: gzip
expires: Thu, 28 Dec 2023 08:52:41 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-e93d294d766f451b8fa68ae4bca4de0a-5cfb2b70ba0c94b0-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T08:52:41+00:00, 2023-12-27T10:09:51+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/css/07e7d6a7.css
200 OK 933 B URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/07e7d6a7.css
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (4447), with no line terminators
Hash b37a612efaaeeabbfc360af6e21f9164
86d0cf6922df157f75499a5626a698f07c005922
61cff0484d94782597f1eca3663ebf9df715bd65fc0763a637d8904f29580bca
GET /_nuxt/desktop/default/css/07e7d6a7.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:02 GMT
content-type: text/css
content-length: 933
last-modified: Wed, 27 Dec 2023 07:05:45 GMT
etag: "658bccc9-3a5"
content-encoding: gzip
expires: Thu, 28 Dec 2023 08:54:23 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-150683c665a9cffbae541c0405d5b73c-47d26c461bf3205d-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T08:54:23+00:00, 2023-12-27T10:09:51+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/Page.Betting.Asia.Homepage-fdb2a3f7.js
200 OK 33 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/Page.Betting.Asia.Homepage-fdb2a3f7.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (64338), with no line terminators
Hash 8bb5bce8f3a9f5ba065163a6104e38d9
ba3dda73aa791200837e4a1ec597720624a79d89
c6f4adb93e765ce0d28b3bbf7afadd80f9da901b3cc8fd320488a8b022735a05
GET /_nuxt/desktop/default/Page.Betting.Asia.Homepage-fdb2a3f7.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:02 GMT
content-type: application/javascript; charset=utf-8
content-length: 33195
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-81ab"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:34 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-1e7a4758400caccc8e595f2c87734a3d-3bfe3cedce46150c-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:34+00:00, 2023-12-27T09:19:55+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/css/98f84bb9.css
200 OK 4.8 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/98f84bb9.css
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (38647), with no line terminators
Hash 25aedf74e56522f23d5b620ba272d490
f50fef524ebf656179e42b6e9d135fb920f2cc4c
c132aebd34f813ff9e562b484e06c97c7bed4de70b7a102f65700b033dbfb7d0
GET /_nuxt/desktop/default/css/98f84bb9.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:02 GMT
content-type: text/css
content-length: 4783
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-12af"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:36 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-bfa80e8b642cb16abf247fd19e09df03-43e36fbeacb74f06-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:36+00:00, 2023-12-27T09:19:55+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/vendors/GameProvider/Page.Betting.Asia.Homepage/Page.Betting.Game/Page.Betting.MultiLive/Page.Cricke/bac625ea-98f537f9.js
200 OK 37 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/GameProvider/Page.Betting.Asia.Homepage/Page.Betting.Game/Page.Betting.MultiLive/Page.Cricke/bac625ea-98f537f9.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (65461)
Hash 82f14cac2debe536072b9d439586ac92
c3ff599f77dc4a7c4d49ec49471ef763a9baa90a
1bdd2323c23694157029d400ce4cb8a89774d7dbd3c68ec62c366cc9ef47e502
GET /_nuxt/desktop/default/vendors/GameProvider/Page.Betting.Asia.Homepage/Page.Betting.Game/Page.Betting.MultiLive/Page.Cricke/bac625ea-98f537f9.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:02 GMT
content-type: application/javascript; charset=utf-8
content-length: 37175
last-modified: Wed, 27 Dec 2023 07:05:45 GMT
etag: "658bccc9-9137"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:34 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-44b8c1baca33ed874098575457d82b12-257187f99b5495b0-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:34+00:00, 2023-12-27T09:19:55+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/Page.Betting.Main.Asian-6b93cedb.js
200 OK 27 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/Page.Betting.Main.Asian-6b93cedb.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (64214), with no line terminators
Hash 374b40de685143ed2af8bdfeac3ec242
2802b9f56e57493f6112205e70307c17d5d55922
89bcb2a26ad3740560c36bab98501fd92e13d704f3dacc542b4baa1cdcbd60c9
GET /_nuxt/desktop/default/Page.Betting.Main.Asian-6b93cedb.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:02 GMT
content-type: application/javascript; charset=utf-8
content-length: 26795
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-68ab"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:36 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-dc3aee687077c2aa5933e99c37d60e50-405b3e40e4be93a4-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:36+00:00, 2023-12-27T09:19:55+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/vendors/plugins.v-tooltip-d285e6f8.js
200 OK 22 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/plugins.v-tooltip-d285e6f8.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (65476)
Hash 9e863eeb5c5372aa4dd7f71b0304c96e
067c31e2a9c72b6a71c3a219f47a8246887f7c91
ae461694b55b286d6378a3d600257acf106e17083984377575b1acd324beb4ef
GET /_nuxt/desktop/default/vendors/plugins.v-tooltip-d285e6f8.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 21888
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-5580"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:36 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-1cc4d7d781f815faae3231c6005325c7-32d0c86aa37db454-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:36+00:00, 2023-12-27T09:16:49+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/vendors/plugins.vue-notification-87397fea.js
200 OK 4.6 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/plugins.vue-notification-87397fea.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (12527), with no line terminators
Hash 45ab02f30b9a0ae3fd6a8e1460c1a7b2
ef7482e4dc9dae5a40f64a3630a19c60e0422bbc
c240e96bb7aa0ee773c27049f54ac8c77d138ebd61697370852f6d629a7215b2
GET /_nuxt/desktop/default/vendors/plugins.vue-notification-87397fea.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 4557
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-11cd"
content-encoding: gzip
expires: Thu, 28 Dec 2023 07:54:46 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-2247fccd748c13e5e1ec5778b34d3b2e-fd62423a66f8e5a9-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T07:54:46+00:00, 2023-12-27T09:16:49+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/css/e1ad5afb.css
200 OK 943 B URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/e1ad5afb.css
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (3303), with no line terminators
Hash cacc6d6ba45cf94ef4172d935ce1dc39
1ebd443b4446bb9d07e56deb39c88be4b67e0f16
dec9bcae0186bee94c16b3012dcc5379eb7ab98380875cedf2342baf66ba70e5
GET /_nuxt/desktop/default/css/e1ad5afb.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:03 GMT
content-type: text/css
content-length: 943
last-modified: Tue, 26 Dec 2023 15:30:55 GMT
etag: "658af1af-3af"
content-encoding: gzip
expires: Wed, 27 Dec 2023 18:50:21 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-a35fba9075811d33410a5b920f84cdfe-9c0004628bb37bab-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-26T18:50:21+00:00, 2023-12-27T09:28:59+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/vendors/plugins.vue-js-modal-20dc98f5.js
200 OK 8.1 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/plugins.vue-js-modal-20dc98f5.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (26717), with no line terminators
Hash 155e3c6e356bb96549aafda12b914385
fc332270218827dbbe7af5eb668e2e2c614d7331
52bf58c675b301d9c94143cffcbf24f066c7698ec3b5df62d9f9dbc967d3a0ec
GET /_nuxt/desktop/default/vendors/plugins.vue-js-modal-20dc98f5.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 8057
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-1f79"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:36 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-61723267d0549c247a349f91b3180283-02c67980b465be31-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:36+00:00, 2023-12-27T09:16:49+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/date-fns-locale-21-964cbeee.js
200 OK 2.1 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/date-fns-locale-21-964cbeee.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (6960), with no line terminators
Hash be3973ab99e7544a097326f41dfe3312
392a9b9753e8492d4310345c395cc4a1ca3d1812
0f43e73fbafecce7aea4a07a681956516d71defad6b3b7c38b90f2d7780437fb
GET /_nuxt/desktop/default/date-fns-locale-21-964cbeee.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 2118
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-846"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:36 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-97a88e19e2d99a3a4612b64c9ea4e67c-fa279ffab6976e17-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:36+00:00, 2023-12-27T09:22:03+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET 1xlite-178009.top/genfiles/cms/1-285/desktop/media_asset/29ff8e35693b23d6fca06a6514cb28df.json
200 OK 668 B URL GET HTTP/2 1xlite-178009.top/genfiles/cms/1-285/desktop/media_asset/29ff8e35693b23d6fca06a6514cb28df.json
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
Hash b7b882bc87bd49ec0b19e15d62050091
7dd2f9242613b1d6453f8ea25f61f3c036c1c10a
ea3b4c0c004ddc47d397140cb405c5934682606f1e0faeecf9308bfa30cf924e
GET /genfiles/cms/1-285/desktop/media_asset/29ff8e35693b23d6fca06a6514cb28df.json HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:03 GMT
content-type: application/json
content-length: 668
last-modified: Tue, 23 May 2023 10:24:59 GMT
etag: "b7b882bc87bd49ec0b19e15d62050091"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=
accept-ranges: bytes
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/DC-ef71a866.js
200 OK 999 B URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/DC-ef71a866.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (2336), with no line terminators
Hash 2d49543c25d944c51818db736a23848d
737ea221210d343b3a4bfc67dd61baa10cd726e1
136ea74e4e683eac816eb67eaf9eda6b0c6bf995a65c103b0f117558cbbd449f
GET /_nuxt/desktop/default/DC-ef71a866.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 999
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-3e7"
content-encoding: gzip
expires: Thu, 28 Dec 2023 08:21:13 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-e9948799849f3b1324b8b19426a16246-61d75eac26c34f20-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T08:21:13+00:00, 2023-12-27T09:16:49+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/Betting.Core-36fae755.js
200 OK 1.5 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/Betting.Core-36fae755.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (2298), with no line terminators
Hash 1cba9b432d226161b66b995a1745215d
e382ffeefd7e6a12a8e863031acef708d45c9f1d
3e001d3dff1a4e1421c8c595b773e41d4ab11510c2283054b4838a56fe5ab180
GET /_nuxt/desktop/default/Betting.Core-36fae755.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 1453
last-modified: Wed, 27 Dec 2023 10:10:58 GMT
etag: "658bf832-5ad"
content-encoding: gzip
expires: Thu, 28 Dec 2023 11:07:52 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-900796c8d3643b6bb5a818b36ff81790-02b6e3cab548c71e-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T11:07:52+00:00, 2023-12-27T11:10:36+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/consultant.supHelperV2-4e8baff6.js
200 OK 1.5 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/consultant.supHelperV2-4e8baff6.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (3739), with no line terminators
Hash b1309ebce56e9e917491727ed0902f1c
5720a91e8adc4c4ede0d674c7675cffcf1c4565a
8dbda1b32dc70fd34c599bcbb8ba0fdb005d5878e07d829dcb5f66fad9187e9b
GET /_nuxt/desktop/default/consultant.supHelperV2-4e8baff6.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 1495
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-5d7"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:37 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-01036c19fe87753ce8376e1b47a506aa-a67fcf128981c640-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:37+00:00, 2023-12-27T09:16:49+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-icons/1.0.243/285/common.svg
200 OK 57 kB URL GET HTTP/2 v3.traincdn.com/sys-icons/1.0.243/285/common.svg
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type gzip compressed data, max speed, from Unix
Hash be5d5f49b8a56b1f158bb04d1f90cd85
81eee55342b9cd080b1dc0cf40fefb22f38c29a7
93f86c49e8923dc92c3f6ea75c576ebd9c97eac14d9d16ab92c6d350d1e08ad2
GET /sys-icons/1.0.243/285/common.svg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-178009.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:03 GMT
content-type: image/svg+xml
last-modified: Tue, 26 Dec 2023 12:42:38 GMT
etag: W/"a6904eb106932b715893c355c505d80f"
x-amz-meta-mtime: 1703594556.967778996
content-encoding: gzip
expires: Wed, 27 Dec 2023 16:11:56 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-f47a2fdc2e0dc8aa4374f43a45603197-cacd49e352b7d782-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-26T16:11:56+00:00, 2023-12-26T16:18:59+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET 1xlite-178009.top/version.json?timestamp=1703678647616
200 OK 44 B URL GET HTTP/2 1xlite-178009.top/version.json?timestamp=1703678647616
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
Hash 8667ce74a433b8c3a12579fb7a0174d1
3d575c71002f9586f6512c0cece59ecced94363c
cec2407a463851918d01470ca9db6bacb01e5f6264aaca22d1add6bb81f1f9ae
GET /version.json?timestamp=1703678647616 HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:03 GMT
content-type: application/json
content-length: 44
last-modified: Wed, 27 Dec 2023 10:15:45 GMT
vary: Accept-Encoding
etag: "658bf951-2c"
content-encoding: gzip
expires: Wed, 27 Dec 2023 12:11:03 GMT
access-control-allow-origin: *
cache-control: max-age=60, max-age=60, s-maxage=60
accept-ranges: bytes
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.025
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/ioc.dependencies.20-221b1f3b.js
200 OK 1.3 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/ioc.dependencies.20-221b1f3b.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (3072), with no line terminators
Hash 3b4a560af9432cb393592fc22805e081
ffe9937d423c13749c6b1a473a93c7031e6f1cae
711eba55731308804b89871cb1c0a6548045deb1a9d41a76c4a3e6e23213655b
GET /_nuxt/desktop/default/ioc.dependencies.20-221b1f3b.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 1323
last-modified: Wed, 27 Dec 2023 07:05:45 GMT
etag: "658bccc9-52b"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:37 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-ac77ec1a9a17bdb23c18883001937684-0100a6dd294170e2-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:37+00:00, 2023-12-27T09:19:57+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/vendors/Page.Cyber.Game/Page.NewCyber.CyberApp/Page.NewCyber.CyberChamps/Page.NewCyber.CyberDashboar/611af4ca-f8f3c8c5.js
200 OK 7.3 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/Page.Cyber.Game/Page.NewCyber.CyberApp/Page.NewCyber.CyberChamps/Page.NewCyber.CyberDashboar/611af4ca-f8f3c8c5.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (32148), with no line terminators
Hash fe8e40775ab9bf6746fb5642181b036d
f5354deb07e22c49751557e8c9992eb516d29503
84368ded4386839a18df8ca6aac83edc0845ae86cd9b781f326c5d3d2a440bfd
GET /_nuxt/desktop/default/vendors/Page.Cyber.Game/Page.NewCyber.CyberApp/Page.NewCyber.CyberChamps/Page.NewCyber.CyberDashboar/611af4ca-f8f3c8c5.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 7331
last-modified: Wed, 27 Dec 2023 07:05:45 GMT
etag: "658bccc9-1ca3"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:42 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-35240879e7651d155ee089ca0df7e86a-deb604449d3a331b-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:42+00:00, 2023-12-27T09:16:51+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/vendors/betting.SportMenuApp-618d6a8d.js
200 OK 5.1 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/betting.SportMenuApp-618d6a8d.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (20405), with no line terminators
Hash ec1616aa9a6a189343f103a51d9c03df
77834386f85c92b9d6d5d9ab77d73dd2fdd7a270
bce85aab7a7b767458f652e870dd2860820c3f21c42ed52dd6189598693b7466
GET /_nuxt/desktop/default/vendors/betting.SportMenuApp-618d6a8d.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 5109
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-13f5"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:41 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-cc090d0d0d1cbcf7ec3378da0a8a093b-61ba8ba5ef334859-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:41+00:00, 2023-12-27T09:19:57+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/site-admin/colors/13f2420925687a194e4c38472ae71214.css
200 OK 9.0 kB URL GET HTTP/2 v3.traincdn.com/genfiles/site-admin/colors/13f2420925687a194e4c38472ae71214.css
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (54242), with no line terminators
Hash a72d5cfb6c97526cca43591b5f206444
b314c99b2e9f07c19d49f5dfc3d55b31972d4b63
17a2ae46acbde45fd316a1830d3a562d14697ab34b70e41d7de038ab2a7ec6cd
GET /genfiles/site-admin/colors/13f2420925687a194e4c38472ae71214.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:01 GMT
content-type: text/css
last-modified: Tue, 26 Dec 2023 15:04:42 GMT
etag: W/"087f32e1f3a67e9033df2f3007ff3ba8"
content-encoding: gzip
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-da662e8eb29c5b6d9664b1262c1d4c32-960699aadeb4e403-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-26T16:05:23+00:00, 2023-12-27T11:13:11+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/betting.SportMenuApp-560544a1.js
200 OK 25 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/betting.SportMenuApp-560544a1.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65483), with no line terminators
Hash af20b56d8c90f1815b26c8934a8c1570
42f12e11d3222351881a949ed5969cd5993094b0
ce9b05c613cb1d0b8eea144ba2b979bf03e70ba044b177f5eae0d1107132e11c
GET /_nuxt/desktop/default/betting.SportMenuApp-560544a1.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 24962
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-6182"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:42 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-88aea1725214d2fc22685f49f74538f2-07bfa03363d90922-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:42+00:00, 2023-12-27T09:19:57+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/css/f0283bd4.css
200 OK 1.6 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/f0283bd4.css
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (9029), with no line terminators
Hash 787e754e3e65cec1388f86c277e7da31
a3bd9881f9a3e8b2ef77c7b8d66450dd70f1e6ac
5d0ee68bf6f6b033b4ea777ca8738d233432a74fe89888029de668460bbf4350
GET /_nuxt/desktop/default/css/f0283bd4.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:03 GMT
content-type: text/css
content-length: 1649
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-671"
content-encoding: gzip
expires: Thu, 28 Dec 2023 07:55:06 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-71465e5ba050910a1a51f5177a293e4c-79bc73d48c171cc1-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T07:55:06+00:00, 2023-12-27T09:02:12+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/betting.HomeSliderComponent-7268de09.js
200 OK 9.0 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/betting.HomeSliderComponent-7268de09.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (30198), with no line terminators
Hash bbeb8e94e5ab29f381429ef6d2739653
6c583ea0bf9e7d3cb5064c85040b6a3b77b93ed3
2b807c47db32e91b3003c955f557e25e6591f73885ac8f945dbf0829e06773d3
GET /_nuxt/desktop/default/betting.HomeSliderComponent-7268de09.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 8988
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-231c"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:41 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-a592bafaf8ab21ccc1c29ba49d398c37-aeea274a87de1fdf-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:41+00:00, 2023-12-27T09:19:57+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/css/8caa3361.css
200 OK 1.3 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/8caa3361.css
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (6194), with no line terminators
Hash 0718f9669ca6f12c93f68df019415101
c2ab75d955a8066ddc7940fc42d0d402e55e320c
966662ce9a985501ac4ea3fc719803cb61e6e4dadca9c8a3682c0c0b0149b789
GET /_nuxt/desktop/default/css/8caa3361.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:03 GMT
content-type: text/css
content-length: 1271
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-4f7"
content-encoding: gzip
expires: Thu, 28 Dec 2023 07:55:06 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-ff334033470a9739f77248e0a8f7b791-445b10b3b83a00f3-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T07:55:06+00:00, 2023-12-27T09:02:12+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET 1xlite-178009.top/service-api/gamespreview/getbanner?whence=55&ref=1&gr=285&lng=en&fCountry=137
200 OK 155 B URL GET HTTP/2 1xlite-178009.top/service-api/gamespreview/getbanner?whence=55&ref=1&gr=285&lng=en&fCountry=137
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
Hash d9c4e764d0719887a701a2fd57d2ed20
dd9132eb122454d6202e18dc89cf3f813bd28eea
bfb3eb33d14d3606f7ef2f2ebf7194a6eba1837022e2cce1a5adaebff4226d10
GET /service-api/gamespreview/getbanner?whence=55&ref=1&gr=285&lng=en&fCountry=137 HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:03 GMT
content-type: application/json; charset=utf-8
content-length: 155
x-time-ng: 0.003
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.030
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/css/239b3a82.css
