| r10.o.lencr.org/ |  23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashf63e8d9e64abf0e5b2784ca051160e84 d15d17504ed5c584ba42145060cf745fdb41c1d0 652ee033c72bc8eadcf29c25a5387bc303bf86e6c57f262c576117f659f15eab
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "652EE033C72BC8EADCF29C25A5387BC303BF86E6C57F262C576117F659F15EAB"
Last-Modified: Fri, 05 Jul 2024 13:53:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5748
Expires: Sun, 07 Jul 2024 09:36:41 GMT
Date: Sun, 07 Jul 2024 08:00:53 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashe9a839fbbf2a5bc4f1a01cd5fca04d5e ff4396bb2dcc9211b70f2e3266720172ee2ce085 3bb2a3698d452f1de2ff4f283a89fc427d9fe01c02ad968f215bee1834b1c1e3
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "3BB2A3698D452F1DE2FF4F283A89FC427D9FE01C02AD968F215BEE1834B1C1E3"
Last-Modified: Thu, 04 Jul 2024 15:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2969
Expires: Sun, 07 Jul 2024 08:50:22 GMT
Date: Sun, 07 Jul 2024 08:00:53 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash508d0867e7982df7cfa6ad58e05ce470 6f4e15b94e527d02e8dd38f8b69b493cfae84c56 376a5286b71a4a7e90b3eece9b39480f50435d5ef3c7793828481f590d04bc77
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "376A5286B71A4A7E90B3EECE9B39480F50435D5EF3C7793828481F590D04BC77"
Last-Modified: Thu, 04 Jul 2024 23:47:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14040
Expires: Sun, 07 Jul 2024 11:54:54 GMT
Date: Sun, 07 Jul 2024 08:00:54 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashbb291086a48c165344c602a7ad4a97b1 cf45a4700d0779a37a4142cf6e116363fcc7aa52 4554e66c3c1a4d1d24708cb61a144a84c14e1a7b76f95dcd99801751ac61b343
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "4554E66C3C1A4D1D24708CB61A144A84C14E1A7B76F95DCD99801751AC61B343"
Last-Modified: Fri, 05 Jul 2024 07:47:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2617
Expires: Sun, 07 Jul 2024 08:44:31 GMT
Date: Sun, 07 Jul 2024 08:00:54 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashe430ff7defba95ef2e40c2a2623032a3 4df33994f03cf02626fdfe9c6a51a71f5fea6058 ea2bc04f18953a2d203b059f541bf8bfcd32c63d67b8e1113d927453d8cc9a58
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "EA2BC04F18953A2D203B059F541BF8BFCD32C63D67B8E1113D927453D8CC9A58"
Last-Modified: Sun, 07 Jul 2024 04:21:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18308
Expires: Sun, 07 Jul 2024 13:06:02 GMT
Date: Sun, 07 Jul 2024 08:00:54 GMT
Connection: keep-alive
|
|
| 1xlite-352419.top/polyfills.js |  178.253.28.169 | | 0 B |
URL 1xlite-352419.top/polyfills.js IP178.253.28.169:0 ASN#202492 Silverhill Group Holding Ltd
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /polyfills.js HTTP/1.1
Host: 1xlite-352419.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder
Cookie: lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder; postback_watcher=; platform_type=desktop; auid=sv0cqWaKSzdbD+cPA6BIAg==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:56 GMT
content-type: text/javascript; charset=utf-8
content-length: 0
vary: user-agent
cache-control: public, max-age=2678400, s-maxage=2678400
etag: W/"0-2jmj7l5rSw0yVb/vlWAYkK/YBwk"
x-time-ng: 0.003
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.018
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/css/1eba305c.css | 185.244.209.62 | | 666 B |
URL v3.traincdn.com/main-static/34af5fc1/desktop/default/css/1eba305c.css IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeASCII text, with very long lines (666), with no line terminators Hashce75d5a2994a1800b2dd69d840ec774e d99679aeb452b930fec8cc97e9d4e875a093c1f5 83a6d7420cfeb472ddb16daaf2d3763d62548a239206bf3b883b54f67a2d95f1
GET /main-static/34af5fc1/desktop/default/css/1eba305c.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:56 GMT
content-type: text/css; charset=utf-8
content-length: 666
last-modified: Sat, 06 Jul 2024 09:51:11 GMT
etag: "ce75d5a2994a1800b2dd69d840ec774e"
x-amz-meta-mtime: 1720259460.963386624
expires: Sun, 07 Jul 2024 10:10:20 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 78636
traceparent: 00-e437e2fa76a566cff22bc4626704e8d1-c8a6825b1d8cc793-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:19+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/site-admin/css_vars/f506188b04c16eaa9c664ed23f7ce58e.css | 185.244.209.62 | 200 OK | 46 B |
URL GET HTTP/2v3.traincdn.com/genfiles/site-admin/css_vars/f506188b04c16eaa9c664ed23f7ce58e.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hashf506188b04c16eaa9c664ed23f7ce58e 08d068d7fa5a84beb06ba924a35d84d6bfdab30a b9bfda0e940104e190b19543b94a10d120643bd1516d3ca2d266a0af6c0966e9
GET /genfiles/site-admin/css_vars/f506188b04c16eaa9c664ed23f7ce58e.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:56 GMT
content-type: text/css
content-length: 46
last-modified: Fri, 12 Apr 2024 13:46:52 GMT
etag: "f506188b04c16eaa9c664ed23f7ce58e"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-5e5b0b12940f169b498520ad76c5a64f-2d5b1155816c629c-01
x-id: osix-hw-edge-gc4
age: 1955
cache: HIT
x-cached-since: 2024-07-07T07:28:21+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/version.json | 185.244.209.62 | | 11 B |
URL v3.traincdn.com/version.json IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
Hash425a744b1ecabf8d00c423224f069a1f d823d1e087169c7a665c8a014876647f5bf86e3a 9161dbe3713b29bbbb0f18239257cea9a78f25cb4fc52f03f37001ed58d1b937
GET /version.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:56 GMT
content-type: application/json
content-length: 11
last-modified: Sat, 06 Jul 2024 09:55:37 GMT
etag: "425a744b1ecabf8d00c423224f069a1f"
x-amz-meta-mtime: 1720259737.756264688
expires: Sat, 06 Jul 2024 09:58:32 GMT
cache-control: max-age=60
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 41
traceparent: 00-6b3991809ce7f5a12eada6cd7daef119-6f7d504f580ed899-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-07T08:00:37+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash861cce1bf441610f1dfbb14264d55122 1596b2c44fcdb5f7a49c73da766e4ab48b6bd064 f67d59f3fddbcaf61f9f1aa87eca02a320f59402bb412687a4db4d8aa81867d2
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "F67D59F3FDDBCAF61F9F1AA87ECA02A320F59402BB412687A4DB4D8AA81867D2"
Last-Modified: Fri, 05 Jul 2024 17:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2375
Expires: Sun, 07 Jul 2024 08:40:32 GMT
Date: Sun, 07 Jul 2024 08:00:57 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash861cce1bf441610f1dfbb14264d55122 1596b2c44fcdb5f7a49c73da766e4ab48b6bd064 f67d59f3fddbcaf61f9f1aa87eca02a320f59402bb412687a4db4d8aa81867d2
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "F67D59F3FDDBCAF61F9F1AA87ECA02A320F59402BB412687A4DB4D8AA81867D2"
Last-Modified: Fri, 05 Jul 2024 17:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2375
Expires: Sun, 07 Jul 2024 08:40:32 GMT
Date: Sun, 07 Jul 2024 08:00:57 GMT
Connection: keep-alive
|
|
| v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 | 185.244.209.62 | 200 OK | 64 kB |
URL GET HTTP/2v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 63748, version 1.0 Hash6887b6f24414dbc612dbf42ccdc76b70 8068d3abfbc6cbf35b55919da45b1f4d2d136238 fc5c015fc32518f1ed810fa84ca28941eb9d5a3c81acc8df69a4dbbeedef7b0c
GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:57 GMT
content-type: font/woff2
content-length: 63748
last-modified: Wed, 14 Jun 2023 09:49:53 GMT
etag: "6887b6f24414dbc612dbf42ccdc76b70"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-7b3ee8dca3da6a9ff9129afd8e254bb8-4917d5a5ee66b91e-01
x-id: osix-hw-edge-gc4
age: 3266
cache: HIT
x-cached-since: 2024-07-07T07:06:31+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Medium.woff2 | 185.244.209.62 | | 65 kB |
URL v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Medium.woff2 IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeWeb Open Font Format (Version 2), TrueType, length 64732, version 1.0 Hash3ac5d40d1b3966fc5eb09ecca74d9cbf a69f32357765dd321519889aeacba5e9ca893bb0 3310766b8f58538d07abded74a2babe1acbe1a3ee820d5b8c8265da666f4fb0c
GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Medium.woff2 HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:57 GMT
content-type: font/woff2
content-length: 64732
last-modified: Wed, 14 Jun 2023 09:49:53 GMT
etag: "3ac5d40d1b3966fc5eb09ecca74d9cbf"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-cfc5f415bf995bde6d6fdb5fd8c807be-acc5486e690d51c4-01
x-id: osix-hw-edge-gc4
age: 650
cache: HIT
x-cached-since: 2024-07-07T07:50:07+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 | 185.244.209.62 | 200 OK | 64 kB |
URL GET HTTP/2v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 63920, version 1.0 Hasha65527fcb58f66a7cfbc0e6b160538b4 45d260e7fa343401b5bb0df982a014f53e2d253b fb13c3a1cbac60649b76f7d7f85c1645d35ac69b85ce5f4eb0692505ecc2cd45
GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:57 GMT
content-type: font/woff2
content-length: 63920
last-modified: Wed, 14 Jun 2023 09:49:53 GMT
etag: "a65527fcb58f66a7cfbc0e6b160538b4"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-9ae889bfc99e0a69b9f4a1d3e9bea0d5-3440236669e81d75-01
x-id: osix-hw-edge-gc4
age: 723
cache: HIT
x-cached-since: 2024-07-07T07:48:54+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/check-ob.js | 185.244.209.62 | 200 OK | 211 B |
URL GET HTTP/2v3.traincdn.com/main-static/34af5fc1/check-ob.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text Hashced67278c38d1ce1297c121af69fff8a df6e1531fd84d956263b04254e6f94f5356623f4 2958134c3c00f7c6320858dd66e454c2856e4842821d3523c4cc5e44e1ec8616
GET /main-static/34af5fc1/check-ob.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:57 GMT
content-type: text/javascript; charset=utf-8
content-length: 211
last-modified: Sat, 06 Jul 2024 09:55:37 GMT
etag: "ced67278c38d1ce1297c121af69fff8a"
x-amz-meta-mtime: 1720259737.284263193
expires: Sun, 07 Jul 2024 10:10:22 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 78635
traceparent: 00-bc3ba68cedde46c1c51cc42e4b135d16-a3ed6bdaa97e4b55-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:10:51+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/1da51baa342984a84ca1ac8dd900998b.png | 185.244.209.62 | 200 OK | 653 B |
URL GET HTTP/2v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/1da51baa342984a84ca1ac8dd900998b.png IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typePNG image data, 32 x 32, 8-bit colormap, non-interlaced Hashe6f0766cbd95db33da44e7a9140648f2 5f196b1bfe8c3f92bd2ebcd67124e72e81ae6aaf c0399d478788d5d483f104a2e8cb7c32f41cb40e9df0c22e831b2bfa2db63ec0
GET /genfiles/cms/1-285/desktop/media_asset/1da51baa342984a84ca1ac8dd900998b.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:57 GMT
content-type: image/png
content-length: 653
last-modified: Tue, 25 Apr 2023 13:43:56 GMT
etag: "e6f0766cbd95db33da44e7a9140648f2"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-9a9f04f04bcb786b6da4a393369ea31c-f4d095ca70217912-01
x-id: osix-hw-edge-gc4
age: 1948
cache: HIT
x-cached-since: 2024-07-07T07:28:29+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/css/8de58a02.css | 185.244.209.62 | 200 OK | 666 B |
URL GET HTTP/2v3.traincdn.com/main-static/34af5fc1/desktop/default/css/8de58a02.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (666), with no line terminators Hash615162ac5509c6b0d483b15ec79e8c6a bbc978065622f97e6a842d755298c0c691d5349c a3217c545adef331ee98767dc00a405a695bfcbbc369a4f9c364720598f2ea0a
GET /main-static/34af5fc1/desktop/default/css/8de58a02.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:57 GMT
content-type: text/css; charset=utf-8
content-length: 666
last-modified: Sat, 06 Jul 2024 09:51:12 GMT
etag: "615162ac5509c6b0d483b15ec79e8c6a"
x-amz-meta-mtime: 1720259460.967386636
expires: Sun, 07 Jul 2024 10:10:22 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 78635
traceparent: 00-cb9e1150dc19656861bbcd02e711f5b5-0c820e4bd84e3a66-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:39+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/css/5211ad62.css | 185.244.209.62 | | 6.2 kB |
URL v3.traincdn.com/main-static/34af5fc1/desktop/default/css/5211ad62.css IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hasha4082da4dc75ca2069ded322d06b1bc9 1c99924fd3112520f1e7d54123e0f85833064244 7ba86d2b8299d00fa218db84d74e6dec2be1acce2ab1c873a6f78482d8f6a082
GET /main-static/34af5fc1/desktop/default/css/5211ad62.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:57 GMT
content-type: text/css; charset=utf-8
last-modified: Sat, 06 Jul 2024 09:51:12 GMT
etag: W/"d47b88913d2f07fd178e27b3b490384d"
x-amz-meta-mtime: 1720259460.967386636
content-encoding: gzip
expires: Sun, 07 Jul 2024 10:10:22 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 78635
traceparent: 00-ee009d5591ce2800b90aae5f09089c62-205062918c27cc21-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:39+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/css/b60d366e.css | 185.244.209.62 | 200 OK | 4.7 kB |
URL GET HTTP/2v3.traincdn.com/main-static/34af5fc1/desktop/default/css/b60d366e.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hasha3ad4324f1089452a718407fab4e301f 5fc728bb3e108367093d663f6ada1faebf03d129 f2c570eb6e0188ca8e7ebbb01db98e04205ae1b88adb702df1e3ff1737706c9b
GET /main-static/34af5fc1/desktop/default/css/b60d366e.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:59 GMT
content-type: text/css; charset=utf-8
last-modified: Sat, 06 Jul 2024 09:51:12 GMT
etag: W/"8927d1037dc2abb9c898f8ddbb92caae"
x-amz-meta-mtime: 1720259460.971386648
content-encoding: gzip
expires: Sun, 07 Jul 2024 10:10:23 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 78636
traceparent: 00-a53c8327a61e7d03e47a07cded4fc6dd-a6ea1bc230fde138-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:40+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/Page.Betting.Asia.Homepage/Page.NewCyber.Cyber/Page.NewCyber.CyberApp/Page.NewCyber.CyberChamp/Page./8c362243-2c8302fc.js | 185.244.209.62 | | 63 kB |
URL v3.traincdn.com/main-static/34af5fc1/desktop/default/Page.Betting.Asia.Homepage/Page.NewCyber.Cyber/Page.NewCyber.CyberApp/Page.NewCyber.CyberChamp/Page./8c362243-2c8302fc.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hash8b9e9738b683c6fe2dcbdf2d3214afd0 893d940c9538554e4146a1d8f829150de20c0c55 f297f21e6d127a83e2a00085da9f3c2be3ecf1cab1042d2cdff55a2773352b24
GET /main-static/34af5fc1/desktop/default/Page.Betting.Asia.Homepage/Page.NewCyber.Cyber/Page.NewCyber.CyberApp/Page.NewCyber.CyberChamp/Page./8c362243-2c8302fc.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:57 GMT
content-type: text/javascript; charset=utf-8
last-modified: Sat, 06 Jul 2024 09:51:11 GMT
etag: W/"16df382edbd8fcf70825603b9c24c8c9"
x-amz-meta-mtime: 1720259460.9553866
content-encoding: gzip
expires: Sun, 07 Jul 2024 10:10:22 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 78635
traceparent: 00-e5de59caee19bdf169b8b75303aed169-c410beccdfc84e8d-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:39+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/css/cc231017.css | 185.244.209.62 | | 61 kB |
URL v3.traincdn.com/main-static/34af5fc1/desktop/default/css/cc231017.css IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hashf6883be67b1c9337b9345b353f78c3ae ec891dfdddb0a5db9d236c432c6f8a2f755edc88 ad87f90fbf9c8badecee34d0bc6a9d4cf38babf384ce6d9933ebb19da616f968
GET /main-static/34af5fc1/desktop/default/css/cc231017.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:57 GMT
content-type: text/css; charset=utf-8
last-modified: Sat, 06 Jul 2024 09:51:12 GMT
etag: W/"b2e4888f3d14b93ddef0e514178684a2"
x-amz-meta-mtime: 1720259460.971386648
content-encoding: gzip
expires: Sun, 07 Jul 2024 10:10:22 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 78635
traceparent: 00-f8f6ac2357432a35f276958c2bfbb1f8-7bc1df30e022ccbb-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:39+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/DownloadAppWidget-bdb37d23.js | 185.244.209.62 | | 505 B |
URL v3.traincdn.com/main-static/34af5fc1/desktop/default/DownloadAppWidget-bdb37d23.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeJavaScript source, ASCII text, with very long lines (505), with no line terminators Hash66b97efe057416ff93440c1ed7fca1d0 39a03979073cd1f7376dfa321b459e09990623c0 4cd27f731bfc64b674772a4b235637f7be44769c1befaf8abe6eaab20deb1b0c
GET /main-static/34af5fc1/desktop/default/DownloadAppWidget-bdb37d23.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:59 GMT
content-type: text/javascript; charset=utf-8
content-length: 505
last-modified: Sat, 06 Jul 2024 09:51:07 GMT
etag: "66b97efe057416ff93440c1ed7fca1d0"
x-amz-meta-mtime: 1720259460.951386588
expires: Sun, 07 Jul 2024 10:10:27 GMT
cache-control: max-age=86400
x-time-ng: 0.003
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 78632
traceparent: 00-7b914fcaee9acc2850cb15edd80cef25-c2992abc470061a7-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:40+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/css/dd9b0ea4.css | 185.244.209.62 | | 4.5 kB |
URL v3.traincdn.com/main-static/34af5fc1/desktop/default/css/dd9b0ea4.css IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hashe9e8abcdf1534b795102bf7bee110008 30b87397f3b3c1336b6ca1889c8823931b241d04 8387b33454f8bea4ac4e5f2a82b9ddd4688be43fcd4440dcf84456f0a1a319c8
GET /main-static/34af5fc1/desktop/default/css/dd9b0ea4.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:59 GMT
content-type: text/css; charset=utf-8
last-modified: Sat, 06 Jul 2024 09:51:12 GMT
etag: W/"deba8c9fc0ac2706d0b7a4cfd29d0947"
x-amz-meta-mtime: 1720259460.971386648
content-encoding: gzip
expires: Sun, 07 Jul 2024 10:10:23 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 78636
traceparent: 00-577053952c6ccfd192493b1e491469e7-de131e7730345f06-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:40+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/vendors/plugins.vue-js-modal-9cb31762.js | 185.244.209.62 | | 21 kB |
URL v3.traincdn.com/main-static/34af5fc1/desktop/default/vendors/plugins.vue-js-modal-9cb31762.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hashcd584c8b103d0516df34c7e5c86b6711 1aa5f1295330723ff58e2b56bbe8c157fc43cdca 087d46576ce8c56f8b90389f63e820be581353604941d8d9758516ee8893b1f5
GET /main-static/34af5fc1/desktop/default/vendors/plugins.vue-js-modal-9cb31762.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:58 GMT
content-type: text/javascript; charset=utf-8
last-modified: Sat, 06 Jul 2024 09:51:11 GMT
etag: W/"f1ba1904cd2f30ce46fa35fd97ea4fc6"
x-amz-meta-mtime: 1720259460.99538672
content-encoding: gzip
expires: Sun, 07 Jul 2024 10:10:22 GMT
cache-control: max-age=86400
x-time-ng: 0.003
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 78636
traceparent: 00-4d4d94991c68288c48c927d5593a35f6-a4c40082a1743d84-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:40+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| 1xlite-352419.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json | 178.253.28.169 | 200 OK | 23 B |
URL POST HTTP/21xlite-352419.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json IP178.253.28.169:443 ASN#202492 Silverhill Group Holding Ltd
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerLet's Encrypt Subject1xlite-352419.top FingerprintA3:B3:AE:68:64:B1:4B:9E:AE:03:57:52:A8:1A:51:CB:CE:CD:A1:D7 ValidityMon, 27 May 2024 05:17:27 GMT - Sun, 25 Aug 2024 05:17:26 GMT
Hashd55b79cfe30e22486a114f96e24227c3 8a8fda2b8d06a1502d52d8e501989c8bd07f333d 44c350478117dbbb3983a976aa21f3898e4ed321069158ac9947505f9a880e89
POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1
Host: 1xlite-352419.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-352419.top/en?tag=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder
Content-Type: application/json
X-Lang: en
X-Uuid: 93ffba8b-4804-47d6-9df2-edef0ebb1da5
Content-Length: 81
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Cookie: lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder; platform_type=desktop; auid=sv0cqWaKSzdbD+cPA6BIAg==; window_width=1280; SESSION=511efd04e0d48523b31184aa137ef02c; _glhf=1720357035
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:59 GMT
content-type: application/json
content-length: 23
x-time-ng: 0.001
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.012
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/Page.Betting.Asia.BettingLeftAside-82055f99.js | 185.244.209.62 | | 24 kB |
URL v3.traincdn.com/main-static/34af5fc1/desktop/default/Page.Betting.Asia.BettingLeftAside-82055f99.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hash8b09184b8a5b2e2dbeb97c465d34c316 5d005991db61cbc6c7981b02ca05b6397a1479b1 a5f63230c68c7e1958d9371f2a3582f0a537df1704a365236b124cf767d8938b
GET /main-static/34af5fc1/desktop/default/Page.Betting.Asia.BettingLeftAside-82055f99.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:57 GMT
content-type: text/javascript; charset=utf-8
last-modified: Sat, 06 Jul 2024 09:51:07 GMT
etag: W/"1d8d02eb70b6255bdd3d91a0e2730731"
x-amz-meta-mtime: 1720259460.9553866
content-encoding: gzip
expires: Sun, 07 Jul 2024 10:10:22 GMT
cache-control: max-age=86400
x-time-ng: 0.018
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 78635
traceparent: 00-2da9715db9d57302478e4cc563065938-da489df5905cf86d-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:39+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/DC-ec70f349.js | 185.244.209.62 | 200 OK | 11 kB |
URL GET HTTP/2v3.traincdn.com/main-static/34af5fc1/desktop/default/DC-ec70f349.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hashf3e242adf12c0ada607951c3c0f8dc32 5d658d1519b2dd5ebf5a4299cc017fdbab0834c3 379affb3cd6ff60ae574c3c1f972afc9e81edabd38669435951a007b3ef58512
GET /main-static/34af5fc1/desktop/default/DC-ec70f349.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:58 GMT
content-type: text/javascript; charset=utf-8
last-modified: Sat, 06 Jul 2024 09:51:07 GMT
etag: W/"1798a459331cbefba864e5223e6e8be5"
x-amz-meta-mtime: 1720259460.951386588
content-encoding: gzip
expires: Sun, 07 Jul 2024 10:10:23 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 78635
traceparent: 00-8dd417ae4b493d1891815a241fe0ceff-ec31211016839516-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:40+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/Page.Betting.Main.Asian-0dd16675.js | 185.244.209.62 | 200 OK | 36 kB |
URL GET HTTP/2v3.traincdn.com/main-static/34af5fc1/desktop/default/Page.Betting.Main.Asian-0dd16675.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hashc97ac380793392169557e33a22c9b9e4 460e5916a783a85811780cdbed76bf6b07df87fd c856a36f48e8658a3705a1faa5899264a01d55cccfb5ccc6f31866b9d1c3e83e
GET /main-static/34af5fc1/desktop/default/Page.Betting.Main.Asian-0dd16675.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:57 GMT
content-type: text/javascript; charset=utf-8
last-modified: Sat, 06 Jul 2024 09:51:07 GMT
etag: W/"54810e7f84d7a92ad9d38b29cee7ce8d"
x-amz-meta-mtime: 1720259460.9553866
content-encoding: gzip
expires: Sun, 07 Jul 2024 10:10:22 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 78635
traceparent: 00-d0eff7efe2ecd3be58f99f68ca6bf85c-86a8414d69dfc3cd-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:39+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/resized/size16/sfiles/logo_teams/b0cf158d8bf33b9f58c4625af27e696e.webp | 185.244.209.62 | 200 OK | 652 B |
URL GET HTTP/2v3.traincdn.com/resized/size16/sfiles/logo_teams/b0cf158d8bf33b9f58c4625af27e696e.webp IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image Hash77769fdbb43a84ee17fd8d4c7abfb363 2f7e1e3d9b4e729b6acf95789d7e100dab7736f4 f57f531e53558e4575e1e4a6e41fe04aca9b7d68af11a82f468d801c6c9c2ae5
GET /resized/size16/sfiles/logo_teams/b0cf158d8bf33b9f58c4625af27e696e.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:00 GMT
content-type: image/webp
content-length: 652
cache-control: max-age=94608000
content-disposition: inline; filename="b0cf158d8bf33b9f58c4625af27e696e.webp"
content-security-policy: script-src 'none'
expires: Thu, 01 Jul 2027 05:29:40 GMT
x-request-id: 46e97ed486ec6e8795c59ad0b6353e45
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 527480
traceparent: 00-b7ce51ef6cf69a4f7d862948c7a1f40c-d434ed99a5b68c00-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-07T07:24:41+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| 1xlite-352419.top/web-api/user/secure | 178.253.28.169 | | 73 kB |
URL 1xlite-352419.top/web-api/user/secure IP178.253.28.169:0 ASN#202492 Silverhill Group Holding Ltd
Hash729e29ecb8e8a3ef99d7a773e00e9837 5c6fa8f3c040f5eb0b01f8ea058f5e418417c3c6 028c5b4ae39a587c5f52e261575703f85ce7087a168fdc2df1a5f9ba767e24b0
POST /web-api/user/secure HTTP/1.1
Host: 1xlite-352419.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-352419.top/en?tag=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Cookie: lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder; platform_type=desktop; auid=sv0cqWaKSzdbD+cPA6BIAg==; window_width=1280; SESSION=511efd04e0d48523b31184aa137ef02c
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:59 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: br
server-timing: p;dur=20, dt_total;dur=22.098, wf-uht;dur=0.030
set-cookie: _glhf=1720357035; expires=Sun, 07-Jul-2024 09:00:59 GMT; Max-Age=3600; path=/
traceparent: 00-4ac88c553c831cf9fd8bc0f7564012fa-f3a58fd408f90e5f-01
vary: Accept-Encoding
x-dt: 285
x-time-ng: 0.022, 0.022
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/resized/size16/sfiles/logo_teams/a3b817d19ff7e2db19dd0dd571c06978.webp | 185.244.209.62 | | 778 B |
URL v3.traincdn.com/resized/size16/sfiles/logo_teams/a3b817d19ff7e2db19dd0dd571c06978.webp IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeRIFF (little-endian) data, Web/P image Hash0ade7cfac1d22b9cb99af561f1e52b9b a06e4fb30649775f76cfad37946a37135e30e27a 2c1d2b131ea87aeab3dfdd721adeab7d2c1e7627b0cd4c55615fd2749d38b161
GET /resized/size16/sfiles/logo_teams/a3b817d19ff7e2db19dd0dd571c06978.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:00 GMT
content-type: image/webp
content-length: 778
cache-control: max-age=94608000
content-disposition: inline; filename="a3b817d19ff7e2db19dd0dd571c06978.webp"
content-security-policy: script-src 'none'
expires: Mon, 05 Jul 2027 07:07:28 GMT
x-request-id: 98602855128cafb9ae23b7ff2fc8f778
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 176012
traceparent: 00-bc8ca119e5cc07f379366588438da452-f1a884850d209f95-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-05T16:41:01+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| 1xlite-352419.top/web-api/external-api/config/getVideoAccessConfig | 178.253.28.169 | 200 OK | 3.6 kB |
URL GET HTTP/21xlite-352419.top/web-api/external-api/config/getVideoAccessConfig IP178.253.28.169:443 ASN#202492 Silverhill Group Holding Ltd
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerLet's Encrypt Subject1xlite-352419.top FingerprintA3:B3:AE:68:64:B1:4B:9E:AE:03:57:52:A8:1A:51:CB:CE:CD:A1:D7 ValidityMon, 27 May 2024 05:17:27 GMT - Sun, 25 Aug 2024 05:17:26 GMT
Hashcb0bc8eedc642fc591c0eef57e6c67e5 6c62aeececef0a5ff474bb21bf569ad8d48f6bd0 c57136f602923fc19534e58f7da5a483616d80031222372e19a29fd6f22b0a0e
GET /web-api/external-api/config/getVideoAccessConfig HTTP/1.1
Host: 1xlite-352419.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-352419.top/en?tag=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder; platform_type=desktop; auid=sv0cqWaKSzdbD+cPA6BIAg==; window_width=1280; SESSION=511efd04e0d48523b31184aa137ef02c; _glhf=1720357035; che_g=9b5505ea-8f71-8eb1-3d66-6476916658be
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:59 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: br
server-timing: p;dur=21, dt_total;dur=62.729, wf-uht;dur=0.085
traceparent: 00-da2ca71cede57c9ebcebc2d5bd64a905-24d57d0739deba5d-01
vary: Accept-Encoding
x-dt: 285
x-time-ng: 0.022, 0.048
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/resized/size16/sfiles/logo_teams/20411.webp | 185.244.209.62 | | 826 B |
URL v3.traincdn.com/resized/size16/sfiles/logo_teams/20411.webp IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeRIFF (little-endian) data, Web/P image Hashb9d9f85ec4b714d9a29b8cf0a99cfda1 bbc1741c95b0a592f741afdae1805f236247327f 5df773579410fd4f5e3190940f853571d3d5ec44f682188f62afcca0ae76e8c7
GET /resized/size16/sfiles/logo_teams/20411.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:00 GMT
content-type: image/webp
content-length: 826
cache-control: max-age=94608000
content-disposition: inline; filename="20411.webp"
content-security-policy: script-src 'none'
expires: Fri, 02 Jul 2027 13:43:41 GMT
x-request-id: ea361ea1683f9ef5081325772bcf9ac9
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 411439
traceparent: 00-ea67fada78e9296311f429050b3dc5b8-a5ffaef1f52a4497-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-03T18:14:05+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/resized/size16/sfiles/logo_teams/15043.webp | 185.244.209.62 | | 802 B |
URL v3.traincdn.com/resized/size16/sfiles/logo_teams/15043.webp IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeRIFF (little-endian) data, Web/P image Hash804e9aca0c8eef4dbffb6e0d7d92e497 cee930bda0a0cef58148ad00b4eaad8df216e663 eafc0037609010c3b507a8fb58b05ee6c8f46f13dc1569b01e047a6a2e977711
GET /resized/size16/sfiles/logo_teams/15043.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:00 GMT
content-type: image/webp
content-length: 802
cache-control: max-age=94608000
content-disposition: inline; filename="15043.webp"
content-security-policy: script-src 'none'
expires: Fri, 02 Jul 2027 13:43:41 GMT
x-request-id: 3518c973162c2da719d1b360537df8ce
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 411439
traceparent: 00-23a32b8c61a1a7085c78398e1a49f9b3-b9058bd5c180921f-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-03T23:14:58+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/resized/size16/sfiles/logo_teams/812e33e81ae0260746ff3aaeba3c056c.webp | 185.244.209.62 | | 836 B |
URL v3.traincdn.com/resized/size16/sfiles/logo_teams/812e33e81ae0260746ff3aaeba3c056c.webp IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeRIFF (little-endian) data, Web/P image Hash9d69b5f3af8ff32561fd43423bad211f c10fb9d258ef8cecea590c7d810a655cd61daca8 4256929f820378fd52cb7484261f0ff610d424643bb2a72ed25030763e8bc73a
GET /resized/size16/sfiles/logo_teams/812e33e81ae0260746ff3aaeba3c056c.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:00 GMT
content-type: image/webp
content-length: 836
cache-control: max-age=94608000
content-disposition: inline; filename="812e33e81ae0260746ff3aaeba3c056c.webp"
content-security-policy: script-src 'none'
expires: Sat, 03 Jul 2027 02:31:08 GMT
x-request-id: 6d3b2b22ef1a03b907b2d5edbe47f6e8
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 365392
traceparent: 00-762c69b856d88c27cfdb399c53c3a57e-4585dfa11fc88a0c-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-03T09:16:12+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/resized/size16/sfiles/logo_teams/38873f37463dc56c98bcab92b13a63f4.webp | 185.244.209.62 | 200 OK | 786 B |
URL GET HTTP/2v3.traincdn.com/resized/size16/sfiles/logo_teams/38873f37463dc56c98bcab92b13a63f4.webp IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image Hashb3adb82b3aeb722969ec94cf267736f5 e6c09443d2f7fd6399ccea1c8e84bfda6a220a35 2a36229d7b577d13e92afe826166df406d23a0925dbabbce5b30fd86a131fa07
GET /resized/size16/sfiles/logo_teams/38873f37463dc56c98bcab92b13a63f4.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:00 GMT
content-type: image/webp
content-length: 786
cache-control: max-age=94608000
content-disposition: inline; filename="38873f37463dc56c98bcab92b13a63f4.webp"
content-security-policy: script-src 'none'
expires: Wed, 30 Jun 2027 08:03:48 GMT
x-request-id: 2ae108b4f654f66629ca299edb2d7e4f
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 604632
traceparent: 00-ad84acd17c842f0fcebf99a4a4e0a137-f96c31e51da03871-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-03T09:16:12+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sfiles/logo-champ/245a43eed4b673d9c864d2e0767464d5.webp | 185.244.209.62 | | 3.6 kB |
URL v3.traincdn.com/sfiles/logo-champ/245a43eed4b673d9c864d2e0767464d5.webp IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeRIFF (little-endian) data, Web/P image Hash65351657520f477032d4f1cc52098142 e3d2cf2efea3ab4389cbda407a1b1f5a2d781ab7 57dd50f1280758f5ca2e626d8f0b2d74b253832d98033f35f04c4831c46a8e9b
