{"report_id":"1458937b-74bc-4af6-bb56-7df6b1256928","version":6,"status":"done","tags":[],"date":"2025-07-25T15:33:52Z","url":{"schema":"http","addr":"1xlite-76257.world/fr?tag=d_224327m_3030c_[]MS[]null[]WLSmart[]general[]7113192_d28985_l62141_clickunder","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":0,"asn":0,"as":"","country":"Iran","country_code":"IR"},"final":{"url":{"schema":"https","addr":"1xlite-76257.world/fr/block","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"title":"1xBet"},"submit":{"url":{"schema":"http","addr":"1xlite-76257.world/fr?tag=d_224327m_3030c_[]MS[]null[]WLSmart[]general[]7113192_d28985_l62141_clickunder","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":0,"asn":0,"as":"","country":"Iran","country_code":"IR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-08-29T15:33:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"radar.cedexis.com","ip":{"addr":"45.54.49.5","port":443,"asn":63911,"as":"NetActuate, Inc","country":"United States","country_code":"US"},"domain_registered":"2009-01-07","domain_rank":3035,"first_seen":"2013-11-27T02:31:43Z","last_seen":"2025-07-25T07:21:55.138915Z","alert_count":0,"request_count":2,"received_data":1415,"sent_data":852,"comment":"","tags":null,"fingerprints":null},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":0,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2025-07-23T15:33:45.59783Z","alert_count":0,"request_count":2,"received_data":1704,"sent_data":2024,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-07-23T15:12:35.082293Z","alert_count":0,"request_count":5,"received_data":1983675,"sent_data":2519,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":7,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-07-23T15:13:02.646313Z","alert_count":0,"request_count":2,"received_data":1236,"sent_data":1674,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.no","ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":25607,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2025-07-23T15:44:38.825761Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":823,"comment":"","tags":null,"fingerprints":null},{"fqdn":"1xlite-76257.world","ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"domain_registered":"2025-06-10","domain_rank":0,"first_seen":"2025-07-25T10:25:27.516297Z","last_seen":"2025-07-25T10:25:27.516298Z","alert_count":20,"request_count":20,"received_data":981387,"sent_data":21051,"comment":"","tags":null,"fingerprints":null},{"fqdn":"v3.traincdn.com","ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"domain_registered":"2022-11-10","domain_rank":0,"first_seen":"2022-11-25T10:00:40Z","last_seen":"2025-07-25T07:21:54.567825Z","alert_count":0,"request_count":73,"received_data":5720287,"sent_data":36729,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-25","alert":"Sinkholed","trigger":"1xlite-76257.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/e93355a6/desktop/default/Betting.Core-b0836407.