200 OK 454 B URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/239b3a82.css
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (1429), with no line terminators
Hash b5c7b6dfc9433384f5f222d67a6f4270
85e5cfc0284129c4428d2f7de5731e568da070cf
83e6033ea9bffc7dee6c4414ea5febb81b7900a3a3ddef58530780861b754730
GET /_nuxt/desktop/default/css/239b3a82.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:03 GMT
content-type: text/css
content-length: 454
last-modified: Tue, 26 Dec 2023 15:30:55 GMT
etag: "658af1af-1c6"
content-encoding: gzip
expires: Wed, 27 Dec 2023 18:50:21 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-20664c68fa696031094a65108a419b4d-44896ec6c5e980fb-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-26T18:50:21+00:00, 2023-12-27T09:29:50+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET 1xlite-178009.top/bff-api/event-logo/suitable.json?lang=en
200 OK 435 B URL GET HTTP/2 1xlite-178009.top/bff-api/event-logo/suitable.json?lang=en
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
Hash 013160edee979c9c7df2e8918fac9ba3
b9016db9a4cce1d85e3c3c5732b21ea2de7329be
e796e937f1614070887499566c6ab7019786f23877a1ebd12eeacb390b348f0e
GET /bff-api/event-logo/suitable.json?lang=en HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:03 GMT
content-type: application/json
content-length: 435
cache-control: no-cache, private
server-timing: bff;dur=1.35, dt_total;dur=2.860, wf-uht;dur=0.033
x-cache-expire: 182
x-cache-hit: 1
x-dt: 285
x-time-ng: 0.002
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/vendors/betting.media-aa64a366.js
200 OK 18 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/betting.media-aa64a366.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (43362), with NEL line terminators
Hash bf4cc728c25a04f1faf190f22c08e7b6
ac2de05a5c07301463b9b6289a823832b613a074
c30ad361bf323195e56c89ce9228fa93420dbd38faf9937aa4016ae215a056fe
GET /_nuxt/desktop/default/vendors/betting.media-aa64a366.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 17619
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-44d3"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:37 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-ccb8f5a56b5199dfe16703f5766bfa08-a67b02e1b120e9d5-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:37+00:00, 2023-12-27T09:16:50+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/css/c9c3a732.css
200 OK 1.5 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/c9c3a732.css
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (6965), with no line terminators
Hash c3261a6037d1221987c9b251e4429e07
693c87ed3ed1beb223ec5c8759b878360bff7302
cd7281b8a85399d21797a5a57c4b00f5e34db24ac4f3c1239c762e2b54633ffb
GET /_nuxt/desktop/default/css/c9c3a732.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:03 GMT
content-type: text/css
content-length: 1465
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-5b9"
content-encoding: gzip
expires: Thu, 28 Dec 2023 07:55:06 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-0438a4bb7bd504b13f84fe8e5d88b8d3-9682123e3dca723d-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T07:55:06+00:00, 2023-12-27T08:43:52+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/betting.media-34d38cef.js
200 OK 4.7 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/betting.media-34d38cef.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (16563), with no line terminators
Hash 366fcf0506c75d26de347209de6bb788
43167eef1da6a81c81e3990c0f5cf2892367c9c2
f26874f2072cab355ae2c4265169f8339f51380ad0d06f1daa61f077ee045bf2
GET /_nuxt/desktop/default/betting.media-34d38cef.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 4697
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-1259"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:37 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-69fa145e9b90f5f5ab55a355cc165973-8e0044edae865c44-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:37+00:00, 2023-12-27T09:16:50+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-icons/1.0.243/285/country.svg
200 OK 63 kB URL GET HTTP/2 v3.traincdn.com/sys-icons/1.0.243/285/country.svg
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type gzip compressed data, max speed, from Unix
Hash b44cd8b5567bb691e04c268c3c80802f
1aff6aee5a203b6ac56f2b8f61f78b4518074c80
bc5cd9183caad1d7d092aea1d120881d251f9d4a89b08f71b68d5bb6cde92110
GET /sys-icons/1.0.243/285/country.svg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-178009.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:03 GMT
content-type: image/svg+xml
last-modified: Tue, 26 Dec 2023 12:42:38 GMT
etag: W/"392c1bb51f69d1b06c15dd9083e78d47"
x-amz-meta-mtime: 1703594556.967778996
content-encoding: gzip
expires: Wed, 27 Dec 2023 16:12:03 GMT
cache-control: max-age=86400
x-time-ng: 0.003
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-c1c0dad987489e23b2fc9c7389f6e690-f2ddbc3a3cae0712-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-26T16:12:03+00:00, 2023-12-26T16:18:59+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/betting.CentralMenuApp-d9f556a7.js
200 OK 16 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/betting.CentralMenuApp-d9f556a7.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (62725), with no line terminators
Hash 0b49b29e8e91f8a6f7f1664c4802d52a
35bfeadc649610e5a50cd39b16b43558be3dcc23
200f975c0ea70c3d07e8e68bfcf1cfb632c9769600ec4637048404a50980abd4
GET /_nuxt/desktop/default/betting.CentralMenuApp-d9f556a7.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:03 GMT
content-type: application/javascript; charset=utf-8
content-length: 16002
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-3e82"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:42 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-b1b579f30be7bd0dd73911306c0ccdc5-6d6119ae99ba58d2-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:42+00:00, 2023-12-27T09:19:57+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET 1xlite-178009.top/web-api/api/v3/bonuses/first-deposit
200 OK 167 B URL GET HTTP/2 1xlite-178009.top/web-api/api/v3/bonuses/first-deposit
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
Hash 932484d8872226316695d920e6e87455
a8812ae0ab7da10914caf0c97cb4ba2f04112e16
1ceb6f2561e906e3f88a436dfc6f6946f498ff7913a5d43abfa64a52a1460cd3
GET /web-api/api/v3/bonuses/first-deposit HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:03 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: br
server-timing: p;dur=36, dt_total;dur=38.187, wf-uht;dur=0.069
vary: Accept-Encoding
x-dt: 285
x-time-ng: 0.038
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/css/15158b1d.css
200 OK 1.1 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/15158b1d.css
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (4319), with no line terminators
Hash a8ca6ad918662919832dfadf40101246
305ccd8daad4f79301ef418766f1aa6786cde6bc
bb8d0ffe4dbc2c0f2615e5aa182699dc27c845701a9fa311366b52610261384a
GET /_nuxt/desktop/default/css/15158b1d.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:04 GMT
content-type: text/css
content-length: 1149
last-modified: Wed, 27 Dec 2023 07:05:45 GMT
etag: "658bccc9-47d"
content-encoding: gzip
expires: Thu, 28 Dec 2023 07:54:58 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-ce90bfd72056901438a2c673fd4126a4-f6a27c4307a737cc-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T07:54:58+00:00, 2023-12-27T09:14:26+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/vendors/RegistrationWidgetApp/registration.Main/user.userRegistration-a6570221.js
200 OK 19 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/RegistrationWidgetApp/registration.Main/user.userRegistration-a6570221.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 23421d4d7abd101cb4672334ec5dbe93
6ab498b5ffa200232e2aa6366ae63bc96b33d089
c80fb9a11e7e5861c90ba9992f8753c9a39922033be2e4d501094e65a67b60d0
GET /_nuxt/desktop/default/vendors/RegistrationWidgetApp/registration.Main/user.userRegistration-a6570221.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:04 GMT
content-type: application/javascript; charset=utf-8
content-length: 19265
last-modified: Wed, 27 Dec 2023 07:05:45 GMT
etag: "658bccc9-4b41"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:41 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-f3ae5f955352caada7c3d1a58a4fa1fd-aee5486b004e912e-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:41+00:00, 2023-12-27T09:16:50+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/css/44ef7d01.css
200 OK 552 B URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/44ef7d01.css
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (1864), with no line terminators
Hash cccad9bb53bf1459c4e881fa55f3192e
d8bb9e8e312b5d2d633475f09c538d1959a0d979
2ecb63567ddb1b2f6be5f0b475202bc4b18e34b08ace1d13027b2670b670c37d
GET /_nuxt/desktop/default/css/44ef7d01.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:04 GMT
content-type: text/css
content-length: 552
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-228"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:42 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-543536e9428649ce13403ecefc1ccec0-1e66151bb9443751-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:42+00:00, 2023-12-27T09:19:58+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/vendors/betting.coupon2/vuedraggable-e60e5466.js
200 OK 24 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/betting.coupon2/vuedraggable-e60e5466.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (65472)
Hash 7606fa01999d57a8df730ba7395879f3
94cf1c214dcd64a2fe2fe243c593b2dc910af772
6a84b78c24cfe9547a9833099dc864f153033bb16aed5a2b64d674743561603b
GET /_nuxt/desktop/default/vendors/betting.coupon2/vuedraggable-e60e5466.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:04 GMT
content-type: application/javascript; charset=utf-8
content-length: 23575
last-modified: Tue, 26 Dec 2023 09:49:28 GMT
etag: "658aa1a8-5c17"
content-encoding: gzip
expires: Wed, 27 Dec 2023 13:05:16 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-2ff0cd1776daada75dfccc76460f7877-6a1af5983b1a8cba-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-26T13:05:16+00:00, 2023-12-26T13:12:10+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/RegistrationWidgetApp-3b82c271.js
200 OK 2.6 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/RegistrationWidgetApp-3b82c271.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (7303), with no line terminators
Hash 2f58d2185f325e540527979b4e1802dd
69598078fe5f54ca4b879013edc14e20dd27faee
c8983d7ef6efff40b45668c7359a3bf3fcbd692c6971db470eb2e9d0245f6ea0
GET /_nuxt/desktop/default/RegistrationWidgetApp-3b82c271.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:04 GMT
content-type: application/javascript; charset=utf-8
content-length: 2620
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-a3c"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:42 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-d6a6b3937a903ae2f9cb31c870b10e65-e7c84f43bbfbe6cc-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:42+00:00, 2023-12-27T09:19:58+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/vendors/betting.coupon2-f807224e.js
200 OK 10 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/betting.coupon2-f807224e.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (37338), with no line terminators
Hash a9e7350c7869deb481c8e486245337a7
84619d48d15ae96e544b2b5f3d82c216884d6946
1b1336758a470c01b30117cdea398d0db68246fb757145a81281c4613e22e5d9
GET /_nuxt/desktop/default/vendors/betting.coupon2-f807224e.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:04 GMT
content-type: application/javascript; charset=utf-8
content-length: 10173
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-27bd"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:41 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-1256bfde268ed9f237be761281707c65-a1ec028a15887091-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:41+00:00, 2023-12-27T09:19:58+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET 1xlite-178009.top/service-api/LiveFeed/GetTopGamesStatZip?lng=en&antisports=66
200 OK 2.6 kB URL GET HTTP/2 1xlite-178009.top/service-api/LiveFeed/GetTopGamesStatZip?lng=en&antisports=66
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
Hash 4495aad05264f8ad41657f2d77db8392
1aae28238a7b13ef93f5163f24376017eca39868
a00dee967923418ded038d19e759f71e565344b65c0c49ef302021c1b1366096
GET /service-api/LiveFeed/GetTopGamesStatZip?lng=en&antisports=66 HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:04 GMT
content-type: application/json; charset=utf-8
content-length: 2622
cache-control: public, max-age=5
content-encoding: br
last-modified: Wed, 27 Dec 2023 12:10:03 GMT
vary: Accept-Encoding
x-time-ng: 0.004
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/betting.coupon2/modal.CouponsSellModal-6b1ae327.js
200 OK 2.8 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/betting.coupon2/modal.CouponsSellModal-6b1ae327.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (8963), with no line terminators
Hash 15bda8d0685fad7d15fc8cf2698666bd
66de59f125b92c616716885f4a1134cc97784ddf
6f1476c53ff8ace1740982d477c95aac3d3cd0e17c0a78455fdd443474d9e6a8
GET /_nuxt/desktop/default/betting.coupon2/modal.CouponsSellModal-6b1ae327.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:04 GMT
content-type: application/javascript; charset=utf-8
content-length: 2762
last-modified: Wed, 27 Dec 2023 07:05:45 GMT
etag: "658bccc9-aca"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:42 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-c91349ec0493e0e1c4fdb06190104645-8b5887d9cff842a6-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:42+00:00, 2023-12-27T09:19:58+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-icons/1.0.243/285/sports.svg
200 OK 161 kB URL GET HTTP/2 v3.traincdn.com/sys-icons/1.0.243/285/sports.svg
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image
Size 161 kB (161442 bytes)
Hash 0bec2f9d6b447aafa26209ae3efe3fc1
0073b1245a0d6fce02fe18de47db63b4bd981960
24365c3e956e672d16f836d6262590ce6a40c477590e39b582d45a783cb05092
GET /sys-icons/1.0.243/285/sports.svg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-178009.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:03 GMT
content-type: image/svg+xml
last-modified: Tue, 26 Dec 2023 12:42:38 GMT
etag: W/"479e5be72808f3935b1a282f84bb58ec"
x-amz-meta-mtime: 1703594556.971779013
content-encoding: gzip
expires: Wed, 27 Dec 2023 16:12:04 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-435ecb8fc605a5837e45839b7998039e-4af427ba0c4b2898-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-26T16:12:04+00:00, 2023-12-26T16:18:59+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/css/c1ddb0f3.css
200 OK 7.1 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/c1ddb0f3.css
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (55061), with no line terminators
Hash 91ac7fa7a7fbe7ffd41f24b6631f3bb6
397130f49f45e03b41a50f2ef0b27d2e160eee41
44dbcf6fb904c4ef52e820adaf298e673c497a7b6597a21667e1ce66e4fc5bf3
GET /_nuxt/desktop/default/css/c1ddb0f3.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:04 GMT
content-type: text/css
content-length: 7097
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-1bb9"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:00:20 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-cb4b74b024c1e16ee8d94b6a3695399f-54cb4e8da33132ed-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:00:20+00:00, 2023-12-27T10:09:53+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/betting.coupon2-edbf2995.js
200 OK 41 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/betting.coupon2-edbf2995.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 42eea37e3965a4cb16afb97ce4b1b397
a87893589b40bffe56ad662ee84b1cbf6f080ac1
46a441eaf5d0fa5565265102bbd18fdc1e6a16dbd8fd46b3ad4cf78a7b8200cf
GET /_nuxt/desktop/default/betting.coupon2-edbf2995.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:04 GMT
content-type: application/javascript; charset=utf-8
content-length: 40630
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-9eb6"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:41 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-3107d3f11d7f58438e35bef4dcf23ca3-8180258a8525e36f-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:41+00:00, 2023-12-27T09:19:58+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/ioc.dependencies.30-3ee255d0.js
200 OK 1.2 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/ioc.dependencies.30-3ee255d0.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (2335), with no line terminators
Hash b6401341b3773185461b95ea51b6e4a4
2bb95a8e9415cf89abef4972103e064faeaf0e06
4008db8722b98d656b29cd661641c4d4f8df0b66b55edb20d6d881d83fe85f74
GET /_nuxt/desktop/default/ioc.dependencies.30-3ee255d0.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:04 GMT
content-type: application/javascript; charset=utf-8
content-length: 1157
last-modified: Wed, 27 Dec 2023 07:05:45 GMT
etag: "658bccc9-485"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:37 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-026ec1145e8f6d44bf992ec71bafd4c1-b1fa61a232275242-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:37+00:00, 2023-12-27T09:16:50+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/DownloadAppWidgetAnalytics-7af4a21a.js
200 OK 363 B URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/DownloadAppWidgetAnalytics-7af4a21a.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (417), with no line terminators
Hash 8cf13f6b931a74fca98a9d2cf5bcd69b
2139f5aedd83cf85434c62f25d8c5a110910068b
5f935c1f2ff6608ac44556d52188979b30fe236b0e37d91c8c1bf686e786862d
GET /_nuxt/desktop/default/DownloadAppWidgetAnalytics-7af4a21a.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:04 GMT
content-type: application/javascript; charset=utf-8
content-length: 363
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-16b"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:42 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-bf046c74f60eb91cd7ad9dcd01cca79a-31fe8a208219a3e5-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:42+00:00, 2023-12-27T09:20:03+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/61ff60393c891979938050ffa583eece.webp
200 OK 774 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/61ff60393c891979938050ffa583eece.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash db781057a970a3a0141e3b3bd3164673
3ec099b28512a5655a5ee7ac35007875abaacb8f
f953984c3be1f64be0831c2de19b8a07d0532f977346b10d27c03fe404fc6136
GET /resized/size16/sfiles/logo_teams/61ff60393c891979938050ffa583eece.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:05 GMT
content-type: image/webp
content-length: 774
cache-control: max-age=94608000
content-disposition: inline; filename="61ff60393c891979938050ffa583eece.webp"
content-security-policy: script-src 'none'
expires: Fri, 25 Dec 2026 18:42:27 GMT
x-request-id: 64f363490f5df90ced7769faa0242374
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.074
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-2086b52c7a2079bcb1a3103bae86f4d0-556fc4acb1b22b13-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-26T18:42:27+00:00, 2023-12-26T20:14:05+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET 1xlite-178009.top/web-api/external-api/config/getVideoAccessConfig
200 OK 3.7 kB URL GET HTTP/2 1xlite-178009.top/web-api/external-api/config/getVideoAccessConfig
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
Hash cb0bc8eedc642fc591c0eef57e6c67e5
6c62aeececef0a5ff474bb21bf569ad8d48f6bd0
c57136f602923fc19534e58f7da5a483616d80031222372e19a29fd6f22b0a0e
GET /web-api/external-api/config/getVideoAccessConfig HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280; che_g=0a028994-a8e4-5db4-94e5-204ecb9787d7; _glhf=1703696780
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:04 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: br
server-timing: p;dur=21, dt_total;dur=77.889, wf-uht;dur=0.120
vary: Accept-Encoding
x-dt: 285
x-time-ng: 0.050
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
GET widget.suphelper.top/injector.js
200 OK 72 kB URL GET HTTP/2 widget.suphelper.top/injector.js
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerGoogle Trust Services LLC
Subjectsuphelper.top
Fingerprint1C:D4:4C:1C:DB:7D:59:7D:EE:39:59:B9:F7:76:9F:87:4C:EA:5E:01
ValidityWed, 29 Nov 2023 10:21:51 GMT - Tue, 27 Feb 2024 10:21:50 GMT
File type gzip compressed data, from Unix
Hash 3a9d5b7243e3ef1bf6dd1e067e802bd7
a054cb2952f1229f9b472224fb8a3734039bdf44
49a7ddc8646481a7e6486caf4735d58b1e643bb3e5f474b8098a57ef1d9bb020
GET /injector.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Dec 2023 12:10:04 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=14400
last-modified: Fri, 15 Dec 2023 06:10:19 GMT
etag: W/"32e7a-18c6c18e1ad"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 24
expires: Wed, 27 Dec 2023 16:10:04 GMT
server: cloudflare
cf-ray: 83c17552eb4556c1-OSL
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/6496.webp
200 OK 818 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/6496.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash 8b1e5a753bfc5d38ba7cbf8a2c8006d5
92f4fe397f12f900b0b74713ee4310856a384437
f30e3489d5a515edfa8a504ef24ad7b366ab5bdf95c1bfdfbf68b6cf69e448d1
GET /resized/size16/sfiles/logo_teams/6496.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:05 GMT
content-type: image/webp
content-length: 818
cache-control: max-age=94608000
content-disposition: inline; filename="6496.webp"
content-security-policy: script-src 'none'
expires: Wed, 23 Dec 2026 12:45:50 GMT
x-request-id: eaa959d31310bc3922209b5a47164c0b
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-a08237c5b560604542cf74a8b2733f68-b01a959d6643faef-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-24T12:45:50+00:00, 2023-12-24T22:29:08+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/4f862e393a611e130d06c4ea78b19921.webp