GET /sfiles/logo-champ/245a43eed4b673d9c864d2e0767464d5.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:00 GMT
content-type: image/webp
content-length: 3606
last-modified: Tue, 03 Jan 2023 16:37:53 GMT
etag: "65351657520f477032d4f1cc52098142"
cache-control: max-age=3600
expires: Tue, 02 Jul 2024 14:35:57 GMT
x-time-ng: 0.079
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 1373
x-cached-since: 2024-07-02T17:53:48+00:00
traceparent: 00-cc58fc4ea76a33b0e4c10000dec7fd0b-8c0f239828ead0c2-01
x-id: osix-hw-edge-gc4
cache: HIT, REVALIDATED
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/resized/size16/sfiles/logo_teams/e5c4e039b9b22ac9d3ff6c70907d64d0.webp | 185.244.209.62 | | 776 B |
URL v3.traincdn.com/resized/size16/sfiles/logo_teams/e5c4e039b9b22ac9d3ff6c70907d64d0.webp IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeRIFF (little-endian) data, Web/P image Hashe89796bc7c741cf335f1e46a4854e6fc 2ab6a481b04aa309775ea16f007e27c0611f9aca c7bc182d9294566d62e7dec534761b8b7cc522f5ea17d7413c4e08846388d47b
GET /resized/size16/sfiles/logo_teams/e5c4e039b9b22ac9d3ff6c70907d64d0.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:00 GMT
content-type: image/webp
content-length: 776
cache-control: max-age=94608000
content-disposition: inline; filename="e5c4e039b9b22ac9d3ff6c70907d64d0.webp"
content-security-policy: script-src 'none'
expires: Wed, 07 Jul 2027 07:38:52 GMT
x-request-id: 2f4af0b48196d4eac95eaa50740442ae
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 1328
traceparent: 00-1b9b3852f84e10d17b43fb590c670700-050b780c09752ba0-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-07T07:40:02+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/resized/size16/sfiles/logo_teams/c54a28383db13afe3297f570f784ff30.webp | 185.244.209.62 | 200 OK | 726 B |
URL GET HTTP/2v3.traincdn.com/resized/size16/sfiles/logo_teams/c54a28383db13afe3297f570f784ff30.webp IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image Hashebb5a2f96dc97368d11d4d3e84552059 f2134c66ba7f2a3917067d4efe33ac1471e8531e 56b5638076a89fbe2507444e2c2c4393f8bd0e03f471c5f57f93dca31af7357e
GET /resized/size16/sfiles/logo_teams/c54a28383db13afe3297f570f784ff30.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:00 GMT
content-type: image/webp
content-length: 726
cache-control: max-age=94608000
content-disposition: inline; filename="c54a28383db13afe3297f570f784ff30.webp"
content-security-policy: script-src 'none'
expires: Wed, 07 Jul 2027 07:40:02 GMT
x-request-id: 2ef7ab458a342414564fb8dc6940134d
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-55e271bf693f5c9567778173f0f5bfe3-6bbfb3000b1db139-01
x-id: osix-hw-edge-gc4
age: 1258
cache: HIT
x-cached-since: 2024-07-07T07:40:02+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/resized/size16/sfiles/logo_teams/34591e63e886ad9f025c2778a9f55d06.webp | 185.244.209.62 | | 766 B |
URL v3.traincdn.com/resized/size16/sfiles/logo_teams/34591e63e886ad9f025c2778a9f55d06.webp IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeRIFF (little-endian) data, Web/P image Hash06ef3f3be0077ca1630617661c6c6198 fa2531539fa6a39566aa534a64458f5321908a82 67006a45666e366a24736e8052b2f0a9f8887ad591a781d329500807a3daa399
GET /resized/size16/sfiles/logo_teams/34591e63e886ad9f025c2778a9f55d06.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:00 GMT
content-type: image/webp
content-length: 766
cache-control: max-age=94608000
content-disposition: inline; filename="34591e63e886ad9f025c2778a9f55d06.webp"
content-security-policy: script-src 'none'
expires: Fri, 02 Jul 2027 13:01:24 GMT
x-request-id: 4439bde370e4239c4eb654f502a1591d
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 413976
traceparent: 00-5a61d4ac0d343ae002ec306112329acd-8bf7432c85eec303-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-07T07:56:08+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/resized/size16/sfiles/logo_teams/496bcaec4368c1a4eb553906e75c37eb.webp | 185.244.209.62 | | 748 B |
URL v3.traincdn.com/resized/size16/sfiles/logo_teams/496bcaec4368c1a4eb553906e75c37eb.webp IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeRIFF (little-endian) data, Web/P image Hash0a6897223e776e4e81f1870e3a9a4024 d0a45d3e38531f2bf23d331ad7f172b71e104fec befa9ef1208ba1044893d9afe1232eacb77afae0b0ab7fbf74ef53463d7cece7
GET /resized/size16/sfiles/logo_teams/496bcaec4368c1a4eb553906e75c37eb.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:00 GMT
content-type: image/webp
content-length: 748
cache-control: max-age=94608000
content-disposition: inline; filename="496bcaec4368c1a4eb553906e75c37eb.webp"
content-security-policy: script-src 'none'
expires: Sat, 03 Jul 2027 22:33:34 GMT
x-request-id: 97f7fcb6a25b050170623683c0895594
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 293246
traceparent: 00-1f9e213241abdb3ed4d26a1979662328-109fc85062441d8b-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-07T07:56:08+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/resized/size16/sfiles/logo_teams/1798.webp | 185.244.209.62 | | 798 B |
URL v3.traincdn.com/resized/size16/sfiles/logo_teams/1798.webp IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeRIFF (little-endian) data, Web/P image Hash7efc5ce4837b55c19b86a11c1a315413 1f1f4d5b1055f93531d10daffbf9393ffb5b0f6c 73c8e3005b8cb834eab0448e4b1336863e16f71647e484065548f5a5ca4634c5
GET /resized/size16/sfiles/logo_teams/1798.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:00 GMT
content-type: image/webp
content-length: 798
cache-control: max-age=94608000
content-disposition: inline; filename="1798.webp"
content-security-policy: script-src 'none'
expires: Mon, 05 Jul 2027 21:53:40 GMT
x-request-id: aa6a3c60f76f6e8ee5f2e5c188a8571e
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 122840
traceparent: 00-dbd0291c1c65fc99676750c0c985f02c-82681e1722d5af32-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-07T06:57:09+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/resized/size16/sfiles/logo_teams/16adbcfe34d5549c6583bed0bf4dcd33.webp | 185.244.209.62 | | 776 B |
URL v3.traincdn.com/resized/size16/sfiles/logo_teams/16adbcfe34d5549c6583bed0bf4dcd33.webp IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeRIFF (little-endian) data, Web/P image Hashad3a27972658d457f67585b5a5c84dd3 be4783d710ea21cff717982c66838f96850a514e fa9b5bc57f6d38bc58a65eb4bbde65705c57806a23d944b37e00281d434c4a7d
GET /resized/size16/sfiles/logo_teams/16adbcfe34d5549c6583bed0bf4dcd33.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:00 GMT
content-type: image/webp
content-length: 776
cache-control: max-age=94608000
content-disposition: inline; filename="16adbcfe34d5549c6583bed0bf4dcd33.webp"
content-security-policy: script-src 'none'
expires: Sat, 03 Jul 2027 00:20:57 GMT
x-request-id: 9571316a26570b890d9b203585e0c221
x-time-ng: 0.093
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 373203
traceparent: 00-5e119843b5aac975b369ddb51b8a6303-e065ea78f3cf099b-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-07T06:57:09+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/resized/size16/sfiles/logo_teams/4b243a3bbb1a7f2c642689e0d4ab9985.webp | 185.244.209.62 | 200 OK | 794 B |
URL GET HTTP/2v3.traincdn.com/resized/size16/sfiles/logo_teams/4b243a3bbb1a7f2c642689e0d4ab9985.webp IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image Hash4fb0deced7bdecd661f823c726291310 5f8266a809d74e49f8fb65b6dc3ebc1fd91fd0c8 799f546fd24e69bb166c1c65e80c69afcc318166904475ee69442ab83b65eb0c
GET /resized/size16/sfiles/logo_teams/4b243a3bbb1a7f2c642689e0d4ab9985.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:00 GMT
content-type: image/webp
content-length: 794
cache-control: max-age=94608000
content-disposition: inline; filename="4b243a3bbb1a7f2c642689e0d4ab9985.webp"
content-security-policy: script-src 'none'
expires: Wed, 07 Jul 2027 07:10:19 GMT
x-request-id: c6cbb5603c7f7396a9c07fbc9c758d66
x-time-ng: 0.028
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 3041
traceparent: 00-f8a9e7694475b8e5e0b050748d0a3006-864bcfb096a9c948-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-07T07:10:23+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/resized/size16/sfiles/logo_teams/6c345bf8d717e615db1deb4b3182519e.webp | 185.244.209.62 | | 854 B |
URL v3.traincdn.com/resized/size16/sfiles/logo_teams/6c345bf8d717e615db1deb4b3182519e.webp IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeRIFF (little-endian) data, Web/P image Hashc92ef54d5c96b196dc527e3ae5615e24 9853e789f341c40b086ff66079d794887bf9ec0b c5c58980d770e9687a4121337b95e94a7c5c853b7aba6a964f9c0d6fa8f1cf73
GET /resized/size16/sfiles/logo_teams/6c345bf8d717e615db1deb4b3182519e.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:00 GMT
content-type: image/webp
content-length: 854
cache-control: max-age=94608000
content-disposition: inline; filename="6c345bf8d717e615db1deb4b3182519e.webp"
content-security-policy: script-src 'none'
expires: Wed, 07 Jul 2027 07:10:19 GMT
x-request-id: ec3f83c9322e8935333ebd7151f8b762
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 3041
traceparent: 00-fa46fd04fd4b7ed21db3e503d0512a89-4edbb2f1cbe94a42-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-07T07:10:23+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/resized/size16/sfiles/logo_teams/947092beaf0bc40673706eab3d9d3022.webp | 185.244.209.62 | | 786 B |
URL v3.traincdn.com/resized/size16/sfiles/logo_teams/947092beaf0bc40673706eab3d9d3022.webp IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeRIFF (little-endian) data, Web/P image Hash06b89c078612a44e665f33e4759933e7 a369a7ebaad5b3271daa5d0bc17bd0e6110f65a3 1b59d3c6a6e4bda1dc01d52a39b5b83f9e7cff99779358a52c030fed57a65413
GET /resized/size16/sfiles/logo_teams/947092beaf0bc40673706eab3d9d3022.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:00 GMT
content-type: image/webp
content-length: 786
cache-control: max-age=94608000
content-disposition: inline; filename="947092beaf0bc40673706eab3d9d3022.webp"
content-security-policy: script-src 'none'
expires: Wed, 07 Jul 2027 07:58:31 GMT
x-request-id: b61ece2368684862cd1334a4bc95f0d3
x-time-ng: 0.037
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 149
traceparent: 00-b289c0dcf24d98ee07f55232d1a34826-daba08292b1c9309-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-07T07:58:34+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/resized/size16/sfiles/logo_teams/32f9e659f27ec10b159a7cf5011bc7d7.webp | 185.244.209.62 | | 738 B |
URL v3.traincdn.com/resized/size16/sfiles/logo_teams/32f9e659f27ec10b159a7cf5011bc7d7.webp IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeRIFF (little-endian) data, Web/P image Hashb37c34665ea75596cf101e5e5b4b5917 4ff548686ebf5e315958ab55ffb0e629a29a388b 576cf6fcf77909813e65b247e073025d7044dc15b06827dea61bf28c531063ff
GET /resized/size16/sfiles/logo_teams/32f9e659f27ec10b159a7cf5011bc7d7.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:00 GMT
content-type: image/webp
content-length: 738
cache-control: max-age=94608000
content-disposition: inline; filename="32f9e659f27ec10b159a7cf5011bc7d7.webp"
content-security-policy: script-src 'none'
expires: Wed, 07 Jul 2027 07:58:32 GMT
x-request-id: 815f0c50da44db344639240f9ba1e416
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 148
traceparent: 00-4cc971bee0e26e69c12fedcd6c75cd82-019958e5459b90e4-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-07T07:58:34+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| 1xlite-352419.top/service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true | 178.253.28.169 | 200 OK | 12 kB |
URL GET HTTP/21xlite-352419.top/service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true IP178.253.28.169:443 ASN#202492 Silverhill Group Holding Ltd
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerLet's Encrypt Subject1xlite-352419.top FingerprintA3:B3:AE:68:64:B1:4B:9E:AE:03:57:52:A8:1A:51:CB:CE:CD:A1:D7 ValidityMon, 27 May 2024 05:17:27 GMT - Sun, 25 Aug 2024 05:17:26 GMT
Hash5e9b6f277a36bd1dc9ce6f4ec482c880 74d2f0d7f209976c564b74ce344348f19b9b0005 e33457ed449c082b210be950af4311514681243f296c29a5c7d0c20269727da7
GET /service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true HTTP/1.1
Host: 1xlite-352419.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-352419.top/en?tag=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder; platform_type=desktop; auid=sv0cqWaKSzdbD+cPA6BIAg==; window_width=1280; SESSION=511efd04e0d48523b31184aa137ef02c; _glhf=1720357035; che_g=9b5505ea-8f71-8eb1-3d66-6476916658be
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:01 GMT
content-type: application/json; charset=utf-8
content-length: 11761
cache-control: public, max-age=5
content-encoding: br
last-modified: Sun, 07 Jul 2024 08:01:01 GMT
vary: Accept-Encoding
x-time-ng: 0.020
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.031
X-Firefox-Spdy: h2
|
|
| refpamjeql.top/L?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder&site=51254&ad=14189 |  45.135.120.31 | | 2.8 kB |
URL refpamjeql.top/L?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder&site=51254&ad=14189 IP45.135.120.31:0
Hash58aab8838e80d30155967aed41206a8b 7d894bf83280521123e1b80b1257842ccd02d468 1edb30bcac3325a09739f8baaa60181dd133fd028b91a6e8d6470a1b0f4252c3
GET /L?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder&site=51254&ad=14189 HTTP/1.1
Host: refpamjeql.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 303 See Other
server: nginx
date: Sun, 07 Jul 2024 08:00:54 GMT
cache-control: private
location: https://1xlite-352419.top:443/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder
x-aspnetmvc-version: 5.0
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.003
X-Firefox-Spdy: h2
|
|
| 1xlite-352419.top/service-api/LineFeed/GetSportsShortZip?lng=en&country=137&virtualSports=true&gr=285&groupChamps=true | 178.253.28.169 | | 2.1 kB |
URL 1xlite-352419.top/service-api/LineFeed/GetSportsShortZip?lng=en&country=137&virtualSports=true&gr=285&groupChamps=true IP178.253.28.169:0 ASN#202492 Silverhill Group Holding Ltd
Hash1d1b1129cec8fd0cff475aa56393a45a e7b37a0e748ee0b9dd1627b83f4a83484e370a6e 56c77b94f92127453bd6f8a6d8cdc75d5a65117bf102c24eb73b65d726b47307
GET /service-api/LineFeed/GetSportsShortZip?lng=en&country=137&virtualSports=true&gr=285&groupChamps=true HTTP/1.1
Host: 1xlite-352419.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-352419.top/en?tag=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder; platform_type=desktop; auid=sv0cqWaKSzdbD+cPA6BIAg==; window_width=1280; SESSION=511efd04e0d48523b31184aa137ef02c; _glhf=1720357035; che_g=9b5505ea-8f71-8eb1-3d66-6476916658be
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:01 GMT
content-type: application/json; charset=utf-8
content-length: 2123
cache-control: public, max-age=5
content-encoding: br
last-modified: Sun, 07 Jul 2024 08:01:01 GMT
vary: Accept-Encoding
x-time-ng: 0.030
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.041
X-Firefox-Spdy: h2
|
|
| 1xlite-352419.top/web-api/api/v3/bonuses/welcome-bonuses | 178.253.28.169 | | 7.2 kB |
URL 1xlite-352419.top/web-api/api/v3/bonuses/welcome-bonuses IP178.253.28.169:0 ASN#202492 Silverhill Group Holding Ltd
Hash3b95c708633bddc9e7e22d49dad5fc0f a8df6625dbc748880d5d8c7848cf596f3745b87c e23bcc0d393deacc52f246838faf46a23d0bf4cfe70079980e20a4d0a2a80e53
GET /web-api/api/v3/bonuses/welcome-bonuses HTTP/1.1
Host: 1xlite-352419.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-352419.top/en?tag=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder; platform_type=desktop; auid=sv0cqWaKSzdbD+cPA6BIAg==; window_width=1280; SESSION=511efd04e0d48523b31184aa137ef02c; _glhf=1720357035; che_g=9b5505ea-8f71-8eb1-3d66-6476916658be
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:02 GMT
content-type: application/vnd.api+json
vary: Accept-Encoding
cache-control: no-cache, private
server-timing: p;dur=38, dt_total;dur=112.257, wf-uht;dur=0.133
traceparent: 00-b9dce7e46ad21cfe59f3619543ddcf76-786e177f09ad4053-01
x-dt: 285
x-time-ng: 0.039, 0.082
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sfiles/games-images/game-previews/190x102/game-58.webp | 185.244.209.62 | | 8.9 kB |
URL v3.traincdn.com/sfiles/games-images/game-previews/190x102/game-58.webp IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 380x204, Scaling: [none]x[none], YUV color, decoders should clamp Hash7a49dad906575c61dd636edbe1201479 d4bf0fbfadca8c6d3a7ec8f3d34d08fced98a21d 0e0cd085244f6272acfa6794d90e32685fa203973e85c62fa96f02cddf7172c6
GET /sfiles/games-images/game-previews/190x102/game-58.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:02 GMT
content-type: application/octet-stream
content-length: 8880
last-modified: Thu, 31 Aug 2023 08:11:00 GMT
etag: "7a49dad906575c61dd636edbe1201479"
x-amz-meta-origin-date-iso8601: 2023-08-31T08:03:42.000Z
expires: Tue, 14 Nov 2023 18:21:44 GMT
cache-control: max-age=86400, public
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-a68e4f4804fa71304901382c1bcf5500-e48367c7d801ceff-01
x-id: osix-hw-edge-gc4
age: 68431
cache: HIT
x-cached-since: 2024-07-06T13:00:31+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sfiles/games-images/game-previews/190x102/game-371.webp | 185.244.209.62 | 200 OK | 6.2 kB |
URL GET HTTP/2v3.traincdn.com/sfiles/games-images/game-previews/190x102/game-371.webp IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 380x204, Scaling: [none]x[none], YUV color, decoders should clamp Hash64ff358fd3a82358542d29d53649dd85 0a15b0731a9468fe49e3b512febe91d951ef6156 a9ae35f930c0bf59e407a0c082347049ae11738d330df4e32f4b2b1129d1470c
GET /sfiles/games-images/game-previews/190x102/game-371.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:02 GMT
content-type: application/octet-stream
content-length: 6158
last-modified: Thu, 31 Aug 2023 08:10:58 GMT
etag: "64ff358fd3a82358542d29d53649dd85"
x-amz-meta-origin-date-iso8601: 2023-08-31T08:04:04.000Z
expires: Tue, 14 Nov 2023 18:22:10 GMT
cache-control: max-age=86400, public
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-00e451ab8b81c4f0f1d32b33401b75f5-0bf951e458186eda-01
x-id: osix-hw-edge-gc4
age: 68431
cache: HIT
x-cached-since: 2024-07-06T13:00:31+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sfiles/games-images/game-previews/190x102/game-249.webp | 185.244.209.62 | 200 OK | 30 kB |
URL GET HTTP/2v3.traincdn.com/sfiles/games-images/game-previews/190x102/game-249.webp IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image Hash90a9264011c40b1eee0bcec096784ca5 ef8296408535b4ab1d98e81e4a098b412b1be550 006138f62f7d9d5e246cb0855b52f73ef61a93508ef265d63462c27d04299347
GET /sfiles/games-images/game-previews/190x102/game-249.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:02 GMT
content-type: application/octet-stream
content-length: 29808
last-modified: Tue, 11 Jun 2024 10:59:38 GMT
etag: "90a9264011c40b1eee0bcec096784ca5"
x-amz-meta-origin-date-iso8601: 2024-05-21T14:38:44.000Z
expires: Wed, 12 Jun 2024 21:51:33 GMT
cache-control: max-age=86400
x-time-ng: 0.044
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 70454
traceparent: 00-5b1fa75882c42eb8be7d9b6995b5064a-e4b43b5d3727d64e-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T13:00:31+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sfiles/games-images/game-previews/190x102/game-535.webp | 185.244.209.62 | | 16 kB |
URL v3.traincdn.com/sfiles/games-images/game-previews/190x102/game-535.webp IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 380x204, Scaling: [none]x[none], YUV color, decoders should clamp Hasha4f26f04a1515036351543048ade25b3 7b3c7f8451d72e16f8e989ddf243d76604299534 fe7ae4566565c9689badc8147e8638d0afbc102cdc3be5240300197eb28f15f1
GET /sfiles/games-images/game-previews/190x102/game-535.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:02 GMT
content-type: application/octet-stream
content-length: 16372
last-modified: Mon, 13 May 2024 08:03:41 GMT
etag: "a4f26f04a1515036351543048ade25b3"
x-amz-meta-origin-date-iso8601: 2024-05-10T08:07:44.000Z
expires: Thu, 06 Jun 2024 08:55:34 GMT
cache-control: max-age=86400
x-time-ng: 0.043
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-4dcaf6d3bc9ee99e382c5438bdb88769-f917e51d439cc1bf-01
x-id: osix-hw-edge-gc4
age: 50566
cache: HIT
x-cached-since: 2024-07-06T17:58:16+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-v3-host-app-static/Desktop/Default/44136fa355b3/entry-Dg4CcRcA.js | 185.244.209.62 | | 205 kB |
URL v3.traincdn.com/sys-static/sys-v3-host-app-static/Desktop/Default/44136fa355b3/entry-Dg4CcRcA.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Size205 kB (204907 bytes) Hashdd90445313763dd99e1a58530de9eae3 a63764b987df1545c62fb9bcf5a0c5683d045d8e 674c361ba67eaa2ccb8d0a72896e217dba6363cde4469295f2b0513b0c9ff98a
GET /sys-static/sys-v3-host-app-static/Desktop/Default/44136fa355b3/entry-Dg4CcRcA.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:02 GMT
content-type: text/javascript; charset=utf-8
last-modified: Fri, 05 Jul 2024 11:49:55 GMT
etag: W/"513729c2e6da892c9391418869eb832c"
x-amz-meta-mtime: 1720180082.962126614
content-encoding: gzip
expires: Sat, 06 Jul 2024 11:57:57 GMT
cache-control: max-age=86400
x-time-ng: 0.004
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 71711
traceparent: 00-424d9045f9c7766e66be228119b89597-31ff954353fc22fe-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:07:34+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/cms/1/desktop/banner/66cfc07a05bd3e7f7df076d3ebdf8149.jpg | 185.244.209.62 | 200 OK | 57 kB |
URL GET HTTP/2v3.traincdn.com/genfiles/cms/1/desktop/banner/66cfc07a05bd3e7f7df076d3ebdf8149.jpg IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1380x248, components 3 Hashfd078afb3e07587659ed82dc7a8ae696 3fb6a7513424402ea442dbc2b2454ea9e6e51c03 fff97a8c2d642428627f41c279e44e1d83ddbe0b0ec4f4dcd63b2ef00f572dd3
GET /genfiles/cms/1/desktop/banner/66cfc07a05bd3e7f7df076d3ebdf8149.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:04 GMT
content-type: image/jpeg
content-length: 57090
last-modified: Wed, 05 Jun 2024 08:09:12 GMT
etag: "fd078afb3e07587659ed82dc7a8ae696"
expires: Wed, 05 Jun 2024 09:10:37 GMT
cache-control: max-age=3600
x-time-ng: 0.001
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-4ec4a5801253b00d5ea6952515006194-a918f02a11b3e4ab-01
x-id: osix-hw-edge-gc4
age: 1004
cache: HIT
x-cached-since: 2024-07-07T07:44:20+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-v3-host-app-static/Desktop/Default/44136fa355b3/Dhh0v2qqpNwM.css | 185.244.209.62 | | 40 kB |
URL v3.traincdn.com/sys-static/sys-v3-host-app-static/Desktop/Default/44136fa355b3/Dhh0v2qqpNwM.css IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hash70c4b5aa72951e8bf62a41162e0aa86b 54656b70f99154fadca687d96a4896bc0c17dd73 f1200215f5e5252cc11dd74d80dd3a41ab9e07b78e6338ef0a1fbb3d12d4a1f0
GET /sys-static/sys-v3-host-app-static/Desktop/Default/44136fa355b3/Dhh0v2qqpNwM.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:02 GMT
content-type: text/css; charset=utf-8
last-modified: Fri, 05 Jul 2024 11:49:54 GMT
etag: W/"557da32e9540a80c4ae73db579fa8867"
x-amz-meta-mtime: 1720180082.958126683
content-encoding: gzip
expires: Sun, 07 Jul 2024 10:15:11 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 78351
traceparent: 00-29343ce0412d27e5d483e997e330f171-5b89d3fd1292bb78-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T11:07:50+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/cms/1/desktop/banner/418eeb95206a6d02b1a47a929cd4641e.webp | 185.244.209.62 | | 29 kB |
URL v3.traincdn.com/genfiles/cms/1/desktop/banner/418eeb95206a6d02b1a47a929cd4641e.webp IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1380x248, Scaling: [none]x[none], YUV color, decoders should clamp Hashf6bb253c5605dc401a688f6641f5ec33 4c3a294bf2479b7c51e6f145e5f065c0801b3dab 6a60d6743c6319188888bdb9c23c1a2ceb2db4a0bd4633fd57344dd3634fc840
GET /genfiles/cms/1/desktop/banner/418eeb95206a6d02b1a47a929cd4641e.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:04 GMT
content-type: image/webp
content-length: 28904
last-modified: Thu, 06 Jun 2024 10:11:13 GMT
etag: "f6bb253c5605dc401a688f6641f5ec33"
expires: Thu, 06 Jun 2024 11:12:59 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
traceparent: 00-9e33002269ab1e9ff31731f64327782a-119f6e0dd9b8f435-01
x-id: osix-hw-edge-gc4
age: 1004
cache: HIT
x-cached-since: 2024-07-07T07:44:20+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/cms/1/desktop/banner/d94c9b1508a286d270c77946ff0972fa.webp | 185.244.209.62 | | 15 kB |
URL v3.traincdn.com/genfiles/cms/1/desktop/banner/d94c9b1508a286d270c77946ff0972fa.webp IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1380x248, Scaling: [none]x[none], YUV color, decoders should clamp Hash2ccdf625b855ce93bc9b56a671accd6e bc8f3a791f6251b714bafad614d15c477ba428e4 c5012a832581da604a5c57e8f822008f749fe484c6d24127ca91232af71169cd
GET /genfiles/cms/1/desktop/banner/d94c9b1508a286d270c77946ff0972fa.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:04 GMT
content-type: image/webp
content-length: 14610
last-modified: Thu, 08 Jun 2023 09:20:03 GMT
etag: "2ccdf625b855ce93bc9b56a671accd6e"
x-time-ng: 0.002
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-0b5895cefbb1dace3f03d21f53001c32-2050fe6fa10681fc-01
x-id: osix-hw-edge-gc4
age: 1004
cache: HIT
x-cached-since: 2024-07-07T07:44:20+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/cms/1/desktop/banner/0bb91718af454211634da984d6033def.jpg | 185.244.209.62 | | 104 kB |
URL v3.traincdn.com/genfiles/cms/1/desktop/banner/0bb91718af454211634da984d6033def.jpg IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeJPEG image data, progressive, precision 8, 1380x248, components 3 Size104 kB (104333 bytes) Hashea11137a30ed5475c5a12ab03ca67764 ff9935c7d67a539b24d69a0f5ec848a6bb4a2055 ce98a05ba3f3a70445c6ee268756247867ec05384317d2891d7b927a8c06e102
GET /genfiles/cms/1/desktop/banner/0bb91718af454211634da984d6033def.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:04 GMT
content-type: image/jpeg
content-length: 104333
last-modified: Tue, 11 Apr 2023 18:13:54 GMT
etag: "ea11137a30ed5475c5a12ab03ca67764"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 3323
traceparent: 00-be6307740216eb2379ef76044a438047-c4e9cb269325bba1-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-07T07:44:20+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| widget.suphelper.top/_next/static/59d69bf9/_ssgManifest.js |  104.18.39.72 | | 148 kB |
URL widget.suphelper.top/_next/static/59d69bf9/_ssgManifest.js IP104.18.39.72:0
File typegzip compressed data, from Unix Size148 kB (147463 bytes) Hash8dc6a7cca37b552bbb47f4767d039328 1bf5f347ce2f8591d16104aedb5015cc2e61608c 3a60eedb082483556005c5e8458190b920e2b31f2c02c54e1097fe2108fa4f6c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/59d69bf9/_ssgManifest.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 07 Jul 2024 08:01:02 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Fri, 14 Jun 2024 10:55:59 GMT
etag: W/"4d-1901663d311"
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 1975915
expires: Mon, 07 Jul 2025 08:01:02 GMT
server: cloudflare
cf-ray: 89f64de67ec9712f-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| 1xlite-352419.top/web-api/registration | 178.253.28.169 | | 36 kB |
URL 1xlite-352419.top/web-api/registration IP178.253.28.169:0 ASN#202492 Silverhill Group Holding Ltd
Hashceea7fd7e6148fd9dc744fc633e1d416 494d9ec66e794c953a589aee249e25f6d24bfaa0 3e421090d52ac8e0ec38a9f4295b85469b8dc3edbadc39f16aa0bc26c158c285
POST /web-api/registration HTTP/1.1
Host: 1xlite-352419.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-352419.top/en?tag=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
Content-Length: 17
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Cookie: lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder; platform_type=desktop; auid=sv0cqWaKSzdbD+cPA6BIAg==; window_width=1280; SESSION=511efd04e0d48523b31184aa137ef02c; _glhf=1720357035; che_g=9b5505ea-8f71-8eb1-3d66-6476916658be; sh.session.id=51cd57e8-7b17-4583-9aa1-25e93a7309d9; ggru=195
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:04 GMT
content-type: application/vnd.api+json
vary: Accept-Encoding
cache-control: no-cache, private
server-timing: p;dur=79, dt_total;dur=102.236, wf-uht;dur=0.112
traceparent: 00-689f31af444fb9b895a525b854979c05-40db5608cbd8cab5-01
x-dt: 285
x-time-ng: 0.079, 0.087
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-ui/3.2.142/Desktop/Default/client.css | 185.244.209.62 | | 182 kB |
URL v3.traincdn.com/sys-ui/3.2.142/Desktop/Default/client.css IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Size182 kB (182104 bytes) Hash8da7459cea6fe1a7efc2e94c8d846784 a6520197a1a0853ca83b9db1e0680155d7ffaf33 4a9d47be02d655ac2ceeba38fcb7b064e1c2ad72b2b0c7fcf0eac35d3c4c8869
GET /sys-ui/3.2.142/Desktop/Default/client.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:02 GMT
content-type: text/css; charset=utf-8
last-modified: Fri, 28 Jun 2024 10:00:27 GMT
etag: W/"fd2b03a760af09957b31b6a796ee3fdf"
x-amz-meta-mtime: 1719568825.381843604
content-encoding: gzip
expires: Tue, 02 Jul 2024 06:48:16 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 89719
traceparent: 00-90d053fab64f7663603aff27eefa8788-2d5734d9e5ad8e82-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T08:23:24+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| widget.suphelper.top/_next/static/chunks/0c294a17-7efa3cbf6c9d3fc6.js | 104.18.39.72 | | 41 kB |
URL widget.suphelper.top/_next/static/chunks/0c294a17-7efa3cbf6c9d3fc6.js IP104.18.39.72:0
File typegzip compressed data, from Unix Hashb694de21594d82bcaf6b43af8bc1ff09 4eaa31bce159b9b5ec3172f14280d624f3118841 f48bc814aa5806188600e763d407e60fc1f0b392cae64f690871e20db2deec49
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/0c294a17-7efa3cbf6c9d3fc6.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 07 Jul 2024 08:01:02 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/ https://cdn.jsdelivr.net/npm/@emoji-mart/data@latest/i18n/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=31536000
last-modified: Wed, 29 May 2024 06:00:08 GMT
etag: W/"2f7f-18fc2ef392b"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 168593
expires: Mon, 07 Jul 2025 08:01:02 GMT
server: cloudflare
cf-ray: 89f64de66eb6712f-OSL
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/cms/betstemplates/bets_model_full_en_0.json | 185.244.209.62 | | 5.4 kB |
URL v3.traincdn.com/genfiles/cms/betstemplates/bets_model_full_en_0.json IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hash13211db9fb2db4993b187eba6c5d26e5 d8826f54f6045b8c5cbd6aba5bf5b18097201c86 4ca197dbb21a9ee0ff8e1630eb79eea5291ee4174b71b5acbb5a97b59013733c
GET /genfiles/cms/betstemplates/bets_model_full_en_0.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-352419.top/
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:02 GMT
content-type: application/json
last-modified: Fri, 05 Jul 2024 06:22:39 GMT
etag: W/"65c4f8441dea9f78c50a9fc7029f9193"
content-encoding: gzip
expires: Fri, 05 Jul 2024 07:56:59 GMT
cache-control: max-age=3600
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 4075
traceparent: 00-c80ab1110b970eb91a1694a7a7bb94b5-bd5056e4890d648d-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-07T07:09:33+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_en_0.json | 185.244.209.62 | 200 OK | 9.7 kB |
URL GET HTTP/2v3.traincdn.com/genfiles/cms/betstemplates/bets_model_short_en_0.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hash4e52fab3cbca4ba43f0d26d1105f0f55 06818cfbed7a75a89230022d21340b15fb305bea 695f2da31e076220fc3c19605a7bc6851ec0f74a8a591403d9f3881d86103d07
GET /genfiles/cms/betstemplates/bets_model_short_en_0.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-352419.top/
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:06 GMT
content-type: application/json
last-modified: Fri, 05 Jul 2024 06:22:33 GMT
etag: W/"d3e39abc76f19e176765d21ac9e70c5c"
content-encoding: gzip
expires: Fri, 05 Jul 2024 07:56:37 GMT
cache-control: max-age=3600
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 4419