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"28cbdd4ebb7497d9f4971c9f23ac9a03","sha1":"005f79b657df0b13dc72f5af8a4969486c8cd568","sha256":"6f1a0533d18204aad9ff8cb37043be5bc08418244c154f1d5939060050ca6074","sha512":"0bc283424de44c90b1282938f894cd1ab08e8c0f5a60ffe5b0aae050f043aab17e5e7d10d426aee1a333c20c601b6257898a1f508f81b8c5050d61ca73478ac0","ssdeep":"","tlshash":"9041b54638d274480b3e05dd40bb58f6f0a56d98385e01fca9c2dae035a9a87c0e7ecb","size":2009,"data":"","first_seen":"2025-07-25T10:25:32.297069Z","last_seen":"2025-07-29T04:15:45.284008Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16664555628\u0026cx=c\u0026gtm=45He57n0v9180563600za200\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f662cbf63a805ce5a26ea67b7c4d9434","sha1":"cfc91a93837b74a0d68f4a5d1cbf0d1623b6dff4","sha256":"c74328320adfbf1a4701b9ce11d943157bf7e2821211bae65958b904c13a8b20","sha512":"58ff34a02745318a4f6cee5cdabc09c9945f80bcb1a06e38caf861767d52a3a5fc7b6574d00590a40bce300aeebfdb5c7e353da304874f17f030b2446a0bcb9a","ssdeep":"3072:wIHdncZfZepoxyR0B40H7TfqoZwv08hy0ZGUW41AbIIiNTs2ZsOVfxgQJTAmtcqc:FSOaxx9avTrJNTaAxgQJEQcB7o0","tlshash":"317418cd73c6742293a3b478503f018ba57b69a2b48cc895f185cce42e74a9a4277f7d","size":359737,"data":"","first_seen":"2025-07-25T10:25:32.167509Z","last_seen":"2025-07-25T15:33:58.642575Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/fr/block","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"eval","is_inline":false,"md5":"7f70bba56c600aed62b7f33811aea521","sha1":"43327de81c055fcb94e5ef688037bb8490174c8c","sha256":"ef25becc7a2335a4b1608bf836a6e4da017be3fe95a61d4bbf3e35f2779faea3","sha512":"1d9191aadc9eabf79d4bcaa2e261140dbef3ee32de71aaf092e74f7c5410afcfc3e07013a01d1aa35974c09e2173ce396c44615fd0e9de2d86d4221540ccc618","ssdeep":"","tlshash":"11511e55e03c5a3bd933462e920f7f125eac55b22a892f5cb61c4bac25c60ce91136cb","size":2572,"data":"","first_seen":"2025-07-21T12:33:40.522104Z","last_seen":"2025-07-25T15:33:58.719483Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/fr/block","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"Function","is_inline":false,"md5":"de6661c7d52de774f0ddc98bd8ebc167","sha1":"4b1f8679c8feae0fb2199d4442d8062732e63159","sha256":"c6bd239ace3eceb8aab6a0ba390f5e27b284e8b86ffa7471ec8bb568b9340a67","sha512":"e70dc43009a68e30bdfe2804a96ad06969ad3938ab7b9c3ce3e4e137215702a08f1e5b88fed241d9ac9db76b442f77239f5489574af83d8238d44f0b2e0568f6","ssdeep":"3072:a2j1NNJ50Jv6VD4wFbfDtJHzDMGOA1rCGABzsofh:njnNJXVXFlRsGOkop","tlshash":"e85493992c41a724934a57e422b93b43c084dc21ad48995ce43dfe98ba6f3fb39f15f1","size":289526,"data":"","first_seen":"2025-07-25T15:33:58.722392Z","last_seen":"2025-07-25T15:33:58.722392Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/fr/block","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"Function","is_inline":false,"md5":"7bcdb973ab8af8e24ab11cb554a1ba6e","sha1":"24e8a10f240f2b06f81d7c173cd0a90606641fc1","sha256":"916ec4eb9b485eb47f43a17fe212e84e4b72600b45eb6d4588599ad495a57fcd","sha512":"1d890761e2a00081531fda5c0489ebf4df4140a9748bdc6d97bd355023e3e4ab09e19663ab319cf775e28ba71d99