200 OK 830 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/4f862e393a611e130d06c4ea78b19921.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash 944820dd934b752eeaed67ded8b12f44
60bf55c1eb1804a2268ff5f2a92d7f5f8e3d59b3
791c6f1f7717de984253f2ded7a6d8bc84039b37a2711419128cae762cc45123
GET /resized/size16/sfiles/logo_teams/4f862e393a611e130d06c4ea78b19921.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:05 GMT
content-type: image/webp
content-length: 830
cache-control: max-age=94608000
content-disposition: inline; filename="4f862e393a611e130d06c4ea78b19921.webp"
content-security-policy: script-src 'none'
expires: Wed, 23 Dec 2026 19:27:05 GMT
x-request-id: 102a181eb7e209c254fe3d697f93384b
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-ccf1823a1cb0b0dd4c7e1787956e9740-75993a9b3427a7f5-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-24T19:27:05+00:00, 2023-12-25T10:49:16+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/a9f4b2a3ec2e60371022be37d5cd944f.webp
200 OK 780 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/a9f4b2a3ec2e60371022be37d5cd944f.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash cea9bc0e98b49875337546fa2a0ca13c
ce8ef340d6b48012b866ccdeb048af85492ef0bd
ae1023038648ddf26cd864b692ca56420dc6359f867a14b2d2c1e471bed4c7e3
GET /resized/size16/sfiles/logo_teams/a9f4b2a3ec2e60371022be37d5cd944f.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:05 GMT
content-type: image/webp
content-length: 780
cache-control: max-age=94608000
content-disposition: inline; filename="a9f4b2a3ec2e60371022be37d5cd944f.webp"
content-security-policy: script-src 'none'
expires: Wed, 23 Dec 2026 18:15:30 GMT
x-request-id: 9947030a0c34fda2d3f79e43876202bb
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-2b3c8a739f3ddac053f469439bf9f7b4-41d59f9f0f9d0b18-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-24T18:15:30+00:00, 2023-12-24T19:31:04+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/acd0fe0c93bebc872ef81804053ddd22.webp
200 OK 816 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/acd0fe0c93bebc872ef81804053ddd22.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash 1a92038ae4937788f7e52579f0721bc8
7790955c0d938260c79043f67f959905e4bf6963
8c83b463bb49a70fef9f8bc8be983971e9fbd50945e9cd7999b456dd9f1fd96a
GET /resized/size16/sfiles/logo_teams/acd0fe0c93bebc872ef81804053ddd22.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:05 GMT
content-type: image/webp
content-length: 816
cache-control: max-age=94608000
content-disposition: inline; filename="acd0fe0c93bebc872ef81804053ddd22.webp"
content-security-policy: script-src 'none'
expires: Wed, 23 Dec 2026 18:15:30 GMT
x-request-id: 0f2c846e79ff12e7fb68054c680d32ea
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-4612b08d21bdddf385ffc5851b162c21-4f97c6e23c055d96-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-24T18:15:30+00:00, 2023-12-25T10:49:16+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/4663abbe6b8da99d47fed44df8d8d954.webp
200 OK 836 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/4663abbe6b8da99d47fed44df8d8d954.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash 1690ef09b953339fa5a020c233adb0e4
3aa43ed13e5c00732a77750052612689da2c1f1b
111636398e3880bb68833b751cc175e063880a9f6dd7c6d8a2444531e5018ff9
GET /resized/size16/sfiles/logo_teams/4663abbe6b8da99d47fed44df8d8d954.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:05 GMT
content-type: image/webp
content-length: 836
cache-control: max-age=94608000
content-disposition: inline; filename="4663abbe6b8da99d47fed44df8d8d954.webp"
content-security-policy: script-src 'none'
expires: Wed, 16 Dec 2026 05:41:57 GMT
x-request-id: f6c56a13715b920f36ea2f6498503ae7
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-381d0f456fa6cb05e1c8462e81195a48-0af4a53fce87b251-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-17T05:41:57+00:00, 2023-12-21T11:27:44+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/cd9316a75c7fd3e21ef2cfddb53e4891.webp
200 OK 826 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/cd9316a75c7fd3e21ef2cfddb53e4891.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash b1f8b3dc74db3aa961030bb934031e71
cf016cb69ec441e61c58aaff0a6d1bd1569f0d51
03c8034ac22e9cd388113f5fd626ddfb95cd02ad0e04857b11e3358874c24cc0
GET /resized/size16/sfiles/logo_teams/cd9316a75c7fd3e21ef2cfddb53e4891.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:05 GMT
content-type: image/webp
content-length: 826
cache-control: max-age=94608000
content-disposition: inline; filename="cd9316a75c7fd3e21ef2cfddb53e4891.webp"
content-security-policy: script-src 'none'
expires: Tue, 22 Dec 2026 06:15:45 GMT
x-request-id: 7a60cc1e5ed3fed119587871ee65bd3c
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-62aef1046da0d5fd787aff4ac2df1954-5210086252f8b465-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-23T06:15:45+00:00, 2023-12-25T10:49:16+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/5e4f8e35f0781fdbc35f03aad0cf4af8.webp
200 OK 804 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/5e4f8e35f0781fdbc35f03aad0cf4af8.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash 037217b942a80fbf3fceac22dea7150f
55dcc3bc48676d4b020fe04a4ffb1de78c4edd2c
2b0ac0ffd1763599c3e489e591ec6b71f4db869e16988db5d4e026616f87c0a4
GET /resized/size16/sfiles/logo_teams/5e4f8e35f0781fdbc35f03aad0cf4af8.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:05 GMT
content-type: image/webp
content-length: 804
cache-control: max-age=94608000
content-disposition: inline; filename="5e4f8e35f0781fdbc35f03aad0cf4af8.webp"
content-security-policy: script-src 'none'
expires: Sat, 19 Dec 2026 04:06:58 GMT
x-request-id: e787df92b47de3f5667d625794a96f96
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-9ead07c626107f98fda67853c8d9ed3c-c475f245fd78fd60-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-20T04:06:58+00:00, 2023-12-26T20:14:06+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/f986f9f85b471a5b32cda8c435114d53.webp
200 OK 684 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/f986f9f85b471a5b32cda8c435114d53.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash 0588ba71bc3c683e38c137d1853ac069
dd4b1f5f0bd00522ff98aa81db2d3414cba86ea5
43b1b739bd86ab81eac0940cad1a7094f8ceb642a65707086d6c56f0ce3e0706
GET /resized/size16/sfiles/logo_teams/f986f9f85b471a5b32cda8c435114d53.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:05 GMT
content-type: image/webp
content-length: 684
cache-control: max-age=94608000
content-disposition: inline; filename="f986f9f85b471a5b32cda8c435114d53.webp"
content-security-policy: script-src 'none'
expires: Sat, 19 Dec 2026 15:35:44 GMT
x-request-id: af8e8bf4602d80bebe455550073896d6
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-ad9387a0882f8a9a726d8284e2b0bb5c-1f94adf39d633908-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-20T15:35:44+00:00, 2023-12-21T11:27:44+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/bb2064d559da9a3ea161a4b2a5a8239c.webp
200 OK 850 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/bb2064d559da9a3ea161a4b2a5a8239c.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash f127e44d2bd69eef60f17bafd1fb0742
629c071da4eba0bf69a6f19e98b7d46360ea0654
e4002261eb878b9fffbb5d755a43cbcffdcbba78d1ab660842a4a1e1a0997bc8
GET /resized/size16/sfiles/logo_teams/bb2064d559da9a3ea161a4b2a5a8239c.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:05 GMT
content-type: image/webp
content-length: 850
cache-control: max-age=94608000
content-disposition: inline; filename="bb2064d559da9a3ea161a4b2a5a8239c.webp"
content-security-policy: script-src 'none'
expires: Wed, 16 Dec 2026 05:41:57 GMT
x-request-id: b1536c02c7ff5b4c711ddb48381e8de0
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-b978dc4414a4f7495ab0fd680150de66-abab0980fd738322-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-17T05:41:57+00:00, 2023-12-20T06:19:35+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/236fc43a4f09c81fa012e00ab87f4237.webp
200 OK 792 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/236fc43a4f09c81fa012e00ab87f4237.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash 7a9c076a05b1bc3dacee442dc90d27db
fdcadf6d072a0f2d387f32a1a70a30bee76b6544
ff7a8742621e179c458f4452010755519fec9fd960df694af76ee4ea02f945b3
GET /resized/size16/sfiles/logo_teams/236fc43a4f09c81fa012e00ab87f4237.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:05 GMT
content-type: image/webp
content-length: 792
cache-control: max-age=94608000
content-disposition: inline; filename="236fc43a4f09c81fa012e00ab87f4237.webp"
content-security-policy: script-src 'none'
expires: Fri, 25 Dec 2026 18:42:27 GMT
x-request-id: 1494ca21bc885677d68aa1f0914a45b8
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.043
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-e13b81f7bce237e83ee5cc4c37e772d2-de0ee65c2e11129d-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-26T18:42:27+00:00, 2023-12-26T20:14:06+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/317680cd253c6e5109e7816d249f5f16.webp
200 OK 786 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/317680cd253c6e5109e7816d249f5f16.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash 6d6cb90b1547807b172e315b8338b843
d4eb899f69702145bab2fe480af9ccc5e56c8006
58059574980fc8e5f0680196924a4d982453b3f352866c2a79de179fd2d1a5ae
GET /resized/size16/sfiles/logo_teams/317680cd253c6e5109e7816d249f5f16.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:05 GMT
content-type: image/webp
content-length: 786
cache-control: max-age=94608000
content-disposition: inline; filename="317680cd253c6e5109e7816d249f5f16.webp"
content-security-policy: script-src 'none'
expires: Wed, 16 Dec 2026 14:42:13 GMT
x-request-id: fc58725b5f496710661daf870c494f86
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-dbcd71aed26228fc536aae7e17bd7252-a9b756b8b75d97f6-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-17T14:42:13+00:00, 2023-12-21T11:27:44+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/sfiles/logo-champ/839c4cc5b9b1b7ced295a0fcbf45cacc.webp
200 OK 3.6 kB URL GET HTTP/2 v3.traincdn.com/sfiles/logo-champ/839c4cc5b9b1b7ced295a0fcbf45cacc.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash 65351657520f477032d4f1cc52098142
e3d2cf2efea3ab4389cbda407a1b1f5a2d781ab7
57dd50f1280758f5ca2e626d8f0b2d74b253832d98033f35f04c4831c46a8e9b
GET /sfiles/logo-champ/839c4cc5b9b1b7ced295a0fcbf45cacc.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:05 GMT
content-type: image/webp
content-length: 3606
last-modified: Wed, 04 Jan 2023 07:42:15 GMT
etag: "65351657520f477032d4f1cc52098142"
cache-control: public, max-age=86400, public
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-099d776b17030467bf4b92f67215a77b-22f80c9a12750fa1-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-18T13:03:22+00:00, 2023-12-26T17:08:09+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/20977.webp
200 OK 806 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/20977.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash 9b69701f2c07c60f11f1c408c223cf3e
c75ba022cb4509934ac362b9d73c9c3f4b39189c
1d2ba1531a706a739de5f2f2df45d75a13296e25b16c21db26b8879f07b9710e
GET /resized/size16/sfiles/logo_teams/20977.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:05 GMT
content-type: image/webp
content-length: 806
cache-control: max-age=94608000
content-disposition: inline; filename="20977.webp"
content-security-policy: script-src 'none'
expires: Fri, 18 Dec 2026 09:45:19 GMT
x-request-id: a895b2747ee09660bdcdaee0a9d2fb94
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.046
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-62d582bfba0f4894fe272430c07db07f-d59a543ffc19dd4a-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-19T09:45:19+00:00, 2023-12-19T13:00:07+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/sfiles/logo-champ/sub_e_sport_dota_2.webp
200 OK 3.4 kB URL GET HTTP/2 v3.traincdn.com/sfiles/logo-champ/sub_e_sport_dota_2.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash a46689e442c017ae101b316767eca350
2a48883da6738204defdfb8f81f44f78b7bb0731
9d5e3beccf36f35346ea0fabe57602cb4beed97d6e770e7bf74fa67c963d05a4
GET /sfiles/logo-champ/sub_e_sport_dota_2.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:05 GMT
content-type: image/webp
content-length: 3422
last-modified: Tue, 03 Jan 2023 12:42:31 GMT
etag: "a46689e442c017ae101b316767eca350"
cache-control: public, max-age=86400, public
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-43dd23fdd683805affad6546bbb60351-19a2e2d530b053c6-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-18T09:43:06+00:00, 2023-12-27T10:53:02+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/23445.webp
200 OK 810 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/23445.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash e40093e3308508e70aa87dada6e4d8fe
60dfd1e3e922a74b05e5b0b0d879f40dbc328b90
bb6a578761e91f8b3c701e0ad9cad3cfcc1fa1243a665413b79849e7eb5de05a
GET /resized/size16/sfiles/logo_teams/23445.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:05 GMT
content-type: image/webp
content-length: 810
cache-control: max-age=94608000
content-disposition: inline; filename="23445.webp"
content-security-policy: script-src 'none'
expires: Thu, 17 Dec 2026 13:03:32 GMT
x-request-id: 72d945bcad9d9680127bdea7ffd95f58
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.060
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-cae2aa71976f652760b60a19f2d784df-0f93ad40649f8ae6-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-18T13:03:32+00:00, 2023-12-19T13:00:07+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/55baa938273dbd94208f0dfa2efa4224.webp
200 OK 688 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/55baa938273dbd94208f0dfa2efa4224.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash 307b1ff2a1f78389b8cb94d36641ce32
800d49d8dbb0ae82da85b89754966727ba98b98c
1c4fd50a53a0c9ee6adf2f645a1f9c3efebb6ebc8f1c00dc9e65c3cbf7e88dca
GET /resized/size16/sfiles/logo_teams/55baa938273dbd94208f0dfa2efa4224.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:05 GMT
content-type: image/webp
content-length: 688
cache-control: max-age=94608000
content-disposition: inline; filename="55baa938273dbd94208f0dfa2efa4224.webp"
content-security-policy: script-src 'none'
expires: Thu, 17 Dec 2026 01:12:08 GMT
x-request-id: e5af7add6bc037ed9bf066f6b7f85c40
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-0f5aa1db8eec1603fea86dcf700bbde7-dc9438fb70a7b097-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-18T01:12:08+00:00, 2023-12-18T10:02:51+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/e843652ddb2776443f3d19b7778ec492.webp
200 OK 546 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/e843652ddb2776443f3d19b7778ec492.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash 7ce79904a4a7447ec7b4d89c4040a81f
392da8201636141f68569eb9dab8142b79175c25
3060bff65a4c7ce77c2891828e9b6fc67e15e73b9e74768d75cd8ae2b4009065
GET /resized/size16/sfiles/logo_teams/e843652ddb2776443f3d19b7778ec492.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:05 GMT
content-type: image/webp
content-length: 546
cache-control: max-age=94608000
content-disposition: inline; filename="e843652ddb2776443f3d19b7778ec492.webp"
content-security-policy: script-src 'none'
expires: Fri, 25 Dec 2026 02:57:39 GMT
x-request-id: a558a156994681e032b304145d900785
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-d73dfe79dce3fa355e04a4f1bdc7494b-34ff2875a71ab9af-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-26T02:57:39+00:00, 2023-12-26T11:29:56+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/2cd12b3235596435082468289bfdfaa7.webp
200 OK 804 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/2cd12b3235596435082468289bfdfaa7.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash a0f7372429358acc8edc3912cc832aba
bbef51ab17e0d2637144a27befbc5c81c1e58efb
26fc7b48e4bd58fb763b09e11b2d495e7818f3c03fa939c011a445ff7ff1a756
GET /resized/size16/sfiles/logo_teams/2cd12b3235596435082468289bfdfaa7.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:05 GMT
content-type: image/webp
content-length: 804
cache-control: max-age=94608000
content-disposition: inline; filename="2cd12b3235596435082468289bfdfaa7.webp"
content-security-policy: script-src 'none'
expires: Wed, 16 Dec 2026 09:01:02 GMT
x-request-id: 7fcbc74d98f4fda6dc64cc9f1202348a
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-140ee49680922af35d330c63a09c42d6-31b43be9bcab1033-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-17T09:01:02+00:00, 2023-12-18T16:25:59+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/b2480ac7ec6099de3b5e81f3f304efd4.webp
200 OK 620 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/b2480ac7ec6099de3b5e81f3f304efd4.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash 5a849bb8f4fdf9648e9ce42616e91d51
5dbc1e4e18c62ed430cdf8a33e6a227f8e53b9b3
29dbbdc3881e855bc8c5538cfefeba68164a7e46d7f422c391c8458fea2c117e
GET /resized/size16/sfiles/logo_teams/b2480ac7ec6099de3b5e81f3f304efd4.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:05 GMT
content-type: image/webp
content-length: 620
cache-control: max-age=94608000
content-disposition: inline; filename="b2480ac7ec6099de3b5e81f3f304efd4.webp"
content-security-policy: script-src 'none'
expires: Wed, 16 Dec 2026 09:01:02 GMT
x-request-id: c0af04aa298c67ecf544e543be6391ec
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-84510c3f7c240652d37d554b2efea1bb-073ade33bd95dcfd-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-17T09:01:02+00:00, 2023-12-25T00:00:05+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET 1xlite-178009.top/service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true
200 OK 11 kB URL GET HTTP/2 1xlite-178009.top/service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
Hash be4a4ed4441ab624020bb402084e92a2
eb98c6e5089a6a206e8de6f4fdfc3fb665faedba
cb8b10f53f8fab41263d33defc540db9f5f79f6f2126753ee58c487442e27eea
GET /service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280; che_g=0a028994-a8e4-5db4-94e5-204ecb9787d7; _glhf=1703696780
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:05 GMT
content-type: application/json; charset=utf-8
content-length: 10651
cache-control: public, max-age=5
content-encoding: br
last-modified: Wed, 27 Dec 2023 12:10:05 GMT
vary: Accept-Encoding
x-time-ng: 0.033
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.060
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/vendors/DownloadAppWidget/modal.IplWorldInstallModal-0da44030.js
200 OK 5.6 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/DownloadAppWidget/modal.IplWorldInstallModal-0da44030.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (15998)
Hash 78c1ebb4f8bcc19c37b58e729c6427d2
1f72d78394bf0add05f73948ac6b12340873bb8d
ae59f85f43a3978953dcde5c94aa92ced1f850052aa557b885dcff1e02948c5c
GET /_nuxt/desktop/default/vendors/DownloadAppWidget/modal.IplWorldInstallModal-0da44030.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:05 GMT
content-type: application/javascript; charset=utf-8
content-length: 5551
last-modified: Wed, 27 Dec 2023 07:05:45 GMT
etag: "658bccc9-15af"
content-encoding: gzip
expires: Thu, 28 Dec 2023 07:54:46 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-e442054ed95b9b570d4350e60a2be5ef-399ebefa2324e62e-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T07:54:46+00:00, 2023-12-27T09:20:05+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/css/660eae3e.css
200 OK 1.2 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/660eae3e.css
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (5261), with no line terminators
Hash 317d8e4f747abdd942a94e5d3257f811
ebafd4129d0878ef4ce5a11ee8b9fc8cd1f71559
f3feb618955c2cce7f0c07dba5d2d4679b4c4ae8d0f09584706ed90c047aee2c
GET /_nuxt/desktop/default/css/660eae3e.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:05 GMT
content-type: text/css
content-length: 1161
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-489"
content-encoding: gzip
expires: Thu, 28 Dec 2023 07:55:02 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-e6408ba4afedcd7c8e656be4e37eb780-7c662dafb9f19e3f-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T07:55:02+00:00, 2023-12-27T10:09:55+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/DownloadAppWidget-15e7a8b6.js
200 OK 3.9 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/DownloadAppWidget-15e7a8b6.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (11604), with no line terminators
Hash c57cb66ffaa2b0f49e671c4e7ba5fc77
2d1c127f510b56b43cd7a133616b6b0496c829f1
af6556952f993b2f73f528e4d5875cf3255b4ad880e4b83e46f41b6071e869fe
GET /_nuxt/desktop/default/DownloadAppWidget-15e7a8b6.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:05 GMT
content-type: application/javascript; charset=utf-8
content-length: 3927
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-f57"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:43 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-7030ccb0537c15e02d6f768e588434d2-257ba795c36ec4c4-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:43+00:00, 2023-12-27T09:20:05+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
POST 1xlite-178009.top/web-api/user/secure
200 OK 205 B URL POST HTTP/2 1xlite-178009.top/web-api/user/secure
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
Hash fff8bdb2e05d147332ba3a10ff04fb57
1be7e1584e8d52662cda3119a5e71d67f10a2f0d
64cafc4ba31d0fb810c0a7cd5434aa8c31380a400f4ff90f957ae7e479cee5e8
POST /web-api/user/secure HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
Origin: https://1xlite-178009.top
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:04 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: br
server-timing: p;dur=16, dt_total;dur=17.833, wf-uht;dur=0.049
set-cookie: _glhf=1703696780; expires=Wed, 27-Dec-2023 13:10:04 GMT; Max-Age=3600; path=/
vary: Accept-Encoding
x-dt: 285
x-time-ng: 0.017
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/css/c867ef02.css