traceparent: 00-18622c1ca775f58c0d3758257db2f6a5-592dc54da722c67c-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-07T07:42:09+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/shared-assets/__shared_chunk_Y7BFQXXC.js | 185.244.209.62 | 200 OK | 8.8 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/shared-assets/__shared_chunk_Y7BFQXXC.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hashd36f5a84db5a75563229fac29ea0ec52 6bcc394793fac83b2e1bc64022a9b7241a332d4a bb13d982e6a6493608f38a1a9d5a5b9aa52d38c53932761e1be38058e280d2eb
GET /sys-static/shared-assets/__shared_chunk_Y7BFQXXC.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:06 GMT
content-type: text/javascript; charset=utf-8
last-modified: Fri, 05 Jul 2024 15:44:23 GMT
etag: W/"8fecd56fc5520134f3c39b17431fe0c2"
x-amz-meta-mtime: 1720194149.297045056
content-encoding: gzip
expires: Sun, 07 Jul 2024 15:19:06 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 60120
traceparent: 00-3b3adc21158754e410b1baa1664d066c-17548fa29d943ce3-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T19:54:54+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/resized/size16/sfiles/logo_teams/7cbba2481cbfb95bd4799660d64268a9.webp | 185.244.209.62 | | 806 B |
URL v3.traincdn.com/resized/size16/sfiles/logo_teams/7cbba2481cbfb95bd4799660d64268a9.webp IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeRIFF (little-endian) data, Web/P image Hashd5cece26279a0589bb1093c624bac9c7 9e51144c9d5979eb0031cb79b292f2bc95132752 a9ef4f2ab068dc434c00b43f6bb23131a48f7be65020f14d8eea0931fa2f8af3
GET /resized/size16/sfiles/logo_teams/7cbba2481cbfb95bd4799660d64268a9.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:07 GMT
content-type: image/webp
content-length: 806
cache-control: max-age=94608000
content-disposition: inline; filename="7cbba2481cbfb95bd4799660d64268a9.webp"
content-security-policy: script-src 'none'
expires: Tue, 06 Jul 2027 07:38:30 GMT
x-request-id: 8c84c2b39e7db3e6f305ab147769c6fd
x-time-ng: 0.027
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 87757
traceparent: 00-d45a44da761bf6feaf4ba5860a0c3e73-2ae0e6cca97bdff8-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T07:39:55+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/resized/size16/sfiles/logo_teams/65708a56e0edd925374a1b673b087aad.webp | 185.244.209.62 | | 734 B |
URL v3.traincdn.com/resized/size16/sfiles/logo_teams/65708a56e0edd925374a1b673b087aad.webp IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeRIFF (little-endian) data, Web/P image Hashf2413c2a9c6ac21feee3eb2c033ba297 c0e4ed6b6ad6d7a0599306ecb9c1815f2106c717 a226fac59343857b57289f1258be9706339c563f6e6852504be766f01a0764e8
GET /resized/size16/sfiles/logo_teams/65708a56e0edd925374a1b673b087aad.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:07 GMT
content-type: image/webp
content-length: 734
cache-control: max-age=94608000
content-disposition: inline; filename="65708a56e0edd925374a1b673b087aad.webp"
content-security-policy: script-src 'none'
expires: Thu, 24 Jun 2027 20:33:22 GMT
x-request-id: c3846866734baf46a36fecf931c3d371
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 1078065
traceparent: 00-be8a2abdd5fe3b4ea21b7cc123cb483e-de39ce66710740d6-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-06-24T21:02:08+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/shared-assets/__shared_localforage_PLMWICWN.js | 185.244.209.62 | | 12 kB |
URL v3.traincdn.com/sys-static/shared-assets/__shared_localforage_PLMWICWN.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hash1941283e75ed9fe6526176e6fa48d53d c98dd58a422938b17d534b192588dc881f6cd102 821376046a6db463d69e11574439521bcab68a49ff27070a426682c27cae8e5a
GET /sys-static/shared-assets/__shared_localforage_PLMWICWN.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:05 GMT
content-type: text/javascript; charset=utf-8
last-modified: Fri, 05 Jul 2024 15:44:23 GMT
etag: W/"dfa127e93d125d4f6c566203eaf225f2"
x-amz-meta-mtime: 1720194149.297045056
content-encoding: gzip
expires: Sun, 07 Jul 2024 15:19:14 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 60111
traceparent: 00-23efbb343364f8aebeb1ea4581584919-61500a3d40925c79-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T16:15:51+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| widget.suphelper.top/ | 104.18.39.72 | | 137 kB |
IP104.18.39.72:0
File typegzip compressed data, from Unix Size137 kB (137080 bytes) Hashe8bb8ef861c44f3cd1fabf57fec5cfcb 26f945ae2dd1e2a5da39717ed840ea150e8bacea 5c27d513579c9351ce33ce9621e3bd9c5a9da6103ca3c87abc5c1458ee066df9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 07 Jul 2024 08:01:02 GMT
content-type: text/html; charset=utf-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/ https://cdn.jsdelivr.net/npm/@emoji-mart/data@latest/i18n/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=60, stale-while-revalidate=30
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 89f64de4fda4712f-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/resized/size16/sfiles/logo_teams/55fd7811ee577b864b9df1db2016af2b.webp | 185.244.209.62 | | 556 B |
URL v3.traincdn.com/resized/size16/sfiles/logo_teams/55fd7811ee577b864b9df1db2016af2b.webp IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeRIFF (little-endian) data, Web/P image Hasheb42eec72fc845df901a408fdf525d65 c69ee0b28a04bf67b7b08c5e936444231bd5e395 e212be7c65ac7e6a01ac5482c26e4a2558ad97f11c682d168437f8c7e6ce7048
GET /resized/size16/sfiles/logo_teams/55fd7811ee577b864b9df1db2016af2b.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:07 GMT
content-type: image/webp
content-length: 556
cache-control: max-age=94608000
content-disposition: inline; filename="55fd7811ee577b864b9df1db2016af2b.webp"
content-security-policy: script-src 'none'
expires: Mon, 05 Jul 2027 06:36:24 GMT
x-request-id: 4701f1eb41dd15a75713ca4285267bfd
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 177883
traceparent: 00-74abb9477e3ee5de6214cc2c0318c9f1-fccc9d696291b977-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-05T07:21:35+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/resized/size16/sfiles/logo_teams/62695.webp | 185.244.209.62 | 200 OK | 618 B |
URL GET HTTP/2v3.traincdn.com/resized/size16/sfiles/logo_teams/62695.webp IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image Hashe6a61a8e5ceefb64054bb389b478f834 a194970c3e5c2be35b13add00a235eb910c9ed04 e77e21f7e682a7bffc46b8c1023f00fa5f4326e3cb7b4cd326a9a8677eb9efac
GET /resized/size16/sfiles/logo_teams/62695.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:07 GMT
content-type: image/webp
content-length: 618
cache-control: max-age=94608000
content-disposition: inline; filename="62695.webp"
content-security-policy: script-src 'none'
expires: Sun, 04 Jul 2027 20:57:10 GMT
x-request-id: d00cd8e0630a86117fa112af8c76a153
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 212637
traceparent: 00-5d352e800e13fbac56314f66b80d30fa-7c01b6e322503ffa-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-05T15:31:19+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/resized/size16/sfiles/logo_teams/53a6ca2be09a065e16c8d637abefef43.webp | 185.244.209.62 | | 608 B |
URL v3.traincdn.com/resized/size16/sfiles/logo_teams/53a6ca2be09a065e16c8d637abefef43.webp IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeRIFF (little-endian) data, Web/P image Hash023781f0d70f1517a13897947fbcf2e5 c3a5f44b32948a5cc01c614946972d7ad9dff3db 4ae0b7fbd6dd9b5a9c148fe4f2e5ed0970f44ff766fbd35e56624a1be1697857
GET /resized/size16/sfiles/logo_teams/53a6ca2be09a065e16c8d637abefef43.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:07 GMT
content-type: image/webp
content-length: 608
cache-control: max-age=94608000
content-disposition: inline; filename="53a6ca2be09a065e16c8d637abefef43.webp"
content-security-policy: script-src 'none'
expires: Sat, 03 Jul 2027 13:19:09 GMT
x-request-id: e94e5ac79f620c4a4ea1834f4e05934c
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 326518
traceparent: 00-d6cc1a57841eefd463320a672235f13e-a67f9bcd3f3edbff-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-04T06:55:14+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/resized/size16/sfiles/logo_teams/542445.webp | 185.244.209.62 | | 710 B |
URL v3.traincdn.com/resized/size16/sfiles/logo_teams/542445.webp IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeRIFF (little-endian) data, Web/P image Hashb44767cbb013062d7f8a698abada8e6c ef5e6400ed603f105a7ed41561594f6ce58e17d4 6fe17185b4df8e9e69c609121af16a34e6ce48410405d8335eacea61a4423728
GET /resized/size16/sfiles/logo_teams/542445.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:07 GMT
content-type: image/webp
content-length: 710
cache-control: max-age=94608000
content-disposition: inline; filename="542445.webp"
content-security-policy: script-src 'none'
expires: Mon, 05 Jul 2027 11:21:11 GMT
x-request-id: 07eaddff057453fb279bc834540736b3
x-time-ng: 0.036
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 160796
traceparent: 00-b9577cd814f4771edda2cfeab0040a66-9d76b9da219c2460-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-05T18:57:30+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/resized/size16/sfiles/logo_teams/362c2dadc3c37a4b62c2ff02b8470c24.webp | 185.244.209.62 | | 764 B |
URL v3.traincdn.com/resized/size16/sfiles/logo_teams/362c2dadc3c37a4b62c2ff02b8470c24.webp IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeRIFF (little-endian) data, Web/P image Hash3131b3db62dbcef6673d0111711fa981 c3abbea736c2bcfb8e9de66aa3b2138a8805f3d2 a6579d135db18da8d330173ec179942190da152076a0372436d19099b2200b12
GET /resized/size16/sfiles/logo_teams/362c2dadc3c37a4b62c2ff02b8470c24.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:07 GMT
content-type: image/webp
content-length: 764
cache-control: max-age=94608000
content-disposition: inline; filename="362c2dadc3c37a4b62c2ff02b8470c24.webp"
content-security-policy: script-src 'none'
expires: Wed, 07 Jul 2027 02:47:23 GMT
x-request-id: 50d18e4bda1a331d0fe838776eafdff4
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 18824
traceparent: 00-e26b877a4e7194cff23b403df12dd681-04892932846f0c98-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-07T04:24:39+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| widget.suphelper.top/_next/static/chunks/1743016e-d00d67a74426f155.js | 104.18.39.72 | 200 OK | 83 kB |
URL GET HTTP/2widget.suphelper.top/_next/static/chunks/1743016e-d00d67a74426f155.js IP104.18.39.72:443
Requested byhttps://widget.suphelper.top/ CertificateIssuerGoogle Trust Services LLC Subjectsuphelper.top Fingerprint19:31:44:4F:9D:DE:4C:F2:AD:44:DB:B5:31:C3:20:A9:DB:3D:26:4A ValidityFri, 24 May 2024 09:49:21 GMT - Thu, 22 Aug 2024 09:49:20 GMT
File typegzip compressed data, from Unix Hash76595f4982a54419cda8f0866fa939d3 99f88205d9871f33031d8c7a5b430d9b5b1d2cdc 2ddc94aa665995c058518e9e44bb4d484544f66673b78ab09b45cd682052e247
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/1743016e-d00d67a74426f155.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 07 Jul 2024 08:01:02 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/ https://cdn.jsdelivr.net/npm/@emoji-mart/data@latest/i18n/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=31536000
last-modified: Wed, 17 Jan 2024 06:19:55 GMT
etag: W/"75543-18d161388b8"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 2072145
expires: Mon, 07 Jul 2025 08:01:02 GMT
server: cloudflare
cf-ray: 89f64de64ea0712f-OSL
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/resized/size16/sfiles/logo_teams/69fa8ba816328e45b7a7c185d306ca63.webp | 185.244.209.62 | 200 OK | 774 B |
URL GET HTTP/2v3.traincdn.com/resized/size16/sfiles/logo_teams/69fa8ba816328e45b7a7c185d306ca63.webp IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image Hash8728b50588b83a33b3731b457f12ee72 8509704d664cc450157a3d5c3f88704d6a522d19 83bd52b383c6991d3fbb1f8f0ae65f007f819f66e24bc0f9330a2866409fe8f9
GET /resized/size16/sfiles/logo_teams/69fa8ba816328e45b7a7c185d306ca63.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:07 GMT
content-type: image/webp
content-length: 774
cache-control: max-age=94608000
content-disposition: inline; filename="69fa8ba816328e45b7a7c185d306ca63.webp"
content-security-policy: script-src 'none'
expires: Sun, 04 Jul 2027 22:35:14 GMT
x-request-id: d4730737d04a5e33752e045292ece520
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 206753
traceparent: 00-fc581bf842200a38d7b12f6108d84f70-76d063053b637f0d-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-07T07:56:22+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/resized/size16/sfiles/logo_teams/9ea4276b474bcfd73d014e584c018ece.webp | 185.244.209.62 | | 580 B |
URL v3.traincdn.com/resized/size16/sfiles/logo_teams/9ea4276b474bcfd73d014e584c018ece.webp IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeRIFF (little-endian) data, Web/P image Hashc32218f27251c9c110d0155ded4dd399 2f9dad3145bd62d246bad95698beef89a51e1e11 b50f27e3cce48cbe691b552ac7e30ece7affc6f6896a8cb779f4b2bb1f5889b0
GET /resized/size16/sfiles/logo_teams/9ea4276b474bcfd73d014e584c018ece.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:07 GMT
content-type: image/webp
content-length: 580
cache-control: max-age=94608000
content-disposition: inline; filename="9ea4276b474bcfd73d014e584c018ece.webp"
content-security-policy: script-src 'none'
expires: Wed, 07 Jul 2027 08:00:00 GMT
x-request-id: 5b4927bd2a9830366bf06ed127f06a51
x-time-ng: 0.035
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 67
traceparent: 00-d1f9942d7381dc4c9e921c30bc8be546-4561baa29dbb60d7-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-07T08:00:03+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/resized/size16/sfiles/logo_teams/694045.webp | 185.244.209.62 | 200 OK | 838 B |
URL GET HTTP/2v3.traincdn.com/resized/size16/sfiles/logo_teams/694045.webp IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image Hash90783bac077727dbfffb4c898683d398 661d137b2309f990040805b3e4856edbbe8d23bb 7dcc5b9a6c51e2f0bca27d3389fbd9a1aa5e6c9567571fdc1f95727683914b08
GET /resized/size16/sfiles/logo_teams/694045.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:07 GMT
content-type: image/webp
content-length: 838
cache-control: max-age=94608000
content-disposition: inline; filename="694045.webp"
content-security-policy: script-src 'none'
expires: Wed, 07 Jul 2027 08:00:00 GMT
x-request-id: 1367aec644d7e37e768d8903e634fa69
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 67
traceparent: 00-88b78253916c6e63b1053773d69e2b70-48df43e4d71de005-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-07T08:00:03+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/resized/size16/sfiles/logo_teams/600b2aeacbc2a588fa5f4f21b6a9c0d3.webp | 185.244.209.62 | 200 OK | 802 B |
URL GET HTTP/2v3.traincdn.com/resized/size16/sfiles/logo_teams/600b2aeacbc2a588fa5f4f21b6a9c0d3.webp IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image Hash289bcfcf8433010901eb4e8d135ddac6 9f6eacb63ba39cdc0fc3659b0929c3c3dcd257a7 a86f54d437e0412ced641a4b599ecacd7ca7a94f58ec8a1eaa3d0355d9f3d513
GET /resized/size16/sfiles/logo_teams/600b2aeacbc2a588fa5f4f21b6a9c0d3.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:07 GMT
content-type: image/webp
content-length: 802
cache-control: max-age=94608000
content-disposition: inline; filename="600b2aeacbc2a588fa5f4f21b6a9c0d3.webp"
content-security-policy: script-src 'none'
expires: Wed, 07 Jul 2027 07:31:28 GMT
x-request-id: 8f11d514a8fa0b8cecd190b78dd045d9
x-time-ng: 0.045
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 1779
traceparent: 00-40c2d7f8960c989085e89f7893bfdfbe-b1bca5be974c333b-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-07T07:31:31+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| 1xlite-352419.top/web-api/external-api/v3/banners?project_id=285&country_code=NO&language=en&platform=2§ion=6&is_auth=false&limit=100 | 178.253.28.169 | | 278 kB |
URL 1xlite-352419.top/web-api/external-api/v3/banners?project_id=285&country_code=NO&language=en&platform=2§ion=6&is_auth=false&limit=100 IP178.253.28.169:0 ASN#202492 Silverhill Group Holding Ltd
Size278 kB (277973 bytes) Hash2adb168c77890ce81453f39c676b9287 3a352ae9658131b89b0474f551fba0d56180dfbf 1f56d55c447199b5f60e381e2a5d8d05b5fbea1c8c22fa56669ae2b4562f8caf
GET /web-api/external-api/v3/banners?project_id=285&country_code=NO&language=en&platform=2§ion=6&is_auth=false&limit=100 HTTP/1.1
Host: 1xlite-352419.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-352419.top/en?tag=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder; platform_type=desktop; auid=sv0cqWaKSzdbD+cPA6BIAg==; window_width=1280; SESSION=511efd04e0d48523b31184aa137ef02c; _glhf=1720357035; che_g=9b5505ea-8f71-8eb1-3d66-6476916658be
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:02 GMT
content-type: application/vnd.api+json
vary: Accept-Encoding
cache-control: no-cache, private
server-timing: p;dur=103, dt_total;dur=105.409, wf-uht;dur=0.121
traceparent: 00-787a8db3d18518107051167fd4bb58a0-d5e88f25b1192667-01
x-dt: 285
x-time-ng: 0.104, 0.105
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/resized/size16/sfiles/logo_teams/811637d7db0e565efdc44a6239847e8d.webp | 185.244.209.62 | | 778 B |
URL v3.traincdn.com/resized/size16/sfiles/logo_teams/811637d7db0e565efdc44a6239847e8d.webp IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeRIFF (little-endian) data, Web/P image Hashb7caf29bc061a0bb2106b6a6045a3d85 f12cd20a3167bb31fead9bbf5c13508d483c523e fef3a87aafa54623c80633fc939d06e767a24275e5067566e7e2ce96c1d5dda7
GET /resized/size16/sfiles/logo_teams/811637d7db0e565efdc44a6239847e8d.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:07 GMT
content-type: image/webp
content-length: 778
cache-control: max-age=94608000
content-disposition: inline; filename="811637d7db0e565efdc44a6239847e8d.webp"
content-security-policy: script-src 'none'
expires: Wed, 07 Jul 2027 07:58:33 GMT
x-request-id: 378dc14e6ef038b4f1f1f21ff2a40599
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 154
traceparent: 00-a01e5306b838b5749ebc862ec623cc12-63fe8d5b730eefa7-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-07T07:58:41+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-icons/1.0.395/285/sports.svg | 185.244.209.62 | | 208 kB |
URL v3.traincdn.com/sys-icons/1.0.395/285/sports.svg IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Size208 kB (207842 bytes) Hash64d720e0a890f79f43451f7e9fa00a7b 82c20804a0a890890718255d7196c7b4a1384496 c8cdf1172de9c7c8675c89e670a300b852affc21766c504211da151a8b51fb6a
GET /sys-icons/1.0.395/285/sports.svg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:01 GMT
content-type: image/svg+xml
last-modified: Mon, 24 Jun 2024 10:14:24 GMT
etag: W/"0aedf37fd1d4dc9b3280de34cde6071b"
x-amz-meta-mtime: 1719224059.914207216
content-encoding: gzip
expires: Wed, 03 Jul 2024 07:12:35 GMT
cache-control: max-age=86400
x-time-ng: 0.005
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 87798
traceparent: 00-bf4467c9bf13d66f3f0acf463c97177f-d522227b6674fd0f-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T08:17:55+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/resized/size16/sfiles/logo_teams/f21b96373e32923570e31d8b7361b832.webp | 185.244.209.62 | | 792 B |
URL v3.traincdn.com/resized/size16/sfiles/logo_teams/f21b96373e32923570e31d8b7361b832.webp IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeRIFF (little-endian) data, Web/P image Hashbd03f6269e729f7d2e7595baa00a345d e38de25d20cb0fa06448d299ac7ada41e9a64ad0 ab1642b7a799854f6e9c546dd677e9dfc681d79a347dab1199cde38e939a93f9
GET /resized/size16/sfiles/logo_teams/f21b96373e32923570e31d8b7361b832.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:07 GMT
content-type: image/webp
content-length: 792
cache-control: max-age=94608000
content-disposition: inline; filename="f21b96373e32923570e31d8b7361b832.webp"
content-security-policy: script-src 'none'
expires: Wed, 07 Jul 2027 07:59:58 GMT
x-request-id: ba2fadf75dad3f3f4b255b9482ebc859
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 69
traceparent: 00-f24c28176e5a429138b3d1e0b245d11e-ccef2e26e7d262fc-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-07T08:00:03+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/resized/size16/sfiles/logo_teams/518f5ff1f902d853b7b3e5809da83acc.webp | 185.244.209.62 | | 706 B |
URL v3.traincdn.com/resized/size16/sfiles/logo_teams/518f5ff1f902d853b7b3e5809da83acc.webp IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeRIFF (little-endian) data, Web/P image Hashd2e3561385d3e27c04170b8d4df434b0 a9a8864dee1854adb060b726bf9797dc6f15a995 a6fe0a373be1829b3479a2421805959c207a6a65abf4103d46834d161fa45d01
GET /resized/size16/sfiles/logo_teams/518f5ff1f902d853b7b3e5809da83acc.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:07 GMT
content-type: image/webp
content-length: 706
cache-control: max-age=94608000
content-disposition: inline; filename="518f5ff1f902d853b7b3e5809da83acc.webp"
content-security-policy: script-src 'none'
expires: Tue, 06 Jul 2027 08:18:20 GMT
x-request-id: 0a7178610f94e7bbeeca7c4d37b03860
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 85367
traceparent: 00-24fa9ec08a0f1092516b7172a04a413f-b30adc9e3a183f8e-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-07T08:00:03+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| 1xlite-352419.top/web-api/session | 178.253.28.169 | | 0 B |
URL 1xlite-352419.top/web-api/session IP178.253.28.169:0 ASN#202492 Silverhill Group Holding Ltd
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /web-api/session HTTP/1.1
Host: 1xlite-352419.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-352419.top/en?tag=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder; platform_type=desktop; auid=sv0cqWaKSzdbD+cPA6BIAg==; window_width=1280; SESSION=511efd04e0d48523b31184aa137ef02c; _glhf=1720357035; che_g=9b5505ea-8f71-8eb1-3d66-6476916658be; sh.session.id=51cd57e8-7b17-4583-9aa1-25e93a7309d9; ggru=195
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sun, 07 Jul 2024 08:01:08 GMT
cache-control: no-cache, private
server-timing: p;dur=22, dt_total;dur=78.142, wf-uht;dur=0.089
traceparent: 00-34942728e27bdf15655dca3faa0e0e07-0b512057577c4202-01
x-dt: 285
x-time-ng: 0.024, 0.046
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/shared-assets/__shared_sweetalert2_X3CQ7PJQ.js | 185.244.209.62 | | 72 kB |
URL v3.traincdn.com/sys-static/shared-assets/__shared_sweetalert2_X3CQ7PJQ.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hashb8d951fc8887a537a2e6bb3d9420b9f0 d4d58f726dc1dd53e19aa5781509f6861d9f330c 8b068abefa1eea9fda59c8904557e0e85a526ea1a09016a3852dd93554cfb973
GET /sys-static/shared-assets/__shared_sweetalert2_X3CQ7PJQ.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:05 GMT
content-type: text/javascript; charset=utf-8
last-modified: Fri, 05 Jul 2024 15:44:23 GMT
etag: W/"138de5d55ee831195dd90bbf5c557926"
x-amz-meta-mtime: 1720194149.297045056
content-encoding: gzip
expires: Sun, 07 Jul 2024 15:19:15 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 60110
traceparent: 00-958f238fca5d9228e033047249190bdf-f082a1d505af4577-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T16:17:17+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/shared-assets/__shared_popper_js_MO5RLEN3.js | 185.244.209.62 | 200 OK | 21 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/shared-assets/__shared_popper_js_MO5RLEN3.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hashbf93ad10fb46a749e08d2acecd50af67 2074942bd49916c0694733f8e22b6f9e0af7e89a 2a304973f2b7017d7925ca0043bbdc8d9ea508dd6f0ce1075f6f439db3490446
GET /sys-static/shared-assets/__shared_popper_js_MO5RLEN3.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:05 GMT
content-type: text/javascript; charset=utf-8
last-modified: Fri, 05 Jul 2024 15:44:23 GMT
etag: W/"598d5481ac96b9bf8013b0eb1413b8e5"
x-amz-meta-mtime: 1720194149.297045056
content-encoding: gzip
expires: Sun, 07 Jul 2024 15:34:59 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 59166
traceparent: 00-8e46c932108e66f3a22b084708087be0-fd1d92ce8bc9e3bf-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T15:45:48+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| 1xlite-352419.top/service-api/LiveFeed/GetSportsShortZip?lng=en&gr=285&country=137&virtualSports=true&groupChamps=true | 178.253.28.169 | 200 OK | 2.8 kB |
URL GET HTTP/21xlite-352419.top/service-api/LiveFeed/GetSportsShortZip?lng=en&gr=285&country=137&virtualSports=true&groupChamps=true IP178.253.28.169:443 ASN#202492 Silverhill Group Holding Ltd
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerLet's Encrypt Subject1xlite-352419.top FingerprintA3:B3:AE:68:64:B1:4B:9E:AE:03:57:52:A8:1A:51:CB:CE:CD:A1:D7 ValidityMon, 27 May 2024 05:17:27 GMT - Sun, 25 Aug 2024 05:17:26 GMT
Hash47f2cb4e70beec5738aff5f4e86d8e00 e2c2df49186c0343d1d113fe8191cdb6856aa1c1 a6642fdb0f1a168d14530d0afb013aeb8e472f34eb57ad5f1c93d1415579de8d
GET /service-api/LiveFeed/GetSportsShortZip?lng=en&gr=285&country=137&virtualSports=true&groupChamps=true HTTP/1.1
Host: 1xlite-352419.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-352419.top/en?tag=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder; platform_type=desktop; auid=sv0cqWaKSzdbD+cPA6BIAg==; window_width=1280; SESSION=511efd04e0d48523b31184aa137ef02c; _glhf=1720357035; che_g=9b5505ea-8f71-8eb1-3d66-6476916658be; sh.session.id=51cd57e8-7b17-4583-9aa1-25e93a7309d9; ggru=195
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:08 GMT
content-type: application/json; charset=utf-8
content-length: 2807
cache-control: public, max-age=5
content-encoding: br
last-modified: Sun, 07 Jul 2024 08:01:08 GMT
vary: Accept-Encoding
x-time-ng: 0.009
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.018
X-Firefox-Spdy: h2
|
|
| widget.suphelper.top/_next/static/chunks/754-0008cc8909fa2e6d.js | 104.18.39.72 | | 120 kB |
URL widget.suphelper.top/_next/static/chunks/754-0008cc8909fa2e6d.js IP104.18.39.72:0
File typegzip compressed data, from Unix Size120 kB (120218 bytes) Hash05d69a05afdba8318539c20985a5d4f0 1939c5319c7d18bb945fe175158db0f6f57d3604 8fd935a16f751a2dc9e46a0265a3033d23d4a0ae6c81d0e7cb8e66da7a6a3e7a
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/754-0008cc8909fa2e6d.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 07 Jul 2024 08:01:02 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Thu, 13 Jun 2024 16:30:36 GMT
etag: W/"5b6a0-190126fd09d"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 168593
expires: Mon, 07 Jul 2025 08:01:02 GMT
server: cloudflare
cf-ray: 89f64de66eb8712f-OSL
X-Firefox-Spdy: h2
|
|
| 1xlite-352419.top/service-api/LineFeed/GetSportsShortZip?lng=en&country=137&virtualSports=true&gr=285&groupChamps=true | 178.253.28.169 | | 2.1 kB |
URL 1xlite-352419.top/service-api/LineFeed/GetSportsShortZip?lng=en&country=137&virtualSports=true&gr=285&groupChamps=true IP178.253.28.169:0 ASN#202492 Silverhill Group Holding Ltd
Hash1d1b1129cec8fd0cff475aa56393a45a e7b37a0e748ee0b9dd1627b83f4a83484e370a6e 56c77b94f92127453bd6f8a6d8cdc75d5a65117bf102c24eb73b65d726b47307
GET /service-api/LineFeed/GetSportsShortZip?lng=en&country=137&virtualSports=true&gr=285&groupChamps=true HTTP/1.1
Host: 1xlite-352419.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-352419.top/en?tag=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder; platform_type=desktop; auid=sv0cqWaKSzdbD+cPA6BIAg==; window_width=1280; SESSION=511efd04e0d48523b31184aa137ef02c; _glhf=1720357035; che_g=9b5505ea-8f71-8eb1-3d66-6476916658be; sh.session.id=51cd57e8-7b17-4583-9aa1-25e93a7309d9; ggru=195
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:08 GMT
content-type: application/json; charset=utf-8
content-length: 2123
cache-control: public, max-age=5
content-encoding: br
last-modified: Sun, 07 Jul 2024 08:01:08 GMT
vary: Accept-Encoding
x-time-ng: 0.028
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.038
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-platform-apps-static/Desktop/Default/44136fa355b3/r4sVvtgR54LB.js | 185.244.209.62 | 200 OK | 715 B |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-platform-apps-static/Desktop/Default/44136fa355b3/r4sVvtgR54LB.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeJava source, ASCII text, with very long lines (714) Hashb08db313238da42326210e38de04861a 2bc87d73204fcc4340ad9e9f8d5033efbba0192b 5ba35f9a2729766dc66898cb4c9566eb5b78d62a45001dddc1e8533058064edf
GET /sys-static/sys-platform-apps-static/Desktop/Default/44136fa355b3/r4sVvtgR54LB.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:09 GMT
content-type: text/javascript; charset=utf-8
content-length: 715
last-modified: Wed, 03 Jul 2024 09:02:15 GMT
etag: "b08db313238da42326210e38de04861a"
x-amz-meta-mtime: 1719997288.085308734
expires: Thu, 04 Jul 2024 09:21:38 GMT
cache-control: max-age=86400
x-time-ng: 0.003
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 78650
traceparent: 00-4700e9caa84ce8d19bb9a45c48853f8b-715636eaf9155af0-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:42+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| 1xlite-352419.top/web-api/default/img/icons/pixels2.svg?v=1720339268 | 178.253.28.169 | | 805 B |
URL 1xlite-352419.top/web-api/default/img/icons/pixels2.svg?v=1720339268 IP178.253.28.169:0 ASN#202492 Silverhill Group Holding Ltd
File typePNG image data, 1 x 1, 8-bit/color RGB, non-interlaced Hashfc249092a6b086180a3ac243cd8f4aa0 363c927265d53bebad5b924ea394daf02399e79e b5d8d1d664bbe53f4d4dad4035d446f3748e482a5f6b4772e479d956f1f6d2e6
GET /web-api/default/img/icons/pixels2.svg?v=1720339268 HTTP/1.1
Host: 1xlite-352419.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/en?tag=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder
Cookie: lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder; platform_type=desktop; auid=sv0cqWaKSzdbD+cPA6BIAg==; window_width=1280; SESSION=511efd04e0d48523b31184aa137ef02c; _glhf=1720357035; che_g=9b5505ea-8f71-8eb1-3d66-6476916658be; sh.session.id=51cd57e8-7b17-4583-9aa1-25e93a7309d9; ggru=195
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:08 GMT
content-type: image/png
cache-control: no-cache, private
server-timing: p;dur=18, dt_total;dur=36.006, wf-uht;dur=0.044
traceparent: 00-2a2b8332ce2c5df835cc7d6d17b7e374-77a60e59291ab553-01
x-dt: 285
x-time-ng: 0.019, 0.026
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-v3-host-app-static/Desktop/Default/44136fa355b3/cRWEKFjbm4Gk.js | 185.244.209.62 | | 494 B |
URL v3.traincdn.com/sys-static/sys-v3-host-app-static/Desktop/Default/44136fa355b3/cRWEKFjbm4Gk.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeJava source, ASCII text, with very long lines (493) Hash5a73a94abd5e088125f2931dcd062b61 79851ca2ac51029c129ec5e1bb2d6a16707b270c 147c67fab22c29edce013d4a5db1c89b4cb3ae70a8bf74332bf76b8d2082ba44
GET /sys-static/sys-v3-host-app-static/Desktop/Default/44136fa355b3/cRWEKFjbm4Gk.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:09 GMT
content-type: text/javascript; charset=utf-8
content-length: 494
last-modified: Fri, 05 Jul 2024 11:49:55 GMT
etag: "5a73a94abd5e088125f2931dcd062b61"
x-amz-meta-mtime: 1720180082.962126614
expires: Sat, 06 Jul 2024 11:57:58 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 71442
traceparent: 00-cb1378326386fa98f08149f61656c90d-c204e3312591c7fb-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:55:28+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-platform-apps-static/Desktop/Default/44136fa355b3/Dlhqz-aIe4OQ.js | 185.244.209.62 | 200 OK | 494 B |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-platform-apps-static/Desktop/Default/44136fa355b3/Dlhqz-aIe4OQ.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeJava source, ASCII text, with very long lines (493) Hash854a459dd820cf2f38aa3d05a12def74 f254de326c9a2a1d97d92bf4ac7ae93acbf2c1b7 cb070e1760fafbf91892cd903a24b00079d737a80e0ac0d56537843428e78e2f
GET /sys-static/sys-platform-apps-static/Desktop/Default/44136fa355b3/Dlhqz-aIe4OQ.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:09 GMT
content-type: text/javascript; charset=utf-8
content-length: 494
last-modified: Wed, 03 Jul 2024 09:02:15 GMT
etag: "854a459dd820cf2f38aa3d05a12def74"
x-amz-meta-mtime: 1719997288.085308734
expires: Thu, 04 Jul 2024 09:21:38 GMT
cache-control: max-age=86400
x-time-ng: 0.003
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 78650