ab09f20d5414a561fa10fa3be2cb874484ca","ssdeep":"","tlshash":"e380044710411010cdd351d040573c44001044f114c4dc500040fdd11c53030110545c","size":34,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-04-04T06:35:35.59675Z","times_seen":13005,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KFGPRJ2V","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2e95104df792b9db6c6c5f64715575f","sha1":"c742d543624a6bc2eff37b68314b5be98151ce14","sha256":"7b29eef9512b8b941e25d38fb163b4a83d1f7c286f3bc08d86763a4ab65c27b4","sha512":"ddc2885a88cb9885ea193a39589b71980887783ac31dfdfc46f714c8e6b7d11b256c3c2e5f811a928d4b880228cba5d940520b455fc3593e872d6ee17ea1726f","ssdeep":"3072:mI14/nBZfZepoxgR064097T0qoZwv08hy0ZGUW41AbIIiNTs2ZsOVfxgQJTAmtcT:qOaxb3avTrJNTaAxgQJEQcB7oHy","tlshash":"73742acdb3c674628392b478503f014bb17b69a2f48cd894f186d8e42e74a6a4277f7d","size":350341,"data":"","first_seen":"2025-07-25T15:33:58.703051Z","last_seen":"2025-07-25T15:33:58.703051Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/fr/block","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e82aa6fa58c0f77985424fc1162be05","sha1":"b9118dad3e8d04f743c1f0b984105ffb032c113f","sha256":"83e00d79d41a71f4efcc9b45bf52c0f5b66aa3ace6167a729eb64f4221fd6274","sha512":"8adc2e85e8db043009ac668f98817e6f8bb7298f91080925ea060fe6ff30790f55723affa022fd96568a245e06c4d7b627609554b90982f20fe1b71373a72076","ssdeep":"","tlshash":"9c313f5efe6cf0364512b5f9f03b630aeb3318966d1574088490e8d9ad74e4f6816ccc","size":1736,"data":"","first_seen":"2025-07-25T10:25:32.440034Z","last_seen":"2025-07-29T04:15:45.322141Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/e93355a6/desktop/default/vendors/plugins.v-tooltip-3a2e3e44.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"057b3060ea854dd1c4cbf525a0cc30aa","sha1":"5427e7202b2f61a96dc9ecbec59bb5ed248b54a3","sha256":"1412b162c5155637f034c7bd1e761efd04eb923ed5e3bc81e8e249f456e3e7ed","sha512":"31dedbe2b123b317cf8fb9c7ecfa85ad3cecde57f1792ec198fe275a3017b8549d47005f365ce4cc4840a295da9dcd96913ac5e3280278b5295fb042d422775c","ssdeep":"768:HNVP6aMVmTYKotqNGDzAWMZI+7tSCUC8Lk7t8R6zk+BaNfSby/Qw/HJg57bh0PGN:HNkaMATroYNmATPRSCv1MH9WdRfm5EZ","tlshash":"1f73b88e72d0f4b203e7b1b5403f620fb2776558b40ad014b6b1e6d4ac3da59a267e3d","size":76822,"data":"","first_seen":"2025-07-24T22:41:32.575152Z","last_seen":"2025-07-29T04:15:45.310059Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/hd-api/external/apps/c5e31d5915661de4393e3f1489b00ebc4497dd48/api.js","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"32053c9c355cf85427a5cc3f07de0b09","sha1":"f3c13d6a657ffa2ca8997f54f4779f0c02f1600a","sha256":"0ec410318f3ecc3a3aef3de68e99190845248bcc12282aa15eb9acc87f8837d3","sha512":"cbb8c7ef0bbed264989bf5b4af7d216cdeacc5684641c37d429e5ceca7dc04e55254e81f319cd856e7b4f447565bf5abf4e9915f5725eb57cfb142f113362078","ssdeep":"","tlshash":"2211756e18ed58291a9275c402b7ccfc642036363219d4c495ede9e1072ff990032f5c","size":1024,"data":"","first_seen":"2025-07-24T09:34:41.13762Z","last_seen":"2026-04-04T05:49:28.54922Z","times_seen":3849,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/e93355a6/desktop/default/Page.Block-32cba7ed.