200 OK 682 B URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/c867ef02.css
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (4658), with no line terminators
Hash 5ab52a6e88252ff781d8052a6869418d
96ad749111751693f123d2128f881100906712c0
af0512f320255e6401c278f357609d9309d52e41cddc4727517abfb44564c78c
GET /_nuxt/desktop/default/css/c867ef02.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:06 GMT
content-type: text/css
content-length: 682
last-modified: Mon, 25 Dec 2023 09:46:57 GMT
etag: "65894f91-2aa"
content-encoding: gzip
expires: Tue, 26 Dec 2023 19:07:20 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-a5bc1aaa7dc2dd71310098d72250f861-55cb01c47a10fc6d-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-25T19:07:20+00:00, 2023-12-26T12:35:26+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/betting.SportsMenuCompact-5be7a684.js
200 OK 2.3 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/betting.SportsMenuCompact-5be7a684.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (7751), with no line terminators
Hash ca3148d33eea80293a676c1f5b623146
a0d588cd8583e410c595aea7b5d2c443e9f64d7b
0d6fcff3755dd58a663cfcf1095bd6282666f5aa3174d754f9307aac558a94f2
GET /_nuxt/desktop/default/betting.SportsMenuCompact-5be7a684.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:06 GMT
content-type: application/javascript; charset=utf-8
content-length: 2290
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-8f2"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:42 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-833408a5b9b9ff915137c2ec8e5863e6-7a034bbfb5fcad06-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:42+00:00, 2023-12-27T09:39:13+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/sfiles/games-images/game-previews/190x102/game-521.webp
200 OK 19 kB URL GET HTTP/2 v3.traincdn.com/sfiles/games-images/game-previews/190x102/game-521.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 380x204, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 740cbca626a8a46fa9cefa8617f008a9
00824fe16d01acfd89b995eb98c22c6c13e7d790
7b34dca41d7963ea4046396854a34640024e38bd4581ed164f273de285090bab
GET /sfiles/games-images/game-previews/190x102/game-521.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:06 GMT
content-type: application/octet-stream
content-length: 19156
last-modified: Fri, 08 Dec 2023 09:53:24 GMT
etag: "740cbca626a8a46fa9cefa8617f008a9"
x-amz-meta-origin-date-iso8601: 2023-12-08T09:32:27.921Z
expires: Thu, 21 Dec 2023 07:12:23 GMT
cache-control: max-age=86400, public
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-536cbc31b2a7d5dbe9e0463c3aef3188-4887311d35546697-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-20T07:12:23+00:00, 2023-12-26T17:36:45+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/sfiles/games-images/game-previews/190x102/game-58.webp
200 OK 8.9 kB URL GET HTTP/2 v3.traincdn.com/sfiles/games-images/game-previews/190x102/game-58.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 380x204, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 7a49dad906575c61dd636edbe1201479
d4bf0fbfadca8c6d3a7ec8f3d34d08fced98a21d
0e0cd085244f6272acfa6794d90e32685fa203973e85c62fa96f02cddf7172c6
GET /sfiles/games-images/game-previews/190x102/game-58.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:06 GMT
content-type: application/octet-stream
content-length: 8880
last-modified: Thu, 31 Aug 2023 08:11:00 GMT
etag: "7a49dad906575c61dd636edbe1201479"
x-amz-meta-origin-date-iso8601: 2023-08-31T08:03:42.000Z
expires: Tue, 14 Nov 2023 18:21:44 GMT
cache-control: max-age=86400, public
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-c3199b210c609793fc3577d76ebaaf49-8fc79c3c9849cb73-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-17T19:17:28+00:00, 2023-12-26T14:50:31+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/sfiles/games-images/game-previews/190x102/game-371.webp
200 OK 6.2 kB URL GET HTTP/2 v3.traincdn.com/sfiles/games-images/game-previews/190x102/game-371.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 380x204, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 64ff358fd3a82358542d29d53649dd85
0a15b0731a9468fe49e3b512febe91d951ef6156
a9ae35f930c0bf59e407a0c082347049ae11738d330df4e32f4b2b1129d1470c
GET /sfiles/games-images/game-previews/190x102/game-371.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:06 GMT
content-type: application/octet-stream
content-length: 6158
last-modified: Thu, 31 Aug 2023 08:10:58 GMT
etag: "64ff358fd3a82358542d29d53649dd85"
x-amz-meta-origin-date-iso8601: 2023-08-31T08:04:04.000Z
expires: Tue, 14 Nov 2023 18:22:10 GMT
cache-control: max-age=86400, public
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-709395a60a693b8a7457e12f67f28763-228caa31f36d35c6-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-17T19:17:28+00:00, 2023-12-26T14:50:31+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/sfiles/games-images/game-previews/190x102/games-no-faceless.webp
200 OK 6.9 kB URL GET HTTP/2 v3.traincdn.com/sfiles/games-images/game-previews/190x102/games-no-faceless.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 380x204, Scaling: [none]x[none], YUV color, decoders should clamp
Hash b7304b532dca88cc708b1c81edf7e051
d9ca9db864badb40bcab6d846ba7110413a339d3
324b9021e7fa1a227b418f5b0707e174d86aa20decea945eab3cea41aac8d2ca
GET /sfiles/games-images/game-previews/190x102/games-no-faceless.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:06 GMT
content-type: application/octet-stream
content-length: 6884
last-modified: Thu, 31 Aug 2023 08:11:01 GMT
etag: "b7304b532dca88cc708b1c81edf7e051"
x-amz-meta-origin-date-iso8601: 2023-08-31T08:04:10.000Z
expires: Tue, 14 Nov 2023 18:21:42 GMT
cache-control: max-age=86400, public
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-8c00af33ca6c35cbec3b60cf91a00e89-1f2c0a0c4cc0c176-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-17T18:59:15+00:00, 2023-12-26T14:50:31+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/sfiles/games-images/game-previews/190x102/game-249.webp
200 OK 20 kB URL GET HTTP/2 v3.traincdn.com/sfiles/games-images/game-previews/190x102/game-249.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 380x204, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 2c02d34e261b48da9db2682ad433c5e8
e6b9618ac0040910f755a6f24dcb2f5500bb9aca
d8db064ea1623849ccee86b27bdb7825aa0dc452293576de352f9269af60ecfe
GET /sfiles/games-images/game-previews/190x102/game-249.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:06 GMT
content-type: application/octet-stream
content-length: 19770
last-modified: Thu, 31 Aug 2023 08:10:56 GMT
etag: "2c02d34e261b48da9db2682ad433c5e8"
x-amz-meta-origin-date-iso8601: 2023-08-31T08:04:00.000Z
expires: Tue, 14 Nov 2023 18:22:10 GMT
cache-control: max-age=86400, public
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-695d86c529b7ecae99520f6ba62ec88f-1fa3736ac95c262b-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-17T19:17:28+00:00, 2023-12-26T14:50:31+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET 1xlite-178009.top/service-api/LiveFeed/GetSportsShortZip?lng=en&gr=285&country=137&virtualSports=true&groupChamps=true
2.7 kB URL GET 1xlite-178009.top/service-api/LiveFeed/GetSportsShortZip?lng=en&gr=285&country=137&virtualSports=true&groupChamps=true
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
Hash 44b6b9ff811c7ae83fe3fcbaa18e019b
93d0593a1262d8b7ed6ebe9fdd748ffcc6f69d8d
3fc9bc46487eb91f90cb6d6047db01283a7d846bae47dfa9f4babbdfe4988682
GET /service-api/LiveFeed/GetSportsShortZip?lng=en&gr=285&country=137&virtualSports=true&groupChamps=true HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280; che_g=0a028994-a8e4-5db4-94e5-204ecb9787d7; _glhf=1703696780
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:06 GMT
content-type: application/json; charset=utf-8
content-length: 2696
cache-control: public, max-age=5
content-encoding: br
last-modified: Wed, 27 Dec 2023 12:10:06 GMT
vary: Accept-Encoding
x-time-ng: 0.011
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.037
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/css/7090b01f.css
200 OK 80 B URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/7090b01f.css
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 99f16f43c1db94e4e758dcfe16ec462b
8a82f7169b8b0cce028a2fab8ea2e2b4c9b33d90
5de20e76112564f64b1b01edc1b573c57db66690eda9845523e06fb71c38eb07
GET /_nuxt/desktop/default/css/7090b01f.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:06 GMT
content-type: text/css
content-length: 80
last-modified: Tue, 26 Dec 2023 12:38:33 GMT
etag: "658ac949-50"
content-encoding: gzip
expires: Wed, 27 Dec 2023 13:20:42 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-141966e2b9b9c5144453079b64becebf-3eb798e0cbae946f-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-26T13:20:42+00:00, 2023-12-26T13:31:36+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/Betting.Coupon.Desktop.MainTab.CouponRegistrationButton-d45f2d29.js
200 OK 846 B URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/Betting.Coupon.Desktop.MainTab.CouponRegistrationButton-d45f2d29.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (1530), with no line terminators
Hash 070614d484fa3f235cc406e185cd2b6e
ecf0781c6388313ff1ae3bafc569bd713fe22335
d71f56b5687b44de3712fa26978f83108123af492b7de5692d993f3ad91ff12c
GET /_nuxt/desktop/default/Betting.Coupon.Desktop.MainTab.CouponRegistrationButton-d45f2d29.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:06 GMT
content-type: application/javascript; charset=utf-8
content-length: 846
last-modified: Wed, 27 Dec 2023 07:05:45 GMT
etag: "658bccc9-34e"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:42 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-f5c6186a3b0a3b2d31d7d675f0d74f9d-ab53c2a4aca9aeb1-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:42+00:00, 2023-12-27T09:20:08+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET 1xlite-178009.top/service-api/LineFeed/GetSportsShortZip?lng=en&country=137&virtualSports=true&gr=285&groupChamps=true
200 OK 1.8 kB URL GET HTTP/2 1xlite-178009.top/service-api/LineFeed/GetSportsShortZip?lng=en&country=137&virtualSports=true&gr=285&groupChamps=true
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
Hash 5550b88290a3f9279fbb969e1a037774
a6e940accb45e394636b147e99f7604b12b88a4c
afb7c6007274d7594a611065d9adbe9d9debc5d7bdbd987f9c3b36108b615ae1
GET /service-api/LineFeed/GetSportsShortZip?lng=en&country=137&virtualSports=true&gr=285&groupChamps=true HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280; che_g=0a028994-a8e4-5db4-94e5-204ecb9787d7; _glhf=1703696780
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:06 GMT
content-type: application/json; charset=utf-8
content-length: 1764
cache-control: public, max-age=5
content-encoding: br
last-modified: Wed, 27 Dec 2023 12:10:06 GMT
vary: Accept-Encoding
x-time-ng: 0.037
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.067
X-Firefox-Spdy: h2
GET 1xlite-178009.top/genfiles/cms/desktop/event-logo/a1c31f08a07e72b33f59de34fe70abdd.webp
200 OK 1.2 kB URL GET HTTP/2 1xlite-178009.top/genfiles/cms/desktop/event-logo/a1c31f08a07e72b33f59de34fe70abdd.webp
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
File type RIFF (little-endian) data, Web/P image
Hash d0625f6c56220d0708f541759fe53254
4e6bd4b7081da46d1dcf08114c3d340c0b2f0a41
d55c5513c0232a0d7a1d6e8a7b02612e9fae30f53d608f9b4dd9b52d82ae94a0
GET /genfiles/cms/desktop/event-logo/a1c31f08a07e72b33f59de34fe70abdd.webp HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280; che_g=0a028994-a8e4-5db4-94e5-204ecb9787d7; _glhf=1703696780
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:06 GMT
content-type: image/webp
content-length: 1236
last-modified: Tue, 19 Dec 2023 19:22:53 GMT
etag: "d0625f6c56220d0708f541759fe53254"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=
accept-ranges: bytes
X-Firefox-Spdy: h2
GET widget.suphelper.top/_next/static/chunks/81.9c6562bba5669b47.js
200 OK 61 kB URL GET HTTP/2 widget.suphelper.top/_next/static/chunks/81.9c6562bba5669b47.js
IP
Requested by https://widget.suphelper.top/
Certificate IssuerGoogle Trust Services LLC
Subjectsuphelper.top
Fingerprint1C:D4:4C:1C:DB:7D:59:7D:EE:39:59:B9:F7:76:9F:87:4C:EA:5E:01
ValidityWed, 29 Nov 2023 10:21:51 GMT - Tue, 27 Feb 2024 10:21:50 GMT
File type gzip compressed data, from Unix
Hash a402c98f88f7a8155cf67ad864b19811
4ec639ea434f658825c215bc90d4f6636c13822e
7542fc5b80e0c6bcd602158c5d2bca6f232779e917a863028f73d00cd0b7ed63
GET /_next/static/chunks/81.9c6562bba5669b47.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Dec 2023 12:10:08 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://file-hosting-api-stage.kube.prod.cons.lan https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=31536000
last-modified: Thu, 09 Nov 2023 06:03:45 GMT
etag: W/"8f42-18bb2adf0eb"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 3051750
expires: Thu, 26 Dec 2024 12:10:08 GMT
server: cloudflare
cf-ray: 83c1756a9c9756c1-OSL
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1/desktop/banner/97faf7d4bde16c75933c173d43a7c6b2.jpg
200 OK 354 kB URL GET HTTP/2 v3.traincdn.com/genfiles/cms/1/desktop/banner/97faf7d4bde16c75933c173d43a7c6b2.jpg
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JPEG image data, baseline, precision 8, 1380x248, components 3
Size 354 kB (353559 bytes)
Hash 37e2b1014962d2a041178ca0fc6f9f77
df6ab31b4edafc0941bf2caec3dd631354d8eb2c
4c794e15b5963bf55046f699a5a40cc34ab921085591c98de9f1ad519c6c725f
GET /genfiles/cms/1/desktop/banner/97faf7d4bde16c75933c173d43a7c6b2.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:08 GMT
content-type: image/jpeg
content-length: 353559
last-modified: Tue, 12 Dec 2023 09:02:00 GMT
etag: "37e2b1014962d2a041178ca0fc6f9f77"
x-time-ng: 0.004
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-5175755d6b3ece38181f54bb089c9e5c-3e0fd25925f4119f-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-20T13:44:57+00:00, 2023-12-27T11:10:43+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET widget.suphelper.top/_next/static/5bf52df1/_ssgManifest.js
200 OK 146 kB URL GET HTTP/2 widget.suphelper.top/_next/static/5bf52df1/_ssgManifest.js
IP
Requested by https://widget.suphelper.top/
Certificate IssuerGoogle Trust Services LLC
Subjectsuphelper.top
Fingerprint1C:D4:4C:1C:DB:7D:59:7D:EE:39:59:B9:F7:76:9F:87:4C:EA:5E:01
ValidityWed, 29 Nov 2023 10:21:51 GMT - Tue, 27 Feb 2024 10:21:50 GMT
File type gzip compressed data, from Unix
Size 146 kB (146156 bytes)
Hash 83d97a5da8f32a26d63d861b37f75643
84b913d5bea46fce158dbb20966c23ddfd6030b7
1f9719ec024fd7567dfe72fb20d222095b0553b75cadd55070c778d2e5f60802
GET /_next/static/5bf52df1/_ssgManifest.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Dec 2023 12:10:06 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=31536000
last-modified: Fri, 15 Dec 2023 06:10:19 GMT
etag: W/"4d-18c6c18e241"
vary: Accept-Encoding
cf-cache-status: HIT
age: 1058024
expires: Thu, 26 Dec 2024 12:10:06 GMT
server: cloudflare
cf-ray: 83c1756099f556c1-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1/desktop/banner/37725dd3160e2621f084de11d4417228.png
200 OK 231 kB URL GET HTTP/2 v3.traincdn.com/genfiles/cms/1/desktop/banner/37725dd3160e2621f084de11d4417228.png
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type PNG image data, 1380 x 248, 8-bit/color RGBA, non-interlaced
Size 231 kB (231413 bytes)
Hash 5f92240dea2753875e3104a6704f93e6
41d042b4876f18001842a761d05ad4a0575ca7f4
2d51f316311a3977d1dcee31a3332f720f72a842d8924ea4b8f014a23ca859b7
GET /genfiles/cms/1/desktop/banner/37725dd3160e2621f084de11d4417228.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:08 GMT
content-type: image/png
content-length: 231413
last-modified: Wed, 21 Jun 2023 09:54:48 GMT
etag: "5f92240dea2753875e3104a6704f93e6"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-2bf42f22492af5125c91866cb47c6781-4330f02694b953b7-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-18T08:31:24+00:00, 2023-12-27T11:10:43+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET widget.suphelper.top/sounds/new-message.mp3
200 OK 30 kB URL GET HTTP/2 widget.suphelper.top/sounds/new-message.mp3
IP
Requested by https://widget.suphelper.top/
Certificate IssuerGoogle Trust Services LLC
Subjectsuphelper.top
Fingerprint1C:D4:4C:1C:DB:7D:59:7D:EE:39:59:B9:F7:76:9F:87:4C:EA:5E:01
ValidityWed, 29 Nov 2023 10:21:51 GMT - Tue, 27 Feb 2024 10:21:50 GMT
File type MPEG ADTS, layer III, v1, 192 kbps, 48 kHz, JntStereo
Hash ef9af24dc7dbd24ffd99c832e1300351
f78744a5013038446c468de14f205f2d52373fd6
5049d7fe87a7327a291441181d1a328a15f46a21081b970502c540406011c9b9
GET /sounds/new-message.mp3 HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Dec 2023 12:10:08 GMT
content-type: audio/mpeg
content-length: 29952
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=14400
last-modified: Fri, 15 Dec 2023 06:10:19 GMT
etag: W/"7500-18c6c18e1b9"
cf-cache-status: HIT
age: 1781
expires: Wed, 27 Dec 2023 16:10:08 GMT
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 83c1756c0dea56c1-OSL
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1/desktop/banner/37725dd3160e2621f084de11d4417228.png
200 OK 231 kB URL GET HTTP/2 v3.traincdn.com/genfiles/cms/1/desktop/banner/37725dd3160e2621f084de11d4417228.png
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type PNG image data, 1380 x 248, 8-bit/color RGBA, non-interlaced
Size 231 kB (231413 bytes)
Hash 5f92240dea2753875e3104a6704f93e6
41d042b4876f18001842a761d05ad4a0575ca7f4
2d51f316311a3977d1dcee31a3332f720f72a842d8924ea4b8f014a23ca859b7
GET /genfiles/cms/1/desktop/banner/37725dd3160e2621f084de11d4417228.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:08 GMT
content-type: image/png
content-length: 231413
last-modified: Wed, 21 Jun 2023 09:54:48 GMT
etag: "5f92240dea2753875e3104a6704f93e6"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-949ef08e1640769eaca8c1d51418ae9f-6cfc6a91fe260431-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-18T08:31:24+00:00, 2023-12-27T11:10:43+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET 1xlite-178009.top/web-api/api/v3/bonuses/welcome-bonuses
200 OK 193 kB URL GET HTTP/2 1xlite-178009.top/web-api/api/v3/bonuses/welcome-bonuses
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
Size 193 kB (193004 bytes)
Hash 95386d56fdcf40f38e65d973c8a3ef06
7deb37760c5f665c84c7b5d1d9c832b31dfcb661
d83d352f884f50b3cc7f7f93e17e51531e64069a8946b9257cfe10315397fd92
GET /web-api/api/v3/bonuses/welcome-bonuses HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280; che_g=0a028994-a8e4-5db4-94e5-204ecb9787d7; _glhf=1703696780
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:06 GMT
content-type: application/vnd.api+json
vary: Accept-Encoding
cache-control: no-cache, private
server-timing: p;dur=19, dt_total;dur=20.466, wf-uht;dur=0.182
x-dt: 285
x-time-ng: 0.020
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size14/sfiles/logo_teams/ebc20318c8e76a842f03fa207ca36c0d.webp
200 OK 778 B URL GET HTTP/2 v3.traincdn.com/resized/size14/sfiles/logo_teams/ebc20318c8e76a842f03fa207ca36c0d.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash e258333eabab41a1c26c60de621d2dcc
b2a6522e26b256e8c3437438189e11405632a375
0e098aa88f5a4a19238fbe837e837fad83d5e273c5523bfeeba9ba072b46b7e7
GET /resized/size14/sfiles/logo_teams/ebc20318c8e76a842f03fa207ca36c0d.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:08 GMT
content-type: image/webp
content-length: 778
cache-control: max-age=94608000
content-disposition: inline; filename="ebc20318c8e76a842f03fa207ca36c0d.webp"
content-security-policy: script-src 'none'
expires: Thu, 24 Dec 2026 23:33:27 GMT
x-request-id: 35b01173d8bbcdb382ac354a4878de3d
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-fb47ace1364e26ad4738925cfca46b9e-d2fa592a5614a84b-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-25T23:33:27+00:00, 2023-12-27T11:03:15+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size14/sfiles/logo_teams/17d418a3115c54ddbe5430a20dc8fb50.webp
200 OK 730 B URL GET HTTP/2 v3.traincdn.com/resized/size14/sfiles/logo_teams/17d418a3115c54ddbe5430a20dc8fb50.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash 8e6f15a4194f4c642ff661a8170ba164
f12eabafac755dd64df893a75694f010c9e6cf5b
601a537fc42b336499d3296f03eaf69bc8022a084f5f7f4d85e39271ffa0ef80
GET /resized/size14/sfiles/logo_teams/17d418a3115c54ddbe5430a20dc8fb50.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:08 GMT
content-type: image/webp
content-length: 730
cache-control: max-age=94608000
content-disposition: inline; filename="17d418a3115c54ddbe5430a20dc8fb50.webp"
content-security-policy: script-src 'none'
expires: Thu, 24 Dec 2026 23:33:27 GMT
x-request-id: 1a4fc3d9d5ce8dc3eb5e1791a9e8edab
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.033
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-c3c2cccdc58b3cdcb26cbc53c889a612-a32e02cfc279ed24-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-25T23:33:27+00:00, 2023-12-27T11:03:15+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET widget.suphelper.top/_next/static/chunks/970-fdfa7a3a1558183b.js
200 OK 125 kB URL GET HTTP/2 widget.suphelper.top/_next/static/chunks/970-fdfa7a3a1558183b.js
IP
Requested by https://widget.suphelper.top/
Certificate IssuerGoogle Trust Services LLC
Subjectsuphelper.top
Fingerprint1C:D4:4C:1C:DB:7D:59:7D:EE:39:59:B9:F7:76:9F:87:4C:EA:5E:01
ValidityWed, 29 Nov 2023 10:21:51 GMT - Tue, 27 Feb 2024 10:21:50 GMT
File type gzip compressed data, from Unix
Size 125 kB (125208 bytes)
Hash 6bf0f71b1dc3039bf9c1d78d8f071907
6159ca663933244dcf5a90d4c0fadc919a4ea262
66a2a8131d1dfd68df6b8ceee1a5f77b19a4c29d82017261e0ae7329cb0811e5
GET /_next/static/chunks/970-fdfa7a3a1558183b.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Dec 2023 12:10:06 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=31536000
last-modified: Thu, 07 Dec 2023 06:22:59 GMT
etag: W/"69bbf-18c42f19a97"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 1748643
expires: Thu, 26 Dec 2024 12:10:06 GMT
server: cloudflare