traceparent: 00-b0f12f36d697b9f3e0b0f55a37cc0f00-45c243e8471352f8-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:42+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/Hv_rJ4GMTfB4.js | 185.244.209.62 | | 494 B |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/Hv_rJ4GMTfB4.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeJava source, ASCII text, with very long lines (493) Hashc90c794cbd62efd193d880cf57cafbd7 c2f130423d960a79ddcc3dd7a0167d8c950d50c7 c6cd6660150ee3668a8f3ed250567112586045c2d81cf84c6d512bc9d7d3a7c0
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/Hv_rJ4GMTfB4.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:09 GMT
content-type: text/javascript; charset=utf-8
content-length: 494
last-modified: Thu, 04 Jul 2024 12:01:34 GMT
etag: "c90c794cbd62efd193d880cf57cafbd7"
x-amz-meta-mtime: 1720094383.411873419
expires: Fri, 05 Jul 2024 12:17:42 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 67776
traceparent: 00-acf15e104d7da76c2cef2828c8e11bc7-0069e2956dd5f41c-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T13:16:49+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/css/5da7d2cf.css | 185.244.209.62 | | 1.5 kB |
URL v3.traincdn.com/main-static/34af5fc1/desktop/default/css/5da7d2cf.css IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hash051fdfa4a21b2dc87602f0ecdc33e221 477ccf7a7a9b2e0bf5c2d43a5aea4ff8d4800d2f dcbbdc2003872c8f9c8b31241d6ba00363ad3f4da70713d0ba0ec68018dabd47
GET /main-static/34af5fc1/desktop/default/css/5da7d2cf.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:08 GMT
content-type: text/css; charset=utf-8
last-modified: Sat, 06 Jul 2024 09:51:12 GMT
etag: W/"cdf0beed7c4a1af50fa98a5e0513f75d"
x-amz-meta-mtime: 1720259460.967386636
content-encoding: gzip
expires: Sun, 07 Jul 2024 10:10:25 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 78643
traceparent: 00-688126a61effe567fd86e8abbdcac531-9b4113d005e7772d-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:42+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/BsQikEQOzgpM.css | 185.244.209.62 | | 1.2 kB |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/BsQikEQOzgpM.css IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hash243a4c1d7585fe2805404c0c9bdd45a8 f9f6329244c28995a729f599377c61c219fb3b7b edece12c17ab39e49f80aa2244a78f6ffadaa4869ccde7c625452353a127e133
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/BsQikEQOzgpM.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:12 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:29 GMT
etag: W/"54b10681f0b12f9a1a98626fe2dd595e"
x-amz-meta-mtime: 1720094383.399873502
content-encoding: gzip
expires: Sat, 06 Jul 2024 11:08:52 GMT
cache-control: max-age=86400
x-time-ng: 0.006
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 73980
traceparent: 00-8846e537915259f46461e3b6a1380108-e920a61e2e11553e-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T15:47:00+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/B0IFhmFNO04Q.css | 185.244.209.62 | | 73 kB |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/B0IFhmFNO04Q.css IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hash69a0c156be9aecdcbf8db7b541548fc9 8ea0b0461bf8b73117ca3df9bc2795dc85165da9 8312aa19d21d443ffd1352f8c3bb5402e87ec67dd75e10cbd0068e980f17b468
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/B0IFhmFNO04Q.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:02 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:29 GMT
etag: W/"ad2a209cc033347c899e9d28579410d9"
x-amz-meta-mtime: 1720094383.395873529
content-encoding: gzip
expires: Fri, 05 Jul 2024 12:34:14 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 69328
traceparent: 00-6bead8c2304a8ca0c5ebe43a9524ea1b-fdfdf5c3e9005950-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T14:29:18+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-platform-apps-static/Desktop/Default/44136fa355b3/BF1llWPkZT-c.js | 185.244.209.62 | 200 OK | 774 B |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-platform-apps-static/Desktop/Default/44136fa355b3/BF1llWPkZT-c.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeJava source, ASCII text, with very long lines (773) Hash5018a58dad465aa87da78f6bdda0747b b8993e6d808c2de114d2d1a94828af630cf73ec1 a3128ebd207bd0256bd14b82cabb36f8634b2a38311ec88452501f9fefc4aa80
GET /sys-static/sys-platform-apps-static/Desktop/Default/44136fa355b3/BF1llWPkZT-c.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:13 GMT
content-type: text/javascript; charset=utf-8
content-length: 774
last-modified: Wed, 03 Jul 2024 09:02:15 GMT
etag: "5018a58dad465aa87da78f6bdda0747b"
x-amz-meta-mtime: 1719997288.07730869
expires: Thu, 04 Jul 2024 09:21:40 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 80288
traceparent: 00-9640e30242322b06ee3e119977e1b7a2-bb8a4fc06a187ba2-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T09:45:17+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| 1xlite-352419.top/web-api/api/v3/users/popular-events/params | 178.253.28.169 | 200 OK | 4.1 kB |
URL GET HTTP/21xlite-352419.top/web-api/api/v3/users/popular-events/params IP178.253.28.169:443 ASN#202492 Silverhill Group Holding Ltd
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerLet's Encrypt Subject1xlite-352419.top FingerprintA3:B3:AE:68:64:B1:4B:9E:AE:03:57:52:A8:1A:51:CB:CE:CD:A1:D7 ValidityMon, 27 May 2024 05:17:27 GMT - Sun, 25 Aug 2024 05:17:26 GMT
Hash8f7fe2a05fd7cedaa62d136c9a147186 590b95f177e13f7c6531681438a6d14add2912f2 9c4544e402175ebf0477b43ba5a6a7b8844b642f509a98c28e63d7caad1b6aba
GET /web-api/api/v3/users/popular-events/params HTTP/1.1
Host: 1xlite-352419.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-352419.top/en?tag=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder; platform_type=desktop; auid=sv0cqWaKSzdbD+cPA6BIAg==; window_width=1280; SESSION=511efd04e0d48523b31184aa137ef02c; _glhf=1720357035; che_g=9b5505ea-8f71-8eb1-3d66-6476916658be; sh.session.id=51cd57e8-7b17-4583-9aa1-25e93a7309d9; ggru=195
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:08 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: br
server-timing: p;dur=42, dt_total;dur=43.780, wf-uht;dur=0.052
traceparent: 00-44f79bb45269eaffb2f5252df2644250-1126b9101e99f2e6-01
vary: Accept-Encoding
x-dt: 285
x-time-ng: 0.043, 0.044
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/BS0jVmRwyJxa.css | 185.244.209.62 | | 2.4 kB |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/BS0jVmRwyJxa.css IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hash3f82658bab73483c6fde05780213f036 10c664e0e1c67675aa60bcaea70dca475ce82b0e 673d98d54107813a6da5ffa7deb467490c7adc047eea5029ef99579c161f957e
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/BS0jVmRwyJxa.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:12 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:29 GMT
etag: W/"f8c3dae96e45cde3ac345f9b00dc694a"
x-amz-meta-mtime: 1720094383.399873502
content-encoding: gzip
expires: Fri, 05 Jul 2024 13:24:40 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 66282
traceparent: 00-f96bf65b4560b17d86f57d5ab1afd8d6-ff12639aaaa87511-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T14:46:27+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-platform-apps-static/Desktop/Default/44136fa355b3/entry-C7k4cvoV.js | 185.244.209.62 | | 363 kB |
URL v3.traincdn.com/sys-static/sys-platform-apps-static/Desktop/Default/44136fa355b3/entry-C7k4cvoV.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Size363 kB (363093 bytes) Hash81615120049578b164ae3aec6a521195 46ac2d197537e841cf2a64b832357c04c50194ce 1591c71b4b96650f57db48f4e53974770ad2c9c13a405acf647bf9bf1e91939c
GET /sys-static/sys-platform-apps-static/Desktop/Default/44136fa355b3/entry-C7k4cvoV.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:03 GMT
content-type: text/javascript; charset=utf-8
last-modified: Wed, 03 Jul 2024 09:02:15 GMT
etag: W/"1338c857c12a5a4b1bff5b60f1a5a0cc"
x-amz-meta-mtime: 1719997288.089308756
content-encoding: gzip
expires: Thu, 04 Jul 2024 09:21:36 GMT
cache-control: max-age=86400
x-time-ng: 0.005
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 80284
traceparent: 00-6ae4dc453b4a5ebd460f907e40237cb3-7c1f6c128958da58-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T09:45:13+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CDbsBJhBHqDN.js | 185.244.209.62 | | 670 B |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CDbsBJhBHqDN.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeJava source, ASCII text, with very long lines (669) Hash6eddc2e9416f5d2cc4d45c46590a22ea 0c388e421869baaaa94204c1fdc6343028b6fa19 7060e824fab14a6c73dcda5144fe6b3a8bfdbce75eecef5cc78f70fe31a1ddbc
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CDbsBJhBHqDN.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 670
last-modified: Thu, 04 Jul 2024 12:01:33 GMT
etag: "6eddc2e9416f5d2cc4d45c46590a22ea"
x-amz-meta-mtime: 1720094383.403873474
expires: Fri, 05 Jul 2024 12:17:44 GMT
cache-control: max-age=86400
x-time-ng: 0.028
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 70296
traceparent: 00-4ca810ecd70df5fcd5bcea2a6355e69d-d7daf10e8d4a4d44-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-icons/1.0.395/285/country.svg | 185.244.209.62 | | 74 kB |
URL v3.traincdn.com/sys-icons/1.0.395/285/country.svg IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hash565697555858247b4f44a8b7364aafb4 7e2857b410936fb67c4c188cc5a4eab9b4e8e5d4 0ecccfa3e8553670d8a04a7ac5187dffcb13607b9110a863db7dbf8955411260
GET /sys-icons/1.0.395/285/country.svg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:07 GMT
content-type: image/svg+xml
last-modified: Mon, 24 Jun 2024 10:14:24 GMT
etag: W/"33bfcf9c8e40d790e71edf1007d50bbe"
x-amz-meta-mtime: 1719224059.914207216
content-encoding: gzip
expires: Wed, 03 Jul 2024 07:12:39 GMT
cache-control: max-age=86400
x-time-ng: 0.005
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 163
x-cached-since: 2024-07-02T07:12:39+00:00
traceparent: 00-458fe4bfab419af35db820a83e96033b-c15d65fb9bb2c152-01
x-id: osix-hw-edge-gc4
cache: HIT, REVALIDATED
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| widget.suphelper.top/_next/static/chunks/7413e8b9-8adee4b5b5407a55.js | 104.18.39.72 | | 28 kB |
URL widget.suphelper.top/_next/static/chunks/7413e8b9-8adee4b5b5407a55.js IP104.18.39.72:0
File typegzip compressed data, from Unix Hash1ba17301ba8a0ffa7bcda022a3d3b4a8 8b4ffd062c458eec59099685fc8b290d2546b7d4 a47380711a68db42bdfa314a776dd3c3e4c51dbc629b3aa11c6fe6f32a1e409f
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/7413e8b9-8adee4b5b5407a55.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 07 Jul 2024 08:01:02 GMT
content-type: application/javascript; charset=UTF-8
content-security-policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;form-action 'self';img-src 'self' data: blob: https://cons-suph.com/file-hosting https://cons-suph.com/file-hosting/;object-src 'none';script-src 'self' 'unsafe-eval' 'unsafe-inline' https://www.google.com/recaptcha/ 'report-sample' https://www.gstatic.com/recaptcha/;script-src-attr 'none';style-src 'self' https: 'unsafe-inline';frame-src 'self' https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/;connect-src 'self' wss: ws: https://cons-suph.com/file-hosting/ https://cdn.jsdelivr.net/npm/@emoji-mart/data@latest/i18n/
x-dns-prefetch-control: off
expect-ct: max-age=0
strict-transport-security: max-age=15724800; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
origin-agent-cluster: ?1
x-permitted-cross-domain-policies: none
referrer-policy: no-referrer
x-xss-protection: 0
cache-control: public, max-age=31536000
last-modified: Mon, 22 Jan 2024 07:49:06 GMT
etag: W/"12fe9-18d3024f9c4"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 168593
expires: Mon, 07 Jul 2025 08:01:02 GMT
server: cloudflare
cf-ray: 89f64de65ead712f-OSL
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/BFb0TA6v8dJm.js | 185.244.209.62 | 200 OK | 495 B |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/BFb0TA6v8dJm.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeJava source, ASCII text, with very long lines (494) Hash881c7db69c7540a08caebab01e949f7c 6cf279973ecba0902c6ac123fbed40ca235df1e5 d51ace9602d4b2f67ae3de80898d5f4511131fafde05a47e3419add761466ed1
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/BFb0TA6v8dJm.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 495
last-modified: Thu, 04 Jul 2024 12:01:33 GMT
etag: "881c7db69c7540a08caebab01e949f7c"
x-amz-meta-mtime: 1720094383.395873529
expires: Fri, 05 Jul 2024 12:17:44 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 70296
traceparent: 00-b9da65e3d88da8b3bf0fcb369dcf55b1-aa6f4ff4e17107c7-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| 1xlite-352419.top/web-api/default/img/icons/pixels2.svg?v=1720339261 | 178.253.28.169 | | 2.9 kB |
URL 1xlite-352419.top/web-api/default/img/icons/pixels2.svg?v=1720339261 IP178.253.28.169:0 ASN#202492 Silverhill Group Holding Ltd
File typePNG image data, 1 x 1, 8-bit/color RGB, non-interlaced Hashce77495bcef10df398c374a0e91185ff 8465e5f05b411ded7cf97962903072a7a76bff60 59573f87e4aac525ec608766ff22ca872feeff32f3c8bbd7fd2aa271fe544dc2
GET /web-api/default/img/icons/pixels2.svg?v=1720339261 HTTP/1.1
Host: 1xlite-352419.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/en?tag=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder
Cookie: lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder; platform_type=desktop; auid=sv0cqWaKSzdbD+cPA6BIAg==; window_width=1280; SESSION=511efd04e0d48523b31184aa137ef02c; _glhf=1720357035; che_g=9b5505ea-8f71-8eb1-3d66-6476916658be
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:01 GMT
content-type: image/png
cache-control: no-cache, private
server-timing: p;dur=18, dt_total;dur=20.062, wf-uht;dur=0.030
traceparent: 00-fcdc96efd0fe506744b16c26e074104a-f2545af6934947fa-01
x-dt: 285
x-time-ng: 0.020, 0.020
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CjGiUkzpsv2P.js | 185.244.209.62 | | 148 B |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CjGiUkzpsv2P.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
Hash8d13f8221272832fe673212a52d78833 a86f83f8451f35cbb0997fb61ccfd6edae654d84 b6d169e604fb3bc2edbbac245aecad67df26dca6f734a324a736020215de5365
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CjGiUkzpsv2P.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 148
last-modified: Thu, 04 Jul 2024 12:01:29 GMT
etag: "8d13f8221272832fe673212a52d78833"
x-amz-meta-mtime: 1720094383.403873474
expires: Sat, 06 Jul 2024 11:09:38 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 74545
traceparent: 00-cd6c72fdfbb34dbec2d7665d00990e95-0598973c61d6c920-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T15:36:51+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/Page.Betting.Asia.BettingContent-a6966c16.js | 185.244.209.62 | 200 OK | 1.4 kB |
URL GET HTTP/2v3.traincdn.com/main-static/34af5fc1/desktop/default/Page.Betting.Asia.BettingContent-a6966c16.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hash25033f7f683a19b5616ad283da10cc75 6cc9404d173cac103ff389f636cf9fd80761c234 cee3372c8d60dcde2180ce3107bf6934beb90888afb19a2769cb7950ca3d712d
GET /main-static/34af5fc1/desktop/default/Page.Betting.Asia.BettingContent-a6966c16.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:57 GMT
content-type: text/javascript; charset=utf-8
last-modified: Sat, 06 Jul 2024 09:51:07 GMT
etag: W/"94b00251dd06ddf18fc9a3c597eb4ee9"
x-amz-meta-mtime: 1720259460.9553866
content-encoding: gzip
expires: Sun, 07 Jul 2024 10:10:22 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 78635
traceparent: 00-1b2dbc51ddaebd2f1c03ee54128ff450-28b6aeb2dcf7fbd3-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:39+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/C_nTHyW-1VIi.js | 185.244.209.62 | | 49 B |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/C_nTHyW-1VIi.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
Hash1fbd232c1e462b6eba22af0e70c6b569 ebb7a25af35c77a6ae5ce37c0c6d22acae7b2a93 a85a4aeb1ee283c6890e1efc4f18713b49da0e4a40ecce6f412ad741f0fdd7ba
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/C_nTHyW-1VIi.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 49
last-modified: Thu, 04 Jul 2024 12:01:29 GMT
etag: "1fbd232c1e462b6eba22af0e70c6b569"
x-amz-meta-mtime: 1720094383.403873474
expires: Sat, 06 Jul 2024 04:18:11 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 98636
traceparent: 00-0fa8b0610e891e2db49fe7c0c51eb96f-d04ab6a1da16588e-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T17:52:05+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/vendors/plugins.v-tooltip-d533053b.js | 185.244.209.62 | | 26 kB |
URL v3.traincdn.com/main-static/34af5fc1/desktop/default/vendors/plugins.v-tooltip-d533053b.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hashf319ee2eafa5b8f2768f77a43b7f3f2f e4152a5cfd552d82022ac4c54dcd1e4057b3ed17 aa91dc7c15702769cfe08a442226a908a999bdec172352b6519ce47062851412
GET /main-static/34af5fc1/desktop/default/vendors/plugins.v-tooltip-d533053b.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:58 GMT
content-type: text/javascript; charset=utf-8
last-modified: Sat, 06 Jul 2024 09:51:11 GMT
etag: W/"2a3a2c0d64f97796b7d006d73c2d6f2f"
x-amz-meta-mtime: 1720259460.99538672
content-encoding: gzip
expires: Sun, 07 Jul 2024 10:10:22 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 78636
traceparent: 00-4ba2acafb928aef9e985d8ee83493b76-7756a45bc29dfd17-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:40+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CcZw83QCe6HY.js | 185.244.209.62 | | 372 B |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CcZw83QCe6HY.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeJava source, ASCII text, with very long lines (371) Hash58274f7a9c0cb50cbad89b73f73e9996 41438b07414c2e242adf164585ec04655ed114c4 5995869e14e3ad51cee4e0711f44c3aabb85a8a516d34169a29ce2141b107530
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CcZw83QCe6HY.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 372
last-modified: Thu, 04 Jul 2024 12:01:33 GMT
etag: "58274f7a9c0cb50cbad89b73f73e9996"
x-amz-meta-mtime: 1720094383.403873474
expires: Fri, 05 Jul 2024 12:17:43 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 70296
traceparent: 00-9d1e3a5da59e4a4e43de0edbdb010283-ee98874cd383c7d1-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/Dzf142aMfQch.js | 185.244.209.62 | 200 OK | 273 B |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/Dzf142aMfQch.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
Hashdc3060857b605b91efad5ed520040fac cafbb9144cbc5ef2cfcf23845f9f07b27e152ef4 902c36f92ab3ea208e0f97380ea8f2f9a77bcd0a3671f3ac3d6c783b1f143daa
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/Dzf142aMfQch.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 273
last-modified: Thu, 04 Jul 2024 12:01:30 GMT
etag: "dc3060857b605b91efad5ed520040fac"
x-amz-meta-mtime: 1720094383.411873419
expires: Sat, 06 Jul 2024 13:40:25 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 65780
traceparent: 00-7b5ceaaf9ae06af9e55100e69f2ef1ca-b30f1b03a88355b1-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T14:30:27+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/css/141f44d9.css | 185.244.209.62 | | 6.6 kB |
URL v3.traincdn.com/main-static/34af5fc1/desktop/default/css/141f44d9.css IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hashd0492c1daf53391621bec8328d124c7f 51fccc0be9e8c87a2de5affa831fce575abc9316 219577f3dc84b87c508771232b3da6d11d9b50f7827eae7657c01801683848e0
GET /main-static/34af5fc1/desktop/default/css/141f44d9.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:57 GMT
content-type: text/css; charset=utf-8
last-modified: Sat, 06 Jul 2024 09:51:11 GMT
etag: W/"c1addcbc19c10421e78a00f0512d9638"
x-amz-meta-mtime: 1720259460.963386624
content-encoding: gzip
expires: Sun, 07 Jul 2024 10:10:22 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 78635
traceparent: 00-ad2feddc5bb99e95ff3d90df566f42c3-d4da8b23a67d72c6-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:39+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DrZhIWotXnab.js | 185.244.209.62 | | 977 B |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DrZhIWotXnab.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeJava source, ASCII text, with very long lines (976) Hashd64f5c276a72e3b6417301072b0d95d8 2c43fc11e6700fb6adad19d26cac9e32a41e27a9 45310ce381aba08455b8403aa425f901cbb40c92d52bd77609ab5598bb4bd57f
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DrZhIWotXnab.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 977
last-modified: Thu, 04 Jul 2024 12:01:34 GMT
etag: "d64f5c276a72e3b6417301072b0d95d8"
x-amz-meta-mtime: 1720094383.411873419
expires: Fri, 05 Jul 2024 12:17:43 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 70297
traceparent: 00-c7c31ea8e7419685911ae997d5d5ef4b-31f9b0cf202d18c5-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CcGPUdJvUT0e.js | 185.244.209.62 | 200 OK | 525 B |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CcGPUdJvUT0e.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeJava source, ASCII text, with very long lines (524) Hash9f41ef2d2bc426ed44e63af08a7dbff8 d4d1d1121f6d582548dbe067c153f15da28f33a2 c939fdf3e435bf5fd67d3137211808cdd95e5e38a3aaa760ad37dcc0cf332129
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CcGPUdJvUT0e.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 525
last-modified: Thu, 04 Jul 2024 12:01:33 GMT
etag: "9f41ef2d2bc426ed44e63af08a7dbff8"
x-amz-meta-mtime: 1720094383.403873474
expires: Fri, 05 Jul 2024 12:17:44 GMT
cache-control: max-age=86400
x-time-ng: 0.181
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 70296
traceparent: 00-ee2ae4cbd7727e8aaa2e121e74ea0560-503e40b8c30c6b24-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/vendors/RegistrationWidgetApp-df5c035e.js | 185.244.209.62 | | 27 kB |
URL v3.traincdn.com/main-static/34af5fc1/desktop/default/vendors/RegistrationWidgetApp-df5c035e.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hash3a9e40d3bdec2cb3587e5dcc162389d9 273a9f037a993fb69b235f84809be2ad2db7c0ee e226b9cf065067eb4f3d48b6e85aacf8e598e3163bae29c8fb2a53c86222e631
GET /main-static/34af5fc1/desktop/default/vendors/RegistrationWidgetApp-df5c035e.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:59 GMT
content-type: text/javascript; charset=utf-8
last-modified: Sat, 06 Jul 2024 09:51:11 GMT
etag: W/"2b6802c96aafc750cb55e7af5fa46c70"
x-amz-meta-mtime: 1720259460.991386708
content-encoding: gzip
expires: Sun, 07 Jul 2024 10:10:26 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 78633
traceparent: 00-fb2fbadebf9f29180688286c65b228f7-62f1c8c027e7a066-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:40+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/9ZdICz4eaIC8.js | 185.244.209.62 | | 241 B |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/9ZdICz4eaIC8.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
Hash11b6e5aefaa82899d94a6fa377596bf6 bc6986131e73dc10e03a02c21f07d6741fa8e45a 96a9233483a48bfee9536ae46385a6911bcddee2f77d824376481afa60e14971
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/9ZdICz4eaIC8.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 241
last-modified: Thu, 04 Jul 2024 12:01:29 GMT
etag: "11b6e5aefaa82899d94a6fa377596bf6"
x-amz-meta-mtime: 1720094383.395873529
expires: Sat, 06 Jul 2024 13:13:40 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 66480
traceparent: 00-0824dcfb0f85fd55ea97d0019082d44e-1b2910f1f2883f99-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T18:55:13+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-v3-host-app-static/Desktop/Default/44136fa355b3/wbD9504mUizB.js | 185.244.209.62 | 200 OK | 611 B |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-v3-host-app-static/Desktop/Default/44136fa355b3/wbD9504mUizB.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (610) Hash071d05051c90835a4e7733224d4d2606 c8c079cd88c9db60dd01de35961dd2db6fa34102 696ed60d64f01021c8d99e81a819076de0e63001df79f2cbe0258455dea45278
GET /sys-static/sys-v3-host-app-static/Desktop/Default/44136fa355b3/wbD9504mUizB.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 611
last-modified: Fri, 05 Jul 2024 11:49:54 GMT
etag: "071d05051c90835a4e7733224d4d2606"
x-amz-meta-mtime: 1720180082.962126614
expires: Sun, 07 Jul 2024 10:15:08 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 78366
traceparent: 00-737b5dbd1114dabd14ab115c51510acb-90eb7985ff23b74c-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T11:07:52+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-v3-host-app-static/Desktop/Default/44136fa355b3/b2OS7MQprHBH.js | 185.244.209.62 | | 521 B |
URL v3.traincdn.com/sys-static/sys-v3-host-app-static/Desktop/Default/44136fa355b3/b2OS7MQprHBH.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeASCII text, with very long lines (520) Hash0c93eb77de6e8dceef29807c307a16ba eb6caa1e2eb6a914c8a13bd22c9a850363b5603e 7ebfd0b84f17678085b63e0a6995778bd8933f632dedd3c1cd0b7983ee5fe76b
GET /sys-static/sys-v3-host-app-static/Desktop/Default/44136fa355b3/b2OS7MQprHBH.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 521
last-modified: Fri, 05 Jul 2024 11:49:54 GMT
etag: "0c93eb77de6e8dceef29807c307a16ba"
x-amz-meta-mtime: 1720180082.962126614
expires: Sun, 07 Jul 2024 10:15:08 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 78366
traceparent: 00-91264fbd00fd08428b7d3a6fdbbbd3da-54d9a177d45ff7fe-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T11:07:52+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-v3-host-app-static/Desktop/Default/44136fa355b3/B5mhdxkmhqct.js | 185.244.209.62 | | 180 B |
URL v3.traincdn.com/sys-static/sys-v3-host-app-static/Desktop/Default/44136fa355b3/B5mhdxkmhqct.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
Hash9865eb0cbcefd60262ecb65346da057d 64afef22d831640d57e408ae271b352ee1d2348c 16a894c64a90f36e88cef3290b13644418bfd8e70fa3e6b810651b1ab7b4ab10
GET /sys-static/sys-v3-host-app-static/Desktop/Default/44136fa355b3/B5mhdxkmhqct.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 180
last-modified: Fri, 05 Jul 2024 11:49:53 GMT
etag: "9865eb0cbcefd60262ecb65346da057d"
x-amz-meta-mtime: 1720180082.94612689
expires: Sun, 07 Jul 2024 10:00:34 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 79240
traceparent: 00-d14c6e816bb537662de4d2a42d1807f4-2566e2094c68cc2f-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:42+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/vendors/Page.Betting.Main/Page.Betting.Main.Asian/registration.Main/user.userRegistration-ae165cd7.js | 185.244.209.62 | 200 OK | 12 kB |
URL GET HTTP/2v3.traincdn.com/main-static/34af5fc1/desktop/default/vendors/Page.Betting.Main/Page.Betting.Main.Asian/registration.Main/user.userRegistration-ae165cd7.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hash7e6f2665d068c9818b83e86a45792fbc d21c821a40a4fa0fd4667969b6a2596ba0d83da2 8576d1e7b10b6559933e5c69efacac3b788e2a7b8730399eb0725b19e0391bbc
GET /main-static/34af5fc1/desktop/default/vendors/Page.Betting.Main/Page.Betting.Main.Asian/registration.Main/user.userRegistration-ae165cd7.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:56 GMT
content-type: text/javascript; charset=utf-8
last-modified: Sat, 06 Jul 2024 09:51:11 GMT
etag: W/"70e65882e332549f9ac935c82de9c6f3"
x-amz-meta-mtime: 1720259460.991386708
content-encoding: gzip
expires: Sun, 07 Jul 2024 10:10:19 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 78637
traceparent: 00-8a6dadf24a5ba2bd4e4ba01d9de27b97-f6ce5a4344a78645-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:19+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/Cwun6Omrt0Nj.js | 185.244.209.62 | | 497 B |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/Cwun6Omrt0Nj.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeJava source, ASCII text, with very long lines (496) Hashf235eee7ab3a2a2256be5ca5c930a32a 215b29a3a0aae51bed969e793c02b30676a32239 2a242d675c8e9d0eb11ab5d5a0d05e6b23caf9224fb0f4209deac9653eac5e7b
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/Cwun6Omrt0Nj.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 497
last-modified: Thu, 04 Jul 2024 12:01:33 GMT
etag: "f235eee7ab3a2a2256be5ca5c930a32a"
x-amz-meta-mtime: 1720094383.407873447
expires: Fri, 05 Jul 2024 12:17:45 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 70295
traceparent: 00-15b278aa8c27e610b0ee632449d7f057-8190bba7a97183ae-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/css/a7906856.css | 185.244.209.62 | 200 OK | 1.1 kB |
URL GET HTTP/2v3.traincdn.com/main-static/34af5fc1/desktop/default/css/a7906856.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hash508ef93cfa2054f3a0dc8818d3ef36c9 a189df67a03f7633651622301e8168526515caba dc7b0caeddb352d8c55893c7048fc697ea3c87d0c7380afce371aeb0f5b45c4b
GET /main-static/34af5fc1/desktop/default/css/a7906856.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:56 GMT
content-type: text/css; charset=utf-8
last-modified: Sat, 06 Jul 2024 09:51:12 GMT
etag: W/"6921418ff9395c44037498a4cf17ee66"
x-amz-meta-mtime: 1720259460.971386648
content-encoding: gzip
expires: Sun, 07 Jul 2024 10:10:19 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 78636
traceparent: 00-d3e19fceae354f747e73f683716478aa-3337ff12c2a41ac2-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:19+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-platform-apps-static/Desktop/Default/44136fa355b3/5crvNeVDYs6O.js | 185.244.209.62 | | 8.4 kB |
URL v3.traincdn.com/sys-static/sys-platform-apps-static/Desktop/Default/44136fa355b3/5crvNeVDYs6O.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hashbfb40a2f391a6de0a375b436e7195972 0d370552de6f7d91a74454b9277e098d4437c146 8c89816913423b5f9a1e1a93f70b695e7342a8059b1475d712d01be4cfd33063
GET /sys-static/sys-platform-apps-static/Desktop/Default/44136fa355b3/5crvNeVDYs6O.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:13 GMT
content-type: text/javascript; charset=utf-8
last-modified: Wed, 03 Jul 2024 09:02:15 GMT
etag: W/"0ef22e319051b4415472a9e1d18e7bd9"
x-amz-meta-mtime: 1719997288.07730869
content-encoding: gzip
expires: Thu, 04 Jul 2024 09:21:40 GMT
cache-control: max-age=86400
x-time-ng: 0.007
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 80288
traceparent: 00-2a71c30d0274da5503b31c64a40754e9-7398504f66881808-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T09:45:17+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/Page.Betting.Main-1a58edec.js | 185.244.209.62 | | 73 kB |
URL v3.traincdn.com/main-static/34af5fc1/desktop/default/Page.Betting.Main-1a58edec.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hashf5f6749f86423e06aea93cb585a267d2 e93d8f60e845e87f4f994f156b84543df404717c e6d0eba133a5e1f38d1b034322f583560629b83c27c4928efe743b12c72fb8e4
GET /main-static/34af5fc1/desktop/default/Page.Betting.Main-1a58edec.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:56 GMT
content-type: text/javascript; charset=utf-8
last-modified: Sat, 06 Jul 2024 09:51:07 GMT
etag: W/"2ef8d3bcaae80a0ff03235ade4502ed9"
x-amz-meta-mtime: 1720259460.9553866
content-encoding: gzip
expires: Sun, 07 Jul 2024 10:10:19 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 78637
traceparent: 00-b913763dff0a22c1b445bb89d24a5014-3c22f60773187ca7-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:19+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DQIqazP0YXRR.js | 185.244.209.62 | | 265 B |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DQIqazP0YXRR.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
Hash4078334e5431d639db65b8d87b095848 be5b65d6e62c951c5f1014b2f7e69df35f8dae78 a852cb6f83d1e0b80851d18e2b8982f21767f0a84ad5de9a18842f76b80c2690
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DQIqazP0YXRR.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 265
last-modified: Thu, 04 Jul 2024 12:01:33 GMT
etag: "4078334e5431d639db65b8d87b095848"
x-amz-meta-mtime: 1720094383.407873447
expires: Fri, 05 Jul 2024 12:17:45 GMT
cache-control: max-age=86400
x-time-ng: 0.212
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 70296
traceparent: 00-b181cb89dadb0b2864b86cd1705d12e3-e442f7b04e813870-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/vendors/Page.Betting.Main/Page.Betting.TeamGames-792733fc.js | 185.244.209.62 | 200 OK | 8.7 kB |
URL GET HTTP/2v3.traincdn.com/main-static/34af5fc1/desktop/default/vendors/Page.Betting.Main/Page.Betting.TeamGames-792733fc.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hash5bbc24f4fa9a28cea0179cafdf95cf42 d1697ac8de6d57d9f776b2f0e6bd5f2ae1dd3506 f71298cae077ac774c47ffc32f979c98f9252bc211b0efa1eb7c552bc667c169