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"daac658846a34a4337c8b762f4eeaff2","sha1":"3803a676d5f2bdc5ef2d1ae2bf13454a50787ddd","sha256":"831f6e4f5fe3a9719f9a590dc4828660e12cd0e297bb7d8aeadc9f605c66b362","sha512":"fba94cd0095ac860e3e8f95576d09c55f798875128905ed21e796110e9c136ad5df646bd203dc2c17e3bd8a87ecc4e5c02f0779dc81fcab659f5a3ddda666885","ssdeep":"","tlshash":"b8f09e9b6562bc8d95e6109343b681f7b88c797a0649596006a1c8a532f7c56481125f","size":476,"data":"","first_seen":"2025-07-24T22:41:32.593123Z","last_seen":"2025-07-29T04:15:45.309536Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/e93355a6/desktop/default/DC-959fd200.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3df5cc9ba0a840cdb2d4798638498df","sha1":"687d23f094a5a3d5da9417f915f13ccb367de488","sha256":"a3f621e953f5a899e2ee85120b4bd6826c01a19350980c174bd0a2dc6dd18e6d","sha512":"80f39423a5f833a26d2fe8fd97e58923709b367827c373ec65c2707cef6e30edf065d794f3488856cb32386f77331f335d7585104f39f366c740d4983cec54d2","ssdeep":"","tlshash":"8051518a76eba42109f4406cbc3a26519623b641d40398ecbe7d6fc16d86d0fb13e835","size":2656,"data":"","first_seen":"2025-07-02T09:11:07.776267Z","last_seen":"2025-07-30T04:19:29.486395Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_popper_js_E2H7ZPXQ.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"3cf0cae38afae9add22f7884e5061231","sha1":"2a41037501375a439385a76a047876619683418f","sha256":"322482e3beae5a985d069beea981614510fda90a5df7295b776a324d461fc43d","sha512":"b61ed44fab86cdc14e9e1b8af7924afec6148d03d878007f89d1beb7a24a1862efaa2d6b43dcc04df35c6920ef742ffc5a59a2434b798554394d3e28f88b7a13","ssdeep":"384:nPP7iayBuR9vu3z1JXvykd2+LaqHdC6RjVnTGm/7piCXmH8kCCcvJTCyCu+meAxu:riZwO3XvO+NMSJt3XmckXcv4nxJAxiH5","tlshash":"7d92a28c7684b0a287a7a2a7a07f860f71376865650e9004f59cf6ec3c35dba507bc7d","size":21252,"data":"","first_seen":"2025-05-14T05:06:37.148925Z","last_seen":"2025-08-22T06:38:14.115567Z","times_seen":1787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/8d3f04041a.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"3d486591d7311d8201a4732c9df634d4","sha1":"06376465470eb21ee23f53257ca7693ab87e4355","sha256":"7ba280e74cc52eca45277851dbced7b0ed75abdcbbd1100336f6462062a28c0b","sha512":"608a96e37afc101ba6aa5d70fe3fc60745b244ba27a127207aa1a32549625b18527c9915baa1562903a291ea76fe652151c19fe1358129a607dca916b31cdfea","ssdeep":"","tlshash":"f871a6b871f5607477a45ece6c3724b3e29c3604341cd4e4e3adca7526cb0a281a7db6","size":3805,"data":"","first_seen":"2025-07-23T16:09:37.550211Z","last_seen":"2025-07-30T04:19:29.434728Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/3f5f95c6d9.