cf-ray: 83c1756099ef56c1-OSL
X-Firefox-Spdy: h2
GET widget.suphelper.top/_next/static/5bf52df1/_middlewareManifest.js
200 OK 880 B URL GET HTTP/2 widget.suphelper.top/_next/static/5bf52df1/_middlewareManifest.js
IP
Requested by https://widget.suphelper.top/
Certificate IssuerGoogle Trust Services LLC
Subjectsuphelper.top
Fingerprint1C:D4:4C:1C:DB:7D:59:7D:EE:39:59:B9:F7:76:9F:87:4C:EA:5E:01
ValidityWed, 29 Nov 2023 10:21:51 GMT - Tue, 27 Feb 2024 10:21:50 GMT
File type gzip compressed data, from Unix
Hash 856ccfcf0e0beffa40e2c98d87d95a9f
fd995c9f45e9dbc3e6a9a27959cb93a3738a7e0e
266cac7309e471ffb6c50e24e2350c64e9ab2b44716b3279d42a90205a430433
GET /_next/static/5bf52df1/_middlewareManifest.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Dec 2023 12:10:06 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=31536000
last-modified: Fri, 15 Dec 2023 06:10:19 GMT
etag: W/"5c-18c6c18e241"
vary: Accept-Encoding
cf-cache-status: HIT
age: 1058024
expires: Thu, 26 Dec 2024 12:10:06 GMT
server: cloudflare
cf-ray: 83c1756099f756c1-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/cae3e38596e41e246e4946c4bd23a21b.webp
200 OK 732 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/cae3e38596e41e246e4946c4bd23a21b.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash 216bccb76bd6921c0aa56198120b0af7
b24046bdaea5ccd8072f547bf1e2eb2442c152ea
d88ef37e816cbc7e755f7e1bb5b66874df6385400c1fca8afb71c0da5bd1ec62
GET /resized/size16/sfiles/logo_teams/cae3e38596e41e246e4946c4bd23a21b.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:09 GMT
content-type: image/webp
content-length: 732
cache-control: max-age=94608000
content-disposition: inline; filename="cae3e38596e41e246e4946c4bd23a21b.webp"
content-security-policy: script-src 'none'
expires: Fri, 25 Dec 2026 06:05:14 GMT
x-request-id: d53bd858607ec07f5eb0ca1c8808f055
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-df6c47b30aeee8c145f6e2f16a07bccf-fc1710ccc9af021c-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-26T06:05:14+00:00, 2023-12-27T00:25:47+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/94b505dc445e6141a094c8c79b5eea2a.webp
200 OK 800 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/94b505dc445e6141a094c8c79b5eea2a.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash 691031b27bc1b4581f45c458ac747944
3b249b90af32b2bbf9afac31ec80ff1f6a6e9361
ace9350a36c3a20d07723b869cd3302f55275ce0bae00f456c09127cd6ec1fee
GET /resized/size16/sfiles/logo_teams/94b505dc445e6141a094c8c79b5eea2a.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:09 GMT
content-type: image/webp
content-length: 800
cache-control: max-age=94608000
content-disposition: inline; filename="94b505dc445e6141a094c8c79b5eea2a.webp"
content-security-policy: script-src 'none'
expires: Wed, 23 Dec 2026 17:14:57 GMT
x-request-id: f7083143d60a5b24079aea05fd297b3e
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-601b3cacaa32c02fabf920e14065d00d-3c89b7bb3c680024-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-24T17:14:57+00:00, 2023-12-27T00:25:47+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/0e02becfc84d7566727a8bec6b8ce299.webp
200 OK 730 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/0e02becfc84d7566727a8bec6b8ce299.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash 06ff4d04b72e4d3972dd3cee355ffccf
039cc3d935dc6fb82b8f370566fbb1929c25b8e9
31734a0799f931a431b842ea8bc348c05d9002bfd04dee3352f172dbdc94909d
GET /resized/size16/sfiles/logo_teams/0e02becfc84d7566727a8bec6b8ce299.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:10 GMT
content-type: image/webp
content-length: 730
cache-control: max-age=94608000
content-disposition: inline; filename="0e02becfc84d7566727a8bec6b8ce299.webp"
content-security-policy: script-src 'none'
expires: Sat, 19 Dec 2026 10:42:22 GMT
x-request-id: c8e3ba651700a2d9071077beb703fc3b
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.049
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-f200d66bc55975f1bf0d50781935fabb-f3fde77637af65f4-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-20T10:42:22+00:00, 2023-12-23T18:00:33+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/79320fa3d23d78fb9797d3d8ecab72b7.webp
200 OK 724 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/79320fa3d23d78fb9797d3d8ecab72b7.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash 38f8ac9d796f31458120b68ee5222bb1
bf90f900952881d6c7114ef5744ec0e16c010b33
abc23b06f77aad769d56a90fa45c0b0f130496039424535835c9d994b4eac0f9
GET /resized/size16/sfiles/logo_teams/79320fa3d23d78fb9797d3d8ecab72b7.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:10 GMT
content-type: image/webp
content-length: 724
cache-control: max-age=94608000
content-disposition: inline; filename="79320fa3d23d78fb9797d3d8ecab72b7.webp"
content-security-policy: script-src 'none'
expires: Thu, 10 Dec 2026 11:09:34 GMT
x-request-id: 05dab52956f255f2ecbc0651339ea516
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.059
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-5573d6c5fd364ff42ae1635f83546cf1-59ccfd618b23894d-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-11T11:09:34+00:00, 2023-12-23T11:35:48+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/256e189a1cee8e0a1193e5ae5d56526e.webp
200 OK 694 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/256e189a1cee8e0a1193e5ae5d56526e.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash cd3801490f230dd50b615498693d51ba
18b683df43e0aab1935c06f4b6960555f35e3a71
9f3cef0fa47e50d4b430cc6190e8c155f8a772fcef743e0b593319ed29541151
GET /resized/size16/sfiles/logo_teams/256e189a1cee8e0a1193e5ae5d56526e.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:10 GMT
content-type: image/webp
content-length: 694
cache-control: max-age=94608000
content-disposition: inline; filename="256e189a1cee8e0a1193e5ae5d56526e.webp"
content-security-policy: script-src 'none'
expires: Fri, 04 Dec 2026 03:51:38 GMT
x-request-id: 40c6a523a4f57446a40602bd5d01a10f
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-2380b7256dc9c4b4b5766fb0256f4536-7a7e0e11287acf0b-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-05T03:51:38+00:00, 2023-12-20T12:15:05+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/sfiles/logo-champ/eb167d9c8fdb73faf2ed33d7519ab750.webp
200 OK 1.3 kB URL GET HTTP/2 v3.traincdn.com/sfiles/logo-champ/eb167d9c8fdb73faf2ed33d7519ab750.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash e81d77c7f9aeae24eabe727a13898506
a84a730a7025d4180f798a85707852f062e32808
1c49e1b5be96ca69570d62ab7bc621b0664cc84ddc26cc0c88efaff35563b7e3
GET /sfiles/logo-champ/eb167d9c8fdb73faf2ed33d7519ab750.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:10 GMT
content-type: image/webp
content-length: 1334
last-modified: Sat, 05 Aug 2023 05:39:42 GMT
etag: "e81d77c7f9aeae24eabe727a13898506"
cache-control: public, max-age=86400, public
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-0228544e7fcb452fb29ae29e4d8b7d86-c0afa8d4f95b33df-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-24T16:32:30+00:00, 2023-12-27T12:01:13+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/937be62d99d9bb367a3070f289d2d698.webp
200 OK 784 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/937be62d99d9bb367a3070f289d2d698.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash a2af4f76d7bcc59f20bf7b516dc3c08f
37ff331fe32237a858fd72c538ae4a1d33600fc0
3a976ee4a11059cdd13160f7d8de9360479b235c21d9246342a5d695c6e83a87
GET /resized/size16/sfiles/logo_teams/937be62d99d9bb367a3070f289d2d698.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:10 GMT
content-type: image/webp
content-length: 784
cache-control: max-age=94608000
content-disposition: inline; filename="937be62d99d9bb367a3070f289d2d698.webp"
content-security-policy: script-src 'none'
expires: Tue, 22 Dec 2026 03:28:05 GMT
x-request-id: 73f2f267f9f685fac15329078da1e65a
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-c130760142acebb0cd5558e0c85c0c78-b22ee6b0c2ae3f79-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-23T03:28:05+00:00, 2023-12-25T07:28:31+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/17d418a3115c54ddbe5430a20dc8fb50.webp
200 OK 760 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/17d418a3115c54ddbe5430a20dc8fb50.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash 806f851ba2511c8a3c47baf02acd661d
728d00bdc91e7d6a4416963a85a2d1143b46045a
85bf26715ac5885da3309af1df9770b540f7b5a15a69c87bcba7a7f0464c55cf
GET /resized/size16/sfiles/logo_teams/17d418a3115c54ddbe5430a20dc8fb50.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:10 GMT
content-type: image/webp
content-length: 760
cache-control: max-age=94608000
content-disposition: inline; filename="17d418a3115c54ddbe5430a20dc8fb50.webp"
content-security-policy: script-src 'none'
expires: Thu, 24 Dec 2026 23:25:03 GMT
x-request-id: 2480e065a6c4e2c4bc2e1e00b8b73f1a
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-493156c9ad3f4c301ab24d001236ac9c-dda67fad0b683732-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-25T23:25:03+00:00, 2023-12-27T10:58:09+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/ebc20318c8e76a842f03fa207ca36c0d.webp
200 OK 800 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/ebc20318c8e76a842f03fa207ca36c0d.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash 532acd9768eba6b1b87f2678422325f4
559d920540fdfbf58341ab806117b8021ad07fdc
242c8f0654fe42812e52596d214e2478873ec947a15a999f4e1c500512022ae3
GET /resized/size16/sfiles/logo_teams/ebc20318c8e76a842f03fa207ca36c0d.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:10 GMT
content-type: image/webp
content-length: 800
cache-control: max-age=94608000
content-disposition: inline; filename="ebc20318c8e76a842f03fa207ca36c0d.webp"
content-security-policy: script-src 'none'
expires: Thu, 24 Dec 2026 20:24:43 GMT
x-request-id: 6962b0dd17ee7beb59bc7df555abc052
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.076
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-40f5f203d0900cbb90568a219dac1b9d-89dccfcdaba24ad2-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-25T20:24:43+00:00, 2023-12-27T10:58:09+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/241561.webp
200 OK 794 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/241561.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash f23fa6f21b9677887c99c358f051b9b5
eeacf6f52b07d5754caa5a40f6f7ee4e46a8f86f
82702a93bdd94e0bb630c346563860e5b51005c50374c679f1938fd4b2743b68
GET /resized/size16/sfiles/logo_teams/241561.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:10 GMT
content-type: image/webp
content-length: 794
cache-control: max-age=94608000
content-disposition: inline; filename="241561.webp"
content-security-policy: script-src 'none'
expires: Wed, 23 Dec 2026 23:47:17 GMT
x-request-id: 668dff91269e4a00861f58cc5e202e0b
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-6cff221a297895f016a60737fec9f0ac-2868f35eb5f07f39-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-24T23:47:17+00:00, 2023-12-27T05:43:33+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/c459e3dc6cc1777f8b560b7c169dcbf9.webp
200 OK 790 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/c459e3dc6cc1777f8b560b7c169dcbf9.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash df256eb955a361e68966de43429dbce8
a67acbb59729a3c89e40c5a3807b8cca056c4fc9
1e71d6ca29cf1605c2d243b2468517df66bbdb15348adda3db986036297ca89b
GET /resized/size16/sfiles/logo_teams/c459e3dc6cc1777f8b560b7c169dcbf9.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:10 GMT
content-type: image/webp
content-length: 790
cache-control: max-age=94608000
content-disposition: inline; filename="c459e3dc6cc1777f8b560b7c169dcbf9.webp"
content-security-policy: script-src 'none'
expires: Wed, 23 Dec 2026 07:11:58 GMT
x-request-id: 4f8ac508745f732302e10da872b9536c
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-38b7298c2e12c4068b68707a28f167a5-8d7605b56725c449-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-24T07:11:58+00:00, 2023-12-27T05:43:33+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/sfiles/logo-champ/7a95fec5beb4888e174693056fce5a0d.webp
200 OK 3.6 kB URL GET HTTP/2 v3.traincdn.com/sfiles/logo-champ/7a95fec5beb4888e174693056fce5a0d.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash 65351657520f477032d4f1cc52098142
e3d2cf2efea3ab4389cbda407a1b1f5a2d781ab7
57dd50f1280758f5ca2e626d8f0b2d74b253832d98033f35f04c4831c46a8e9b
GET /sfiles/logo-champ/7a95fec5beb4888e174693056fce5a0d.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:10 GMT
content-type: image/webp
content-length: 3606
last-modified: Tue, 10 Oct 2023 18:15:09 GMT
etag: "65351657520f477032d4f1cc52098142"
cache-control: public, max-age=86400, public
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-753fa8ed090d7e34e66a4e55d0400434-c3d6e18796567e84-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-26T10:43:25+00:00, 2023-12-26T13:18:23+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/62e826c6d182adeb2a48b6aa84006d63.webp
200 OK 752 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/62e826c6d182adeb2a48b6aa84006d63.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash ce44cdc86e3caf4eafdcd3fcfa7d928d
a03cd10f0b4c8978fa486965ed55f698f67b0a93
d06eb376708aadcc02a1fea985a1215eb22e40d72783bb8cba57fa5317a8e01e
GET /resized/size16/sfiles/logo_teams/62e826c6d182adeb2a48b6aa84006d63.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:10 GMT
content-type: image/webp
content-length: 752
cache-control: max-age=94608000
content-disposition: inline; filename="62e826c6d182adeb2a48b6aa84006d63.webp"
content-security-policy: script-src 'none'
expires: Mon, 07 Dec 2026 11:23:34 GMT
x-request-id: 89760e2ebdf733d70818917f195a4753
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.059
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-398081294e07d554a273b4f13583a74a-078df80eb5362894-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-08T11:23:34+00:00, 2023-12-27T11:01:31+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/7884.webp
200 OK 802 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/7884.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash 684212ae8fe9e53aefc4b94ea11c9112
4dc3419e376a4f3f6450f92a909c6f77225d840d
b44367057b2b7bb218cb97319b2f570c9cdfd0fdfe9b2191a394d802feb01f54
GET /resized/size16/sfiles/logo_teams/7884.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:10 GMT
content-type: image/webp
content-length: 802
cache-control: max-age=94608000
content-disposition: inline; filename="7884.webp"
content-security-policy: script-src 'none'
expires: Fri, 25 Dec 2026 22:14:47 GMT
x-request-id: fcdb75b29bebb906bcbb426c95db186d
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-7fa2bc703bd1920b3e1c50dd3a0b0cbd-95f7e3700cec6760-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-26T22:14:47+00:00, 2023-12-27T11:01:31+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/pg/default/images/1e40d384d835893f994bcce7d2a231b1.svg
200 OK 15 kB URL GET HTTP/2 v3.traincdn.com/genfiles/cms/pg/default/images/1e40d384d835893f994bcce7d2a231b1.svg
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type gzip compressed data, max speed, from Unix
Hash f8bf58c1500764792ea31217ccc1a8e7
916d41f9b01d6dc532078f23a09edb5a5d4edf22
138e1afeb8d1ee2c1843064d73a5337af5af28c966ebd36715fcad68b5e41b41
GET /genfiles/cms/pg/default/images/1e40d384d835893f994bcce7d2a231b1.svg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:08 GMT
content-type: image/svg+xml
last-modified: Mon, 04 Dec 2023 09:41:53 GMT
etag: W/"ca10d4c396be8a212116201ec532325b"
content-encoding: gzip
x-time-ng: 0.003
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-514b070f2febf6f0e04a14838bd1eae6-c20d33a1d158ef4c-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-23T09:23:52+00:00, 2023-12-27T11:10:43+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/746d106dcf9f266ddf1c8152ea6e519b.webp
200 OK 812 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/746d106dcf9f266ddf1c8152ea6e519b.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash 878e582d536bc10ce528ab3adc7a9715
df518da0744188f39e7fb91b02e4dd8eae23cfba
1ea7df83913cbefbc2efdaa13f4dcdbe2e3cd622f6dc558734acd3aa42d40573
GET /resized/size16/sfiles/logo_teams/746d106dcf9f266ddf1c8152ea6e519b.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:10 GMT
content-type: image/webp
content-length: 812
cache-control: max-age=94608000
content-disposition: inline; filename="746d106dcf9f266ddf1c8152ea6e519b.webp"
content-security-policy: script-src 'none'
expires: Tue, 15 Dec 2026 12:16:43 GMT
x-request-id: 48385595ca1798cf70f3d84afc0eb23a
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-6d46c884192506986e6440aa927e1367-16b84d138b1b5da3-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-16T12:16:43+00:00, 2023-12-18T08:18:40+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/22283.webp
200 OK 812 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/22283.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash 834c0765880421aa1ae5b37bc4085314
bdb28e08da37e0ba16e1e1e4cbe4f99dc4718a79
2092fa2dd90227fbd5575ba130958eaad45b9de4eb1835fdd655c1ec969c1d53
GET /resized/size16/sfiles/logo_teams/22283.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:10 GMT
content-type: image/webp
content-length: 812
cache-control: max-age=94608000
content-disposition: inline; filename="22283.webp"
content-security-policy: script-src 'none'
expires: Tue, 15 Dec 2026 12:16:43 GMT
x-request-id: dcd5a8130985e4bd32489511eceada50
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-e6acf27be5f68fc8e4a22591216b69f4-c2c007e3f5f099fb-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-16T12:16:43+00:00, 2023-12-18T09:06:14+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/f7d9dd06470d6da6f58d4a8ff71c48ff.webp
200 OK 902 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/f7d9dd06470d6da6f58d4a8ff71c48ff.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash d3eede576a7c98bda3f2a2d24492a67b
97d195a9bd942f9dd630d7fb0eb26ce1542e126f
b7346ea99dd2a0316d0649a219c18208b67b187bd02b395022547659c60db6d8
GET /resized/size16/sfiles/logo_teams/f7d9dd06470d6da6f58d4a8ff71c48ff.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:10 GMT
content-type: image/webp
content-length: 902
cache-control: max-age=94608000
content-disposition: inline; filename="f7d9dd06470d6da6f58d4a8ff71c48ff.webp"
content-security-policy: script-src 'none'
expires: Sat, 26 Dec 2026 07:07:04 GMT
x-request-id: f160a2cee8a26ca90a8409b4f2a6b4a6
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-67a5c599bc4c81ce150d07d0c0e8c975-b72983baf9dc9525-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T07:07:04+00:00, 2023-12-27T12:01:30+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/35343.webp
200 OK 656 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/35343.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash 806195734c85d12ac4639181d893837e
5b5e62cf2bb96a266caf661812cbd08417564fc4
9ceff50fb53134768910904415da8c997dfa8b1616352a674f6a3af045292c38
GET /resized/size16/sfiles/logo_teams/35343.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:10 GMT
content-type: image/webp
content-length: 656
cache-control: max-age=94608000
content-disposition: inline; filename="35343.webp"
content-security-policy: script-src 'none'
expires: Sat, 26 Dec 2026 07:07:04 GMT
x-request-id: 4686693337a5c9be4d7bf50954c76024
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-4593f5357d83d450838ffe9b96e15998-d80d651993b24238-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T07:07:04+00:00, 2023-12-27T12:02:16+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
POST 1xlite-178009.top/web-api/registration/fields
200 OK 7.8 kB URL POST HTTP/2 1xlite-178009.top/web-api/registration/fields
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
Hash ad6af1786762c05dbcd17bfe1f8dcaf0
3137e12f443a33802715a208a5334ba977d51fb5
e61481cb87a4e94e170f0bd0a28527af96ee30338b165d14117764fa450f40e3
POST /web-api/registration/fields HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
Content-Length: 19
Origin: https://1xlite-178009.top
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280; che_g=0a028994-a8e4-5db4-94e5-204ecb9787d7; _glhf=1703696780; sh.session.id=b2a3a2a3-5e04-41cd-8156-49285a694ef5; ggru=209
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:09 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: br
server-timing: p;dur=71, dt_total;dur=92.838, wf-uht;dur=0.128
vary: Accept-Encoding
x-dt: 285
x-time-ng: 0.078
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
GET widget.suphelper.top/_next/static/chunks/pages/_app-69a0aff2a4fc316d.js
200 OK 290 kB URL GET HTTP/2 widget.suphelper.top/_next/static/chunks/pages/_app-69a0aff2a4fc316d.js
IP
Requested by https://widget.suphelper.top/
Certificate IssuerGoogle Trust Services LLC
Subjectsuphelper.top
Fingerprint1C:D4:4C:1C:DB:7D:59:7D:EE:39:59:B9:F7:76:9F:87:4C:EA:5E:01
ValidityWed, 29 Nov 2023 10:21:51 GMT - Tue, 27 Feb 2024 10:21:50 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 290 kB (289616 bytes)
Hash 5c4afc670825e8eb27fdcd9537fb7ec0
1759bedf1fad17792d54f1f174eaacb177e22791
98ac7bb4b0c26011cd96abe1ec0a7c60080c3ef651e437dd6bfac0e37a99448f
GET /_next/static/chunks/pages/_app-69a0aff2a4fc316d.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Dec 2023 12:10:06 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=31536000
last-modified: Fri, 15 Dec 2023 06:10:19 GMT
etag: W/"f8724-18c6c18e241"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 1058024
expires: Thu, 26 Dec 2024 12:10:06 GMT
server: cloudflare
cf-ray: 83c1756089d756c1-OSL
X-Firefox-Spdy: h2
GET 1xlite-178009.top/genfiles/cms/1/mobile/shortcuts/icon-512x512.png
200 OK 5.2 kB URL GET HTTP/2 1xlite-178009.top/genfiles/cms/1/mobile/shortcuts/icon-512x512.png
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
File type PNG image data, 514 x 514, 8-bit colormap, non-interlaced
Hash b9a636eef54b2844b571fe7de49184a7
bf653690790ced40eb3189da075a275d951d1607
001bfcdd52b658d46543a1aec889d35b73b3909b47097cc011b95e96fc9e3743