GET /main-static/34af5fc1/desktop/default/vendors/Page.Betting.Main/Page.Betting.TeamGames-792733fc.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:56 GMT
content-type: text/javascript; charset=utf-8
last-modified: Sat, 06 Jul 2024 09:51:11 GMT
etag: W/"08ec261b91b13eaa6512790dbeeeb3b7"
x-amz-meta-mtime: 1720259460.991386708
content-encoding: gzip
expires: Sun, 07 Jul 2024 10:10:19 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 78637
traceparent: 00-38b95fa007b24e117f06a94a665a38fe-b95f1c39a6fcd1d0-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:19+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| 1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder | 178.253.28.169 | | 188 kB |
URL 1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder IP178.253.28.169:0 ASN#202492 Silverhill Group Holding Ltd
File typeHTML document, Unicode text, UTF-8 text, with very long lines (15485) Size188 kB (187732 bytes) Hashdf4202e18c8c56bc04804e5d2aa6a2b9 ed9abc716ff517064a6f534a988fe1bae3f5fc83 57a9bfa26642b653b814e62b98dc1b10157ca48f7d7b8bc6261b70793380081c
GET /en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder HTTP/1.1
Host: 1xlite-352419.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:55 GMT
content-type: text/html; charset=utf-8
content-encoding: br
server-timing: total;dur=918;desc="Nuxt Server Time", dt_total;dur=1004.578, wf-uht;dur=1.030
set-cookie: lng=en; Path=/
cookies_agree_type=3; Path=/
tzo=2; Path=/
is12h=0; Path=/
referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; Path=/; Expires=Thu, 05 Sep 2024 08:00:54 GMT
reflinkid=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder; Path=/; Expires=Sun, 07 Jul 2024 09:00:54 GMT
postback_watcher=; Path=/; Expires=Sun, 07 Jul 2024 08:00:58 GMT
platform_type=desktop; Path=/; Expires=Wed, 10 Jul 2024 08:00:55 GMT; Secure; SameSite=None; Partitioned
auid=sv0cqWaKSzdbD+cPA6BIAg==; path=/; secure; httponly; samesite=lax
traceparent: 00-b97d310ebf176becd1c8455616c55932-eac65445fc3f7365-01
vary: Accept-Encoding
x-dt: 285
x-frame-options: SAMEORIGIN
x-time-ng: 0.942
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/BlqnJ3A0rNpW.js | 185.244.209.62 | | 164 B |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/BlqnJ3A0rNpW.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
Hash7cb9be87932e5124b629f973ee459236 4c02e046b28cb53d58f2dfc90620e2f1256bcace d1dcee4b4172d0564794c9adcd5f15dd26a7ba848e55e5f95fbc6c84672739d6
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/BlqnJ3A0rNpW.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 164
last-modified: Thu, 04 Jul 2024 12:01:29 GMT
etag: "7cb9be87932e5124b629f973ee459236"
x-amz-meta-mtime: 1720094383.399873502
expires: Sat, 06 Jul 2024 13:40:28 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 65777
traceparent: 00-aa68c3c300bfa0ecd2da2bf099af9165-ad97a8a4c1ecfe97-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T14:30:27+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/OOy7b0I-3aW5.js | 185.244.209.62 | | 213 B |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/OOy7b0I-3aW5.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
Hashb64d986edd7a10140318f18c3b76199f 262d0b78bb4b2d43884adf1c0c65eb6d6c4c7efe 931ac863b434ca4e7c26fc5a533db1225bf779e5da196f8fd9d16d5524f61cc7
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/OOy7b0I-3aW5.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 213
last-modified: Thu, 04 Jul 2024 12:01:30 GMT
etag: "b64d986edd7a10140318f18c3b76199f"
x-amz-meta-mtime: 1720094383.411873419
expires: Sat, 06 Jul 2024 13:47:14 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 64591
traceparent: 00-04e07fb24c00b5a080250e7cad6fb1a4-f811a39b5dd72a13-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T17:24:16+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DeGrbt7i9OgN.js | 185.244.209.62 | | 672 B |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DeGrbt7i9OgN.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeJava source, ASCII text, with very long lines (671) Hash0b45893cbfd6458430bdfbe9d19f15c2 3a6b62860dcd74ca60eaa8fa5472bc0e068d452d d8affd0be511214feb6192a36b0eccd32119790455a0198cac613e735f87b75b
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DeGrbt7i9OgN.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 672
last-modified: Thu, 04 Jul 2024 12:01:33 GMT
etag: "0b45893cbfd6458430bdfbe9d19f15c2"
x-amz-meta-mtime: 1720094383.407873447
expires: Fri, 05 Jul 2024 12:17:45 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 70295
traceparent: 00-5cdc6fd6bdca4329b239c8cd6f96d721-16580b34e57e9cb2-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CVLe2o1LybBF.js | 185.244.209.62 | | 612 B |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CVLe2o1LybBF.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeJava source, ASCII text, with very long lines (611) Hashf05d96d5a7a56b6b55a772bfb4c2c836 7390cddb5c4131585ddfc944a22501a11c54af76 ff3e042283bc7480ead090ea39af1c8a0feb4ac7334c64f9766d6902c99502a8
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CVLe2o1LybBF.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 612
last-modified: Thu, 04 Jul 2024 12:01:33 GMT
etag: "f05d96d5a7a56b6b55a772bfb4c2c836"
x-amz-meta-mtime: 1720094383.403873474
expires: Fri, 05 Jul 2024 12:17:45 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 70295
traceparent: 00-5a8b63b03c7f1d916a6067560c7cfe30-e4a7be1f21347811-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/_5eTN0pofYKQ.js | 185.244.209.62 | 200 OK | 14 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/_5eTN0pofYKQ.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hash14e11692c2bab9f01474090baf634c02 ecdf81e4015cbd6ed5a24b2106e3474ed6ae3bf5 d571a2c8ad3fb882934da702873fff3e7419acb0059c87c0e2d7a31a8a12e22d
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/_5eTN0pofYKQ.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:34 GMT
etag: W/"cb66bcb7543362b1938674fe5324d18a"
x-amz-meta-mtime: 1720094383.411873419
content-encoding: gzip
expires: Fri, 05 Jul 2024 12:17:44 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 70296
traceparent: 00-1989f64dfe9f25b59204f76a7bb30d74-d6937b8aac4f039f-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DZmua_i_lZaI.js | 185.244.209.62 | | 237 B |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DZmua_i_lZaI.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
Hashd747377ad541396dd201d7eaf1d96402 b1d9a1bd51fbb6f6987082aebb3209a745e245d7 37c3e4d996a52a1dcee992a8b44a372147ea7e5d85a2be4f3d0669e99d391011
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DZmua_i_lZaI.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 237
last-modified: Thu, 04 Jul 2024 12:01:30 GMT
etag: "d747377ad541396dd201d7eaf1d96402"
x-amz-meta-mtime: 1720094383.407873447
expires: Sat, 06 Jul 2024 08:05:04 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 86105
traceparent: 00-e4b6b9c682190e878f32a375dce9e0de-af7275c0459f4ac4-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T08:23:34+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CTcWLizB8xzr.js | 185.244.209.62 | | 2.1 kB |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CTcWLizB8xzr.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hashe39bf64b4eca5b69c2f5e346a650d748 5b46da08e7f1a32d0adbb2dfda0f6b5423960423 440511f77876953ab38af039b61ecb680dc0a723f9e5608170dcc65e05a43ae7
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CTcWLizB8xzr.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:33 GMT
etag: W/"d1908ca429646e46d2b591fd38f1197f"
x-amz-meta-mtime: 1720094383.403873474
content-encoding: gzip
expires: Fri, 05 Jul 2024 12:17:43 GMT
cache-control: max-age=86400
x-time-ng: 0.187
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 70297
traceparent: 00-0202d3580e3eb946cf31eaedb107d948-7a391367058ab8b7-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/C9vNOfBGKHeE.js | 185.244.209.62 | | 786 B |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/C9vNOfBGKHeE.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hashc3f9f5d6caffe4bc1aa2a1ca41400d73 884fb99ae299b345085cab66ffcb9d30230c65b7 51f1f5e923578d5a30a73582b60f0f12772c9de3434ff9b0fc5decdc4643af99
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/C9vNOfBGKHeE.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:33 GMT
etag: W/"9a77a19d94d171639ac13ef58a3a2d82"
x-amz-meta-mtime: 1720094383.399873502
content-encoding: gzip
expires: Fri, 05 Jul 2024 12:17:44 GMT
cache-control: max-age=86400
x-time-ng: 0.153
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 70296
traceparent: 00-f89dbd5ca173961d8ea01cadbd835089-c070a550fa49f5c5-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| 1xlite-352419.top/service-api/LiveFeed/WebGetTopChampsZip?lng=en&gr=285&country=137 | 178.253.28.169 | | 275 B |
URL 1xlite-352419.top/service-api/LiveFeed/WebGetTopChampsZip?lng=en&gr=285&country=137 IP178.253.28.169:0 ASN#202492 Silverhill Group Holding Ltd
Hash02503d888b7028ed5daaec6761b8da08 421612fe1f5e5322d3c11159c3a3b95badc4483e be9aa4bab38c1a0ee3c9f21bbef764d826a205503a4702ce33a2145d3e05d089
GET /service-api/LiveFeed/WebGetTopChampsZip?lng=en&gr=285&country=137 HTTP/1.1
Host: 1xlite-352419.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder; platform_type=desktop; auid=sv0cqWaKSzdbD+cPA6BIAg==; window_width=1280; SESSION=511efd04e0d48523b31184aa137ef02c; _glhf=1720357035; che_g=9b5505ea-8f71-8eb1-3d66-6476916658be; sh.session.id=51cd57e8-7b17-4583-9aa1-25e93a7309d9; ggru=195
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: application/json; charset=utf-8
content-length: 275
cache-control: no-cache
content-encoding: br
last-modified: Sun, 07 Jul 2024 08:01:14 GMT
vary: Accept-Encoding
x-time-ng: 0.015
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.022
X-Firefox-Spdy: h2
|
|
| widget.suphelper.top/_next/static/chunks/pages/index-149fef45a43394bd.js | 104.18.39.72 | 200 OK | 21 kB |
URL GET HTTP/2widget.suphelper.top/_next/static/chunks/pages/index-149fef45a43394bd.js IP104.18.39.72:443
Requested byhttps://widget.suphelper.top/ CertificateIssuerGoogle Trust Services LLC Subjectsuphelper.top Fingerprint19:31:44:4F:9D:DE:4C:F2:AD:44:DB:B5:31:C3:20:A9:DB:3D:26:4A ValidityFri, 24 May 2024 09:49:21 GMT - Thu, 22 Aug 2024 09:49:20 GMT
File typegzip compressed data, from Unix Hashd7827351fa8b901e20f02bbf05d92600 f5882279246bf729956f3a221f1d6164f2a01e8e 911858bf2b224abbc23e7088fc7e6edebf0701a4cdd6e3221cd8d748d8d8724d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/pages/index-149fef45a43394bd.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 07 Jul 2024 08:01:02 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Thu, 13 Jun 2024 16:30:36 GMT
etag: W/"fe09-190126fd0a1"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 1991981
expires: Mon, 07 Jul 2025 08:01:02 GMT
server: cloudflare
cf-ray: 89f64de66eb9712f-OSL
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/Dq8ulWG1TQLW.js | 185.244.209.62 | | 162 B |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/Dq8ulWG1TQLW.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
Hash63a734302a9596326882ae3e3716960e 6db7255c426de34c94985b0361ad3784dffd53f3 7936785a635f7986c49e3fc34a47517e457e2052214767897dcad936b53e4a29
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/Dq8ulWG1TQLW.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 162
last-modified: Thu, 04 Jul 2024 12:01:30 GMT
etag: "63a734302a9596326882ae3e3716960e"
x-amz-meta-mtime: 1720094383.411873419
expires: Sat, 06 Jul 2024 13:40:26 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 65779
traceparent: 00-07477699dc307d67637a30863b558de3-f49f8fc297acc36b-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T14:30:27+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CkhtYOdNiUJB.js | 185.244.209.62 | | 225 B |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CkhtYOdNiUJB.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
Hashb989808e52f6f2b2c3677bab0345a32d 7feab3f2835b116006602ba4b50227eef7ee1a7b 27587fc320bfa3794116ab43888a33430295a272b6ce28c97d1836690316241e
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CkhtYOdNiUJB.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 225
last-modified: Thu, 04 Jul 2024 12:01:33 GMT
etag: "b989808e52f6f2b2c3677bab0345a32d"
x-amz-meta-mtime: 1720094383.403873474
expires: Fri, 05 Jul 2024 12:17:46 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 70295
traceparent: 00-40ceddf3764768695a277f89b6973dc2-d7206e6dd09ffcd7-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/vendors/Page.Cyber.Game/Page.NewCyber.CyberApp/Page.NewCyber.CyberChamps/Page.NewCyber.CyberDashboar/90d9c7c3-f33dde3d.js | 185.244.209.62 | | 89 kB |
URL v3.traincdn.com/main-static/34af5fc1/desktop/default/vendors/Page.Cyber.Game/Page.NewCyber.CyberApp/Page.NewCyber.CyberChamps/Page.NewCyber.CyberDashboar/90d9c7c3-f33dde3d.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hasha13f375130163d25a227ed431738badc 35750b7adbaa4a641a9f054be1f053b74f1600f9 f71a95334c4541c0edb609784dbefe1d0a66e51c43cf2be306dee1ff16205cf6
GET /main-static/34af5fc1/desktop/default/vendors/Page.Cyber.Game/Page.NewCyber.CyberApp/Page.NewCyber.CyberChamps/Page.NewCyber.CyberDashboar/90d9c7c3-f33dde3d.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:59 GMT
content-type: text/javascript; charset=utf-8
last-modified: Sat, 06 Jul 2024 09:51:11 GMT
etag: W/"609008328d27e3c1a2ac27d9e5128903"
x-amz-meta-mtime: 1720259460.991386708
content-encoding: gzip
expires: Sun, 07 Jul 2024 10:10:23 GMT
cache-control: max-age=86400
x-time-ng: 0.008
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 78636
traceparent: 00-ef5bd573cdf2b3d713486e518288f8ee-c6ea875839f4145c-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:40+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DpjJqWdPvEZR.js | 185.244.209.62 | | 462 B |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DpjJqWdPvEZR.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeJava source, ASCII text, with very long lines (461) Hash850bc3182fccc7503ac9e9832fbfd516 44236e430a09a1f27b9cfe8eb2d80da45a8214f1 1534576bb49db17ee20350d2a0ec9ada93db538f4e002337b244dcbe9350796b
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DpjJqWdPvEZR.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 462
last-modified: Thu, 04 Jul 2024 12:01:30 GMT
etag: "850bc3182fccc7503ac9e9832fbfd516"
x-amz-meta-mtime: 1720094383.411873419
expires: Sat, 06 Jul 2024 13:40:16 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 65956
traceparent: 00-9a362e83b9bf7bd2dd02dcbf9106ab4b-62099b1f7262a563-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T14:30:27+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/wnO9iQ2Hv901.js | 185.244.209.62 | | 372 B |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/wnO9iQ2Hv901.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeJava source, ASCII text, with very long lines (371) Hash7b6edd84ef01d12b1e84cbd1cdbdf893 8d2bc8372cda75d775932fd214fe35a7a8a6a92e 40607aa595289a731b3cb30a0a83938036f9edff83c7639c4ef24ed17fa49d30
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/wnO9iQ2Hv901.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 372
last-modified: Thu, 04 Jul 2024 12:01:34 GMT
etag: "7b6edd84ef01d12b1e84cbd1cdbdf893"
x-amz-meta-mtime: 1720094383.415873393
expires: Fri, 05 Jul 2024 12:17:47 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 70294
traceparent: 00-0150df5065f9856d206be36018348bcf-1a55d380df99df09-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/vYjSE-tq1r_M.js | 185.244.209.62 | | 718 B |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/vYjSE-tq1r_M.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeJava source, ASCII text, with very long lines (717) Hashce316adbd712479a14a4e7cac927d3ac d87fdfd15870cc151846d96b44d82799917ba3b1 e1f587dab51b75239e3c9f49863c31e44e77bdbbc4f41f9f3e8041f1e7b4baa0
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/vYjSE-tq1r_M.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 718
last-modified: Thu, 04 Jul 2024 12:01:34 GMT
etag: "ce316adbd712479a14a4e7cac927d3ac"
x-amz-meta-mtime: 1720094383.415873393
expires: Fri, 05 Jul 2024 12:17:47 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 70294
traceparent: 00-e0335e3c7c86828c49026133b7b19d86-1a9faf5e7be7ac11-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/css/35fbe96e.css | 185.244.209.62 | | 1.5 kB |
URL v3.traincdn.com/main-static/34af5fc1/desktop/default/css/35fbe96e.css IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hashf88b0ea1880ddceb5ff343c31bfb9911 e5b7e18e867554b8dc96e0be0d9db13a021bfde2 5bc2301530a09b3094a4e1db51c1dec37fc42d3e1407ece8416418943b09f6d9
GET /main-static/34af5fc1/desktop/default/css/35fbe96e.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:01 GMT
content-type: text/css; charset=utf-8
last-modified: Sat, 06 Jul 2024 09:51:12 GMT
etag: W/"6a7ef8c8f68494429eda4ee572af8b9d"
x-amz-meta-mtime: 1720259460.963386624
content-encoding: gzip
expires: Sun, 07 Jul 2024 10:10:37 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 78624
traceparent: 00-84b5a44870c079cb8f3a95d8180e39b8-80472a2a767b2c70-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:58:23+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DMmRHj5JvtEP.js | 185.244.209.62 | | 856 B |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DMmRHj5JvtEP.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeJava source, ASCII text, with very long lines (855) Hashc4b3edafed850cdf26a197b61cf02980 cd15a4b104a36a24e29c38f58d0b2b4f3bd7af02 c34f1f7d3fd817ebda468e3bd23e25baae0391a7da403db47c75a592e584c7f3
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DMmRHj5JvtEP.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 856
last-modified: Thu, 04 Jul 2024 12:01:33 GMT
etag: "c4b3edafed850cdf26a197b61cf02980"
x-amz-meta-mtime: 1720094383.407873447
expires: Fri, 05 Jul 2024 12:17:48 GMT
cache-control: max-age=86400
x-time-ng: 0.105
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 70294
traceparent: 00-7ed87d5dbdbb5a8802649b0339e1a599-b1a72deea1608f58-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/9E82x83ZZEA0.js | 185.244.209.62 | 200 OK | 313 B |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/9E82x83ZZEA0.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeJava source, ASCII text, with very long lines (312) Hash07bb072c2260b5f0bac9d9494d1d222c 0d1770ae9d5c0ca7b53853dfd07c81df304cff49 82ff488ff3ef2190afa16683863462fd7185efeb3028cded16978e7b0160474c
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/9E82x83ZZEA0.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 313
last-modified: Thu, 04 Jul 2024 12:01:29 GMT
etag: "07bb072c2260b5f0bac9d9494d1d222c"
x-amz-meta-mtime: 1720094383.395873529
expires: Sat, 06 Jul 2024 13:40:16 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 65790
traceparent: 00-83e8953a3c100bc6ff3bcf8bc803d119-3cc6b1ac2398f0fc-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T14:30:27+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/B567x1clFRTt.js | 185.244.209.62 | | 450 B |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/B567x1clFRTt.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeASCII text, with very long lines (449) Hash056ce527a12544a37f984ac598be2344 6946b65cf1c68960e5f9ac0900a0df66a13e7e85 cd7cdf53c803ca43a37171180d14c2374e45ab347d309f9b83a107b9ad9b4ed1
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/B567x1clFRTt.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 450
last-modified: Thu, 04 Jul 2024 12:01:29 GMT
etag: "056ce527a12544a37f984ac598be2344"
x-amz-meta-mtime: 1720094383.395873529
expires: Sat, 06 Jul 2024 09:42:12 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 79413
traceparent: 00-48412f52d5a53ff89a58a98f1f552865-50bdc5c19aba968f-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T15:36:52+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DqfqYZdCoyXu.js | 185.244.209.62 | 200 OK | 522 B |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DqfqYZdCoyXu.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeJava source, ASCII text, with very long lines (521) Hasha95d224ed8b440acb2e89d297093fd99 615fc3df902b840f5f8bfe65f18abc2715bba239 5343ee2558efae1c63eefa6a3bfc08e4e89f1495c986442ac6a1cb6c7398c4b0
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DqfqYZdCoyXu.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 522
last-modified: Thu, 04 Jul 2024 12:01:34 GMT
etag: "a95d224ed8b440acb2e89d297093fd99"
x-amz-meta-mtime: 1720094383.411873419
expires: Fri, 05 Jul 2024 12:17:48 GMT
cache-control: max-age=86400
x-time-ng: 0.003
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 70294
traceparent: 00-296389444d925c7f189e56afd64f6ae1-f1a5e498d9b76c21-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CShsYa1OwHeP.js | 185.244.209.62 | | 164 B |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CShsYa1OwHeP.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
Hash95bbe64f69cc37fe4946ccaab85ca23e 7fd72eae725ce74dff8deac22e32e7a89c1fdd85 734b04ce628d06a0601fd46259995620af0a4465b72874d39a0443a807ec1ac7
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CShsYa1OwHeP.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 164
last-modified: Thu, 04 Jul 2024 12:01:29 GMT
etag: "95bbe64f69cc37fe4946ccaab85ca23e"
x-amz-meta-mtime: 1720094383.403873474
expires: Sat, 06 Jul 2024 13:40:17 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 65789
traceparent: 00-246f340d98bb3cf3bfca98af6a2b5e6a-746d9387e652d53a-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T14:30:27+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DT2a-92tvZe5.js | 185.244.209.62 | | 562 B |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DT2a-92tvZe5.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeJava source, ASCII text, with very long lines (561) Hashb7379e9b70528853c65fcba1a9f85f4e 5b1ab08b4b857a2e318db4a814089c108c9ffbc8 a4f62103fedeccd304a9b3e6a940e4869cb6c90ccf1892ec64c5268c14dfe265
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DT2a-92tvZe5.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 562
last-modified: Thu, 04 Jul 2024 12:01:30 GMT
etag: "b7379e9b70528853c65fcba1a9f85f4e"
x-amz-meta-mtime: 1720094383.407873447
expires: Sat, 06 Jul 2024 13:40:31 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 65941
traceparent: 00-d513ccf9cc70109daa8c3d3f4e26fcf9-837a1ff60479ab20-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T14:30:27+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/WOhzQzEgrtTT.js | 185.244.209.62 | | 301 B |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/WOhzQzEgrtTT.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
Hashff2cd753f62fa7628c9187e4bc1fc92c 22e8c20d9eaf6ab851c4bf638793bae425b7024d 40b9ad9bcfe9580885dcd124e7e19d4434e7b2db56c7a86c4a8f7b87c67c863a
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/WOhzQzEgrtTT.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 301
last-modified: Thu, 04 Jul 2024 12:01:30 GMT
etag: "ff2cd753f62fa7628c9187e4bc1fc92c"
x-amz-meta-mtime: 1720094383.411873419
expires: Sat, 06 Jul 2024 09:42:08 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 79417
traceparent: 00-70d760e8c105f721da81626ac50fca64-c1b191dea5c87624-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T15:36:52+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DJ4Thyzq4O6R.js | 185.244.209.62 | | 156 B |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DJ4Thyzq4O6R.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
Hash96c4e53cf4a196e068bfa2b0a3d524da 0abbb583e6a8233ada7248d41879c3fc9adc5773 3b07135282394e88cce0241c7ff012cd7ce79d0fb57409b0e2a3a91d55416234
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DJ4Thyzq4O6R.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 156
last-modified: Thu, 04 Jul 2024 12:01:30 GMT
etag: "96c4e53cf4a196e068bfa2b0a3d524da"
x-amz-meta-mtime: 1720094383.407873447
expires: Sat, 06 Jul 2024 13:40:31 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 65941
traceparent: 00-eea77ad81726d2ed559b2559b22aa870-2ff4f97c4eaa76d8-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T14:30:27+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/cJGlt3Uf3gsv.js | 185.244.209.62 | | 884 B |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/cJGlt3Uf3gsv.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeJava source, ASCII text, with very long lines (883) Hashd11799ac254b5bc51206c1d3125240cb b74251ecf4075d1534bc738265e6ffcbefa50dc0 e161eab35c0df9eeaf446704feea0629abc82606697207a35eaea658e261d611
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/cJGlt3Uf3gsv.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 884
last-modified: Thu, 04 Jul 2024 12:01:34 GMT
etag: "d11799ac254b5bc51206c1d3125240cb"
x-amz-meta-mtime: 1720094383.411873419
expires: Fri, 05 Jul 2024 12:17:48 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 70294
traceparent: 00-cfe15b4364314d6cc52035611d9ad139-9d722395112491f3-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DlHrzkQvodHH.js | 185.244.209.62 | 200 OK | 143 B |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DlHrzkQvodHH.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
Hash22a5e9ba42b4a25980f5a39d651c0d9d 451f4853ef096df569fd520b2e8ff55684b5170e 37c0363b2ac5807857bb93a47bfb1ecf484864881d99929929e333ccdf68b852
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DlHrzkQvodHH.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 143
last-modified: Thu, 04 Jul 2024 12:01:30 GMT
etag: "22a5e9ba42b4a25980f5a39d651c0d9d"
x-amz-meta-mtime: 1720094383.411873419
expires: Sat, 06 Jul 2024 11:10:02 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 74144
traceparent: 00-62b6489ea226df0c9e3b3bdd2f10c033-f4efc36f681ffa75-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T15:36:51+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/Bvf7Azz_Sz2Q.js | 185.244.209.62 | | 68 kB |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/Bvf7Azz_Sz2Q.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hashf12e772a8fad827572ef2a9b86d66b43 fa022c1bbed3cd4ce5681a874d2dbb9aa8a0a4a2 658235e56e9f17453c0b39d2a5b0397ede5839b3977532879e58bd8ee1a2d62c
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/Bvf7Azz_Sz2Q.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:33 GMT
etag: W/"560a6e2bd2922a017a5d53395398a99d"
x-amz-meta-mtime: 1720094383.399873502
content-encoding: gzip
expires: Fri, 05 Jul 2024 12:17:45 GMT
cache-control: max-age=86400
x-time-ng: 0.004
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 70296
traceparent: 00-6ea9712ac56a3fea7558867a00e22fcd-02f70c9c92a2434a-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/Drs7qRTHnL7g.js | 185.244.209.62 | 200 OK | 4.2 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/Drs7qRTHnL7g.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hash9d2e7533ff1993edf648862459768b3e d25a8ba497c96d0bd32916a0f656c1cad410dbd2 302e0b0199ac89ddcc1320a968a2b9fabab3e3c58bc3fada900a671c750087f4
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/Drs7qRTHnL7g.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:34 GMT
etag: W/"a41525e852c549c98a5dc58b80737513"
x-amz-meta-mtime: 1720094383.411873419
content-encoding: gzip
expires: Fri, 05 Jul 2024 12:17:44 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 70296
traceparent: 00-5ded92e00120760cadaddf747e595a3a-b8fc4a3b70aa36bf-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/C5ThRUzQpcoG.js | 185.244.209.62 | 200 OK | 125 B |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/C5ThRUzQpcoG.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
Hashb66ef1e2343defa3a2ffce70d210232c cc59a52c5498d262950935752d0e0509d7342051 01a48822ea8340e14c253270aa18f6bdef5b570952d24a556ee66b1dd5940d51
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/C5ThRUzQpcoG.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 125
last-modified: Thu, 04 Jul 2024 12:01:33 GMT
etag: "b66ef1e2343defa3a2ffce70d210232c"
x-amz-meta-mtime: 1720094383.403873474
expires: Fri, 05 Jul 2024 12:17:46 GMT
cache-control: max-age=86400
x-time-ng: 0.146
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 70295
traceparent: 00-5cd12f0249d0c0889328973cfb844fbc-c35040ac95d99861-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:48+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/analytics-aeb90627.js | 185.244.209.62 | | 3.3 kB |
URL v3.traincdn.com/main-static/34af5fc1/desktop/default/analytics-aeb90627.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hash1eec65ce2feaa3b9b885dd6098c8c67e 432c35a9165b433c5b423ca402ae79c6c5a1e790 6b916a93a9109a176ba1dc12b3d763bfad42f32b3421078fa194e53fd640dcb0
GET /main-static/34af5fc1/desktop/default/analytics-aeb90627.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
last-modified: Sat, 06 Jul 2024 09:51:08 GMT
etag: W/"37395c08b28490bd4ee73774cce26df1"
x-amz-meta-mtime: 1720259460.959386612
content-encoding: gzip
expires: Sun, 07 Jul 2024 10:10:24 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 78650
traceparent: 00-f032d3345eb980d18e9ebf6ef9481783-663da03b98d35f78-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:50+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/6n3UBAzE_hwP.js | 185.244.209.62 | | 22 kB |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/6n3UBAzE_hwP.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hash913a156999fffcefdd53070b0fbfc3b0 eed1150011fb7c375edf6463dcc95724f8c5dc6a 4fc0b9201644fb7e25694a046753b40d88714c03b93cbde1fe8310d573a2897c
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/6n3UBAzE_hwP.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:32 GMT
etag: W/"d8df8a4c47023d2ced6bc7991a193969"
x-amz-meta-mtime: 1720094383.395873529
content-encoding: gzip
expires: Fri, 05 Jul 2024 12:17:46 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 70295
traceparent: 00-d82a190c8808f8e2e682113ef67caa3e-2bc33560acef9ed6-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/D-VC4B8kzLwW.js | 185.244.209.62 | 200 OK | 884 B |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/D-VC4B8kzLwW.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeJava source, ASCII text, with very long lines (883) Hashd3afcedccd73ab9ce851eb39f8bb0e96 e04df533af903806aefd25bd863719db39ea2661 30c4d614e4176a5ad98080518e5ba9e72044681f3dcdec9f85c695094356b687
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/D-VC4B8kzLwW.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:15 GMT
content-type: text/javascript; charset=utf-8
content-length: 884
last-modified: Thu, 04 Jul 2024 12:01:33 GMT
etag: "d3afcedccd73ab9ce851eb39f8bb0e96"
x-amz-meta-mtime: 1720094383.407873447
expires: Fri, 05 Jul 2024 12:17:47 GMT
cache-control: max-age=86400
x-time-ng: 0.078
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 70294
traceparent: 00-484077b433a2e098d0af4647e5642150-4af5b1a18df0a4de-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:48+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/BPrhuGDuMWZz.js | 185.244.209.62 | | 6.5 kB |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/BPrhuGDuMWZz.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hashacc2236e52f1c9e13e236a5c889931cc 1e4505e46e5c6191d49993b8ac4a24557f63df62 f43c3ca8138ef5c7a7e69ad9551edff4f643ddcb9fcb5bb8dd9b50eab50a66ed
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/BPrhuGDuMWZz.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:15 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:33 GMT
etag: W/"2265042f99b08ffd2a3b1d9353fe2e84"
x-amz-meta-mtime: 1720094383.399873502
content-encoding: gzip
expires: Fri, 05 Jul 2024 12:17:47 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 70294
traceparent: 00-80baa06148eb24d93da1e77af27c832a-bb1ce706ba66c695-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:48+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CbEePIsqrh-r.js | 185.244.209.62 | | 127 B |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CbEePIsqrh-r.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
Hash83e1022515d478f7de209dee286796d4 b9e6f99ebd92a80d2e90230edc9886f8acf4625e 0784bbd9b17c6230bb948f6dda90b13c4e6887080e1c5641473fed3514186279
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CbEePIsqrh-r.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:15 GMT
content-type: text/javascript; charset=utf-8
content-length: 127
last-modified: Thu, 04 Jul 2024 12:01:29 GMT
etag: "83e1022515d478f7de209dee286796d4"