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"f520ef938ef8ef4ee14ae695f2aa1946","sha1":"829b12254d61582c6da5621f211cca319ac4d6fb","sha256":"08098ba26b6afc6ffd38365d515bbf8b9839657208e3e6ead2e39e7cf863076b","sha512":"b2d3a0c10af2fdab835935d6eba2bc90d55dc032cff1e5ac0c7900a92843c2ea1404ad7fdd4949d88b404e8da1963d40f62c38c55e606839228c81dcaec04bcf","ssdeep":"","tlshash":"b861b9a5f8b9d0fa361780896c66b070e32b4dbc579c2461e1f8489c26cd540bbaf7d7","size":3275,"data":"","first_seen":"2025-07-23T16:09:37.583434Z","last_seen":"2025-07-29T04:15:45.311942Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/fr/block","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"Function","is_inline":false,"md5":"bc51ed8c76553717f10d58b2df60fd76","sha1":"e2d03a8fd8d280074b226c288880f9df299c7cb1","sha256":"bee994eaf88453f6343ba57571a069054c12c9b4e42f8cbad4f2ad75c7fb264c","sha512":"3207379b65060d0e80623fa966633b5ea31358b20de9aeb2c9416fa7d29f1972bf30809e39f0b826565e569d856dd2498ee0ec5285271c127f54daa7cf391911","ssdeep":"","tlshash":"489004473441140c47d7175410375c4c0c1500705441df400451dc510d51031114545c","size":39,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-04-04T06:35:35.597494Z","times_seen":12998,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/$_$.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"2cdaa92927f02e0b628f1ef4d7dd8caf","sha1":"9104a2e16ed080b80a42588b8aeb52ebec47ab7a","sha256":"ef8101ffea52addcdcfcc3a83f96ff2d4613fb3ae6d1c16bbe4852387b73a9db","sha512":"31da80bc1b17aa708fef74b0211af91fce1b4a5f518f11e5caa80f50e9a7791b6e94924e381f550fc44a02f4c1d785e5b95fa2464e7968b5cab079612d70d839","ssdeep":"","tlshash":"1ba002935a5ef66c209044860696e74733823d6a3477b1d625bc5509e6061474817257","size":69,"data":"","first_seen":"2025-05-14T05:06:37.199299Z","last_seen":"2026-03-18T19:40:26.76398Z","times_seen":5502,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_c29ed659a5.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"b95f2867a4f69c6f87508d4376778ab8","sha1":"34b733244053bb0634826b593e14e88782e81680","sha256":"f318dcd075506078ef1811c0a12962c5fed8811ee39cc3c77691a81063e05340","sha512":"dd8d736d26cad47776c4e4706beed168dedd02d25dfa0570a7f4874fcb260ff78951ac7cb94d91d225837db6a33eebf5b236932fe7b2e2014a1c9f9d309b0c61","ssdeep":"384:6tP2qT4YEUXGPYsH3M95B59IBMNUiLPqnIJdlh3uY3V47Czazgjdk:SP2qT4pUX/sH3M95B5qB6UEPME1uY3nk","tlshash":"9972a7a6726c3a2683d648f240355603e72b0cb979104499fb7c6edb7c198cd42ffa78","size":16157,"data":"","first_seen":"2025-07-01T14:08:29.773148Z","last_seen":"2025-12-23T22:34:35.075094Z","times_seen":1892,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_base-app_cc3ca14dcd.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"c58601710e546b79ab54a2aef54db180","sha1":"6b832479d957a655f0a2dd650de010fc582cbaa5","sha256":"48803694493b7e1a501e929c38f49dcc0ebf4e1cd59ddbf981310dd54a671f0f","sha512":"bfc829c2d2d667a44ac76d540ca626282f54148a19bd70fa799a6dba5928ecce1f2d299466a39cdb74f4cbb46399ba4955e54c52907a1a9f1c6b3a394317db7c","ssdeep":"12288:vsBaLij/Dws0Dl5A0eBTwodCFaFIU00BlU9elXlmczR7DG16Inzy8d0jaIRg8:Eeij/DwsoTA5xwK0elU91czAnW8d0/V","tlshash":"97657d55b01ab9121dd744eb90370643b19c5a9e8496f8a0f6fadcf837ce804529fbbc","size":1425882,"data":"","first_seen":"2025-07-23T16:09:37.575649Z","last_seen":"2025-07-30T04:19:29.508322Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