GET /genfiles/cms/1/mobile/shortcuts/icon-512x512.png HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280; che_g=0a028994-a8e4-5db4-94e5-204ecb9787d7; _glhf=1703696780; sh.session.id=b2a3a2a3-5e04-41cd-8156-49285a694ef5; ggru=209
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:10 GMT
content-type: image/png
content-length: 5202
last-modified: Thu, 16 Nov 2023 13:34:54 GMT
etag: "b9a636eef54b2844b571fe7de49184a7"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
accept-ranges: bytes
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.030
X-Firefox-Spdy: h2
GET 1xlite-178009.top/web-api/session
204 No Content 0 B URL GET HTTP/2 1xlite-178009.top/web-api/session
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /web-api/session HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280; che_g=0a028994-a8e4-5db4-94e5-204ecb9787d7; _glhf=1703696780; sh.session.id=b2a3a2a3-5e04-41cd-8156-49285a694ef5; ggru=209
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Wed, 27 Dec 2023 12:10:11 GMT
cache-control: no-cache, private
server-timing: p;dur=17, dt_total;dur=21.324, wf-uht;dur=0.048
x-dt: 285
x-time-ng: 0.021
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
GET 1xlite-178009.top/web-api/api/converslon/load
200 OK 73 kB URL GET HTTP/2 1xlite-178009.top/web-api/api/converslon/load
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
Hash f4ae56e4b28a2c188021b533dee46ef8
8d5685431f53e349458dda0197bab6272d4a0238
69d8ef1255837ca78a747cefbc18137c80593ac6aa72a72e8424b5cfc62543e5
GET /web-api/api/converslon/load HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280; che_g=0a028994-a8e4-5db4-94e5-204ecb9787d7; _glhf=1703696780; sh.session.id=b2a3a2a3-5e04-41cd-8156-49285a694ef5; ggru=209
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:11 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: br
server-timing: p;dur=19, dt_total;dur=22.847, wf-uht;dur=0.055
vary: Accept-Encoding
x-dt: 285
x-time-ng: 0.022
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
GET 1xlite-178009.top/service-api/LiveFeed/GetSportsShortZip?lng=en&gr=285&country=137&virtualSports=true&groupChamps=true
2.7 kB URL GET 1xlite-178009.top/service-api/LiveFeed/GetSportsShortZip?lng=en&gr=285&country=137&virtualSports=true&groupChamps=true
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
Hash 3b8046dbc710be3073b9851009e1c3bd
883e15d07efacbdae22ff1e52c588759ee268d8a
f541f864df7fe002636284ad5a525b54fe339a0abb11544d03e8cc0e53a6da49
GET /service-api/LiveFeed/GetSportsShortZip?lng=en&gr=285&country=137&virtualSports=true&groupChamps=true HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280; che_g=0a028994-a8e4-5db4-94e5-204ecb9787d7; _glhf=1703696780; sh.session.id=b2a3a2a3-5e04-41cd-8156-49285a694ef5; ggru=209
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:12 GMT
content-type: application/json; charset=utf-8
content-length: 2708
cache-control: public, max-age=5
content-encoding: br
last-modified: Wed, 27 Dec 2023 12:10:12 GMT
vary: Accept-Encoding
x-time-ng: 0.008
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.036
X-Firefox-Spdy: h2
POST 1xlite-178009.top/web-api/registration
200 OK 66 kB URL POST HTTP/2 1xlite-178009.top/web-api/registration
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
Hash bbb431e9b98ac5ff5e784fa420a5638d
95491a5d5a04ccf4376ef12c9fdc2437d8af9476
09e19241270582a7ed7aad607b29fbecb189d3bb2984ca61b4dd5e6e3036a23d
POST /web-api/registration HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
Content-Length: 17
Origin: https://1xlite-178009.top
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280; che_g=0a028994-a8e4-5db4-94e5-204ecb9787d7; _glhf=1703696780; sh.session.id=b2a3a2a3-5e04-41cd-8156-49285a694ef5; ggru=209
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:07 GMT
content-type: application/vnd.api+json
vary: Accept-Encoding
cache-control: no-cache, private
server-timing: p;dur=34, dt_total;dur=35.198, wf-uht;dur=0.069
x-dt: 285
x-time-ng: 0.035
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2
200 OK 64 kB URL GET HTTP/2 v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 63748, version 1.0
Hash 6887b6f24414dbc612dbf42ccdc76b70
8068d3abfbc6cbf35b55919da45b1f4d2d136238
fc5c015fc32518f1ed810fa84ca28941eb9d5a3c81acc8df69a4dbbeedef7b0c
GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-178009.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:13 GMT
content-type: font/woff2
content-length: 63748
last-modified: Wed, 14 Jun 2023 09:49:53 GMT
etag: "6887b6f24414dbc612dbf42ccdc76b70"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-5bb3318da31ca6878eb6aa3b22d7eae3-093ccfcbdbed6584-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-18T07:13:59+00:00, 2023-12-27T11:28:00+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2
200 OK 64 kB URL GET HTTP/2 v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 63920, version 1.0
Hash a65527fcb58f66a7cfbc0e6b160538b4
45d260e7fa343401b5bb0df982a014f53e2d253b
fb13c3a1cbac60649b76f7d7f85c1645d35ac69b85ce5f4eb0692505ecc2cd45
GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-178009.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:13 GMT
content-type: font/woff2
content-length: 63920
last-modified: Wed, 14 Jun 2023 09:49:53 GMT
etag: "a65527fcb58f66a7cfbc0e6b160538b4"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-01a75aecd8bceb287e33c2bba1a1794c-e27fe1a0c9e10ca3-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-18T07:54:39+00:00, 2023-12-27T11:39:14+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET widget.suphelper.top/_next/static/5bf52df1/_buildManifest.js
200 OK 64 kB URL GET HTTP/2 widget.suphelper.top/_next/static/5bf52df1/_buildManifest.js
IP
Requested by https://widget.suphelper.top/
Certificate IssuerGoogle Trust Services LLC
Subjectsuphelper.top
Fingerprint1C:D4:4C:1C:DB:7D:59:7D:EE:39:59:B9:F7:76:9F:87:4C:EA:5E:01
ValidityWed, 29 Nov 2023 10:21:51 GMT - Tue, 27 Feb 2024 10:21:50 GMT
File type gzip compressed data, from Unix
Hash 0bb0cbb71fe45036c8876bb691f6002a
333ba766c02923f9e524896e7047128f1e902b03
b085bc8ef4edbabe333cbac0c6096009bb290ded22598a85a80d805de2d2ffca
GET /_next/static/5bf52df1/_buildManifest.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Dec 2023 12:10:06 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=31536000
last-modified: Fri, 15 Dec 2023 06:10:19 GMT
etag: W/"1ad-18c6c18e241"
vary: Accept-Encoding
cf-cache-status: HIT
age: 1058024
expires: Thu, 26 Dec 2024 12:10:06 GMT
server: cloudflare
cf-ray: 83c1756099f356c1-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-icons/1.0.243/285/coloredSvg.svg
200 OK 92 kB URL GET HTTP/2 v3.traincdn.com/sys-icons/1.0.243/285/coloredSvg.svg
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type gzip compressed data, max speed, from Unix
Hash a1c207b34cc191cbfe9642bc963f0916
e19b3bc30a65ad81a7137d666406f88fc30be9c5
d108fb2885e5cf223ff307ec5fa63ef5de00635c1e840f1a1bd67b6a0f968167
GET /sys-icons/1.0.243/285/coloredSvg.svg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-178009.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:06 GMT
content-type: image/svg+xml
last-modified: Tue, 26 Dec 2023 12:42:38 GMT
etag: W/"8648bfaa899fcb62f6ed3ea4888cdcec"
x-amz-meta-mtime: 1703594556.967778996
content-encoding: gzip
expires: Wed, 27 Dec 2023 16:12:04 GMT
cache-control: max-age=86400
x-time-ng: 0.003
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-6fff5f146dcc7b6f7c6816c6a3bbd183-7a2d051dbd967185-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-26T16:12:04+00:00, 2023-12-26T16:19:02+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2
200 OK 64 kB URL GET HTTP/2 v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 63920, version 1.0
Hash a65527fcb58f66a7cfbc0e6b160538b4
45d260e7fa343401b5bb0df982a014f53e2d253b
fb13c3a1cbac60649b76f7d7f85c1645d35ac69b85ce5f4eb0692505ecc2cd45
GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-178009.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:14 GMT
content-type: font/woff2
content-length: 63920
last-modified: Wed, 14 Jun 2023 09:49:53 GMT
etag: "a65527fcb58f66a7cfbc0e6b160538b4"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-cf81cf2099b4717fd25910d63f198d1a-e864eb689fe4ea7d-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-18T07:54:39+00:00, 2023-12-27T11:39:14+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET 1xlite-178009.top/service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true
200 OK 11 kB URL GET HTTP/2 1xlite-178009.top/service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
Hash 00fd4e4f026ca77defe425a431d4c488
84d1a00fee3c72d0316d41eeafcc319121acec3a
0e0e573a0a5732193211d94c9733975d5152fcbd124d757343128b3a9af544ab
GET /service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280; che_g=0a028994-a8e4-5db4-94e5-204ecb9787d7; _glhf=1703696780; sh.session.id=b2a3a2a3-5e04-41cd-8156-49285a694ef5; ggru=209
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:15 GMT
content-type: application/json; charset=utf-8
content-length: 10662
cache-control: public, max-age=5
content-encoding: br
last-modified: Wed, 27 Dec 2023 12:10:15 GMT
vary: Accept-Encoding
x-time-ng: 0.017
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.048
X-Firefox-Spdy: h2
POST 1xlite-178009.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json
200 OK 1.6 kB URL POST HTTP/2 1xlite-178009.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
Hash afab2ad67ec38772627927ae66df277c
043beed36dff24db205644a5377c831999fdff37
e68215128f0337b40d56771a7c5243b3f70708529f95d2af7ee0c78e64074344
POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
Content-Type: application/json
X-Lang: en
X-Uuid: cceb1f33-040c-4859-9d56-6c3a83fe92d1
Content-Length: 99
Origin: https://1xlite-178009.top
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280; che_g=0a028994-a8e4-5db4-94e5-204ecb9787d7; _glhf=1703696780; sh.session.id=b2a3a2a3-5e04-41cd-8156-49285a694ef5; ggru=209
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:16 GMT
content-type: application/json
vary: Accept-Encoding
content-encoding: br
x-time-ng: 0.002
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.031
X-Firefox-Spdy: h2
GET 1xlite-178009.top/service-api/LiveFeed/WebGetTopChampsZip?lng=en&gr=285&country=137
200 OK 65 B URL GET HTTP/2 1xlite-178009.top/service-api/LiveFeed/WebGetTopChampsZip?lng=en&gr=285&country=137
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
Hash a62a3d291c25728a06f15b4ee47d5e43
7613e665c8dd639f4f8b821f8337cc4629e3d942
1e2d5a52c362e3ab706e11a3ee2454024423019bd4976d4874df7681c7468b3c
GET /service-api/LiveFeed/WebGetTopChampsZip?lng=en&gr=285&country=137 HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280; che_g=0a028994-a8e4-5db4-94e5-204ecb9787d7; _glhf=1703696780; sh.session.id=b2a3a2a3-5e04-41cd-8156-49285a694ef5; ggru=209
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:16 GMT
content-type: application/json; charset=utf-8
content-length: 65
cache-control: no-cache
content-encoding: br
last-modified: Wed, 27 Dec 2023 12:10:16 GMT
vary: Accept-Encoding
x-time-ng: 0.009
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.036
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66
200 OK 95 kB URL GET HTTP/2 www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
File type Unicode text, UTF-8 text, with very long lines (10722)
Hash d43c170a6049da8f8ae7bb4e20f2bde5
86918ba6ea883e24aabfce9fb93aeede178d988b
109a3ab18394a5e3c359b8c0c3b5b99652c6ea4ee52e050102e302c81dde888e
GET /gtag/js?id=G-7JGWL9SV66 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 27 Dec 2023 12:10:16 GMT
expires: Wed, 27 Dec 2023 12:10:16 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 94583
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
POST 1xlite-178009.top/web-api/q/df0g658j5g646l5bbcfe6c9abd8098ce1078da7808c53a4a8f9f
200 OK 160 B URL POST HTTP/2 1xlite-178009.top/web-api/q/df0g658j5g646l5bbcfe6c9abd8098ce1078da7808c53a4a8f9f
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /web-api/q/df0g658j5g646l5bbcfe6c9abd8098ce1078da7808c53a4a8f9f HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
X-Requested-With: XMLHttpRequest
Content-Type: application/json
Content-Length: 102869
Origin: https://1xlite-178009.top
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280; che_g=0a028994-a8e4-5db4-94e5-204ecb9787d7; _glhf=1703696780; sh.session.id=b2a3a2a3-5e04-41cd-8156-49285a694ef5; ggru=209
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:16 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: br
server-timing: p;dur=24, dt_total;dur=53.394, wf-uht;dur=0.162
vary: Accept-Encoding
x-dt: 285
x-time-ng: 0.047
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
GET radar.cedexis.com/1621860284/stub.js
200 OK 271 B URL GET HTTP/1.1 radar.cedexis.com/1621860284/stub.js
IP
ASN #63911 NetActuate, Inc
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerDigiCert Inc
Subjectradar.cedexis.com
FingerprintC7:F6:9F:14:BA:D6:F0:96:22:D1:BD:25:43:8B:10:66:C3:B4:7C:56
ValidityWed, 26 Apr 2023 00:00:00 GMT - Thu, 25 Apr 2024 23:59:59 GMT
Hash cec7270f03f717f8feca31e994d894d6
470eb82c7e87dccb465562030ed6db7c1e2dd78c
40fceb327b96d3557153ea9feb76e426f85b52dda8fd6444e96134bc4ff5f594
GET /1621860284/stub.js HTTP/1.1
Host: radar.cedexis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 27 Dec 2023 12:10:17 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 24 May 2021 12:50:45 GMT
Vary: Accept-Encoding
ETag: W/"60aba125-186"
Expires: Wed, 10 Jan 2024 12:10:17 GMT
Cache-Control: max-age=1209600, public
Content-Encoding: gzip
GET www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7JGWL9SV66&cid=707001506.1703678661>m=45je3bt0v897130004&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=667058629
200 OK 42 B URL GET HTTP/2 www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7JGWL9SV66&cid=707001506.1703678661>m=45je3bt0v897130004&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=667058629
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerGoogle Trust Services LLC
Subject*.google.no
FingerprintDB:33:6A:DD:DA:72:55:0D:55:09:60:6E:D1:5B:40:D8:2B:9B:4F:3C
ValidityMon, 20 Nov 2023 08:12:16 GMT - Mon, 12 Feb 2024 08:12:15 GMT
File type GIF image data, version 89a, 1 x 1
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7JGWL9SV66&cid=707001506.1703678661>m=45je3bt0v897130004&aip=1&dma=1&dma_cps=sypham&gcd=11l1l1l1l1&z=667058629 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Wed, 27 Dec 2023 12:10:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
POST region1.analytics.google.com/g/collect?v=2&tid=G-7JGWL9SV66>m=45je3bt0v897130004&_p=1703678660982&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=707001506.1703678661&ul=en-us&sr=1280x1024&_s=1&sid=1703678661&sct=1&seg=0&dl=https%3A%2F%2F1xlite-178009.top%2Fen%3Ftag%3Dd_1106375m_28715c_%255B%255DMS%255B%255Dnull%255B%255Dnull%255B%255Dgeneral%255B%255De7e3ef5a_d49774_l64530_clickunder&dt=Online%20sports%20betting%20at%201xBet.%20Norway%20%E1%90%89%201xlite-178009.top&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.optimize_id=GTM-5R4MT54&tfd=17654
204 No Content 0 B URL POST HTTP/2 region1.analytics.google.com/g/collect?v=2&tid=G-7JGWL9SV66>m=45je3bt0v897130004&_p=1703678660982&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=707001506.1703678661&ul=en-us&sr=1280x1024&_s=1&sid=1703678661&sct=1&seg=0&dl=https%3A%2F%2F1xlite-178009.top%2Fen%3Ftag%3Dd_1106375m_28715c_%255B%255DMS%255B%255Dnull%255B%255Dnull%255B%255Dgeneral%255B%255De7e3ef5a_d49774_l64530_clickunder&dt=Online%20sports%20betting%20at%201xBet.%20Norway%20%E1%90%89%201xlite-178009.top&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.optimize_id=GTM-5R4MT54&tfd=17654
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintC1:58:7C:BF:5A:61:79:08:CB:C2:00:63:60:07:86:BD:EA:0A:45:8A
ValidityMon, 20 Nov 2023 08:02:50 GMT - Mon, 12 Feb 2024 08:02:49 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-7JGWL9SV66>m=45je3bt0v897130004&_p=1703678660982&_gaz=1&gcd=11l1l1l1l1&dma_cps=sypham&dma=1&cid=707001506.1703678661&ul=en-us&sr=1280x1024&_s=1&sid=1703678661&sct=1&seg=0&dl=https%3A%2F%2F1xlite-178009.top%2Fen%3Ftag%3Dd_1106375m_28715c_%255B%255DMS%255B%255Dnull%255B%255Dnull%255B%255Dgeneral%255B%255De7e3ef5a_d49774_l64530_clickunder&dt=Online%20sports%20betting%20at%201xBet.%20Norway%20%E1%90%89%201xlite-178009.top&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.optimize_id=GTM-5R4MT54&tfd=17654 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-178009.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://1xlite-178009.top
date: Wed, 27 Dec 2023 12:10:17 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET 1xlite-178009.top/service-api/LineFeed/GetSportsShortZip?lng=en&country=137&virtualSports=true&gr=285&groupChamps=true
200 OK 1.8 kB URL GET HTTP/2 1xlite-178009.top/service-api/LineFeed/GetSportsShortZip?lng=en&country=137&virtualSports=true&gr=285&groupChamps=true
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
Hash 0884593fecb20f6e8b03e5075dad52d0
f743472a71f542b560da62b972e5b0a0c61586cf
98f834792bde2b23de75704e45808b0e164451fc8f7feb8962ec265a57f1ab4c
GET /service-api/LineFeed/GetSportsShortZip?lng=en&country=137&virtualSports=true&gr=285&groupChamps=true HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280; che_g=0a028994-a8e4-5db4-94e5-204ecb9787d7; _glhf=1703696780; sh.session.id=b2a3a2a3-5e04-41cd-8156-49285a694ef5; ggru=209; _ga_7JGWL9SV66=GS1.1.1703678661.1.0.1703678661.60.0.0; _ga=GA1.1.707001506.1703678661
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:17 GMT
content-type: application/json; charset=utf-8
content-length: 1764
cache-control: public, max-age=5
content-encoding: br
last-modified: Wed, 27 Dec 2023 12:10:17 GMT
vary: Accept-Encoding
x-time-ng: 0.038
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.065
X-Firefox-Spdy: h2
GET 1xlite-178009.top/service-api/LiveFeed/GetSportsShortZip?lng=en&gr=285&country=137&virtualSports=true&groupChamps=true
2.7 kB URL GET 1xlite-178009.top/service-api/LiveFeed/GetSportsShortZip?lng=en&gr=285&country=137&virtualSports=true&groupChamps=true
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
Hash 3b8046dbc710be3073b9851009e1c3bd
883e15d07efacbdae22ff1e52c588759ee268d8a
f541f864df7fe002636284ad5a525b54fe339a0abb11544d03e8cc0e53a6da49
GET /service-api/LiveFeed/GetSportsShortZip?lng=en&gr=285&country=137&virtualSports=true&groupChamps=true HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280; che_g=0a028994-a8e4-5db4-94e5-204ecb9787d7; _glhf=1703696780; sh.session.id=b2a3a2a3-5e04-41cd-8156-49285a694ef5; ggru=209; _ga_7JGWL9SV66=GS1.1.1703678661.1.0.1703678661.60.0.0; _ga=GA1.1.707001506.1703678661
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:17 GMT
content-type: application/json; charset=utf-8
content-length: 2708
cache-control: public, max-age=5
content-encoding: br
last-modified: Wed, 27 Dec 2023 12:10:12 GMT
vary: Accept-Encoding
x-time-ng: 0.008
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=
X-Firefox-Spdy: h2
GET widget.suphelper.top/
200 OK 90 kB IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerGoogle Trust Services LLC
Subjectsuphelper.top
Fingerprint1C:D4:4C:1C:DB:7D:59:7D:EE:39:59:B9:F7:76:9F:87:4C:EA:5E:01
ValidityWed, 29 Nov 2023 10:21:51 GMT - Tue, 27 Feb 2024 10:21:50 GMT
File type gzip compressed data, from Unix
Hash 16b22e3fcb2836a969f8cfc9fee20f45
7f0f94726f0e8df6d1118e5792682b53a81e2486
f5d00abfd27c24fab81f21dd56bb6d0189b3c6d2f5d2bc7b5da59bfffa9d96a4
GET / HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Wed, 27 Dec 2023 12:10:06 GMT
content-type: text/html; charset=utf-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=60, stale-while-revalidate=30
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 83c1755f68e056c1-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
GET 1xlite-178009.top/service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true
200 OK 11 kB URL GET HTTP/2 1xlite-178009.top/service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
Hash 00fd4e4f026ca77defe425a431d4c488
84d1a00fee3c72d0316d41eeafcc319121acec3a
0e0e573a0a5732193211d94c9733975d5152fcbd124d757343128b3a9af544ab
GET /service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280; che_g=0a028994-a8e4-5db4-94e5-204ecb9787d7; _glhf=1703696780; sh.session.id=b2a3a2a3-5e04-41cd-8156-49285a694ef5; ggru=209; _ga_7JGWL9SV66=GS1.1.1703678661.1.0.1703678661.60.0.0; _ga=GA1.1.707001506.1703678661
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:20 GMT
content-type: application/json; charset=utf-8
content-length: 10662
cache-control: public, max-age=5
content-encoding: br
last-modified: Wed, 27 Dec 2023 12:10:15 GMT
vary: Accept-Encoding
x-time-ng: 0.017
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=
X-Firefox-Spdy: h2
GET 1xlite-178009.top/service-api/LiveFeed/GetSportsShortZip?lng=en&gr=285&country=137&virtualSports=true&groupChamps=true
2.7 kB URL GET 1xlite-178009.top/service-api/LiveFeed/GetSportsShortZip?lng=en&gr=285&country=137&virtualSports=true&groupChamps=true
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
Hash aa1ade80bbb9580ccb9b548be795a180
4fb767d877496279baa7f8124725943e42c9decc
a113875c1e0543f72a1095707c5396842ed7fe0537d2462462c56daa66a54041
GET /service-api/LiveFeed/GetSportsShortZip?lng=en&gr=285&country=137&virtualSports=true&groupChamps=true HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280; che_g=0a028994-a8e4-5db4-94e5-204ecb9787d7; _glhf=1703696780; sh.session.id=b2a3a2a3-5e04-41cd-8156-49285a694ef5; ggru=209; _ga_7JGWL9SV66=GS1.1.1703678661.1.0.1703678661.60.0.0; _ga=GA1.1.707001506.1703678661
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:23 GMT
content-type: application/json; charset=utf-8
content-length: 2702
cache-control: public, max-age=5
content-encoding: br
last-modified: Wed, 27 Dec 2023 12:10:23 GMT
vary: Accept-Encoding
x-time-ng: 0.025
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.056
X-Firefox-Spdy: h2
82 kB URL v3.traincdn.com/genfiles/cms/1/desktop/banner/8c83a62ae8afe0aa371618f02b8e4a01.jpg
IP
ASN #58286 Electric-IT Business S.R.L.