x-amz-meta-mtime: 1720094383.403873474
expires: Sat, 06 Jul 2024 13:47:09 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 63716
traceparent: 00-b33d3aa7cd492cb5546cfa59fb16187b-17be3b1de2b8a032-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T17:24:48+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CYj8eUyxLrlo.js | 185.244.209.62 | | 2.3 kB |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CYj8eUyxLrlo.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hash25cfb32bdf286994a0335ba221fcff87 fd88ccdccbfcba36a291a8457190e28f3cba527c 8673ae9b9a2e82e1b2737839f566751d70d6933f99bb0b6bd155bf5c5d818a05
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CYj8eUyxLrlo.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:33 GMT
etag: W/"980dc2b6cd049298a8e7d78003cee16d"
x-amz-meta-mtime: 1720094383.403873474
content-encoding: gzip
expires: Fri, 05 Jul 2024 12:17:43 GMT
cache-control: max-age=86400
x-time-ng: 0.254
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 70296
traceparent: 00-b5d1f755d59d4b7d58a8bc94eb3dc052-de6f05b6a5c1d761-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| 1xlite-352419.top/service-api/result/web/api/v1/gamesByGlobalChamp?id=19&dateFrom=1718350000&dateTo=1720339274&lng=en&ref=1&gr=285&country=137 | 178.253.28.169 | | 17 kB |
URL 1xlite-352419.top/service-api/result/web/api/v1/gamesByGlobalChamp?id=19&dateFrom=1718350000&dateTo=1720339274&lng=en&ref=1&gr=285&country=137 IP178.253.28.169:0 ASN#202492 Silverhill Group Holding Ltd
Hash586f6fb747c845df35b9e89a936394e3 1ee30e28ed569b854433fbae5cc4124eb299fc03 8754b0f35aaa40d9c326820b3d9e74158a083ae0da8978af8ae3cd4e7ebe98e4
GET /service-api/result/web/api/v1/gamesByGlobalChamp?id=19&dateFrom=1718350000&dateTo=1720339274&lng=en&ref=1&gr=285&country=137 HTTP/1.1
Host: 1xlite-352419.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
is-srv: false
x-svc-source: betting-app
DNT: 1
Connection: keep-alive
Cookie: lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder; platform_type=desktop; auid=sv0cqWaKSzdbD+cPA6BIAg==; window_width=1280; SESSION=511efd04e0d48523b31184aa137ef02c; _glhf=1720357035; che_g=9b5505ea-8f71-8eb1-3d66-6476916658be; sh.session.id=51cd57e8-7b17-4583-9aa1-25e93a7309d9; ggru=195
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:15 GMT
content-type: application/json; charset=utf-8
cache-control: public,max-age=60
vary: Accept-Encoding, Accept
api-supported-versions: 1.0, 2.0
x-time-ng: 0.077
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.093
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 |  142.250.74.67 | | 472 B |
IP142.250.74.67:0
Hash814dddd751e51bfbcc7c450744442be6 9c517faf0eeeb4d03255c92e5000773d515d6207 89ab1353b8e72751a6a56755a2aa16886bfc6db8623ab6ffe5d6afb88e28694d
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 07 Jul 2024 08:01:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/BtXFTo_Zv-1w.js | 185.244.209.62 | | 600 B |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/BtXFTo_Zv-1w.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeASCII text, with very long lines (599) Hasheeaa87e2ccb8a5046987fea0bcbc3455 d6ba5734008c930e738707464b41c49252b4a10e 2b8f6d796cb3e3ce494f2899898e115c2481da0a0a60d21149d8116a37fca43d
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/BtXFTo_Zv-1w.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:15 GMT
content-type: text/javascript; charset=utf-8
content-length: 600
last-modified: Thu, 04 Jul 2024 12:01:29 GMT
etag: "eeaa87e2ccb8a5046987fea0bcbc3455"
x-amz-meta-mtime: 1720094383.399873502
expires: Sat, 06 Jul 2024 13:47:09 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 63717
traceparent: 00-28100a853704975320fcaea785822d43-8f5b635f44eb81d6-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T17:24:48+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/0JVasEEKKmGa.js | 185.244.209.62 | | 289 B |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/0JVasEEKKmGa.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
Hashce06d48d841785c0e50878ae5e3ff4ee 4bbb4a491b9ec6d085b8caf8ddd2848efcd2027c 9c40933369c6f4e7224968640df35930fc4a290dc3261a4211ad9bd9b15124e8
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/0JVasEEKKmGa.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:15 GMT
content-type: text/javascript; charset=utf-8
content-length: 289
last-modified: Thu, 04 Jul 2024 12:01:32 GMT
etag: "ce06d48d841785c0e50878ae5e3ff4ee"
x-amz-meta-mtime: 1720094383.395873529
expires: Fri, 05 Jul 2024 12:17:47 GMT
cache-control: max-age=86400
x-time-ng: 0.003
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 70294
traceparent: 00-ebd4b8368a59b8d537ff8da0d87559df-5d385794a96125b8-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:48+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66 | 142.250.74.168 | | 108 kB |
URL www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66 IP142.250.74.168:0
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (10899) Size108 kB (108537 bytes) Hash805148553e9a82b9bfb3609e7548c51b 96ed89e0f0da28837bd71838418ee1b8fb0f0270 7eae52ff20e7db6b39adc1eb2e18c9bd41ce931b9f9ae0f5bf7c3782822f4dc4
GET /gtag/js?id=G-7JGWL9SV66 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 07 Jul 2024 08:01:15 GMT
expires: Sun, 07 Jul 2024 08:01:15 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 108537
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=GTM-KFGPRJ2V | 142.250.74.168 | | 66 kB |
URL www.googletagmanager.com/gtm.js?id=GTM-KFGPRJ2V IP142.250.74.168:0
File typeJavaScript source, ASCII text, with very long lines (1822) Hash3e4a5716c0cdff84d842e14028040ba2 4940c054a7a733ca77c7fb812772b520fefe0929 ec2f85896482e7f0bc146f2743e951ec2c8899047cea3c71f5382da7333d9a40
GET /gtm.js?id=GTM-KFGPRJ2V HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 07 Jul 2024 08:01:15 GMT
expires: Sun, 07 Jul 2024 08:01:15 GMT
cache-control: private, max-age=900
last-modified: Sun, 07 Jul 2024 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 66526
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.67 | | 472 B |
IP142.250.74.67:0
Hash814dddd751e51bfbcc7c450744442be6 9c517faf0eeeb4d03255c92e5000773d515d6207 89ab1353b8e72751a6a56755a2aa16886bfc6db8623ab6ffe5d6afb88e28694d
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 07 Jul 2024 08:01:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| 1xlite-352419.top/service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true | 178.253.28.169 | 200 OK | 12 kB |
URL GET HTTP/21xlite-352419.top/service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true IP178.253.28.169:443 ASN#202492 Silverhill Group Holding Ltd
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerLet's Encrypt Subject1xlite-352419.top FingerprintA3:B3:AE:68:64:B1:4B:9E:AE:03:57:52:A8:1A:51:CB:CE:CD:A1:D7 ValidityMon, 27 May 2024 05:17:27 GMT - Sun, 25 Aug 2024 05:17:26 GMT
Hash449bd3be6e6d8d014efca1a7b15569d7 434eef77697bbaad1ef0053c7fa71d6d156686d2 eb519625a279b6b09e8d169b7be42e8197560da5cb6d9c5ab2dfdd0058622253
GET /service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true HTTP/1.1
Host: 1xlite-352419.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder; platform_type=desktop; auid=sv0cqWaKSzdbD+cPA6BIAg==; window_width=1280; SESSION=511efd04e0d48523b31184aa137ef02c; _glhf=1720357035; che_g=9b5505ea-8f71-8eb1-3d66-6476916658be; sh.session.id=51cd57e8-7b17-4583-9aa1-25e93a7309d9; ggru=195
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:15 GMT
content-type: application/json; charset=utf-8
content-length: 11759
cache-control: public, max-age=5
content-encoding: br
last-modified: Sun, 07 Jul 2024 08:01:15 GMT
vary: Accept-Encoding
x-time-ng: 0.017
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.030
X-Firefox-Spdy: h2
|
|
| widget.suphelper.top/_next/static/chunks/main-39d1bca7561ea264.js | 104.18.39.72 | | 104 kB |
URL widget.suphelper.top/_next/static/chunks/main-39d1bca7561ea264.js IP104.18.39.72:0
File typegzip compressed data, from Unix Size104 kB (104195 bytes) Hash7f4f94d0b9b8587483fb8f95af15bf41 d2d8c30a69eaa6f1ac16e62a6e9602ed10f8c362 562c0f20ffedcc87d26d4a0e91d05a34f8ff9de237a4578d60cf5b41394aefa8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/main-39d1bca7561ea264.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Sun, 07 Jul 2024 08:01:02 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Thu, 13 Jun 2024 16:30:36 GMT
etag: W/"1bccb-190126fd09d"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 168593
expires: Mon, 07 Jul 2025 08:01:02 GMT
server: cloudflare
cf-ray: 89f64de64e98712f-OSL
X-Firefox-Spdy: h2
|
|
| 1xlite-352419.top/bff-api/config/contacts.json?type=2&lang=en | 178.253.28.169 | 200 OK | 66 kB |
URL GET HTTP/21xlite-352419.top/bff-api/config/contacts.json?type=2&lang=en IP178.253.28.169:443 ASN#202492 Silverhill Group Holding Ltd
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerLet's Encrypt Subject1xlite-352419.top FingerprintA3:B3:AE:68:64:B1:4B:9E:AE:03:57:52:A8:1A:51:CB:CE:CD:A1:D7 ValidityMon, 27 May 2024 05:17:27 GMT - Sun, 25 Aug 2024 05:17:26 GMT
Hash187f3782448d857365fd1b938b31a2b4 2178c50802b1f41eb3b37a23f22b8d071f539545 e2abf29541fe4abea9c89e499f3f5a4ab93e768247a8ece88fa13bd8d88ad57a
GET /bff-api/config/contacts.json?type=2&lang=en HTTP/1.1
Host: 1xlite-352419.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
is-srv: false
x-svc-source: v3-host-app
DNT: 1
Connection: keep-alive
Cookie: lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder; platform_type=desktop; auid=sv0cqWaKSzdbD+cPA6BIAg==; window_width=1280; SESSION=511efd04e0d48523b31184aa137ef02c; _glhf=1720357035; che_g=9b5505ea-8f71-8eb1-3d66-6476916658be; sh.session.id=51cd57e8-7b17-4583-9aa1-25e93a7309d9; ggru=195
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:15 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: br
server-timing: bff;dur=8.24, dt_total;dur=12.102, wf-uht;dur=0.023
traceparent: 00-8bc8a26cf83816544623cd51e73f9ac0-3f9ac3c1a4bc3c78-01
vary: Accept-Encoding
x-dt: 285
x-time-ng: 0.008
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-icons/1.0.405/285/logos.svg | 185.244.209.62 | 200 OK | 83 kB |
URL GET HTTP/2v3.traincdn.com/sys-icons/1.0.405/285/logos.svg IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hash16e06c9b693694a731b5962cc7d7c6a6 7a3ac98c9ffd7c9cf576b05776583be1d0c88a22 17388af5288f28f9639349cf1c1886858e911c47c4f366f347ee09b983b9b85e
GET /sys-icons/1.0.405/285/logos.svg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:15 GMT
content-type: image/svg+xml
last-modified: Thu, 04 Jul 2024 06:30:25 GMT
etag: W/"32a71d0977361daf44ab7fb76ebcc187"
x-amz-meta-mtime: 1720074621.720305592
content-encoding: gzip
expires: Sat, 06 Jul 2024 10:00:34 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 78879
traceparent: 00-e1ad12ee00bc3108c29e1c80684cb407-99e71176abb7a425-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:43+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| 1xlite-352419.top/web-api/mobile | 178.253.28.169 | 200 OK | 456 B |
URL POST HTTP/21xlite-352419.top/web-api/mobile IP178.253.28.169:443 ASN#202492 Silverhill Group Holding Ltd
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerLet's Encrypt Subject1xlite-352419.top FingerprintA3:B3:AE:68:64:B1:4B:9E:AE:03:57:52:A8:1A:51:CB:CE:CD:A1:D7 ValidityMon, 27 May 2024 05:17:27 GMT - Sun, 25 Aug 2024 05:17:26 GMT
Hasha93402e114679ca15d13f2f277dbb6a9 65fb342205c556fd2cd0a0da9c1ae4a8b2ab6fcc 6d5b519100b52bc4777822e735c490320c6ccfa0ab3a9c478fdb88ffed73937f
POST /web-api/mobile HTTP/1.1
Host: 1xlite-352419.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
is-srv: false
x-svc-source: platform-apps
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Cookie: lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder; platform_type=desktop; auid=sv0cqWaKSzdbD+cPA6BIAg==; window_width=1280; SESSION=511efd04e0d48523b31184aa137ef02c; _glhf=1720357035; che_g=9b5505ea-8f71-8eb1-3d66-6476916658be; sh.session.id=51cd57e8-7b17-4583-9aa1-25e93a7309d9; ggru=195
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:15 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: br
server-timing: p;dur=36, dt_total;dur=122.661, wf-uht;dur=0.139
traceparent: 00-93b0f129c24a87dfb08e6eccb9df0a84-6bb46fd1fbd17a2b-01
vary: Accept-Encoding
x-dt: 285
x-time-ng: 0.037, 0.110
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.67 | | 472 B |
IP142.250.74.67:0
Hashb0e3100a70982dc1003cbc842687fcfa fb9d4452ed60adb6bb08bc82a1665de7468c4e66 126c35eb703f3c5b612d7e3567b9431e05495c27b1f09d1af975e40cd480cb85
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 07 Jul 2024 08:01:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/Cwwkq956cAi7.css | 185.244.209.62 | 200 OK | 2.9 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/Cwwkq956cAi7.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (16964) Hash0b39138bc09b419709eae2ef38188c6a 6218c387985a6b97b2047c7b0614759e583ccd74 05179bd0dee6df413086d77e4ed42573fe70ff6dac00db6f6eb287a8a83e8d4b
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/Cwwkq956cAi7.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:12 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:30 GMT
etag: W/"0b39138bc09b419709eae2ef38188c6a"
x-amz-meta-mtime: 1720094383.407873447
content-encoding: gzip
expires: Sat, 06 Jul 2024 10:23:33 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 76961
traceparent: 00-2388c98cb1758800c772c38c065f8d93-1451fab192ded125-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:47:23+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/shared-assets/__shared_vue_final_modal_FECSVAVQ.js | 185.244.209.62 | 200 OK | 12 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/shared-assets/__shared_vue_final_modal_FECSVAVQ.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hashf13b567a38144a4cb225f34275f5d534 f28de3a8c54f4f19f31a237e32e4506be59af541 1c3e089c72729d112c3bd03c5255fb06bcb0fcf898747015cc8ab76067a3b985
GET /sys-static/shared-assets/__shared_vue_final_modal_FECSVAVQ.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:05 GMT
content-type: text/javascript; charset=utf-8
last-modified: Fri, 05 Jul 2024 15:44:23 GMT
etag: W/"80381936bf28b5d7eafed8babede28b7"
x-amz-meta-mtime: 1720194149.297045056
content-encoding: gzip
expires: Sun, 07 Jul 2024 15:13:20 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 60465
traceparent: 00-b2898f75a78a963cbfc44f5902a7f605-e28b91659d1a8c71-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T16:50:41+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.67 | | 472 B |
IP142.250.74.67:0
Hashb0e3100a70982dc1003cbc842687fcfa fb9d4452ed60adb6bb08bc82a1665de7468c4e66 126c35eb703f3c5b612d7e3567b9431e05495c27b1f09d1af975e40cd480cb85
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 07 Jul 2024 08:01:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| radar.cedexis.com/1707728419/stub.js | 45.54.49.5 | | 271 B |
URL radar.cedexis.com/1707728419/stub.js IP45.54.49.5:0 ASN#63911 NetActuate, Inc
File typeJavaScript source, ASCII text Hash82dec77fd0353c7c71ce053b8601387e fbbca95419e1d0c042e0a5fdf10f380aca66188c 39f2b7b0fa78d37d0c84d2d6618bd635d86fd683d9bcdd5729850cb2a62522f7
GET /1707728419/stub.js HTTP/1.1
Host: radar.cedexis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-352419.top/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 07 Jul 2024 08:01:16 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 12 Feb 2024 09:50:42 GMT
Vary: Accept-Encoding
ETag: W/"65c9e9f2-186"
Expires: Sun, 21 Jul 2024 08:01:16 GMT
Cache-Control: max-age=1209600, public
Content-Encoding: gzip
|
|
| v3.traincdn.com/sys-icons/1.0.405/285/common.svg | 185.244.209.62 | | 273 kB |
URL v3.traincdn.com/sys-icons/1.0.405/285/common.svg IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Size273 kB (272950 bytes) Hash98fc367f8697f50a1074f5c5e219b3ce dda3957f9785a6aa0ba4c6159b7481b331dc9f3f 0309b0238fecea0b3115f521f6804a682c24cc426b029571254a79bbd0131b3e
GET /sys-icons/1.0.405/285/common.svg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:15 GMT
content-type: image/svg+xml
last-modified: Thu, 04 Jul 2024 06:30:25 GMT
etag: W/"2e94aca47cc1a51e316ea07369122646"
x-amz-meta-mtime: 1720074621.720305592
content-encoding: gzip
expires: Fri, 05 Jul 2024 12:19:07 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 70183
traceparent: 00-e403186b0a210be6894205405031e6b0-f3bcf66e840acd0f-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-ui/3.2.155/Desktop/Default/client.css | 185.244.209.62 | | 159 kB |
URL v3.traincdn.com/sys-ui/3.2.155/Desktop/Default/client.css IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Size159 kB (159379 bytes) Hash80060853d5c7c162f600cb6b0a3f6b53 a0152043a201f3f26cae8278de8af4d9aaab6ea5 24a04760eab44ac6706b84df9ff23d6e57a892c7105e2e8e3dc52700c0e1d5d3
GET /sys-ui/3.2.155/Desktop/Default/client.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:02 GMT
content-type: text/css; charset=utf-8
last-modified: Fri, 05 Jul 2024 09:57:57 GMT
etag: W/"cf9ecd064eb8269956b1fe41044cca79"
x-amz-meta-mtime: 1720173418.483698704
content-encoding: gzip
expires: Sat, 06 Jul 2024 11:57:56 GMT
cache-control: max-age=86400
x-time-ng: 0.030
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 71715
traceparent: 00-3d23fb3dbd31de236c4e95b6b8ef1f08-50e420f2157116d1-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:07:31+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-icons/1.0.399/285/country.svg | 185.244.209.62 | | 63 kB |
URL v3.traincdn.com/sys-icons/1.0.399/285/country.svg IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hash485dde212af25870a6b627a45b1c93c2 8375a49ca2952a5f648435b71febd6b4ab382003 3c845517524dbec4212a852174c776892cc675120b30868e3758534fec033fd7
GET /sys-icons/1.0.399/285/country.svg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:17 GMT
content-type: image/svg+xml
last-modified: Sat, 29 Jun 2024 09:57:03 GMT
etag: W/"33bfcf9c8e40d790e71edf1007d50bbe"
x-amz-meta-mtime: 1719655019.161130415
content-encoding: gzip
expires: Wed, 03 Jul 2024 08:04:49 GMT
cache-control: max-age=86400
x-time-ng: 0.003
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 76348
traceparent: 00-0e9c60990c535244ab8d686dcbe48f00-88aba95bb291bd01-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:55:14+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DtsAgfTqEnE7.js | 185.244.209.62 | | 2.2 kB |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DtsAgfTqEnE7.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeJava source, ASCII text, with very long lines (3226) Hash8cdc413444d802286f457ea74aca2316 a32e7b0da444126a90980e7ba4826e192789fd44 fd9c76f33a5e3f36ad71961d4f217a4ffaddce09daf9c15550426c48481c9b86
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DtsAgfTqEnE7.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:34 GMT
etag: W/"16a66da3e980a57ad73f8c63402eff3a"
x-amz-meta-mtime: 1720094383.411873419
content-encoding: gzip
expires: Fri, 05 Jul 2024 12:17:45 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 70295
traceparent: 00-50ccbed85711445c3e0f531a753c958c-9d7c33e4302ec6a7-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DDf03DXX8bOJ.js | 185.244.209.62 | | 939 B |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DDf03DXX8bOJ.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeJava source, ASCII text, with very long lines (938) Hash95defd1159925ee4c09eaf6de3fe5f63 524bd6866e672d2b63aec08c25a472319a304148 70df0d43a5f0abc358eaddebe8c67574197339fed23b139c63ee0d9c382120a7
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DDf03DXX8bOJ.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:19 GMT
content-type: text/javascript; charset=utf-8
content-length: 939
last-modified: Thu, 04 Jul 2024 12:01:33 GMT
etag: "95defd1159925ee4c09eaf6de3fe5f63"
x-amz-meta-mtime: 1720094383.407873447
expires: Fri, 05 Jul 2024 12:17:56 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 70352
traceparent: 00-7002ffb26b250fc0563ca1cefd256202-55c0af6fece5609f-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:51+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DiylCCrCAcLA.js | 185.244.209.62 | | 31 kB |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DiylCCrCAcLA.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hash1431546a0a422b82ff9fdcfdc56e6d7a 40dfaff8c7ec3988843646b9f009d1b978fc39c5 42960de2755efb302abe2d5ae77b325c5960c6f6dcf5b5e5c16fbe339b97f922
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DiylCCrCAcLA.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:19 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:33 GMT
etag: W/"a1fbfba8868e788b73626c4024d0663b"
x-amz-meta-mtime: 1720094383.411873419
content-encoding: gzip
expires: Fri, 05 Jul 2024 12:17:56 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 70351
traceparent: 00-25a3ff72d34b8a0301bcba7b36fdfe11-a69673b61461ff7e-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:52+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/Dqf4nF6j_JtG.js | 185.244.209.62 | | 10 kB |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/Dqf4nF6j_JtG.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hashf5907dd5f5dd2f496b92307fa3af9c3f a296ae4c4f932a7dce27cb8d144b055b949367f0 9dc08ee3a0edbafe6b31b3e88a2bb44ee99376bc2d094eee5076c9e597bcc685
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/Dqf4nF6j_JtG.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:34 GMT
etag: W/"0380a108bceb7473ec3d793a864e3d83"
x-amz-meta-mtime: 1720094383.411873419
content-encoding: gzip
expires: Fri, 05 Jul 2024 12:17:47 GMT
cache-control: max-age=86400
x-time-ng: 0.263
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 70294
traceparent: 00-15de49043f8cf2e5b868a30a4132a7eb-ce95ab117d13b3c3-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/OTvMt9_rsGAi.js | 185.244.209.62 | | 761 B |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/OTvMt9_rsGAi.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeJava source, ASCII text, with very long lines (760) Hashb095eb190c2f664a723c4dac27909441 163ffd1945a203d9a90c1a009af0891717f5e805 af18d5d391e726510161fb0ded694d31dd9f6c139873336f093f5ca688964ebe
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/OTvMt9_rsGAi.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:19 GMT
content-type: text/javascript; charset=utf-8
content-length: 761
last-modified: Thu, 04 Jul 2024 12:01:34 GMT
etag: "b095eb190c2f664a723c4dac27909441"
x-amz-meta-mtime: 1720094383.411873419
expires: Fri, 05 Jul 2024 12:17:55 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 70352
traceparent: 00-102a34e29f92392dfd0c9232ac8b09b1-3b91adf712ca7901-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:52+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/7YxHgG4sTItT.js | 185.244.209.62 | 200 OK | 2.5 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/7YxHgG4sTItT.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hash60c96d26207e5e57a2b9f7cfbf2e02dc f1ab98fa1e2d6609b664a429f0a808f1789f0abe 34ee628a658545d86034eab7e0fadedf020afe0524f27407bebc9bcc36794e9d
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/7YxHgG4sTItT.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:32 GMT
etag: W/"6b526d11bd1ca112679ed64c22131c39"
x-amz-meta-mtime: 1720094383.395873529
content-encoding: gzip
expires: Fri, 05 Jul 2024 12:17:47 GMT
cache-control: max-age=86400
x-time-ng: 0.009
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 70294
traceparent: 00-05489eb70d61afa644e58c5df23aca3f-a62e81421d70c4c1-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/D0ywtWegY8fs.js | 185.244.209.62 | 200 OK | 3.0 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/D0ywtWegY8fs.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hashd755f1cf402611b92e89b820d5e6e44e e91e89dc0895851a564cd97f558b7f58a7cb1bdd 009a353fe7f8f7ecfa94bf4c8ec2bde899619da5368f871cc7e7039f0c2b8672
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/D0ywtWegY8fs.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:33 GMT
etag: W/"43ff7d3287f75350632d610ef8241dd4"
x-amz-meta-mtime: 1720094383.403873474
content-encoding: gzip
expires: Fri, 05 Jul 2024 12:17:43 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 70297
traceparent: 00-ec20d9976354f3a6e5f4a08720208289-30d17b420e5848a5-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/pTVjzlfmQ_6q.js | 185.244.209.62 | | 1.6 kB |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/pTVjzlfmQ_6q.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hashc26749e5889e92bd74a62cb5fbabba95 61a302bc4a0c9b397ce5aa608916bcb159a812e6 cdfc72d8ea911f0f81e7833d7c26edca09c6b4b8c2e61f6c31fdffbd10181a51
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/pTVjzlfmQ_6q.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:30 GMT
etag: W/"0576bd88177836d6ae91ae36076d4192"
x-amz-meta-mtime: 1720094383.415873393
content-encoding: gzip
expires: Sat, 06 Jul 2024 08:05:13 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 84544
traceparent: 00-f6278ad257f34911f0320c6057c18e8e-0520ceb2c6682ec8-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T09:00:56+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/B3V8ynU7I0DC.js | 185.244.209.62 | | 42 kB |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/B3V8ynU7I0DC.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hashd2f2211c370a6f4e892524630b5767d3 8a8b2be6ba28dc48ccde7ee42084e49e2121c895 594887f9ea193b638511ec0d77139afded1c15bde9792e60166a58ee1e0eadbf
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/B3V8ynU7I0DC.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:19 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:32 GMT
etag: W/"c8d37820122824d600f6c01a2e79fe4d"
x-amz-meta-mtime: 1720094383.395873529
content-encoding: gzip
expires: Fri, 05 Jul 2024 12:17:55 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 70352
traceparent: 00-f06b7e88405969e2b4bf7b7af4bae297-91200a0b6c6d5bb3-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:52+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/BJ3guNZ3mYJZ.js | 185.244.209.62 | 200 OK | 7.3 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/BJ3guNZ3mYJZ.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hash04430750f39c5498ed313c320bfbb39c c33b4b533730a8b12c9af1aa489e9d448fae0924 e01fe98030a0562fae826ac4bd9296f4583e951dae3eff2978117ee26322a2c2
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/BJ3guNZ3mYJZ.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:33 GMT
etag: W/"70bf1ea4981bf666abe7e98fbf1b2186"
x-amz-meta-mtime: 1720094383.395873529
content-encoding: gzip
expires: Fri, 05 Jul 2024 12:17:43 GMT
cache-control: max-age=86400
x-time-ng: 0.224
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 70297
traceparent: 00-aafe0aa7bc1dbeb01c5c85bc24fdabc7-44633a1e65fdd45e-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/D-HUjDCduvU1.js | 185.244.209.62 | | 8.9 kB |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/D-HUjDCduvU1.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hashae7e602814468d7b7235e18cd5a4fa1a 9a1f609fc88c8538a2af589393cd4bdd83e78c3f e7d409c7e21443b52b2ee6004442d6fd66b06db24d504eab7c390c9a77b0e7e4
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/D-HUjDCduvU1.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:33 GMT
etag: W/"48d70f1f8b7f973a279883cefe499a97"
x-amz-meta-mtime: 1720094383.403873474
content-encoding: gzip
expires: Fri, 05 Jul 2024 12:17:44 GMT
cache-control: max-age=86400
x-time-ng: 0.103
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 70296
traceparent: 00-236016c142c81800e8afa66ae43760a1-08ae885f8a04ae46-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-platform-apps-static/Desktop/Default/44136fa355b3/fVffBpKhrTBM.js | 185.244.209.62 | | 12 kB |
URL v3.traincdn.com/sys-static/sys-platform-apps-static/Desktop/Default/44136fa355b3/fVffBpKhrTBM.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hashfafff1119016da5f62fdde8d26e4736d 878e4848c05116d6a248ebbc7334ba36fe89f355 55013680268d7d392110945e8d813cb3e5a77d97d374e27337dd83eb7cbe12e2
GET /sys-static/sys-platform-apps-static/Desktop/Default/44136fa355b3/fVffBpKhrTBM.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:13 GMT
content-type: text/javascript; charset=utf-8
last-modified: Wed, 03 Jul 2024 09:02:15 GMT
etag: W/"a9a4c95ab2b4b6a4c2b85da57a03fbb8"
x-amz-meta-mtime: 1719997288.085308734
content-encoding: gzip
expires: Thu, 04 Jul 2024 09:21:40 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 80288
traceparent: 00-57f536e7136a1e47066a87a6cac09d80-958aa0ae1446d190-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T09:45:17+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| 1xlite-352419.top/service-api/LineFeed/GetSportsShortZip?lng=en&country=137&virtualSports=true&gr=285&groupChamps=true | 178.253.28.169 | | 2.1 kB |
URL 1xlite-352419.top/service-api/LineFeed/GetSportsShortZip?lng=en&country=137&virtualSports=true&gr=285&groupChamps=true IP178.253.28.169:0 ASN#202492 Silverhill Group Holding Ltd
Hash1d1b1129cec8fd0cff475aa56393a45a e7b37a0e748ee0b9dd1627b83f4a83484e370a6e 56c77b94f92127453bd6f8a6d8cdc75d5a65117bf102c24eb73b65d726b47307
GET /service-api/LineFeed/GetSportsShortZip?lng=en&country=137&virtualSports=true&gr=285&groupChamps=true HTTP/1.1
Host: 1xlite-352419.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
x-hd: eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCJ9.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.knfJPd1pvgrzOt7V2yqe7wYMYR2LgAypfUpnlwZHYLhBHujwdmK6rfObED4dvD80oSFD5R8-ABZQPkSAhXyHTA
DNT: 1
Connection: keep-alive
Cookie: lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder; platform_type=desktop; auid=sv0cqWaKSzdbD+cPA6BIAg==; window_width=1280; SESSION=511efd04e0d48523b31184aa137ef02c; _glhf=1720357035; che_g=9b5505ea-8f71-8eb1-3d66-6476916658be; sh.session.id=51cd57e8-7b17-4583-9aa1-25e93a7309d9; ggru=195; application_locale=en; _ga_7JGWL9SV66=GS1.1.1720339276.1.0.1720339276.60.0.0; _ga=GA1.1.1318910912.1720339277
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:20 GMT
content-type: application/json; charset=utf-8
content-length: 2123
cache-control: public, max-age=5
content-encoding: br
last-modified: Sun, 07 Jul 2024 08:01:20 GMT
vary: Accept-Encoding
x-time-ng: 0.030
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.039
X-Firefox-Spdy: h2
|
|
| 1xlite-352419.top/service-api/LiveFeed/GlobalChamp1x2?id=19&count=50&lng=en&country=137&gr=285 | 178.253.28.169 | 200 OK | 65 B |
URL GET HTTP/21xlite-352419.top/service-api/LiveFeed/GlobalChamp1x2?id=19&count=50&lng=en&country=137&gr=285 IP178.253.28.169:443 ASN#202492 Silverhill Group Holding Ltd
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerLet's Encrypt Subject1xlite-352419.top FingerprintA3:B3:AE:68:64:B1:4B:9E:AE:03:57:52:A8:1A:51:CB:CE:CD:A1:D7 ValidityMon, 27 May 2024 05:17:27 GMT - Sun, 25 Aug 2024 05:17:26 GMT
Hasha62a3d291c25728a06f15b4ee47d5e43 7613e665c8dd639f4f8b821f8337cc4629e3d942 1e2d5a52c362e3ab706e11a3ee2454024423019bd4976d4874df7681c7468b3c
GET /service-api/LiveFeed/GlobalChamp1x2?id=19&count=50&lng=en&country=137&gr=285 HTTP/1.1
Host: 1xlite-352419.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
is-srv: false
x-svc-source: betting-app
DNT: 1
Connection: keep-alive
Cookie: lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder; platform_type=desktop; auid=sv0cqWaKSzdbD+cPA6BIAg==; window_width=1280; SESSION=511efd04e0d48523b31184aa137ef02c; _glhf=1720357035; che_g=9b5505ea-8f71-8eb1-3d66-6476916658be; sh.session.id=51cd57e8-7b17-4583-9aa1-25e93a7309d9; ggru=195; application_locale=en; _ga_7JGWL9SV66=GS1.1.1720339276.1.0.1720339276.60.0.0; _ga=GA1.1.1318910912.1720339277
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:20 GMT
content-type: application/json; charset=utf-8
content-length: 65
cache-control: public, max-age=5
content-encoding: br
last-modified: Sun, 07 Jul 2024 08:01:20 GMT
vary: Accept-Encoding
x-time-ng: 0.005
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.014
X-Firefox-Spdy: h2
|
|
| 1xlite-352419.top/service-api/LiveFeed/GetSportsShortZip?lng=en&gr=285&country=137&virtualSports=true&groupChamps=true | 178.253.28.169 | 200 OK | 2.8 kB |
URL GET HTTP/21xlite-352419.top/service-api/LiveFeed/GetSportsShortZip?lng=en&gr=285&country=137&virtualSports=true&groupChamps=true IP178.253.28.169:443 ASN#202492 Silverhill Group Holding Ltd