/fr/block","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"Function","is_inline":false,"md5":"3580a7753969ed98d65a881eddd65466","sha1":"60383aa3fa687afd4ccaafb1e85eb1bed1ce5a97","sha256":"bbe1c457d5c261e0cfe923f03b6a019ae47473f0833e587055251a0241384821","sha512":"b32f09d54933823026f9019a89e2d8036f4189864fe15f9e53755c8ec3e988c368e2ffc225b175e684cf80c46d3d973dd90c434a09d1eea7e84f2a9e6a906277","ssdeep":"768:D3tx04E4mDYoEdI/fzXFeM32QIdhTWZMGkeYMrG5oaO+Ba6E6AHqkrTaaZYsOYYv:ZE4PoMI3zMMSLBaBIlcXZIMIgHy","tlshash":"098345c13a4060652383c4ac973669e4debd8c87bfa43da454e9bea05ae4d17f7c9433","size":88667,"data":"","first_seen":"2025-07-25T09:06:37.519244Z","last_seen":"2025-07-28T10:52:42.434778Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/captcha-api/assets/hunt-captcha.js","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"22906b563f32dc7581d2da2f250d1ff8","sha1":"dd437f9b6a50c02605b9dd28082bf38449613f66","sha256":"7b62895856e59e4d4dbabd2168f8686f486fa542f8e1a2020e6bd12e30ce60d6","sha512":"16b99e2c44c61ecfc03d22ad9d0257d192f846dfb4b0cc231cda3ee1be9ab04f0ba370ff56c522dcab76a73467f03b85363c8e0d713f4276203a80f0a5828823","ssdeep":"768:Qj3V034Wt41dGnLJhvSQIrfFTWvIGqiYuPGj0aO+Pu6EUMHqkrTa4BYsOYYY+mGR:z4441EnrsztSrI7KzpImI0+OW","tlshash":"ad9345c13a40a0652783ccac93762de8ddad8887bfa83d6454e9fe945ad4d26f7c4433","size":90635,"data":"","first_seen":"2025-07-25T09:06:37.210756Z","last_seen":"2025-07-28T10:52:42.408691Z","times_seen":54,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"72dc378f575de9628980d93ea5a9a935","sha1":"17d144dcc6ec11d5613c35673fb7c0a5bc3267a8","sha256":"e13252625d9920b6889388560694721220ccb63ebbf02e31f6b46b2ce89ffdf1","sha512":"09e0b61e59728ead398831ff0fd272e20c45c0d467d7c1b9452ce501ccc6eed627bfb4b36913ab6dd81287530155bdb17739220b39bc822fa8bd06381ecbef4a","ssdeep":"3072:xV4wxwwmzivHnCZfZepoxWvO0C4007TvqoZwv08hy0ZGUW41AbIIiNUL2ZsOVfxY:mOaxWHPavTrJNUJAxgQJEQcBjokPP8K/","tlshash":"61a4f8de73c674225296f468503f02cba97b28a2b49cc8aab1c9ccf02d7455a5177f7c","size":479272,"data":"","first_seen":"2025-07-25T15:33:58.58785Z","last_seen":"2025-07-25T15:33:58.58785Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/e93355a6/desktop/default/app-f2b024d7.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa6b36820e428669ade9b863fa996c9c","sha1":"7c2849f0bf109b714bdcd47f594161c6fb775e57","sha256":"28064ebe0a929d0de9e71f3e61770cca7523cf6962e6e3301dccc3243072cffd","sha512":"6b07628bc5b9cbaaca2d353dfb7251931a2eaba6b52a7e8b63341e615fcc19360dfff7c8fa86930dabe93f77d91a9ad6dbf8ad507699d91b752f883f5a9db189","ssdeep":"12288:LhhKgC7jcupMA7xyTfZyGQnZ0vwBhWtNN:LhQgC7jcupMA7CfZyGQ2","tlshash":"99b46c65b588f48602f34bd9e03a0071e33916ad380ed064f7bdedda359bc09d16a67b","size":504778,"data":"","first_seen":"2025-07-25T10:25:32.370681Z","last_seen":"2025-07-29T04:15:45.288672Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/entry-4478b66794.