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JPEG image data, progressive, precision 8, 1380x248, components 3
Hash ad5f0025317357d48209be53322c4854
c95715c6077d270ab0d901fa43184565216d6177
e7d3aa1ad1cf16bb24ada1e8ab541fbd94aa6196e7f98e50b244c70b0d9b2204
GET /genfiles/cms/1/desktop/banner/8c83a62ae8afe0aa371618f02b8e4a01.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:24 GMT
content-type: image/jpeg
content-length: 81954
last-modified: Thu, 05 Oct 2023 10:29:43 GMT
etag: "ad5f0025317357d48209be53322c4854"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
x-cached-since: 2023-12-18T09:26:31+00:00
traceparent: 00-05d16397a14c5fa685299506fa5b704f-40f57afcf9ea5dbf-01
x-id: osix-hw-edge-gc4
cache: HIT, REVALIDATED
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET 1xlite-178009.top/service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true
200 OK 10 kB URL GET HTTP/2 1xlite-178009.top/service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
Hash f2eb19b395d2fe38ee7d853ec998eea8
52344c2573a77fad2fbd38a67c9991dcb50e9287
8c700ef7582109c842a4771e31153c62f6f0c16076387b94bb89c8a035bdad85
GET /service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280; che_g=0a028994-a8e4-5db4-94e5-204ecb9787d7; _glhf=1703696780; sh.session.id=b2a3a2a3-5e04-41cd-8156-49285a694ef5; ggru=209; _ga_7JGWL9SV66=GS1.1.1703678661.1.0.1703678661.60.0.0; _ga=GA1.1.707001506.1703678661
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:26 GMT
content-type: application/json; charset=utf-8
content-length: 10244
cache-control: public, max-age=5
content-encoding: br
last-modified: Wed, 27 Dec 2023 12:10:26 GMT
vary: Accept-Encoding
x-time-ng: 0.020
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.050
X-Firefox-Spdy: h2
GET 1xlite-178009.top/service-api/LiveFeed/WebGetTopChampsZip?lng=en&gr=285&country=137
200 OK 65 B URL GET HTTP/2 1xlite-178009.top/service-api/LiveFeed/WebGetTopChampsZip?lng=en&gr=285&country=137
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
Hash a62a3d291c25728a06f15b4ee47d5e43
7613e665c8dd639f4f8b821f8337cc4629e3d942
1e2d5a52c362e3ab706e11a3ee2454024423019bd4976d4874df7681c7468b3c
GET /service-api/LiveFeed/WebGetTopChampsZip?lng=en&gr=285&country=137 HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280; che_g=0a028994-a8e4-5db4-94e5-204ecb9787d7; _glhf=1703696780; sh.session.id=b2a3a2a3-5e04-41cd-8156-49285a694ef5; ggru=209; _ga_7JGWL9SV66=GS1.1.1703678661.1.0.1703678661.60.0.0; _ga=GA1.1.707001506.1703678661
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:26 GMT
content-type: application/json; charset=utf-8
content-length: 65
cache-control: no-cache
content-encoding: br
last-modified: Wed, 27 Dec 2023 12:10:26 GMT
vary: Accept-Encoding
x-time-ng: 0.008
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.037
X-Firefox-Spdy: h2
GET 1xlite-178009.top/service-api/LineFeed/GetSportsShortZip?lng=en&country=137&virtualSports=true&gr=285&groupChamps=true
200 OK 1.8 kB URL GET HTTP/2 1xlite-178009.top/service-api/LineFeed/GetSportsShortZip?lng=en&country=137&virtualSports=true&gr=285&groupChamps=true
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
Hash 342f2a123739702ee6aa07d956ebbcc3
dedfbff3ab1e7baa7f14ec26edf56d25f00560a0
a9d041acbc0b673a2b7cba4d8fe9bcf72a20615627cb593c81e7d89cb3c3f7c7
GET /service-api/LineFeed/GetSportsShortZip?lng=en&country=137&virtualSports=true&gr=285&groupChamps=true HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280; che_g=0a028994-a8e4-5db4-94e5-204ecb9787d7; _glhf=1703696780; sh.session.id=b2a3a2a3-5e04-41cd-8156-49285a694ef5; ggru=209; _ga_7JGWL9SV66=GS1.1.1703678661.1.0.1703678661.60.0.0; _ga=GA1.1.707001506.1703678661
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:28 GMT
content-type: application/json; charset=utf-8
content-length: 1767
cache-control: public, max-age=5
content-encoding: br
last-modified: Wed, 27 Dec 2023 12:10:27 GMT
vary: Accept-Encoding
x-time-ng: 0.069
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.096
X-Firefox-Spdy: h2
GET 1xlite-178009.top/service-api/LiveFeed/GetSportsShortZip?lng=en&gr=285&country=137&virtualSports=true&groupChamps=true
2.7 kB URL GET 1xlite-178009.top/service-api/LiveFeed/GetSportsShortZip?lng=en&gr=285&country=137&virtualSports=true&groupChamps=true
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
Hash aa1ade80bbb9580ccb9b548be795a180
4fb767d877496279baa7f8124725943e42c9decc
a113875c1e0543f72a1095707c5396842ed7fe0537d2462462c56daa66a54041
GET /service-api/LiveFeed/GetSportsShortZip?lng=en&gr=285&country=137&virtualSports=true&groupChamps=true HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280; che_g=0a028994-a8e4-5db4-94e5-204ecb9787d7; _glhf=1703696780; sh.session.id=b2a3a2a3-5e04-41cd-8156-49285a694ef5; ggru=209; _ga_7JGWL9SV66=GS1.1.1703678661.1.0.1703678661.60.0.0; _ga=GA1.1.707001506.1703678661
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:28 GMT
content-type: application/json; charset=utf-8
content-length: 2702
cache-control: public, max-age=5
content-encoding: br
last-modified: Wed, 27 Dec 2023 12:10:23 GMT
vary: Accept-Encoding
x-time-ng: 0.025
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=
X-Firefox-Spdy: h2
GET 1xlite-178009.top/service-api/LiveFeed/GetTopGamesStatZip?lng=en&antisports=66
200 OK 2.6 kB URL GET HTTP/2 1xlite-178009.top/service-api/LiveFeed/GetTopGamesStatZip?lng=en&antisports=66
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
Hash ac1d636b555328214f7aa24b61b86337
c275446210395626f272b3066919f72c648585d6
a8321f728294a33fd713435dab6fa914acc47bf27575af10713e955bb402f195
GET /service-api/LiveFeed/GetTopGamesStatZip?lng=en&antisports=66 HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280; che_g=0a028994-a8e4-5db4-94e5-204ecb9787d7; _glhf=1703696780; sh.session.id=b2a3a2a3-5e04-41cd-8156-49285a694ef5; ggru=209; _ga_7JGWL9SV66=GS1.1.1703678661.1.0.1703678661.60.0.0; _ga=GA1.1.707001506.1703678661
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:29 GMT
content-type: application/json; charset=utf-8
content-length: 2611
cache-control: public, max-age=5
content-encoding: br
last-modified: Wed, 27 Dec 2023 12:10:29 GMT
vary: Accept-Encoding
x-time-ng: 0.004
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.031
X-Firefox-Spdy: h2
132 kB URL v3.traincdn.com/genfiles/cms/1/desktop/banner/48c55a46abd5ab116e797f7903d61d9a.jpg
IP
ASN #58286 Electric-IT Business S.R.L.
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1380x248, components 3
Size 132 kB (131536 bytes)
Hash 1ef98c36c93971dbb74108bae21d6878
edfa1fd1828fc2ae49c730086cddbe18ec4c0c53
c38329c0460fbb6b192d45377ea117869393426b51058c2c61f1f33356468527
GET /genfiles/cms/1/desktop/banner/48c55a46abd5ab116e797f7903d61d9a.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:29 GMT
content-type: image/jpeg
content-length: 131536
last-modified: Wed, 06 Sep 2023 13:13:57 GMT
etag: "1ef98c36c93971dbb74108bae21d6878"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
x-cached-since: 2023-12-18T09:34:12+00:00
traceparent: 00-fbbf82079cc4955b3cc577cedb5e7af5-59d408de34a0be6d-01
x-id: osix-hw-edge-gc4
cache: HIT, REVALIDATED
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/c72f44a013e5c4c1496f952ec2d309f1.webp
200 OK 826 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/c72f44a013e5c4c1496f952ec2d309f1.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash d7ca296e2060f9a0cbac5109f11b9164
bfc2d7eb9f0d394fead836379712f9e5cdc63669
556d698f0955c2352127af88c2d37e59557afc3d345b824d40274f9a53e4651d
GET /resized/size16/sfiles/logo_teams/c72f44a013e5c4c1496f952ec2d309f1.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:05 GMT
content-type: image/webp
content-length: 826
cache-control: max-age=94608000
content-disposition: inline; filename="c72f44a013e5c4c1496f952ec2d309f1.webp"
content-security-policy: script-src 'none'
expires: Fri, 25 Dec 2026 03:55:54 GMT
x-request-id: a5a9c890238093c99766ae3fd8107dc5
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-db37291d923b2a509a5638babd5c415d-28ef142553185e90-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-26T03:55:54+00:00, 2023-12-26T20:14:06+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/css/1a11af87.css
200 OK 23 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/1a11af87.css
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (22807), with no line terminators
Hash 9bfda766c8c97ddc33c999e0cd8d979b
4a95f381d17a6344edb5705a4f6f3e61edf44383
b40a0c753ebeab4e8b66f0d3054acf317c4e473353eaefb4bac3f762d50c2b6a
GET /_nuxt/desktop/default/css/1a11af87.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:03 GMT
content-type: text/css
content-length: 2977
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-ba1"
content-encoding: gzip
expires: Thu, 28 Dec 2023 07:55:06 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-da6e53bfc0bd5366416cf5e77391b4b2-202e99db3c2879b6-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T07:55:06+00:00, 2023-12-27T09:01:29+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET 1xlite-178009.top/taxservice-api/api/external/Web/v1/GetTax?ref=1&gr=285&country=137&lng=en¤cy=63&betSum=200&cf=0&taxMode=0
200 OK 2 B URL GET HTTP/2 1xlite-178009.top/taxservice-api/api/external/Web/v1/GetTax?ref=1&gr=285&country=137&lng=en¤cy=63&betSum=200&cf=0&taxMode=0
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
GET /taxservice-api/api/external/Web/v1/GetTax?ref=1&gr=285&country=137&lng=en¤cy=63&betSum=200&cf=0&taxMode=0 HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280; che_g=0a028994-a8e4-5db4-94e5-204ecb9787d7; _glhf=1703696780; sh.session.id=b2a3a2a3-5e04-41cd-8156-49285a694ef5; ggru=209
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:06 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
api-supported-versions: 1.0
content-encoding: br
x-time-ng: 0.002
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.027
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/d492a42605a349cd2cd2cce02c080fdd.webp
200 OK 818 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/d492a42605a349cd2cd2cce02c080fdd.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash 69db6cbe2cc104890869d6dc4653e791
22aeb6ff71a985234596eae2a14f34286dbf7429
0cb5324b60575704e1397daca4c80a41f7a154856f41cfc6f0b7ef6e63bd29ea
GET /resized/size16/sfiles/logo_teams/d492a42605a349cd2cd2cce02c080fdd.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:09 GMT
content-type: image/webp
content-length: 818
cache-control: max-age=94608000
content-disposition: inline; filename="d492a42605a349cd2cd2cce02c080fdd.webp"
content-security-policy: script-src 'none'
expires: Thu, 17 Dec 2026 14:06:31 GMT
x-request-id: 1229cada469a998af54a396565e68ca4
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.041
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-b2bc5a5d4ac324b619e738e6280e6e37-0fd835649f59e2b7-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-18T14:06:31+00:00, 2023-12-27T00:25:47+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
POST 1xlite-178009.top/web-api/mobile
200 OK 816 B URL POST HTTP/2 1xlite-178009.top/web-api/mobile
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
File type troff or preprocessor input, ASCII text, with very long lines (848), with no line terminators
Hash f926438225f87effa49ebc7a926b4f05
ccf8dcac7efedc12f630d281efa78dc2783aa989
3aeaf4c95b7e2fba15927d2e15e5eeb71217c703efc7d9451bb297bb035b6c34
POST /web-api/mobile HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
Origin: https://1xlite-178009.top
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280; che_g=0a028994-a8e4-5db4-94e5-204ecb9787d7; _glhf=1703696780; sh.session.id=b2a3a2a3-5e04-41cd-8156-49285a694ef5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:06 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: br
server-timing: p;dur=20, dt_total;dur=21.639, wf-uht;dur=0.072
vary: Accept-Encoding
x-dt: 285
x-time-ng: 0.022
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-icons/1.0.243/285/logos.svg
200 OK 36 kB URL GET HTTP/2 v3.traincdn.com/sys-icons/1.0.243/285/logos.svg
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image
Hash 1e557f543e81e034dfb2d3a97c252d4d
ab3ec610244323f26c754a8fcb290f5ea781223f
616e9d96e9da990115ed5edbd6b6f621db743494a41efc794f1a1e26a2a256e0
GET /sys-icons/1.0.243/285/logos.svg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-178009.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:06 GMT
content-type: image/svg+xml
last-modified: Tue, 26 Dec 2023 12:42:38 GMT
etag: W/"1e557f543e81e034dfb2d3a97c252d4d"
x-amz-meta-mtime: 1703594556.971779013
content-encoding: gzip
expires: Wed, 27 Dec 2023 16:11:56 GMT
cache-control: max-age=86400
x-time-ng: 0.003
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-b640808257088c7b65b3e88b332da43b-86cdaf119625329d-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-26T16:11:56+00:00, 2023-12-26T16:19:02+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET 1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
200 OK 830 kB URL User Request GET HTTP/2 1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
IP
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
Size 830 kB (829577 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:00 GMT
content-type: text/html; charset=utf-8
cache-control: no-cache
content-encoding: br
server-timing: total;dur=988;desc="Nuxt Server Time", dt_total;dur=1022.725, wf-uht;dur=1.120
set-cookie: platform_type=desktop; Path=/; Expires=Sat, 30 Dec 2023 12:09:59 GMT
lng=en; Path=/
cookies_agree_type=3; Path=/
tzo=1; Path=/
is12h=0; Path=/
referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; Path=/; Expires=Sun, 25 Feb 2024 12:09:59 GMT
reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; Path=/; Expires=Wed, 27 Dec 2023 13:09:59 GMT
postback_watcher=; Path=/; Expires=Wed, 27 Dec 2023 12:10:03 GMT
auid=sv0cMmWMFBha5JxQAwM3Ag==; path=/; secure; httponly; samesite=lax
vary: Accept-Encoding
x-dt: 285
x-frame-options: SAMEORIGIN
x-time-ng: 1.016
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
GET radar.cedexis.com/1/23802/radar.js
302 Moved Temporarily 390 B URL GET HTTP/1.1 radar.cedexis.com/1/23802/radar.js
IP
ASN #63911 NetActuate, Inc
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerDigiCert Inc
Subjectradar.cedexis.com
FingerprintC7:F6:9F:14:BA:D6:F0:96:22:D1:BD:25:43:8B:10:66:C3:B4:7C:56
ValidityWed, 26 Apr 2023 00:00:00 GMT - Thu, 25 Apr 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/23802/radar.js HTTP/1.1
Host: radar.cedexis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Wed, 27 Dec 2023 12:10:16 GMT
Content-Type: text/html
Content-Length: 154
Connection: keep-alive
Location: /1621860284/stub.js
Expires: Wed, 27 Dec 2023 12:20:16 GMT
Cache-Control: max-age=600
Vary: User-Agent,DNT
GET v3.traincdn.com/genfiles/cms/pg/default/images/548a34b4562689cfb30cafaf70f07c9b.svg
200 OK 2.6 kB URL GET HTTP/2 v3.traincdn.com/genfiles/cms/pg/default/images/548a34b4562689cfb30cafaf70f07c9b.svg
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image
Hash 445b381c98653a7bc472dd2692b2d6d3
89e55175f010f21c68bfd211534702679223fbfc
81b0ba29774c2a326a1525e230d933495aa4ad3f944ed05e0e0eb60e0ccccccf
GET /genfiles/cms/pg/default/images/548a34b4562689cfb30cafaf70f07c9b.svg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:03 GMT
content-type: image/svg+xml
last-modified: Thu, 30 Nov 2023 14:01:19 GMT
etag: W/"61833bbdb33e69864e296d79abcd3f95"
content-encoding: gzip
x-time-ng: 0.002
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
x-cached-since: 2023-12-19T12:35:59+00:00
traceparent: 00-a914f39b40fe424fbffe446f0ba1e07f-42586a9d60b6a087-01
x-id: osix-hw-edge-gc4
cache: HIT, REVALIDATED
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/css/186f3e6d.css
200 OK 5.0 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/186f3e6d.css
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (5039), with no line terminators
Hash f23976a7e6b94a6b9a39b1199f401039
15c52c1527ad6ee131da6ece1337959282d1b047
eb5264353672aa3fed86cc552546081b54d3cb72f0aacac5fbb48ebb4f1c5712
GET /_nuxt/desktop/default/css/186f3e6d.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:10 GMT
content-type: text/css
content-length: 1023
last-modified: Tue, 26 Dec 2023 12:38:33 GMT
etag: "658ac949-3ff"
content-encoding: gzip
expires: Wed, 27 Dec 2023 13:28:00 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-82b4ceab4530d8f05f86a2f43a4da6f7-86c9d30298c0f9e9-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-26T13:28:00+00:00, 2023-12-27T10:35:43+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1/desktop/banner/d94c9b1508a286d270c77946ff0972fa.jpg
200 OK 51 kB URL GET HTTP/2 v3.traincdn.com/genfiles/cms/1/desktop/banner/d94c9b1508a286d270c77946ff0972fa.jpg
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1380x248, components 3
Hash 15b1bda7b31ccc5eacce67afbe6f160b
d41eac3583bb0495a008b0d1e4a584d103feb436
2e1b52936d0c7081d46010cd49e236aed8cefc16adad7c908c108aff4a73718d
GET /genfiles/cms/1/desktop/banner/d94c9b1508a286d270c77946ff0972fa.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:08 GMT
content-type: image/jpeg
content-length: 51087
last-modified: Tue, 11 Apr 2023 18:15:30 GMT
etag: "15b1bda7b31ccc5eacce67afbe6f160b"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-6217c6c281c7a5ae19263accf3581c2a-d33430986163fdcf-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-18T08:23:51+00:00, 2023-12-27T11:10:43+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET 1xlite-178009.top/session-api/sessions/user
200 OK 16 B URL GET HTTP/2 1xlite-178009.top/session-api/sessions/user
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash e859dc444ba1b16d61fc7ef4d49f6221
74b64b844cd3ee1f6f10af45d48f903d19eb5de8
463f5d8eda71b0f5a5e583250b44d7c0d2b5bb5a85621310f05d3c3e8b2e94e6
GET /session-api/sessions/user HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:03 GMT
content-type: application/json
content-length: 16
cache-control: no-cache, private
x-time-ng: 0.003
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: p;dur=1.2960433959961, wf-uht;dur=0.030
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/3083a20a3f73c30fce38710d7ada9cbb.svg
200 OK 1.2 kB URL GET HTTP/2 v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/3083a20a3f73c30fce38710d7ada9cbb.svg
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image
Hash 1ff133ab01d208b0d686dd88d85e239a
86a0501b79a1c553eadc829177a9e6ffff1948be
9ac21c63d1c8b7abe4c94550a731baff995d34c745c1d08fdf8d5e5c8de268f1
GET /genfiles/cms/1-285/desktop/media_asset/3083a20a3f73c30fce38710d7ada9cbb.svg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:06 GMT
content-type: image/svg+xml
last-modified: Wed, 19 Apr 2023 11:51:30 GMT
etag: W/"3ae81b002dca46d3b732ce3e03ae35c6"
content-encoding: gzip
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-e46b86720a965df209eeb9a2c00673d5-c4c9e3fd4c203d53-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-18T08:36:11+00:00, 2023-12-27T12:01:10+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET widget.suphelper.top/_next/static/chunks/framework-49f1e091cbf6b261.js
200 OK 141 kB URL GET HTTP/2 widget.suphelper.top/_next/static/chunks/framework-49f1e091cbf6b261.js
IP
Requested by https://widget.suphelper.top/
Certificate IssuerGoogle Trust Services LLC
Subjectsuphelper.top
Fingerprint1C:D4:4C:1C:DB:7D:59:7D:EE:39:59:B9:F7:76:9F:87:4C:EA:5E:01
ValidityWed, 29 Nov 2023 10:21:51 GMT - Tue, 27 Feb 2024 10:21:50 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 141 kB (140949 bytes)
Hash 896d1930437c1ab92b8a359c1d6fdaae
71e0e23d1af9722f356eb5d1c497d100ec8b0f7a
8c508636d885890bfb5c56bcd6dad1b8b64c498781d351b588a8de7f686774d4
GET /_next/static/chunks/framework-49f1e091cbf6b261.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Dec 2023 12:10:06 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=31536000
last-modified: Thu, 02 Nov 2023 12:45:49 GMT
etag: W/"22695-18b9011853a"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 3053595
expires: Thu, 26 Dec 2024 12:10:06 GMT
server: cloudflare
cf-ray: 83c1756089d456c1-OSL
X-Firefox-Spdy: h2
GET 1xlite-178009.top/genfiles/cms/maintenance_mode/settings.json?timestamp=1703678649807
200 OK 145 B URL GET HTTP/2 1xlite-178009.top/genfiles/cms/maintenance_mode/settings.json?timestamp=1703678649807
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash ac395c4915b35ad1b345b6200c93bb06
eeecbd82c13f7e1ccf3c06d8a1851cbc99b59111
780534d853f347be058fd06c6bfe33c154117302f6bca2ba674618dab7470bf1
GET /genfiles/cms/maintenance_mode/settings.json?timestamp=1703678649807 HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280; che_g=0a028994-a8e4-5db4-94e5-204ecb9787d7; _glhf=1703696780
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:05 GMT
content-type: application/json
content-length: 145
last-modified: Tue, 11 Apr 2023 22:54:53 GMT
etag: "0ba0d31eb708662ea0084322503447f5"
x-time-ng: 0.001
cache-control: public,max-age=60,s-maxage=60
accept-ranges: bytes
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.029
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1/desktop/banner/d94c9b1508a286d270c77946ff0972fa.jpg
0 B URL GET v3.traincdn.com/genfiles/cms/1/desktop/banner/d94c9b1508a286d270c77946ff0972fa.jpg
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /genfiles/cms/1/desktop/banner/d94c9b1508a286d270c77946ff0972fa.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
GET v3.traincdn.com/_nuxt/desktop/default/vendors/Registration.Fields-8e4af6e9.js
200 OK 39 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/Registration.Fields-8e4af6e9.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (38939), with no line terminators
Hash 58a1812be5c774640fe4c2505ea52493
68714dd8ae4b3b47f1b0f7d2c2152e2d8e74f797
23a5a2cb3d70feb09acfdafca1f82aec6b6cc660eb3b8bf3291983cd0fb07b0b
GET /_nuxt/desktop/default/vendors/Registration.Fields-8e4af6e9.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:10 GMT
content-type: application/javascript; charset=utf-8
content-length: 8668
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-21dc"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:46 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-791c7fcfc2d0536a1a1c160eba293861-561fa6d0dadfe329-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:46+00:00, 2023-12-27T09:16:51+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET 1xlite-178009.top/web-api/api/web/v1/config/actualDomain
200 OK 269 B URL GET HTTP/2 1xlite-178009.top/web-api/api/web/v1/config/actualDomain
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
File type ASCII text, with very long lines (309), with no line terminators
Hash ad71145387e940e11bb02d0cef72f266
04c2bc7333105601366f1f4a4ff23bcf69aa7ae4
51f36923a7a2405b27c3916a69fb9a824662d27d13bd47d5554d00e1ea948288
GET /web-api/api/web/v1/config/actualDomain HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:03 GMT
content-type: application/vnd.api+json
vary: Accept-Encoding