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerLet's Encrypt Subject1xlite-352419.top FingerprintA3:B3:AE:68:64:B1:4B:9E:AE:03:57:52:A8:1A:51:CB:CE:CD:A1:D7 ValidityMon, 27 May 2024 05:17:27 GMT - Sun, 25 Aug 2024 05:17:26 GMT
Hashf6d8bfc5ddfad3b28d2fb733eefbb100 6d0fe85db1bd1f9a370f59472cd290d6ca0b3e5b 389c99e86f78cf7847b8fdada556a9845c257debab78feb810b6d3ed3376ee22
GET /service-api/LiveFeed/GetSportsShortZip?lng=en&gr=285&country=137&virtualSports=true&groupChamps=true HTTP/1.1
Host: 1xlite-352419.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
x-hd: eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCJ9.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.knfJPd1pvgrzOt7V2yqe7wYMYR2LgAypfUpnlwZHYLhBHujwdmK6rfObED4dvD80oSFD5R8-ABZQPkSAhXyHTA
DNT: 1
Connection: keep-alive
Cookie: lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder; platform_type=desktop; auid=sv0cqWaKSzdbD+cPA6BIAg==; window_width=1280; SESSION=511efd04e0d48523b31184aa137ef02c; _glhf=1720357035; che_g=9b5505ea-8f71-8eb1-3d66-6476916658be; sh.session.id=51cd57e8-7b17-4583-9aa1-25e93a7309d9; ggru=195; application_locale=en; _ga_7JGWL9SV66=GS1.1.1720339276.1.0.1720339276.60.0.0; _ga=GA1.1.1318910912.1720339277
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:21 GMT
content-type: application/json; charset=utf-8
content-length: 2812
cache-control: public, max-age=5
content-encoding: br
last-modified: Sun, 07 Jul 2024 08:01:21 GMT
vary: Accept-Encoding
x-time-ng: 0.008
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.016
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/cms/1/desktop/banner/1efa9758010135374bf29d4205a6b190.jpg | 185.244.209.62 | | 58 kB |
URL v3.traincdn.com/genfiles/cms/1/desktop/banner/1efa9758010135374bf29d4205a6b190.jpg IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1380x248, components 3 Hash7fc1e17eb184d0d11144a6e65dd26146 5dc0838f5e9e07274aa5a51294240a233e2c97e1 26b61ecbc0df9dde6cf3c71131bf01ab4ba1e96930d5d0b6ebe84c1b6a5f1338
GET /genfiles/cms/1/desktop/banner/1efa9758010135374bf29d4205a6b190.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:21 GMT
content-type: image/jpeg
content-length: 58232
last-modified: Mon, 10 Jun 2024 12:31:41 GMT
etag: "7fc1e17eb184d0d11144a6e65dd26146"
expires: Thu, 13 Jun 2024 22:00:48 GMT
cache-control: max-age=3600
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 4299
traceparent: 00-b0a7d9eb063e581e94422af9f6781a82-660633111f76c44a-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-07T07:44:37+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/cms/1/desktop/banner/1efa9758010135374bf29d4205a6b190.webp | 185.244.209.62 | | 40 kB |
URL v3.traincdn.com/genfiles/cms/1/desktop/banner/1efa9758010135374bf29d4205a6b190.webp IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1380x248, Scaling: [none]x[none], YUV color, decoders should clamp Hash64fc08be420cf08f8d5142369ae8a3b9 36cd816f4296e93892b4f62cae43fa8f68382dbe 68324c2e25d7f0e4adbcf7e2ebb856bdde67908ee8d19542cd43f3899f844dfa
GET /genfiles/cms/1/desktop/banner/1efa9758010135374bf29d4205a6b190.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:21 GMT
content-type: image/webp
content-length: 39580
last-modified: Mon, 10 Jun 2024 12:31:42 GMT
etag: "64fc08be420cf08f8d5142369ae8a3b9"
expires: Thu, 13 Jun 2024 22:00:48 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 3188
traceparent: 00-6ebd427b5160fbb0df83e219a17891a1-49de650622f3e8b6-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-07T07:44:37+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| 1xlite-352419.top/service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true | 178.253.28.169 | 200 OK | 12 kB |
URL GET HTTP/21xlite-352419.top/service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true IP178.253.28.169:443 ASN#202492 Silverhill Group Holding Ltd
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerLet's Encrypt Subject1xlite-352419.top FingerprintA3:B3:AE:68:64:B1:4B:9E:AE:03:57:52:A8:1A:51:CB:CE:CD:A1:D7 ValidityMon, 27 May 2024 05:17:27 GMT - Sun, 25 Aug 2024 05:17:26 GMT
Hash42faac0ec91c77ecaf81f36c81e06662 3f8d76df4ea2ad2f59705e9b28802af91f078b5c 09a55e0417f2100a957ad03203eac0b6af3dcec9b8b3fd46f028b4e1469c0e65
GET /service-api/LiveFeed/Get1x2_VZip?count=20&lng=en&gr=285&mode=4&country=137&virtualSports=true&noFilterBlockEvent=true HTTP/1.1
Host: 1xlite-352419.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
x-hd: eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCJ9.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.knfJPd1pvgrzOt7V2yqe7wYMYR2LgAypfUpnlwZHYLhBHujwdmK6rfObED4dvD80oSFD5R8-ABZQPkSAhXyHTA
DNT: 1
Connection: keep-alive
Cookie: lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder; platform_type=desktop; auid=sv0cqWaKSzdbD+cPA6BIAg==; window_width=1280; SESSION=511efd04e0d48523b31184aa137ef02c; _glhf=1720357035; che_g=9b5505ea-8f71-8eb1-3d66-6476916658be; sh.session.id=51cd57e8-7b17-4583-9aa1-25e93a7309d9; ggru=195; application_locale=en; _ga_7JGWL9SV66=GS1.1.1720339276.1.0.1720339276.60.0.0; _ga=GA1.1.1318910912.1720339277
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:22 GMT
content-type: application/json; charset=utf-8
content-length: 11780
cache-control: public, max-age=5
content-encoding: br
last-modified: Sun, 07 Jul 2024 08:01:22 GMT
vary: Accept-Encoding
x-time-ng: 0.022
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.236
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/entry-DbZzN8jb.js | 185.244.209.62 | | 377 kB |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/entry-DbZzN8jb.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Size377 kB (376597 bytes) Hash6f7d9738af83e99a646908a4b660f317 4c11b813328932c5ddede644746b77df6b7e4470 f83e656dfaf125ce3a357d77c2172f40f049e47276d620d2a403c697cf37afe2
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/entry-DbZzN8jb.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:05 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:34 GMT
etag: W/"f23a3b17921cf58a0cb0306d65a7d4c4"
x-amz-meta-mtime: 1720094383.415873393
content-encoding: gzip
expires: Fri, 05 Jul 2024 12:17:41 GMT
cache-control: max-age=86400
x-time-ng: 0.127
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 70288
traceparent: 00-9c76ee91d27565fb779ea88ccea47348-3a3c9213bdbe4009-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:41+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-v3-host-app-static/Desktop/Default/44136fa355b3/BanDaZ4BVkPk.css | 185.244.209.62 | 200 OK | 6.2 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-v3-host-app-static/Desktop/Default/44136fa355b3/BanDaZ4BVkPk.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hashea75bc4c9d9c843fd172a8cfe173d2cc fbafdb6a2adf7799a47d1e0d9bf3120d5e9a47e1 e1f2e3a143ef370a1f611777b1c74b9d133530f3c752f7dfe6f3b2fb15308b4c
GET /sys-static/sys-v3-host-app-static/Desktop/Default/44136fa355b3/BanDaZ4BVkPk.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:10 GMT
content-type: text/css; charset=utf-8
last-modified: Fri, 05 Jul 2024 11:49:53 GMT
etag: W/"8ffb1a814f58631ea37c3840b408e65b"
x-amz-meta-mtime: 1720180082.950126821
content-encoding: gzip
expires: Sun, 07 Jul 2024 09:29:14 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 81116
traceparent: 00-78db059abd823c3e1e0212cb566a0fd8-0e8f82b07f3e11d3-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T09:45:18+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/cms/1/desktop/banner/33d13f704a11b45cf86a27bb094a1ea6.jpg | 185.244.209.62 | | 94 kB |
URL v3.traincdn.com/genfiles/cms/1/desktop/banner/33d13f704a11b45cf86a27bb094a1ea6.jpg IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeJPEG image data, progressive, precision 8, 1380x248, components 3 Hashfa3a732c52e4e4db5f929c0719115bd1 afe55e099925990b362ad304f0745acd7ad2c7b5 ea2141815914de2f65c1f146ba5ddbffeed1d3af4595a3b89e361fdd2f9d63c7
GET /genfiles/cms/1/desktop/banner/33d13f704a11b45cf86a27bb094a1ea6.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:26 GMT
content-type: image/jpeg
content-length: 94357
last-modified: Tue, 16 Jan 2024 10:49:05 GMT
etag: "fa3a732c52e4e4db5f929c0719115bd1"
expires: Sat, 29 Jun 2024 12:41:47 GMT
cache-control: max-age=3600
x-time-ng: 0.003
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 3049
traceparent: 00-1701f43e0195f1f1d08f300a8e4bc7fc-d23e213bfe2031f7-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-07T07:44:42+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/cms/1/desktop/banner/33d13f704a11b45cf86a27bb094a1ea6.webp | 185.244.209.62 | | 43 kB |
URL v3.traincdn.com/genfiles/cms/1/desktop/banner/33d13f704a11b45cf86a27bb094a1ea6.webp IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 1380x248, Scaling: [none]x[none], YUV color, decoders should clamp Hasha1b0bed99b8d2ea8dcdbb1870d37c882 4ea82dd435456fe832956cc34c71d9ff15792374 f1a4097da3d1e198baed36f494569d1c00a80342f0f2ae89ba97332fda0001b7
GET /genfiles/cms/1/desktop/banner/33d13f704a11b45cf86a27bb094a1ea6.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:26 GMT
content-type: image/webp
content-length: 43288
last-modified: Tue, 16 Jan 2024 10:49:18 GMT
etag: "a1b0bed99b8d2ea8dcdbb1870d37c882"
expires: Fri, 28 Jun 2024 13:33:43 GMT
cache-control: max-age=3600
x-time-ng: 0.003
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 2585
traceparent: 00-f15ad2de06ceeec6c032f7d9fc174a46-41befd51aa56ff5e-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-07T07:44:42+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/n28joTIia58W.js | 185.244.209.62 | | 24 kB |
URL v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/n28joTIia58W.js IP185.244.209.62:0 ASN#199524 G-Core Labs S.A.
File typegzip compressed data, max speed, from Unix Hasha630a517cdea9e122b61bfe45ad49365 8b21674f5c2188416a5c66c54c7fb8589a90d40e 284d660984561b0e9dca7d5bbdba26093d3b0621fe9e3665f274f2f2c613b992
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/n28joTIia58W.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:19 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:34 GMT
etag: W/"a70df77113a2c7f6b0cbc3dee7f26e37"
x-amz-meta-mtime: 1720094383.415873393
content-encoding: gzip
expires: Fri, 05 Jul 2024 12:17:55 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 70352
traceparent: 00-9a025361518fe050ac479088e789f2ea-07b6a6bf8a633236-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:52+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/resized/size16/sfiles/logo_teams/6658.webp | 185.244.209.62 | 200 OK | 752 B |
URL GET HTTP/2v3.traincdn.com/resized/size16/sfiles/logo_teams/6658.webp IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image Hashc3c5f2969c3750ac4fc5b2b7627b0f51 f43c9a54db261c2ddc164a43618f929f3fece406 165cd9914567e4e4c613c49876b26823f45d0d1a0a141d213db0f1372aabb661
GET /resized/size16/sfiles/logo_teams/6658.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:00 GMT
content-type: image/webp
content-length: 752
cache-control: max-age=94608000
content-disposition: inline; filename="6658.webp"
content-security-policy: script-src 'none'
expires: Sat, 03 Jul 2027 03:34:19 GMT
x-request-id: a59e6946de61c868bdeaf9524add4b95
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 361601
traceparent: 00-b85b5de6928a6a8ac25c9e14a8a08e9f-064d3070ddabd496-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-07T04:24:39+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-ui/3.2.141/Desktop/Default/client.css | 185.244.209.62 | 200 OK | 1.1 MB |
URL GET HTTP/2v3.traincdn.com/sys-ui/3.2.141/Desktop/Default/client.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
Size1.1 MB (1119555 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sys-ui/3.2.141/Desktop/Default/client.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:02 GMT
content-type: text/css; charset=utf-8
last-modified: Wed, 26 Jun 2024 08:02:18 GMT
etag: W/"0442d66093f5d66a9811734f5c6fd0f1"
x-amz-meta-mtime: 1719388937.466354185
content-encoding: gzip
expires: Fri, 28 Jun 2024 08:25:47 GMT
cache-control: max-age=86400
x-time-ng: 0.003
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 71258
traceparent: 00-90c3cc301a419c204f1e2de5032325c6-479ef5ed3faae83e-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T21:43:59+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/shared-assets/__shared_chunk_VVUPMHWD.js | 185.244.209.62 | 200 OK | 106 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/shared-assets/__shared_chunk_VVUPMHWD.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (35977) Size106 kB (106547 bytes) Hash174d2ad0f2ce3ec8f776fb43fd60fa00 213bbeff3b3ae6e30d637d67f5107fb656e149f1 841054a06c87420311adc235df5eb8a062916e04df8240ff898588fbe9c2478a
GET /sys-static/shared-assets/__shared_chunk_VVUPMHWD.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:06 GMT
content-type: text/javascript; charset=utf-8
last-modified: Fri, 05 Jul 2024 15:44:23 GMT
etag: W/"174d2ad0f2ce3ec8f776fb43fd60fa00"
x-amz-meta-mtime: 1720194149.297045056
content-encoding: gzip
expires: Sun, 07 Jul 2024 15:12:32 GMT
cache-control: max-age=86400
x-time-ng: 0.003
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 60514
traceparent: 00-551a9b00e50783361b651235ce8ae075-7d76792b8c3d836d-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T16:46:33+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| 1xlite-352419.top/web-api/registration/fields | 178.253.28.169 | 200 OK | 37 kB |
URL POST HTTP/21xlite-352419.top/web-api/registration/fields IP178.253.28.169:443 ASN#202492 Silverhill Group Holding Ltd
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerLet's Encrypt Subject1xlite-352419.top FingerprintA3:B3:AE:68:64:B1:4B:9E:AE:03:57:52:A8:1A:51:CB:CE:CD:A1:D7 ValidityMon, 27 May 2024 05:17:27 GMT - Sun, 25 Aug 2024 05:17:26 GMT
Hash0f2d8ce001dcf1cd33e33bf76c026334 e14797e9595a369a8d850e9db4c428d5793184d9 78fde8fe17172b51b513f825f9e8a9cb518869bb9a20ca86e45ee903d3eeb6b4
POST /web-api/registration/fields HTTP/1.1
Host: 1xlite-352419.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-352419.top/en?tag=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
Content-Length: 19
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Cookie: lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder; platform_type=desktop; auid=sv0cqWaKSzdbD+cPA6BIAg==; window_width=1280; SESSION=511efd04e0d48523b31184aa137ef02c; _glhf=1720357035; che_g=9b5505ea-8f71-8eb1-3d66-6476916658be; sh.session.id=51cd57e8-7b17-4583-9aa1-25e93a7309d9; ggru=195
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:06 GMT
content-type: application/json
cache-control: no-cache, private
content-encoding: br
server-timing: p;dur=84, dt_total;dur=103.206, wf-uht;dur=0.116
traceparent: 00-d71cee0d074c6fdd7bc43178b7236462-e276def21e255ec1-01
vary: Accept-Encoding
x-dt: 285
x-time-ng: 0.085, 0.093
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/css/f51fc672.css | 185.244.209.62 | 200 OK | 7.0 kB |
URL GET HTTP/2v3.traincdn.com/main-static/34af5fc1/desktop/default/css/f51fc672.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (7023), with no line terminators Hashc9ae66494ec2e84e69e868862fdbc702 3dbdab03e5a8990bc1cea93699474bd24a5908e7 c53fb46c36daa6d11cd282ac43e423f3975a61f0777b1462b8395be43c3b8746
GET /main-static/34af5fc1/desktop/default/css/f51fc672.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:59 GMT
content-type: text/css; charset=utf-8
last-modified: Sat, 06 Jul 2024 09:51:12 GMT
etag: W/"f9fcaba60807cc2f28195f5af3eee2aa"
x-amz-meta-mtime: 1720259460.97538666
content-encoding: gzip
expires: Sun, 07 Jul 2024 10:10:23 GMT
cache-control: max-age=86400
x-time-ng: 0.004
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 78636
traceparent: 00-f812f06b047cf584b3947b0a499f2f98-e19b2ade7dccfa39-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:40+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-platform-apps-static/Desktop/Default/44136fa355b3/BqpbxFp6A1hu.js | 185.244.209.62 | 200 OK | 7.0 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-platform-apps-static/Desktop/Default/44136fa355b3/BqpbxFp6A1hu.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (7248), with no line terminators Hasheceab18780bf72c90b431988170e65c5 38187814d6180a3d944fa9088a7c9ae9c7f7b7d3 9c072e6db00138b7282e900657def9feaba5b9f3c1d7c4cc8e3cb10c26cab507
GET /sys-static/sys-platform-apps-static/Desktop/Default/44136fa355b3/BqpbxFp6A1hu.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:13 GMT
content-type: text/javascript; charset=utf-8
last-modified: Wed, 03 Jul 2024 09:02:15 GMT
etag: W/"f0b9d3d335d51285b0f81f5aa3c5dd72"
x-amz-meta-mtime: 1719997288.081308712
content-encoding: gzip
expires: Thu, 04 Jul 2024 09:21:40 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 80288
traceparent: 00-435007fc4ff0c10ffb53726021868bb4-255df88ccb51ac9a-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T09:45:17+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DY-FZl01KCFv.css | 185.244.209.62 | 200 OK | 7.9 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DY-FZl01KCFv.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (7870), with no line terminators Hashdf1b2d9807e7535b4b36ac92199d4138 4a4312adf613c4d4a66120e158ba1dc5b6da0f32 9ff3dc8e5846b3300b6e00b48fba0f92e6d0fdbfb167d43204bfaeadfbd6ddb5
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DY-FZl01KCFv.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:12 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:30 GMT
etag: W/"97e83856dbb7a8f13bed33c865ef3f87"
x-amz-meta-mtime: 1720094383.407873447
content-encoding: gzip
expires: Sat, 06 Jul 2024 09:41:56 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 79399
traceparent: 00-ab3ce7e2da66e8d4cc30a30856aa0956-256c072304ea4c1f-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T15:37:18+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-v3-host-app-static/Desktop/Default/44136fa355b3/ByZ1ujMDsbnp.js | 185.244.209.62 | 200 OK | 1.7 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-v3-host-app-static/Desktop/Default/44136fa355b3/ByZ1ujMDsbnp.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (1732), with no line terminators Hash4008004be7838cab08033978cf0d2581 59dfb308b723d549bae3fb37216cd10cd2b28f5b 40e53660807d967a8f5c27f95cc41d11dbcf254500c853005e86630f2edc01e5
GET /sys-static/sys-v3-host-app-static/Desktop/Default/44136fa355b3/ByZ1ujMDsbnp.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
last-modified: Fri, 05 Jul 2024 11:49:55 GMT
etag: W/"607db54cf7866a3b282e00762616c1ef"
x-amz-meta-mtime: 1720180082.954126752
content-encoding: gzip
expires: Sat, 06 Jul 2024 11:57:58 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 71732
traceparent: 00-bd4dc70e31ea7057c71791f71751add2-7e6fc899cc146f67-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:07:37+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CjiQpIKymHd8.js | 185.244.209.62 | 200 OK | 6.4 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CjiQpIKymHd8.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (6412), with no line terminators Hashd86b10b10441c8dc6531b21c36c08f2a cf043fbdc63b2fddda6a9c585cd54ac7ff5a85eb 83dbb2eb799bea8f7852e75fa359313e22d07b26b56824848c59567b19535dd1
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CjiQpIKymHd8.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:33 GMT
etag: W/"7e6ce95ccdfa0566618d842df3cee1e8"
x-amz-meta-mtime: 1720094383.403873474
content-encoding: gzip
expires: Fri, 05 Jul 2024 12:17:46 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 70295
traceparent: 00-43c9a1b6bc946cee9d752c4f123b5336-8553750f529ebfb9-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/css/88cfac66.css | 185.244.209.62 | 200 OK | 64 B |
URL GET HTTP/2v3.traincdn.com/main-static/34af5fc1/desktop/default/css/88cfac66.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash9deb70dd3fbdc7061ed21c5632fbc55b 22ae1cadf75b3fdd5e3e3762842b1b7a6f6e7ed8 be8196057ac43ab3882caf30239c364e1ef4ceda087e92ca87187ce239f022f9
GET /main-static/34af5fc1/desktop/default/css/88cfac66.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:59 GMT
content-type: text/css; charset=utf-8
content-length: 64
last-modified: Sat, 06 Jul 2024 09:51:12 GMT
etag: "9deb70dd3fbdc7061ed21c5632fbc55b"
x-amz-meta-mtime: 1720259460.967386636
expires: Sun, 07 Jul 2024 10:10:23 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 78636
traceparent: 00-f2a1037206dd266a61719fc60a97b87c-203042239f5bb6ce-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:40+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/C4VonYy_kahn.js | 185.244.209.62 | 200 OK | 4.0 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/C4VonYy_kahn.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (4167), with no line terminators Hash9964709f443f56f47dab14cd3117c91c dac3f3f83ef22aa1d9db08cc18bcb85d86498ed9 c5092460c75f1e84e3ae9d355294dc174b4e1e077295babd5e2e246b278c34fa
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/C4VonYy_kahn.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:33 GMT
etag: W/"55859d1df79a47d0316c6724a6e2e45e"
x-amz-meta-mtime: 1720094383.399873502
content-encoding: gzip
expires: Fri, 05 Jul 2024 12:17:43 GMT
cache-control: max-age=86400
x-time-ng: 0.019
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 70297
traceparent: 00-f6fd5d16b16528b71277ebc21a4f9f20-f74e3b6bc0cdcaa4-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DfUBbyOqtXLW.css | 185.244.209.62 | 200 OK | 80 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DfUBbyOqtXLW.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash8112f327592a8816ad7fbdcceae30133 2cdf068ab896bedb50d07345a0cda27716cc8059 a08ee87ca58e5d9cd3b55ec07138c8a7c4390af741288d05e6a905e79e2e8603
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DfUBbyOqtXLW.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:12 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:30 GMT
etag: W/"8112f327592a8816ad7fbdcceae30133"
x-amz-meta-mtime: 1720094383.407873447
content-encoding: gzip
expires: Sat, 06 Jul 2024 06:41:46 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 90839
traceparent: 00-3ba9d7b4d78f39629df99f0b2e56d0fe-b6adae6213df5ba1-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:42+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/app-093ff350.js | 185.244.209.62 | 200 OK | 943 kB |
URL GET HTTP/2v3.traincdn.com/main-static/34af5fc1/desktop/default/app-093ff350.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
Size943 kB (942830 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /main-static/34af5fc1/desktop/default/app-093ff350.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:56 GMT
content-type: text/javascript; charset=utf-8
last-modified: Sat, 06 Jul 2024 09:51:08 GMT
etag: W/"2c01742b4c0cc6c9de0290dbabcdfaca"
x-amz-meta-mtime: 1720259460.959386612
content-encoding: gzip
expires: Sun, 07 Jul 2024 10:10:19 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 78636
traceparent: 00-3bf2f4f605e2c169c2ff9c0ac7d93a87-7bbb7b8fe8bd1a24-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:19+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/Ng07iCPr0pXz.js | 185.244.209.62 | 200 OK | 2.6 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/Ng07iCPr0pXz.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (2614), with no line terminators Hash116633eeeb910659eaf613e89bfe39f9 0f1ac5fb3f61b18ff730fa229277f9ca061d226d 98e9bd3b85b5f145987ef8e009201e9456efb26b466565fd41401f6c716d69e6
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/Ng07iCPr0pXz.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:34 GMT
etag: W/"6b2b580b778406d7b46b2b67ca7d12ce"
x-amz-meta-mtime: 1720094383.411873419
content-encoding: gzip
expires: Fri, 05 Jul 2024 12:17:45 GMT
cache-control: max-age=86400
x-time-ng: 0.005
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 70295
traceparent: 00-17973a543adc736555f61ec5473b6deb-127a5e9c28ae4c0f-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DVjHOWP9vIhC.js | 185.244.209.62 | 200 OK | 1.2 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DVjHOWP9vIhC.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (1296), with no line terminators Hash38d435d7ba7376cf47aa46e678ecdccd 45435f02a82bcc199c8b30c702f460df3fd7ad98 b29a189f4231060769d0175a3e5a5e7bd033618c9ee5f6302a48cd6a5384fb68
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DVjHOWP9vIhC.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:33 GMT
etag: W/"45bb4715aa7c50fe0528aad34101af53"
x-amz-meta-mtime: 1720094383.407873447
content-encoding: gzip
expires: Fri, 05 Jul 2024 12:17:46 GMT
cache-control: max-age=86400
x-time-ng: 0.268
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 70295
traceparent: 00-99fe5e17a0159c1f589c8f946a6eef6d-f40c839e6a5c46db-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/AzYv00CQuaMq.js | 185.244.209.62 | 200 OK | 2.8 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/AzYv00CQuaMq.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (2779), with no line terminators Hashd1f796e0b7baf4af25ba2f6aaed6e7c5 29584f473f39379ad002ab69df45b7eae7a72907 8fc31507e14989a381862092722aeb18fffb25aa3eaf1a7fe1c94026374a2ec4
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/AzYv00CQuaMq.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:32 GMT
etag: W/"84d844cfb9bb4c32f1078e1665e33cbf"
x-amz-meta-mtime: 1720094383.395873529
content-encoding: gzip
expires: Fri, 05 Jul 2024 12:17:43 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 70296
traceparent: 00-2bedcb1e6994e8f618c095670a66a7f5-6ff2f967bbd709de-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/Page.Betting.Main/Page.Betting.Main.BettingLeftAside/Page.Betting.TeamGames/betting.GamesSliderApp/b/e7e00398-a74e0715.js | 185.244.209.62 | 200 OK | 7.6 kB |
URL GET HTTP/2v3.traincdn.com/main-static/34af5fc1/desktop/default/Page.Betting.Main/Page.Betting.Main.BettingLeftAside/Page.Betting.TeamGames/betting.GamesSliderApp/b/e7e00398-a74e0715.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (7843), with no line terminators Hashcfc19ee9bc6a20dd2508705726d21022 43904805eca79308aad56f663c2b786281c42fd3 034c29373214f640051f1b6666976fe8b59ea305b2a4a12c373d9d1840e80ff6
GET /main-static/34af5fc1/desktop/default/Page.Betting.Main/Page.Betting.Main.BettingLeftAside/Page.Betting.TeamGames/betting.GamesSliderApp/b/e7e00398-a74e0715.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:56 GMT
content-type: text/javascript; charset=utf-8
last-modified: Sat, 06 Jul 2024 09:51:11 GMT
etag: W/"5c198f8f404841f36f898834facffc25"
x-amz-meta-mtime: 1720259460.9553866
content-encoding: gzip
expires: Sun, 07 Jul 2024 10:10:19 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 78637
traceparent: 00-71c934dc177fde4db5e844178d0e7066-2d8ef90ce9bb669e-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:19+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/betting.SportMenuApp-9125c181.js | 185.244.209.62 | 200 OK | 111 kB |
URL GET HTTP/2v3.traincdn.com/main-static/34af5fc1/desktop/default/betting.SportMenuApp-9125c181.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
Size111 kB (110954 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /main-static/34af5fc1/desktop/default/betting.SportMenuApp-9125c181.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:59 GMT
content-type: text/javascript; charset=utf-8
last-modified: Sat, 06 Jul 2024 09:51:08 GMT
etag: W/"84f7f822471d08d620670021f8c9ea3b"
x-amz-meta-mtime: 1720259460.963386624
content-encoding: gzip
expires: Sun, 07 Jul 2024 10:10:25 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 78634
traceparent: 00-2752708410e1a5fc3e3d78062dcaf34e-d5a96bc636a95615-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:40+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/css/205152dc.css | 185.244.209.62 | 200 OK | 8.6 kB |
URL GET HTTP/2v3.traincdn.com/main-static/34af5fc1/desktop/default/css/205152dc.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (8577), with no line terminators Hashffa461848e42b1b3720f6dde4770467f dae3b8eda1eae8cafb0567c02408e6e804134b5e 7792b4c27450b41deeaf41efeff5a116006e853c4336487cdc394a3e0b1688da
GET /main-static/34af5fc1/desktop/default/css/205152dc.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:56 GMT
content-type: text/css; charset=utf-8
last-modified: Sat, 06 Jul 2024 09:51:11 GMT
etag: W/"ffa461848e42b1b3720f6dde4770467f"
x-amz-meta-mtime: 1720259460.963386624
content-encoding: gzip
expires: Sun, 07 Jul 2024 10:10:19 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 78637
traceparent: 00-215ca6b4442c75561200923830ecca33-b635e044dea2b709-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:19+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/cms/1/desktop/banner/bf26d696b76130d9781b16f89f1de4cc.jpg | 185.244.209.62 | 200 OK | 147 kB |
URL GET HTTP/2v3.traincdn.com/genfiles/cms/1/desktop/banner/bf26d696b76130d9781b16f89f1de4cc.jpg IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, progressive, precision 8, 1380x248, components 3 Size147 kB (147402 bytes) Hash9d1ab102184100544b4a72fcc6a8c458 79a64d17a182311cf4f856e39c83e3d9c5b1e55b 0fd0800599423b6bc4c2fe90c96f0025f4dd0d13d0c4b535e9421e21049a0903
GET /genfiles/cms/1/desktop/banner/bf26d696b76130d9781b16f89f1de4cc.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:04 GMT
content-type: image/jpeg
content-length: 147402
last-modified: Tue, 11 Apr 2023 18:15:17 GMT
etag: "9d1ab102184100544b4a72fcc6a8c458"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-4a6b6fdb7eaca2e76da1638852cc34c2-02bfab9058892398-01
x-id: osix-hw-edge-gc4
age: 1004
cache: HIT
x-cached-since: 2024-07-07T07:44:20+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CBHp0tUKYt3K.js | 185.244.209.62 | 200 OK | 4.3 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CBHp0tUKYt3K.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (4406), with no line terminators Hash92f3b15ca0969db8ef45f502c50cb4aa 52ed3bff76c0a2d9fa2b6531551aca4610881aa4 04da589b5dafd11572494926b869db1443ca62ca40ae2648bcd344070b44c52e
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CBHp0tUKYt3K.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:33 GMT
etag: W/"bdbabd63e3d42edd0f944bceee5661b6"
x-amz-meta-mtime: 1720094383.399873502
content-encoding: gzip
expires: Fri, 05 Jul 2024 12:17:47 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 70294
traceparent: 00-560ae13179d4d778c9047063dc4156cf-1b51f656d82dd0b2-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/runtime-9d50b511.js | 185.244.209.62 | 200 OK | 46 kB |
URL GET HTTP/2v3.traincdn.com/main-static/34af5fc1/desktop/default/runtime-9d50b511.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (46545), with no line terminators Hash35af0f3c279d224baee185ee01062ae3 a6b9a79668eb0408d7c900f63951a280c4e88f18 a7fbbbc45433fa41e63fa10b34e653745387c9aec4bf9b09b1b19065db8a4631
GET /main-static/34af5fc1/desktop/default/runtime-9d50b511.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:56 GMT
content-type: text/javascript; charset=utf-8
last-modified: Sat, 06 Jul 2024 09:51:11 GMT
etag: W/"35af0f3c279d224baee185ee01062ae3"
x-amz-meta-mtime: 1720259460.991386708
content-encoding: gzip
expires: Sun, 07 Jul 2024 10:10:19 GMT
cache-control: max-age=86400
x-time-ng: 0.003
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 78637
traceparent: 00-8c366dcd46bfc246af19458b8d590b7c-afa967695f05e687-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:19+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/commons/app-35555c9e.js | 185.244.209.62 | 200 OK | 138 kB |
URL GET HTTP/2v3.traincdn.com/main-static/34af5fc1/desktop/default/commons/app-35555c9e.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
Size138 kB (137877 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /main-static/34af5fc1/desktop/default/commons/app-35555c9e.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:56 GMT
content-type: text/javascript; charset=utf-8
last-modified: Sat, 06 Jul 2024 09:51:11 GMT
etag: W/"44bf51af67b2dc1797ffdc41a4d8d7ae"
x-amz-meta-mtime: 1720259460.963386624
content-encoding: gzip
expires: Sun, 07 Jul 2024 10:10:19 GMT
cache-control: max-age=86400
x-time-ng: 0.004
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 78637
traceparent: 00-72e546765284367c7b58084c998558db-9079d44111cb4775-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:19+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| widget.suphelper.top/_next/static/chunks/webpack-8e78511ccb1ad0e5.js | 104.18.39.72 | 200 OK | 4.1 kB |
URL GET HTTP/2widget.suphelper.top/_next/static/chunks/webpack-8e78511ccb1ad0e5.js IP104.18.39.72:443
