Ffmpeg Record / Restream a Hls that served by cloudflare

[arabiciptv]

The page is : https://imajbet80.tv
I test different ffmpeg version, latest & git-2019-11-15-bfa8272

The restream code is
ffmpeg -headers "scheme: https" -headers "accept-encoding: gzip, deflate, br" -referer "https://imajbet81.tv" -headers "origin: https://imajbet81.tv" -headers "referer: https://imajbet81.tv" -headers "pragma: no-cache" -headers "cache-control:no-cache" -headers "sec-fetch-site: cross-site" -headers "sec-fetch-mode: cors" -headers "sec-fetch-dest: empty" -headers ":authority:d1.supercdn.cc" -headers ":method: GET" -user_agent "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36" -i "https://fast.supercdn.cc/o/1/bein-sports-1/supercdn.cc/1" -loglevel debug -f mp4 test.mp4

The Stream not encrypted, only the ts file extension changed to thge images, when you right click over browser the jpeg ( actually ts ) is downloading and when you change the extension you can watch it . The playlist.m3u8 file can be get by ffmpeg
however the jpeg file gives http 444 error , it seems ffmepg handshake bug but I cant be sure ?
it can get m3u8 without any issue
it tries to get the jpeg , got 444 ?
here is the trace mode output

---------
Splitting the commandline.
Reading option '-user_agent' ... matched as AVOption 'user_agent' with argument 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36'.
Reading option '-referer' ... matched as AVOption 'referer' with argument 'https://imajbet81.tv'.
Reading option '-headers' ... matched as AVOption 'headers' with argument 'origin: https://imajbet81.tv'.
Reading option '-headers' ... matched as AVOption 'headers' with argument 'referer: https://imajbet81.tv'.
Reading option '-headers' ... matched as AVOption 'headers' with argument 'pragma: no-cache'.
Reading option '-headers' ... matched as AVOption 'headers' with argument 'cache-control:no-cache'.
Reading option '-headers' ... matched as AVOption 'headers' with argument 'sec-fetch-site: cross-site'.
Reading option '-headers' ... matched as AVOption 'headers' with argument 'sec-fetch-mode: cors'.
Reading option '-headers' ... matched as AVOption 'headers' with argument 'sec-fetch-dest: empty'.
Reading option '-headers' ... matched as AVOption 'headers' with argument ':authority:d2.cirberos.online'.
Reading option '-headers' ... matched as AVOption 'headers' with argument ':method: GET'.
Reading option '-user_agent' ... matched as AVOption 'user_agent' with argument 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36'.
Reading option '-i' ... matched as input url with argument 'https://fast.sonicdelivery.cc/d/2/bein-sports-1/cirberos.online/1'.
Reading option '-f' ... matched as option 'f' (force format) with argument 'mp4'.
Reading option 'test.mp4' ... matched as output url.
Reading option '-v' ... matched as option 'v' (set logging level) with argument 'trace'.
Finished splitting the commandline.
Parsing a group of options: global .
Applying option v (set logging level) with argument trace.
Successfully parsed a group of options.
Parsing a group of options: input url https://fast.sonicdelivery.cc/d/2/be...beros.online/1.
Successfully parsed a group of options.
Opening an input file: https://fast.sonicdelivery.cc/d/2/be...beros.online/1.
[NULL @ 000001f916b3c0c0] Opening 'https://fast.sonicdelivery.cc/d/2/bein-sports-1/cirberos.online/1' for reading
[https @ 000001f916b3db00] Setting default whitelist 'http,https,tls,rtp,tcp,udp,crypto,httpproxy'
[https @ 000001f916b3db00] No trailing CRLF found in HTTP header. Adding it.
[tcp @ 000001f916b3f740] Original list of addresses:
[tcp @ 000001f916b3f740] Address 104.26.12.26 port 443
[tcp @ 000001f916b3f740] Address 104.26.13.26 port 443
[tcp @ 000001f916b3f740] Address 172.67.75.5 port 443
[tcp @ 000001f916b3f740] Interleaved list of addresses:
[tcp @ 000001f916b3f740] Address 104.26.12.26 port 443
[tcp @ 000001f916b3f740] Address 104.26.13.26 port 443
[tcp @ 000001f916b3f740] Address 172.67.75.5 port 443
[tcp @ 000001f916b3f740] Starting connection attempt to 104.26.12.26 port 443
[tcp @ 000001f916b3f740] Successfully connected to 104.26.12.26 port 443
[https @ 000001f916b3db00] request: GET /d/2/bein-sports-1/cirberos.online/1 HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36
Referer: https://imajbet81.tv
Accept: */*
Range: bytes=0-
Connection: close
Host: fast.sonicdelivery.cc
Icy-MetaData: 1
:method: GET