cache-control: no-cache, private
server-timing: p;dur=17, dt_total;dur=18.481, wf-uht;dur=0.050
set-cookie: SESSION=19327d246dcb4dd2ead3f10863197983; path=/; secure; HttpOnly; SameSite=Lax
ua=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
x-dt: 285
x-time-ng: 0.018
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
GET 1xlite-178009.top/web-api/external-api/v3/banners?project_id=285&country_code=NO&language=en&platform=2§ion=6&is_auth=false&limit=100
200 OK 25 kB URL GET HTTP/2 1xlite-178009.top/web-api/external-api/v3/banners?project_id=285&country_code=NO&language=en&platform=2§ion=6&is_auth=false&limit=100
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /web-api/external-api/v3/banners?project_id=285&country_code=NO&language=en&platform=2§ion=6&is_auth=false&limit=100 HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280; che_g=0a028994-a8e4-5db4-94e5-204ecb9787d7; _glhf=1703696780; sh.session.id=b2a3a2a3-5e04-41cd-8156-49285a694ef5
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:06 GMT
content-type: application/vnd.api+json
vary: Accept-Encoding
cache-control: no-cache, private
server-timing: p;dur=92, dt_total;dur=93.413, wf-uht;dur=0.127
x-dt: 285
x-time-ng: 0.094
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1/desktop/banner/d48a58d24779216feede0dbac51d648c.jpg
200 OK 146 kB URL GET HTTP/2 v3.traincdn.com/genfiles/cms/1/desktop/banner/d48a58d24779216feede0dbac51d648c.jpg
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], progressive, precision 8, 1380x248, components 3
Size 146 kB (146095 bytes)
Hash afa3da90fad69859f3c0aba8841ff406
0b5bd000ae42b0be32eca7e2c3e1f6bf385944f2
0d32e02a696b4e3595ec9540394bd045f5d85c971ead8ab6c71c753cd58c6d63
GET /genfiles/cms/1/desktop/banner/d48a58d24779216feede0dbac51d648c.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:08 GMT
content-type: image/jpeg
content-length: 146095
last-modified: Fri, 15 Dec 2023 04:23:23 GMT
etag: "afa3da90fad69859f3c0aba8841ff406"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-5bf1f80fac6c8365cb8fc4a281096c97-4fae5b15f0738a6a-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-18T08:33:20+00:00, 2023-12-27T11:43:53+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET widget.suphelper.top/_next/static/chunks/pages/index-b7d46b0d02cf400d.js
200 OK 112 kB URL GET HTTP/2 widget.suphelper.top/_next/static/chunks/pages/index-b7d46b0d02cf400d.js
IP
Requested by https://widget.suphelper.top/
Certificate IssuerGoogle Trust Services LLC
Subjectsuphelper.top
Fingerprint1C:D4:4C:1C:DB:7D:59:7D:EE:39:59:B9:F7:76:9F:87:4C:EA:5E:01
ValidityWed, 29 Nov 2023 10:21:51 GMT - Tue, 27 Feb 2024 10:21:50 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 112 kB (112321 bytes)
Hash e244696c9d4560de7ac48bfa5c74bb1f
e6b079de13fb0dfb215a4c8a7b942a7783e1be45
dbea852a59ec7f82e0dc6af05016aa715224fda48873a6510a18b949aaaad2ee
GET /_next/static/chunks/pages/index-b7d46b0d02cf400d.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Dec 2023 12:10:06 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=31536000
last-modified: Fri, 15 Dec 2023 06:10:19 GMT
etag: W/"1b6c1-18c6c18e241"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 1058024
expires: Thu, 26 Dec 2024 12:10:06 GMT
server: cloudflare
cf-ray: 83c1756099f156c1-OSL
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1/desktop/banner/bf26d696b76130d9781b16f89f1de4cc.jpg
200 OK 147 kB URL GET HTTP/2 v3.traincdn.com/genfiles/cms/1/desktop/banner/bf26d696b76130d9781b16f89f1de4cc.jpg
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, progressive, precision 8, 1380x248, components 3
Size 147 kB (147402 bytes)
Hash 9d1ab102184100544b4a72fcc6a8c458
79a64d17a182311cf4f856e39c83e3d9c5b1e55b
0fd0800599423b6bc4c2fe90c96f0025f4dd0d13d0c4b535e9421e21049a0903
GET /genfiles/cms/1/desktop/banner/bf26d696b76130d9781b16f89f1de4cc.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:08 GMT
content-type: image/jpeg
content-length: 147402
last-modified: Tue, 11 Apr 2023 18:15:17 GMT
etag: "9d1ab102184100544b4a72fcc6a8c458"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-8e3815b881ca9b1b9fa351d9ec47850c-440b5946b7193786-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-18T09:06:31+00:00, 2023-12-27T11:10:43+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/sfiles/logo-champ/bbdc92e5dea8062853830063850d365f.webp
200 OK 3.6 kB URL GET HTTP/2 v3.traincdn.com/sfiles/logo-champ/bbdc92e5dea8062853830063850d365f.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash 65351657520f477032d4f1cc52098142
e3d2cf2efea3ab4389cbda407a1b1f5a2d781ab7
57dd50f1280758f5ca2e626d8f0b2d74b253832d98033f35f04c4831c46a8e9b
GET /sfiles/logo-champ/bbdc92e5dea8062853830063850d365f.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:10 GMT
content-type: image/webp
content-length: 3606
last-modified: Wed, 06 Dec 2023 08:21:18 GMT
etag: "65351657520f477032d4f1cc52098142"
cache-control: public, max-age=86400, public
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-9f14b25e9da9f7d103c2fd609717cb79-1f3df3cb1eb6c3cd-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-25T10:13:28+00:00, 2023-12-27T08:39:05+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET widget.suphelper.top/_next/static/chunks/main-fa1d3b21fd97b583.js
200 OK 108 kB URL GET HTTP/2 widget.suphelper.top/_next/static/chunks/main-fa1d3b21fd97b583.js
IP
Requested by https://widget.suphelper.top/
Certificate IssuerGoogle Trust Services LLC
Subjectsuphelper.top
Fingerprint1C:D4:4C:1C:DB:7D:59:7D:EE:39:59:B9:F7:76:9F:87:4C:EA:5E:01
ValidityWed, 29 Nov 2023 10:21:51 GMT - Tue, 27 Feb 2024 10:21:50 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 108 kB (107844 bytes)
Hash 83680ce862de40c43fc92e04b1ad0a3d
67eb6762545f4e1fee446794f4738d0f0577b6b4
e70f39978f08895aef6849daf891af65bff03e476eb9b1384dfb36cd4ac9fe75
GET /_next/static/chunks/main-fa1d3b21fd97b583.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Dec 2023 12:10:06 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://file-hosting-api-stage.kube.prod.cons.lan https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=31536000
last-modified: Thu, 09 Nov 2023 06:03:45 GMT
etag: W/"1a544-18bb2adf0eb"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 2962473
expires: Thu, 26 Dec 2024 12:10:06 GMT
server: cloudflare
cf-ray: 83c1756089d556c1-OSL
X-Firefox-Spdy: h2
GET 1xlite-178009.top/web-api/default/img/icons/pixels2.svg?v=1703678650
200 OK 90 B URL GET HTTP/2 1xlite-178009.top/web-api/default/img/icons/pixels2.svg?v=1703678650
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
File type PNG image data, 1 x 1, 8-bit/color RGB, non-interlaced
Hash e45f90dcbe718dea3476c4b69b501a4e
e9af26a93c467a77e4733ec537f4f5ce7a4ba089
a439dd8761d9fd4ff88e82e83200877703594491065880dbd4e59ddf4ce1b204
GET /web-api/default/img/icons/pixels2.svg?v=1703678650 HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280; che_g=0a028994-a8e4-5db4-94e5-204ecb9787d7; _glhf=1703696780
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:06 GMT
content-type: image/png
cache-control: no-cache, private
server-timing: p;dur=15, dt_total;dur=23.841, wf-uht;dur=0.052
x-dt: 285
x-time-ng: 0.022
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_en_0.json
200 OK 14 kB URL GET HTTP/2 v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_en_0.json
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /genfiles/cms/betstemplates/bets_model_short_en_0.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/
Origin: https://1xlite-178009.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:08 GMT
content-type: application/json
last-modified: Tue, 19 Dec 2023 10:56:14 GMT
etag: W/"1a42feb977979da8bb1e4351ad1e941c"
content-encoding: gzip
x-time-ng: 0.001
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-49b3e5fc270003d6c0fcdf4c0068bc64-f7207be49353d085-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-19T11:16:53+00:00, 2023-12-27T11:42:57+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET 1xlite-178009.top/seo-module-api/api/public/v1/analytics-counters?url=https:%2F%2F1xlite-178009.top%2Fen&projectId=285
200 OK 72 B URL GET HTTP/2 1xlite-178009.top/seo-module-api/api/public/v1/analytics-counters?url=https:%2F%2F1xlite-178009.top%2Fen&projectId=285
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 7175e64cb7818432c35616b4737d54ef
e744e5969b836afc48d437272f0123408390508a
add108d292ed089bc2380a6743cb620a18fffdc30fa62dbd380c565d772afc21
GET /seo-module-api/api/public/v1/analytics-counters?url=https:%2F%2F1xlite-178009.top%2Fen&projectId=285 HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:03 GMT
content-type: application/json
content-length: 72
cache-control: max-age=1200, must-revalidate, public
x-request-id: 353d406c1847137c79a6f7162f369606
x-request-guid: 92cd52fa08cac1cff969cb64ec46a170
x-content-digest: ence9703551e00917684b735143455d1e7
age: 1003
x-time-ng: 0.004, 0.004
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: p;dur=9.8199844360352, wf-uht;dur=0.029
X-Firefox-Spdy: h2
GET 1xlite-178009.top/web-api/default/img/icons/pixels2.svg?v=1703678654
200 OK 90 B URL GET HTTP/2 1xlite-178009.top/web-api/default/img/icons/pixels2.svg?v=1703678654
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
File type PNG image data, 1 x 1, 8-bit/color RGB, non-interlaced
Hash e45f90dcbe718dea3476c4b69b501a4e
e9af26a93c467a77e4733ec537f4f5ce7a4ba089
a439dd8761d9fd4ff88e82e83200877703594491065880dbd4e59ddf4ce1b204
GET /web-api/default/img/icons/pixels2.svg?v=1703678654 HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280; che_g=0a028994-a8e4-5db4-94e5-204ecb9787d7; _glhf=1703696780; sh.session.id=b2a3a2a3-5e04-41cd-8156-49285a694ef5; ggru=209
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:10 GMT
content-type: image/png
cache-control: no-cache, private
server-timing: p;dur=15, dt_total;dur=19.014, wf-uht;dur=0.050
x-dt: 285
x-time-ng: 0.019
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
GET refpamjeql.top/L?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder&site=1106375&ad=28715
303 See Other 830 kB URL User Request GET HTTP/2 refpamjeql.top/L?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder&site=1106375&ad=28715
IP
Certificate IssuerLet's Encrypt
Subjectrefpamjeql.top
Fingerprint72:B5:CB:19:2E:C8:C5:C8:A9:6B:0A:A3:61:A4:05:4F:19:10:7F:51
ValidityMon, 23 Oct 2023 05:18:43 GMT - Sun, 21 Jan 2024 05:18:42 GMT
Size 830 kB (829577 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /L?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder&site=1106375&ad=28715 HTTP/1.1
Host: refpamjeql.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 303 See Other
server: nginx
date: Wed, 27 Dec 2023 12:09:59 GMT
cache-control: private
location: https://1xlite-178009.top:443/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
x-aspnetmvc-version: 5.0
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.006
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/c346bf2f6f47d197009101b382ecf663.webp
200 OK 800 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/c346bf2f6f47d197009101b382ecf663.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash ed7197212658f21782881ae59c9d3465
7d455d1f6d568d87eabc9cbc9c8fbae7bc168416
1f164c68eb36e3f9705da6fee07a78687c39087ea16a98900546f823c0b10298
GET /resized/size16/sfiles/logo_teams/c346bf2f6f47d197009101b382ecf663.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:09 GMT
content-type: image/webp
content-length: 800
cache-control: max-age=94608000
content-disposition: inline; filename="c346bf2f6f47d197009101b382ecf663.webp"
content-security-policy: script-src 'none'
expires: Fri, 25 Dec 2026 06:05:14 GMT
x-request-id: c167b19da052b1d7da3f6ec9af7c6a2c
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.056
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-c5b78a268888dfbdff0dffe8ab8c1f49-913505d644747a05-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-26T06:05:14+00:00, 2023-12-27T00:25:47+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/0191c6f6365533eb59ec1a26711a801a.svg
200 OK 4.4 kB URL GET HTTP/2 v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/0191c6f6365533eb59ec1a26711a801a.svg
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image
Hash c985aab86c06784cfd1842e7779ddfbf
a4cc4b76ce6a36f3b9f1086d61704b63fbadec05
fb19354c87b8ac9290703e153be9e169ee726a8453805f7958b3310fd2c934e6
GET /genfiles/cms/1-285/desktop/media_asset/0191c6f6365533eb59ec1a26711a801a.svg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:01 GMT
content-type: image/svg+xml
last-modified: Mon, 18 Dec 2023 14:19:04 GMT
etag: W/"f3f9d19dbeb655d6bad81e19818fe075"
content-encoding: gzip
x-time-ng: 0.114
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-793f0586c33c74bb24779ebde6899f20-dfffd8812415d764-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-23T09:33:07+00:00, 2023-12-27T11:38:08+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET widget.suphelper.top/_next/static/chunks/0c294a17-47e02e0897fc1e03.js
200 OK 9.8 kB URL GET HTTP/2 widget.suphelper.top/_next/static/chunks/0c294a17-47e02e0897fc1e03.js
IP
Requested by https://widget.suphelper.top/
Certificate IssuerGoogle Trust Services LLC
Subjectsuphelper.top
Fingerprint1C:D4:4C:1C:DB:7D:59:7D:EE:39:59:B9:F7:76:9F:87:4C:EA:5E:01
ValidityWed, 29 Nov 2023 10:21:51 GMT - Tue, 27 Feb 2024 10:21:50 GMT
File type troff or preprocessor input, ASCII text, with very long lines (10375), with no line terminators
Hash bd7ec2af6a070c99fb7714f553485d57
dd8f253197efd1b7e134a8264f23cebd93d3645d
08cba9072ecc88e4a67bba8f4a4ad54425db95d75dba53fc34531ccb8a91729e
GET /_next/static/chunks/0c294a17-47e02e0897fc1e03.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Dec 2023 12:10:06 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://file-hosting-api-stage.kube.prod.cons.lan https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=31536000
last-modified: Thu, 09 Nov 2023 06:03:45 GMT
etag: W/"266f-18bb2adf0eb"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 2605935
expires: Thu, 26 Dec 2024 12:10:06 GMT
server: cloudflare
cf-ray: 83c1756089d956c1-OSL
X-Firefox-Spdy: h2
GET widget.suphelper.top/_next/static/chunks/webpack-fb94d2f19425a3e3.js
200 OK 3.8 kB URL GET HTTP/2 widget.suphelper.top/_next/static/chunks/webpack-fb94d2f19425a3e3.js
IP
Requested by https://widget.suphelper.top/
Certificate IssuerGoogle Trust Services LLC
Subjectsuphelper.top
Fingerprint1C:D4:4C:1C:DB:7D:59:7D:EE:39:59:B9:F7:76:9F:87:4C:EA:5E:01
ValidityWed, 29 Nov 2023 10:21:51 GMT - Tue, 27 Feb 2024 10:21:50 GMT
File type ASCII text, with very long lines (3855), with no line terminators
Hash 7288e202ab8e4cf1b7f60eed709e0986
c10effeb29bf129a7c81688b9f3a7d5485272e87
56e695b4675b50d55a92f006109771a67da822050f5ae03fd2ad02c1a9565b58
GET /_next/static/chunks/webpack-fb94d2f19425a3e3.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Dec 2023 12:10:06 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://file-hosting-api-stage.kube.prod.cons.lan https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=31536000
last-modified: Thu, 09 Nov 2023 06:03:45 GMT
etag: W/"ed0-18bb2adf0eb"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 3053595
expires: Thu, 26 Dec 2024 12:10:06 GMT
server: cloudflare
cf-ray: 83c1756079cd56c1-OSL
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/css/87157126.css
200 OK 29 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/css/87157126.css
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (29106), with no line terminators
Hash 88f04b4383947c438684f121bec3f6db
3aa681f4cbc6b20d7b8cf7d70762986bf97367f4
acace29a567ecd051c72fdc0364016e906ffbf88d1270bacabbdedcfb1cd7b09
GET /_nuxt/desktop/default/css/87157126.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:04 GMT
content-type: text/css
content-length: 2659
last-modified: Wed, 27 Dec 2023 07:05:45 GMT
etag: "658bccc9-a63"
content-encoding: gzip
expires: Thu, 28 Dec 2023 08:53:55 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-387e2867a7414575f5869003a60b3437-9029232b866cba4b-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T08:53:55+00:00, 2023-12-27T10:09:53+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/vendors/conversion-cdc395d9.js
200 OK 172 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/vendors/conversion-cdc395d9.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
Size 172 kB (172180 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /_nuxt/desktop/default/vendors/conversion-cdc395d9.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:12 GMT
content-type: application/javascript; charset=utf-8
content-length: 59207
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-e747"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:53 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-98798ad23b54ae214436dfbd4c2d5973-887ce4e6171f2d6c-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:53+00:00, 2023-12-27T09:16:58+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET v3.traincdn.com/_nuxt/desktop/default/analytics-12727796.js
200 OK 4.2 kB URL GET HTTP/2 v3.traincdn.com/_nuxt/desktop/default/analytics-12727796.js
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type ASCII text, with very long lines (4308), with no line terminators
Hash e57c8ab0d788a0b7d3eff30b4193bdf7
39d628e9e2381ea5fef2426e3968a475c843a9e6
35dbc912116ad59cc0b34b6f0e34f793beba5d34b7df51be342b80b920ffd9d5
GET /_nuxt/desktop/default/analytics-12727796.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:16 GMT
content-type: application/javascript; charset=utf-8
content-length: 1554
last-modified: Wed, 27 Dec 2023 07:05:46 GMT
etag: "658bccca-612"
content-encoding: gzip
expires: Thu, 28 Dec 2023 09:13:51 GMT
cache-control: max-age=86400
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-de77c5bdfbc6241e0d363df5ffa764fd-38a93ca8af343a05-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-27T09:13:51+00:00, 2023-12-27T09:16:50+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET widget.suphelper.top/services/widget/v2/most-required?projectId=5b61b42ffdf00b25dc78f342&credentials=%7B%22$type%22:%22GuestCredentials%22,%22id%22:%22b2a3a2a3-5e04-41cd-8156-49285a694ef5%22%7D
200 OK 24 B URL GET HTTP/2 widget.suphelper.top/services/widget/v2/most-required?projectId=5b61b42ffdf00b25dc78f342&credentials=%7B%22$type%22:%22GuestCredentials%22,%22id%22:%22b2a3a2a3-5e04-41cd-8156-49285a694ef5%22%7D
IP
Requested by https://widget.suphelper.top/
Certificate IssuerGoogle Trust Services LLC
Subjectsuphelper.top
Fingerprint1C:D4:4C:1C:DB:7D:59:7D:EE:39:59:B9:F7:76:9F:87:4C:EA:5E:01
ValidityWed, 29 Nov 2023 10:21:51 GMT - Tue, 27 Feb 2024 10:21:50 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash d6bacfff68d40ad2744454c2506cc0f9
85f1f094d174fd4d78bd382c7948b95e9db93215
cd0483a083f6c73e9cd006ee073b875188c49f4025f771ecbcb795d40ac980ed
GET /services/widget/v2/most-required?projectId=5b61b42ffdf00b25dc78f342&credentials=%7B%22$type%22:%22GuestCredentials%22,%22id%22:%22b2a3a2a3-5e04-41cd-8156-49285a694ef5%22%7D HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 27 Dec 2023 12:10:08 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
strict-transport-security: max-age=2592000
content-encoding: gzip
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 83c1756a2c1c56c1-OSL
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/betstemplates/bets_model_full_en_0.json
200 OK 22 kB URL GET HTTP/2 v3.traincdn.com/genfiles/cms/betstemplates/bets_model_full_en_0.json
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /genfiles/cms/betstemplates/bets_model_full_en_0.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/
Origin: https://1xlite-178009.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:06 GMT
content-type: application/json
last-modified: Tue, 19 Dec 2023 10:56:20 GMT
etag: W/"394e8df1d2818f680b4a169c965783d1"
content-encoding: gzip
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
x-cached-since: 2023-12-19T11:17:39+00:00
traceparent: 00-060df58ab62227f6a1de3547451a99db-a7464678da96e6eb-01
x-id: osix-hw-edge-gc4
cache: HIT, REVALIDATED
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
GET 1xlite-178009.top/checker/redirect/stat/run/
200 OK 39 B URL GET HTTP/2 1xlite-178009.top/checker/redirect/stat/run/
IP
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerLet's Encrypt
Subject1xlite-178009.top
Fingerprint41:D3:F0:1C:B9:4E:2E:C2:D8:64:4A:DB:E4:C2:C0:4C:7B:5F:E1:62
ValidityWed, 20 Dec 2023 09:35:08 GMT - Tue, 19 Mar 2024 09:35:07 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 707d1409c3bc866c2bd94b52e048cfdd
432f3c72735b57a536f35445d1624ee315a0a220
5ed7154ab7ab63d366f7afcc197630b9f88b931b542df69660823973f35549ad
GET /checker/redirect/stat/run/ HTTP/1.1
Host: 1xlite-178009.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-178009.top/en?tag=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1106375m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5De7e3ef5a_d49774_l64530_clickunder; postback_watcher=; auid=sv0cMmWMFBha5JxQAwM3Ag==; SESSION=19327d246dcb4dd2ead3f10863197983; window_width=1280; che_g=0a028994-a8e4-5db4-94e5-204ecb9787d7; _glhf=1703696780
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:04 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
x-time-ng: 0.001
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.030
X-Firefox-Spdy: h2
GET v3.traincdn.com/resized/size16/sfiles/logo_teams/56bdb238c54932bbd6c4f63febe71a1e.webp
200 OK 872 B URL GET HTTP/2 v3.traincdn.com/resized/size16/sfiles/logo_teams/56bdb238c54932bbd6c4f63febe71a1e.webp
IP
ASN #58286 Electric-IT Business S.R.L.
Requested by https://1xlite-178009.top/en?tag=d_1106375m_28715c_[]MS[]null[]null[]general[]e7e3ef5a_d49774_l64530_clickunder
Certificate IssuerSectigo Limited
Subject*.traincdn.com
FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73
ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Hash 1b97e62c65f2fc8eecb7d41d823e5ce5
0ea82e2382d610f53e0ec3c60e4774a220c4a026
3da69d1030a4b5e50fd3a124c27275699bca82cb9b8cbd3a1b9f2ab47d854ed2
GET /resized/size16/sfiles/logo_teams/56bdb238c54932bbd6c4f63febe71a1e.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-178009.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 27 Dec 2023 12:10:05 GMT
content-type: image/webp
content-length: 872
cache-control: max-age=94608000
content-disposition: inline; filename="56bdb238c54932bbd6c4f63febe71a1e.webp"
content-security-policy: script-src 'none'
expires: Sat, 19 Dec 2026 04:06:58 GMT
x-request-id: 0813eac5bcde08588ad4306a29807e27
strict-transport-security: max-age=15724800; includeSubDomains
x-time-ng: 0.000
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-02bc26eceddaf7b1470082e6653648ce-5e23c820a541aaa7-01
x-id: osix-hw-edge-gc4
cache: HIT, HIT
x-cached-since: 2023-12-20T04:06:58+00:00, 2023-12-20T06:19:35+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
45.135.120.31
45.54.49.5
178.253.28.50
185.244.209.62
0.0.0.0
0.0.0.0