Requested byhttps://widget.suphelper.top/ CertificateIssuerGoogle Trust Services LLC Subjectsuphelper.top Fingerprint19:31:44:4F:9D:DE:4C:F2:AD:44:DB:B5:31:C3:20:A9:DB:3D:26:4A ValidityFri, 24 May 2024 09:49:21 GMT - Thu, 22 Aug 2024 09:49:20 GMT
File typeJavaScript source, ASCII text, with very long lines (4130), with no line terminators Hash2f369ec0db31b6aec7d2c664bdde7e4e f27b0ff416f7230229100a019eceba75fc2007e6 a6678cd3d9f5e2a7cd7951eca855c9b4b64453a561831015df1c3ad7087c87a3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /_next/static/chunks/webpack-8e78511ccb1ad0e5.js HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 07 Jul 2024 08:01:02 GMT
content-type: application/javascript; charset=UTF-8
cache-control: public, max-age=31536000
last-modified: Thu, 13 Jun 2024 16:30:36 GMT
etag: W/"fdf-190126fd0a1"
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
cf-cache-status: HIT
age: 1991981
expires: Mon, 07 Jul 2025 08:01:02 GMT
server: cloudflare
cf-ray: 89f64de64e95712f-OSL
X-Firefox-Spdy: h2
|
|
| 1xlite-352419.top/sys-betting-app-front/en?tag=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder | 178.253.28.169 | 200 OK | 351 kB |
URL GET HTTP/21xlite-352419.top/sys-betting-app-front/en?tag=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder IP178.253.28.169:443 ASN#202492 Silverhill Group Holding Ltd
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerLet's Encrypt Subject1xlite-352419.top FingerprintA3:B3:AE:68:64:B1:4B:9E:AE:03:57:52:A8:1A:51:CB:CE:CD:A1:D7 ValidityMon, 27 May 2024 05:17:27 GMT - Sun, 25 Aug 2024 05:17:26 GMT
Size351 kB (350970 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sys-betting-app-front/en?tag=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder HTTP/1.1
Host: 1xlite-352419.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-352419.top/en?tag=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
mf-render-mode: json
DNT: 1
Connection: keep-alive
Cookie: lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder; platform_type=desktop; auid=sv0cqWaKSzdbD+cPA6BIAg==; window_width=1280
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:59 GMT
content-type: application/json
content-encoding: br
server-timing: total;dur=53;desc="Total __BETTING_APP__", dt_total;dur=58.103, wf-uht;dur=0.083
set-cookie: tzo=2; Path=/
traceparent: 00-f88d3a166c2b251b1c1b4e5b17578e81-11ba45ba7517a29a-00
vary: Accept-Encoding, Accept-Encoding
x-dt: 285
x-time-ng: 0.057, 0.060
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/shared-assets/__shared_vue_deps_LZQESBKU.js | 185.244.209.62 | 200 OK | 94 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/shared-assets/__shared_vue_deps_LZQESBKU.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sys-static/shared-assets/__shared_vue_deps_LZQESBKU.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:05 GMT
content-type: text/javascript; charset=utf-8
last-modified: Fri, 05 Jul 2024 11:51:30 GMT
etag: W/"ef95ae707ece0756c028b9b1b67499db"
x-amz-meta-mtime: 1720180094.273931427
content-encoding: gzip
expires: Sun, 07 Jul 2024 09:59:59 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 79266
traceparent: 00-ed816fa7d094a7476c01bb25fda44208-ee5ce4de36a1d20d-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:01:22+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/vendors/Registration.Fields-89f81f98.js | 185.244.209.62 | 200 OK | 41 kB |
URL GET HTTP/2v3.traincdn.com/main-static/34af5fc1/desktop/default/vendors/Registration.Fields-89f81f98.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (41168), with no line terminators Hash41652885c148745ecec3ae7f99fd7a97 ed15e5444f47f19c9748d315e7921d6c81b0e4b1 7e1fc386836e9e259e7b3d0190a17a294145be923504ece88359742421610476
GET /main-static/34af5fc1/desktop/default/vendors/Registration.Fields-89f81f98.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:08 GMT
content-type: text/javascript; charset=utf-8
last-modified: Sat, 06 Jul 2024 09:51:11 GMT
etag: W/"41652885c148745ecec3ae7f99fd7a97"
x-amz-meta-mtime: 1720259460.991386708
content-encoding: gzip
expires: Sun, 07 Jul 2024 10:10:25 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 78643
traceparent: 00-c5580e88968256e3f00ec10fac919bcc-9b9de2fd7ce6b75a-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:42+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/BH6boXaa_Nyd.js | 185.244.209.62 | 200 OK | 4.1 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/BH6boXaa_Nyd.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeUnicode text, UTF-8 text, with very long lines (4261), with no line terminators Hash19d1da2cd715e0045e688240e212e688 672a8d32b2bc43e3d0fa47f373fe9998285851ac 3bbee1e691d719119d4c1393e395f8d9f37a9d8b389e5f2acbbcb2a039cf4be7
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/BH6boXaa_Nyd.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:33 GMT
etag: W/"a0fe39db78e0c8ade892aae0235df4b3"
x-amz-meta-mtime: 1720094383.395873529
content-encoding: gzip
expires: Fri, 05 Jul 2024 12:17:47 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 70294
traceparent: 00-114d18f674b036030ce4f11781f5c56f-bfd9f6665235ef18-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-v3-host-app-static/Desktop/Default/44136fa355b3/b0Y4vrTBqfei.js | 185.244.209.62 | 200 OK | 25 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-v3-host-app-static/Desktop/Default/44136fa355b3/b0Y4vrTBqfei.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (24654) Hash7e712ad5b917de0e49ea5e41ba03b8c1 55e3dca59237563d44cf0f031dddd0f51553d25f 42c10bf9a51f4161998b90f58a1172b8f0160ee46a1e9cfd206795e00c6db047
GET /sys-static/sys-v3-host-app-static/Desktop/Default/44136fa355b3/b0Y4vrTBqfei.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
last-modified: Fri, 05 Jul 2024 11:49:55 GMT
etag: W/"7e712ad5b917de0e49ea5e41ba03b8c1"
x-amz-meta-mtime: 1720180082.962126614
content-encoding: gzip
expires: Sat, 06 Jul 2024 11:57:58 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 71732
traceparent: 00-9790fe1c273257c23073ad0f2bbc2117-76141ec03a10b9e4-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:07:37+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| 1xlite-352419.top/service-api/LineFeed/GlobalChamp1x2?id=19&count=50&lng=en&country=137&gr=285 | 178.253.28.169 | 200 OK | 4.6 kB |
URL GET HTTP/21xlite-352419.top/service-api/LineFeed/GlobalChamp1x2?id=19&count=50&lng=en&country=137&gr=285 IP178.253.28.169:443 ASN#202492 Silverhill Group Holding Ltd
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerLet's Encrypt Subject1xlite-352419.top FingerprintA3:B3:AE:68:64:B1:4B:9E:AE:03:57:52:A8:1A:51:CB:CE:CD:A1:D7 ValidityMon, 27 May 2024 05:17:27 GMT - Sun, 25 Aug 2024 05:17:26 GMT
File typetroff or preprocessor input, Unicode text, UTF-8 text, with very long lines (5481), with no line terminators Hash0fa7cb69d99068481dcf030479c6327b 4bc3e7251cd6a0d327a2a5ea3f6f012db19cee29 98d29ac0da0e4fe619832e9dd4b70d09244e47c0d72e44761970f57eaca8b10a
GET /service-api/LineFeed/GlobalChamp1x2?id=19&count=50&lng=en&country=137&gr=285 HTTP/1.1
Host: 1xlite-352419.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
is-srv: false
x-svc-source: betting-app
DNT: 1
Connection: keep-alive
Cookie: lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder; platform_type=desktop; auid=sv0cqWaKSzdbD+cPA6BIAg==; window_width=1280; SESSION=511efd04e0d48523b31184aa137ef02c; _glhf=1720357035; che_g=9b5505ea-8f71-8eb1-3d66-6476916658be; sh.session.id=51cd57e8-7b17-4583-9aa1-25e93a7309d9; ggru=195
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: application/json; charset=utf-8
content-length: 1455
cache-control: public, max-age=5
content-encoding: br
last-modified: Sun, 07 Jul 2024 08:01:14 GMT
vary: Accept-Encoding
x-time-ng: 0.003
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.013
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/3083a20a3f73c30fce38710d7ada9cbb.svg | 185.244.209.62 | 200 OK | 1.2 kB |
URL GET HTTP/2v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/3083a20a3f73c30fce38710d7ada9cbb.svg IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Hash1ff133ab01d208b0d686dd88d85e239a 86a0501b79a1c553eadc829177a9e6ffff1948be 9ac21c63d1c8b7abe4c94550a731baff995d34c745c1d08fdf8d5e5c8de268f1
GET /genfiles/cms/1-285/desktop/media_asset/3083a20a3f73c30fce38710d7ada9cbb.svg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: image/svg+xml
last-modified: Wed, 19 Apr 2023 11:51:30 GMT
etag: W/"3ae81b002dca46d3b732ce3e03ae35c6"
content-encoding: gzip
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-6cdc6da909a866e34f2a91ee9cf2e5cd-00074dbd62b592ff-01
x-id: osix-hw-edge-gc4
age: 8
cache: HIT
x-cached-since: 2024-07-07T08:01:06+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| 1xlite-352419.top/hd-api/external/api/web/v1/converslon/load | 178.253.28.169 | 200 OK | 33 kB |
URL GET HTTP/21xlite-352419.top/hd-api/external/api/web/v1/converslon/load IP178.253.28.169:443 ASN#202492 Silverhill Group Holding Ltd
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerLet's Encrypt Subject1xlite-352419.top FingerprintA3:B3:AE:68:64:B1:4B:9E:AE:03:57:52:A8:1A:51:CB:CE:CD:A1:D7 ValidityMon, 27 May 2024 05:17:27 GMT - Sun, 25 Aug 2024 05:17:26 GMT
Hash4284a184f5c561e6a9dfbadf61aa2186 28e13a4b885702fd6a656e0577b03c0fcd69f88e f7de7b707c7dab26732adf7420e6b103fbb3ee87d230ebcb0d771ac26cd70177
GET /hd-api/external/api/web/v1/converslon/load HTTP/1.1
Host: 1xlite-352419.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-352419.top/en?tag=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_51254m_14189c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D7686202_d26691_l149642_clickunder; platform_type=desktop; auid=sv0cqWaKSzdbD+cPA6BIAg==; window_width=1280; SESSION=511efd04e0d48523b31184aa137ef02c; _glhf=1720357035; che_g=9b5505ea-8f71-8eb1-3d66-6476916658be; sh.session.id=51cd57e8-7b17-4583-9aa1-25e93a7309d9; ggru=195
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:08 GMT
content-type: application/json
cache-control: max-age=0, private, must-revalidate
content-encoding: gzip
traceparent: 00-d7b248574e9e203872a8bf7ac37c350b-7a1b7beae9c600a4-01
vary: Accept-Encoding
x-dt: 285
x-request-guid: fc0504b92516c130c500ecdc643a6bd8
x-time-ng: 0.058
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=58.029, wf-uht;dur=0.066
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/cms/1/desktop/banner/d94c9b1508a286d270c77946ff0972fa.jpg | 185.244.209.62 | 200 OK | 51 kB |
URL GET HTTP/2v3.traincdn.com/genfiles/cms/1/desktop/banner/d94c9b1508a286d270c77946ff0972fa.jpg IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1380x248, components 3 Hash15b1bda7b31ccc5eacce67afbe6f160b d41eac3583bb0495a008b0d1e4a584d103feb436 2e1b52936d0c7081d46010cd49e236aed8cefc16adad7c908c108aff4a73718d
GET /genfiles/cms/1/desktop/banner/d94c9b1508a286d270c77946ff0972fa.jpg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:13 GMT
content-type: image/jpeg
content-length: 51087
last-modified: Tue, 11 Apr 2023 18:15:30 GMT
etag: "15b1bda7b31ccc5eacce67afbe6f160b"
x-time-ng: 0.000
cache-control: public,max-age=3600,s-maxage=3600
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
traceparent: 00-050ec9051e9db1492c3c191d6433c168-b2d61c65e1569dde-01
x-id: osix-hw-edge-gc4
age: 1013
cache: HIT
x-cached-since: 2024-07-07T07:44:20+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/vendors/GameProvider/Page.Betting.Asia.Homepage/Page.Betting.MultiLive/Page.CricketWorldCupPage/Page/17c2374e-4c4aa5a5.js | 185.244.209.62 | 200 OK | 144 kB |
URL GET HTTP/2v3.traincdn.com/main-static/34af5fc1/desktop/default/vendors/GameProvider/Page.Betting.Asia.Homepage/Page.Betting.MultiLive/Page.CricketWorldCupPage/Page/17c2374e-4c4aa5a5.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (65461) Size144 kB (143950 bytes) Hash8c6f9f6f74e5c0781a4557ac019932ff 18823c0111f8834e2824a9b1ce0ca64eeddf5380 2fbdd645ef15ed1bd81ad4decfccca7e0675d46afa1655c48d621f648eab3a28
GET /main-static/34af5fc1/desktop/default/vendors/GameProvider/Page.Betting.Asia.Homepage/Page.Betting.MultiLive/Page.CricketWorldCupPage/Page/17c2374e-4c4aa5a5.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:57 GMT
content-type: text/javascript; charset=utf-8
last-modified: Sat, 06 Jul 2024 09:51:11 GMT
etag: W/"8c6f9f6f74e5c0781a4557ac019932ff"
x-amz-meta-mtime: 1720259460.991386708
content-encoding: gzip
expires: Sun, 07 Jul 2024 10:10:22 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 78635
traceparent: 00-7fd2e7ade10c383f67af658ce56064b6-2937c95c4e78a953-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:39+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/consultant.supHelperV2-c10b2e1c.js | 185.244.209.62 | 200 OK | 3.5 kB |
URL GET HTTP/2v3.traincdn.com/main-static/34af5fc1/desktop/default/consultant.supHelperV2-c10b2e1c.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (3571), with no line terminators Hash8443e01d705d20d560f884d4feb2d586 a7c9628deda4ab0404ab9acd03f48df0a5e8fa8f 758d0a4f648e2013e3a2c5d7c4b33392beb3c6a6e07c47b48621df6b68131263
GET /main-static/34af5fc1/desktop/default/consultant.supHelperV2-c10b2e1c.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:58 GMT
content-type: text/javascript; charset=utf-8
last-modified: Sat, 06 Jul 2024 09:51:08 GMT
etag: W/"c6c4fc45468a63b707ec52dc55ee06c1"
x-amz-meta-mtime: 1720259460.963386624
content-encoding: gzip
expires: Sun, 07 Jul 2024 10:10:23 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 78635
traceparent: 00-d85b30d62abde16a013a6855c577a91f-c0497b0ac045b6bd-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:40+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/resized/size16/sfiles/logo_teams/316493.webp | 185.244.209.62 | 200 OK | 780 B |
URL GET HTTP/2v3.traincdn.com/resized/size16/sfiles/logo_teams/316493.webp IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeRIFF (little-endian) data, Web/P image Hash9d26982ab7b23292ff32ec9afeec64f7 4429ca231c6e32651506cabe609f8fe711a3e546 e49ab9d5f1d36fd5963c9e8ae8075ad214c09b143fc6c309358b0312ad0bc232
GET /resized/size16/sfiles/logo_teams/316493.webp HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:07 GMT
content-type: image/webp
content-length: 780
cache-control: max-age=94608000
content-disposition: inline; filename="316493.webp"
content-security-policy: script-src 'none'
expires: Wed, 07 Jul 2027 07:58:32 GMT
x-request-id: 193e2b61d3ef19c1d66e62cd8a1d260f
x-time-ng: 0.035
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 155
traceparent: 00-9807bba8ea18e2bd6ea0153b023971b4-f83869b5a2074332-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-07T07:58:41+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-v3-host-app-static/Desktop/Default/44136fa355b3/BWAogW3T5Yya.js | 185.244.209.62 | 200 OK | 770 B |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-v3-host-app-static/Desktop/Default/44136fa355b3/BWAogW3T5Yya.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (797), with no line terminators Hasha97044674a1ac17db371b1643d07cd05 93f80682fe2ec3fe95c1d9bf364d39a4ff7fb9e5 fd48bb5c2d52f895447541a71113df4952ace7e815bd1fc29d70cff92b29a463
GET /sys-static/sys-v3-host-app-static/Desktop/Default/44136fa355b3/BWAogW3T5Yya.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 770
last-modified: Fri, 05 Jul 2024 11:49:55 GMT
etag: "af862ee99a49794cd2179ef6909add1e"
x-amz-meta-mtime: 1720180082.950126821
expires: Sat, 06 Jul 2024 11:57:58 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 71732
traceparent: 00-b66e96f006273ac8624c2945e5450fea-6907e882fb3445bc-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:07:37+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| widget.suphelper.top/services/widget/v2/most-required?projectId=5b61b42ffdf00b25dc78f342&credentials=%7B%22$type%22:%22GuestCredentials%22,%22id%22:%2251cd57e8-7b17-4583-9aa1-25e93a7309d9%22%7D | 104.18.39.72 | 200 OK | 24 B |
URL GET HTTP/2widget.suphelper.top/services/widget/v2/most-required?projectId=5b61b42ffdf00b25dc78f342&credentials=%7B%22$type%22:%22GuestCredentials%22,%22id%22:%2251cd57e8-7b17-4583-9aa1-25e93a7309d9%22%7D IP104.18.39.72:443
Requested byhttps://widget.suphelper.top/ CertificateIssuerGoogle Trust Services LLC Subjectsuphelper.top Fingerprint19:31:44:4F:9D:DE:4C:F2:AD:44:DB:B5:31:C3:20:A9:DB:3D:26:4A ValidityFri, 24 May 2024 09:49:21 GMT - Thu, 22 Aug 2024 09:49:20 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashd6bacfff68d40ad2744454c2506cc0f9 85f1f094d174fd4d78bd382c7948b95e9db93215 cd0483a083f6c73e9cd006ee073b875188c49f4025f771ecbcb795d40ac980ed
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /services/widget/v2/most-required?projectId=5b61b42ffdf00b25dc78f342&credentials=%7B%22$type%22:%22GuestCredentials%22,%22id%22:%2251cd57e8-7b17-4583-9aa1-25e93a7309d9%22%7D HTTP/1.1
Host: widget.suphelper.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 07 Jul 2024 08:01:05 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 89f64df90c58712f-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/BVoG2n09bYd4.js | 185.244.209.62 | 200 OK | 173 B |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/BVoG2n09bYd4.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash8298d72d041864c108fc16926250618a bc4e81ece36cb7a11d1ecbccd6527bd5e5906a11 e43e8ab5ca6386eeabd57d1b18d535edfe6a737da874cc0d34c98fcbd3afe140
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/BVoG2n09bYd4.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 173
last-modified: Thu, 04 Jul 2024 12:01:29 GMT
etag: "4609eb99b39ead0aa33fb36c0f8bbdc1"
x-amz-meta-mtime: 1720094383.399873502
expires: Sat, 06 Jul 2024 13:40:28 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 65777
traceparent: 00-be83acf11cd201c208dce34f52c2cf42-78d38b99d6f52cff-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T14:30:27+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/betting.SportsMenuCompact-f3eacb3c.js | 185.244.209.62 | 200 OK | 7.8 kB |
URL GET HTTP/2v3.traincdn.com/main-static/34af5fc1/desktop/default/betting.SportsMenuCompact-f3eacb3c.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (7899), with no line terminators Hash3619e7e9934151ef65819551c6d9c58f ade694098a4261ba424c95ddd9d8dd24d652cae5 462e5777406f5bbfa3b1a5d8a0417e19158a890ebea5fc34c6387adc46aab855
GET /main-static/34af5fc1/desktop/default/betting.SportsMenuCompact-f3eacb3c.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:01 GMT
content-type: text/javascript; charset=utf-8
last-modified: Sat, 06 Jul 2024 09:51:08 GMT
etag: W/"33ed7bb7a2a4064b72ef0c848465804b"
x-amz-meta-mtime: 1720259460.963386624
content-encoding: gzip
expires: Sun, 07 Jul 2024 10:10:37 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 78624
traceparent: 00-b90e5928893fd95359e52f20574c18f1-d41a245ce625831b-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:58:23+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/ByJBqblT_8mJ.js | 185.244.209.62 | 200 OK | 180 B |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/ByJBqblT_8mJ.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hashc8eec56c3b138da439b2bfbc9176f7f0 950f47928a9a9532345916e24c14d00c55ac1ead d35eceb9e2ad7ed9f4084e434a89e759163861278cc4e2973e8df9fefaef9f81
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/ByJBqblT_8mJ.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
content-length: 180
last-modified: Thu, 04 Jul 2024 12:01:29 GMT
etag: "f15b9f238e993d50a659ed35f640cfa4"
x-amz-meta-mtime: 1720094383.399873502
expires: Sat, 06 Jul 2024 13:40:25 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 65780
traceparent: 00-c773f9a38aff5010db036ab07bb413ba-a21d861b635c41ee-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T14:30:27+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/Page.Betting.Asia.Homepage-f816336e.js | 185.244.209.62 | 200 OK | 141 kB |
URL GET HTTP/2v3.traincdn.com/main-static/34af5fc1/desktop/default/Page.Betting.Asia.Homepage-f816336e.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
Size141 kB (141441 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /main-static/34af5fc1/desktop/default/Page.Betting.Asia.Homepage-f816336e.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:57 GMT
content-type: text/javascript; charset=utf-8
last-modified: Sat, 06 Jul 2024 09:51:07 GMT
etag: W/"00a93bc305a774675265092280d28003"
x-amz-meta-mtime: 1720259460.9553866
content-encoding: gzip
expires: Sun, 07 Jul 2024 10:10:22 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 78635
traceparent: 00-dd0fe0071a839efce243654026782044-7cf9a201159a4a38-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:39+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/BN9Mks2AzQp2.js | 185.244.209.62 | 200 OK | 715 B |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/BN9Mks2AzQp2.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (734), with no line terminators Hash1df827c54b313f99240b160836070c6a 44c67645dde581cd4c400063c5c58e3d0305b7c1 cdfbb51541bfd0b9478bcb5146c19b1bf9010bcbe4b97b8ebbf5d8af47035619
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/BN9Mks2AzQp2.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:09 GMT
content-type: text/javascript; charset=utf-8
content-length: 715
last-modified: Thu, 04 Jul 2024 12:01:33 GMT
etag: "f41c1c06a7f0b2a1aab7f0f158b24f54"
x-amz-meta-mtime: 1720094383.395873529
expires: Fri, 05 Jul 2024 12:17:42 GMT
cache-control: max-age=86400
x-time-ng: 0.007
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 67776
traceparent: 00-90e3b390ba51e6f4e76603e43da0e5bc-5301558c17cab9d7-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T13:16:49+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/Py809AV2KJNV.css | 0.0.0.0 | | 62 kB |
URL GET v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/Py809AV2KJNV.css IP0.0.0.0:0
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (61450) Hashf0dd80de69508898d056bbfb59728ff7 d58be4a955e7aa2b17e094b4b008403afe07a2af c2bef0d7aa42378348ea622fe8e7e4cffb1da66c70c682bbd1097b5c69e3db1a
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/Py809AV2KJNV.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:18 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:34 GMT
etag: W/"f0dd80de69508898d056bbfb59728ff7"
x-amz-meta-mtime: 1720094383.411873419
content-encoding: gzip
expires: Fri, 05 Jul 2024 12:17:56 GMT
cache-control: max-age=86400
x-time-ng: 0.004
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 70351
traceparent: 00-b31b7a1a11d3394e8a7252bfcf552e1c-1c14e61e24cef4e0-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:51+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-icons/1.0.395/285/common.svg | 185.244.209.62 | 200 OK | 154 kB |
URL GET HTTP/2v3.traincdn.com/sys-icons/1.0.395/285/common.svg IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Size154 kB (153885 bytes) Hash2e94aca47cc1a51e316ea07369122646 d00966b3678cf50715e43361e175eb214b04a293 f326deded726a1539bf252fe743a78a7150b0b29ada389ca256d838f60cf9e54
GET /sys-icons/1.0.395/285/common.svg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:59 GMT
content-type: image/svg+xml
last-modified: Mon, 24 Jun 2024 10:14:24 GMT
etag: W/"2e94aca47cc1a51e316ea07369122646"
x-amz-meta-mtime: 1719224059.914207216
content-encoding: gzip
expires: Wed, 03 Jul 2024 07:12:35 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 1162
traceparent: 00-dfc0d7be07a41638462258d3aae3a784-00810526fbc92836-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-07T07:44:16+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DHQv2GRVn_Hi.js | 185.244.209.62 | 200 OK | 3.5 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DHQv2GRVn_Hi.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (3645), with no line terminators Hashd9e0bb728517b3287567480790154811 ffb7da27e749b5a72e89b11a4111ef7d06627771 bd60e961d857b32bed1b5c36b0408ae2c916a521a9ed14c41ddb000753c3a85d
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DHQv2GRVn_Hi.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:33 GMT
etag: W/"e087569547678346e2d915881a51b9b6"
x-amz-meta-mtime: 1720094383.407873447
content-encoding: gzip
expires: Fri, 05 Jul 2024 12:17:47 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 70294
traceparent: 00-44adaaac09620ea559f8d6fb84ec854e-f3e390a59553a646-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DicUZCKA7pVo.js | 185.244.209.62 | 200 OK | 424 B |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DicUZCKA7pVo.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (441), with no line terminators Hashe3665d6be8adb33cf154c858e0b32293 02e9cef01459861bda0f0b1ba161ac117ff31ff0 896c035f41737ad0ebe5727e4f1ffed98f3b246d8ef46e38660a5c9fd8bed2e0
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/DicUZCKA7pVo.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:15 GMT
content-type: text/javascript; charset=utf-8
content-length: 424
last-modified: Thu, 04 Jul 2024 12:01:33 GMT
etag: "aaf78660beda610872adfa9b1560f347"
x-amz-meta-mtime: 1720094383.411873419
expires: Fri, 05 Jul 2024 12:17:47 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 70294
traceparent: 00-5eaff346314ef9b5220cd108ff8668ef-7b06916a02387a43-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:48+00:00
accept-ranges: bytes
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/betting.CentralMenuApp-48acca38.js | 185.244.209.62 | 200 OK | 64 kB |
URL GET HTTP/2v3.traincdn.com/main-static/34af5fc1/desktop/default/betting.CentralMenuApp-48acca38.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /main-static/34af5fc1/desktop/default/betting.CentralMenuApp-48acca38.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:59 GMT
content-type: text/javascript; charset=utf-8
last-modified: Sat, 06 Jul 2024 09:51:08 GMT
etag: W/"cc9c0dc889efb37a54c8739f975740a4"
x-amz-meta-mtime: 1720259460.959386612
content-encoding: gzip
expires: Sun, 07 Jul 2024 10:10:25 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 78634
traceparent: 00-004901158d80ee1873841496535a4c40-40cdf948b6de3616-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:40+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/BPx0r8_T-Rk6.css | 185.244.209.62 | 200 OK | 7.0 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/BPx0r8_T-Rk6.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (7032), with no line terminators Hash65f37df4bf002a52a4f1e6bb0cef2c5c e53c0723de928068c4c245c6ed6e7dccc3211ffb de27ef5be670864a5f6ec4645f092bfda5f6d16584a57335ffc69a706efa113c
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/BPx0r8_T-Rk6.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:18 GMT
content-type: text/css; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:29 GMT
etag: W/"30eee3a2659601d808c7899ba8da89b1"
x-amz-meta-mtime: 1720094383.395873529
content-encoding: gzip
expires: Sat, 06 Jul 2024 08:48:53 GMT
cache-control: max-age=86400
x-time-ng: 0.028
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 83425
traceparent: 00-bc355adb5d18c361660171d30c91d711-bd9a8af853ec26df-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:51+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/34af5fc1/desktop/default/css/6cc025d5.css | 185.244.209.62 | 200 OK | 6.7 kB |
URL GET HTTP/2v3.traincdn.com/main-static/34af5fc1/desktop/default/css/6cc025d5.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (6720), with no line terminators Hash0c6178f618212161512da1969c6d3eea 1663df36030ec521f4b53133106108d8f67c03b2 ddc1b2bf5f3b6b6968fa94fdb3a5899d1943efca45ce9a6d41d235d69d502001
GET /main-static/34af5fc1/desktop/default/css/6cc025d5.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:00:56 GMT
content-type: text/css; charset=utf-8
last-modified: Sat, 06 Jul 2024 09:51:12 GMT
etag: W/"be35c859b4087d52ff863e02472b7438"
x-amz-meta-mtime: 1720259460.967386636
content-encoding: gzip
expires: Sun, 07 Jul 2024 10:10:20 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 78636
traceparent: 00-85350e4daad794f47ea52c7bbd5aecb6-bf5df9b9ea0768dc-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T10:16:19+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CzfnqkA1txcQ.js | 185.244.209.62 | 200 OK | 12 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CzfnqkA1txcQ.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (11523) Hash3a3be2ce0df7659ebc577c0299d0bf3b 36a7c7011519b60dc980344271933a08e72f01f3 e5d319bf344ff342a79ae9720c07b1f87c017da0e22da99b6854e1cb4b0b7c28
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/CzfnqkA1txcQ.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:13 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:33 GMT
etag: W/"3a3be2ce0df7659ebc577c0299d0bf3b"
x-amz-meta-mtime: 1720094383.403873474
content-encoding: gzip
expires: Fri, 05 Jul 2024 12:17:43 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 70296
traceparent: 00-6b6a781b4727a84077e7bad472f94194-c968a2e1d3eeebb8-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:46+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/Cl75OH1c3UX4.js | 185.244.209.62 | 200 OK | 8.3 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/Cl75OH1c3UX4.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (8531), with no line terminators Hash57e5bcc4e246725bfb0facb6b296c64f 34923df77779226bf3727ec922cfd39a1807631a ee2557f61f677712e799107d201ec21eaa31bd778836625e3eff153fcafa1e87
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/Cl75OH1c3UX4.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:33 GMT
etag: W/"3a30c68851cbef4f1f5309acaf83d4a0"
x-amz-meta-mtime: 1720094383.403873474
content-encoding: gzip
expires: Fri, 05 Jul 2024 12:17:44 GMT
cache-control: max-age=86400
x-time-ng: 0.007
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 70296
traceparent: 00-83529977e621c30ee5934782c65af506-9c54839dc4ee5700-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/X3Z9lFhHZEND.js | 185.244.209.62 | 200 OK | 3.9 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/X3Z9lFhHZEND.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeASCII text, with very long lines (4019), with no line terminators Hash79055f86b136e67fdb55aaf1743bb468 26cad5a20240ad4fdec8a3a78496e4c09955efee ca6ef31fd0a8ea48062d2c972e36eec2118522f18a8999b52e224f0d9cbbc05c
GET /sys-static/sys-betting-app-static/Desktop/Default/44136fa355b3/X3Z9lFhHZEND.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:14 GMT
content-type: text/javascript; charset=utf-8
last-modified: Thu, 04 Jul 2024 12:01:34 GMT
etag: W/"ca7a1125c562408fb8c7fe57804b7579"
x-amz-meta-mtime: 1720094383.411873419
content-encoding: gzip
expires: Fri, 05 Jul 2024 12:17:46 GMT
cache-control: max-age=86400
x-time-ng: 0.020
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc88
age: 70295
traceparent: 00-6f4fecc1fc59e068962e8ef4130dd6f9-3cf9d8c1ddcde64b-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T12:33:47+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-icons/1.0.399/285/common.svg | 185.244.209.62 | 200 OK | 154 kB |
URL GET HTTP/2v3.traincdn.com/sys-icons/1.0.399/285/common.svg IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-352419.top/en?tag=d_51254m_14189c_[]MS[]null[]null[]general[]7686202_d26691_l149642_clickunder CertificateIssuerSectigo Limited Subject*.traincdn.com FingerprintC8:8E:2A:E6:0A:C8:1B:3E:56:D0:F0:37:75:5F:40:9B:EF:44:C8:73 ValidityThu, 02 Nov 2023 00:00:00 GMT - Mon, 02 Dec 2024 23:59:59 GMT
File typeSVG Scalable Vector Graphics image Size154 kB (153885 bytes) Hash2e94aca47cc1a51e316ea07369122646 d00966b3678cf50715e43361e175eb214b04a293 f326deded726a1539bf252fe743a78a7150b0b29ada389ca256d838f60cf9e54
GET /sys-icons/1.0.399/285/common.svg HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-352419.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-352419.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 07 Jul 2024 08:01:17 GMT
content-type: image/svg+xml
last-modified: Sat, 29 Jun 2024 09:57:03 GMT
etag: W/"2e94aca47cc1a51e316ea07369122646"
x-amz-meta-mtime: 1719655019.161130415
content-encoding: gzip
expires: Tue, 02 Jul 2024 08:41:22 GMT
cache-control: max-age=86400
x-time-ng: 0.003
strict-transport-security: max-age=15724800; includeSubDomains
access-control-allow-origin: *
x-id-shield: am3-hw-edge-gc89
age: 169656
traceparent: 00-40078fe4bddde28c885f8b94fd371c20-6241901d490c712c-01
x-id: osix-hw-edge-gc4
cache: HIT
x-cached-since: 2024-07-06T08:23:33+00:00
x-shard: osix-shard0-default_443
X-Firefox-Spdy: h2
|
|
0.0.0.0