[https @ 000001f916b3db00] header='HTTP/1.1 200 OK'
[https @ 000001f916b3db00] http_code=200
[https @ 000001f916b3db00] header='Date: Fri, 02 Oct 2020 21:47:25 GMT'
[https @ 000001f916b3db00] header='Content-Type: text/plain'
[https @ 000001f916b3db00] header='Content-Length: 383'
[https @ 000001f916b3db00] header='Connection: close'
[https @ 000001f916b3db00] header='Set-Cookie: __cfduid=d55924d385ba7144ece35ac5c948cdf5b16016752 45; expires=Sun, 01-Nov-20 21:47:25 GMT; path=/; domain=.sonicdelivery.cc; HttpOnly; SameSite=Lax; Secure'
[https @ 000001f916b3db00] header='Access-Control-Allow-Headers: Content-Type'
[https @ 000001f916b3db00] header='Access-Control-Allow-Origin: *'
[https @ 000001f916b3db00] header='Cf-Railgun: direct (starting new WAN connection)'
[https @ 000001f916b3db00] header='Referrer-Policy: strict-origin-when-cross-origin'
[https @ 000001f916b3db00] header='Strict-Transport-Security: max-age=31536000; includeSubDomains; preload'
[https @ 000001f916b3db00] header='Vary: Accept-Encoding'
Last message repeated 1 times
[https @ 000001f916b3db00] header='X-Content-Type-Options: nosniff'
[https @ 000001f916b3db00] header='X-Download-Options: noopen'
[https @ 000001f916b3db00] header='X-Firewall: FastWall'
[https @ 000001f916b3db00] header='X-Powered-By: Express'
[https @ 000001f916b3db00] header='X-Xss-Protection: 1; mode=block'
[https @ 000001f916b3db00] header='CF-Cache-Status: DYNAMIC'
[https @ 000001f916b3db00] header='cf-request-id: 058ce1cdd30000ffd483b22200000001'
[https @ 000001f916b3db00] header='Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"'
[https @ 000001f916b3db00] header='Server: cloudflare'
[https @ 000001f916b3db00] header='CF-RAY: 5dc19f295a5cffd4-WAW'
[https @ 000001f916b3db00] header='alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400'
[https @ 000001f916b3db00] header=''
Probing hls score:100 size:383
[hls @ 000001f916b3c0c0] Format hls probed with size=2048 and score=100
[hls @ 000001f916b3c0c0] Skip ('#EXT-X-VERSION:3')
[hls @ 000001f916b3c0c0] new_program: id=0x0000
[hls @ 000001f916b3c0c0] HLS request for url 'https://d2.cirberos.online/i/bein-sports-1-1601675230.jpeg', offset 0, playlist 0
[hls @ 000001f916b3c0c0] Opening 'https://d2.cirberos.online/i/bein-sports-1-1601675230.jpeg' for reading
[tcp @ 000001f916c0eb40] Original list of addresses:
[tcp @ 000001f916c0eb40] Address 172.67.69.246 port 443
[tcp @ 000001f916c0eb40] Address 104.26.10.133 port 443
[tcp @ 000001f916c0eb40] Address 104.26.11.133 port 443
[tcp @ 000001f916c0eb40] Interleaved list of addresses:
[tcp @ 000001f916c0eb40] Address 172.67.69.246 port 443
[tcp @ 000001f916c0eb40] Address 104.26.10.133 port 443
[tcp @ 000001f916c0eb40] Address 104.26.11.133 port 443
[tcp @ 000001f916c0eb40] Starting connection attempt to 172.67.69.246 port 443
[tcp @ 000001f916c0eb40] Successfully connected to 172.67.69.246 port 443
[https @ 000001f916c03dc0] request: GET /i/bein-sports-1-1601675230.jpeg HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36
Referer: https://imajbet81.tv
Accept: */*
Range: bytes=0-
Connection: keep-alive
Host: d2.cirberos.online
Icy-MetaData: 1
:method: GET


[https @ 000001f916c03dc0] header='HTTP/1.1 444 unknown'
[https @ 000001f916c03dc0] http_code=444
[https @ 000001f916c03dc0] HTTP error 444 unknown
[hls @ 000001f916b3c0c0] Failed to open segment 699 of playlist 0
[hls @ 000001f916b3c0c0] HLS request for url 'https://d2.cirberos.online/i/bein-sports-1-1601675235.jpeg', offset 0, playlist 0
[hls @ 000001f916b3c0c0] Opening 'https://d2.cirberos.online/i/bein-sports-1-1601675235.jpeg' for reading
[tcp @ 000001f916c0ee80] Original list of addresses:
[tcp @ 000001f916c0ee80] Address 172.67.69.246 port 443
[tcp @ 000001f916c0ee80] Address 104.26.10.133 port 443
[tcp @ 000001f916c0ee80] Address 104.26.11.133 port 443
[tcp @ 000001f916c0ee80] Interleaved list of addresses:
[tcp @ 000001f916c0ee80] Address 172.67.69.246 port 443
[tcp @ 000001f916c0ee80] Address 104.26.10.133 port 443
[tcp @ 000001f916c0ee80] Address 104.26.11.133 port 443
[tcp @ 000001f916c0ee80] Starting connection attempt to 172.67.69.246 port 443
[tcp @ 000001f916c0ee80] Successfully connected to 172.67.69.246 port 443
[https @ 000001f916c0ec00] request: GET /i/bein-sports-1-1601675235.jpeg HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.121 Safari/537.36
Referer: https://imajbet81.tv
Accept: */*
Range: bytes=0-
Connection: keep-alive
Host: d2.cirberos.online
Icy-MetaData: 1
:method: GET