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"60bdcbeafb3fcbf3f4d86eb61efec263","sha1":"51dbc41e5978ed79f34b446e8a27005b1d4b9e89","sha256":"8752a416cde315c74c27feea354a8b39e20c9ab4988248bcfde69ff3a71572b7","sha512":"95af155aede681ec5650dd29ff5ed28f9f55ddda4eb5735eae242e6f0ead2da1535c5fabcaef0556fac0e8065f4e7f493971723f3bd1f2f4432b4c15012e58ac","ssdeep":"768:HjnN7ag7yg1l6IMHvGLkw/4j/M2fSh7XXef8UC8QAAI+hRmAqfBIszevCNLtiUok:x7Pyg1UfgC8UC8QAAI+0+Dg","tlshash":"1ed2a17434a7b0b560daa5586739bd53d6c81f9fe88af8d211cb88ab13c305884467fb","size":29933,"data":"","first_seen":"2025-07-23T16:09:37.573652Z","last_seen":"2025-07-29T04:15:45.269733Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/fr/block","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"Function","is_inline":false,"md5":"a01893d8e129ad16c1e0fc5c7537f411","sha1":"0e46d1bf2718f848d9d596fa269eaedb31204772","sha256":"cbe7b89533bcd75b69f3e54807308551d68242ec1761e63bee1a99fc6e560175","sha512":"074e309b533fc11690afbeab9b4dda85851e086c0ede97936860c7a5c4120ed9a16c6ced4fffdad21ca322f6c6e51577bd4966c5264b4a9780495acc451aee65","ssdeep":"","tlshash":"0d9004f515405350c5533d54401f1d5400f105703c40cc71014cdcd10c710f0335d5dd","size":47,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-04-04T06:35:35.595065Z","times_seen":12987,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/fr/block","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"domTimer","is_inline":false,"md5":"01f4b51b4ba7edd00ad9f0a22259f06e","sha1":"00723d0eda4be61a7b1c542b0a08a94a94a60017","sha256":"9fdac1c31a22f55dbb8ca225ee28c3f7e88b41cce82968af0018c9f8b3bd35ba","sha512":"83d180c9960a53f88da3e3ff8616b4e095b7d642182f5855cfa386d48a19b888fedbde6433d1f926d9dd93d0a813a24590591729a6d8393543dfc490efee2070","ssdeep":"","tlshash":"29500000c000c0c0c000c03c0000000000003300c0c00030033000000c3000c0000003","size":10,"data":"","first_seen":"2024-09-21T15:04:59Z","last_seen":"2026-01-22T06:40:31.224966Z","times_seen":5888,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_8625586157.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"0bf04731c9f13a1e2c427a0cdcb03153","sha1":"a9e2d046b2e5dec0e25814b05aafb21b17489372","sha256":"b64d491cf97872fbde9fda40166912e686b8899ce39feb458a815134808444ad","sha512":"cecd839f85e7cd1b0fdc552f5a2a24734b399e04c75633ccdb13437050028616e8cb6d98d40969c71824aa9d85f5aab205585441e686054cfebd056020817a74","ssdeep":"","tlshash":"77d0a704652b44f70b01b348d0ae1b75fbd9258b918d14067014b18fa00d418cb00989","size":222,"data":"","first_seen":"2025-06-24T03:34:37.79718Z","last_seen":"2025-11-30T15:40:58.948565Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/fr/block","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"Function","is_inline":false,"md5":"94361ed86ab9b2fbb8d805c2025df46a","sha1":"3f428332f7a1c7196a85c93a373a966d75708c19","sha256":"eee4d228a49a86625f29410cf9a23d145e821a09cbb1f7a4d7557d206872715a","sha512":"c8f4fb7c642357730c6c59e0b49fe3ec16c228d83d4ce402dc62f01e451529b8087240afca37096cebdaaabf47c189dfde5e6e2d780440f663f0e2bc8cf88ff7","ssdeep":"","tlshash":"f6b012df6c8351104a9292e001dec8f0443620303b00cc45544ce7716d2e865de2625e","size":96,"data":"","first_seen":"2023-12-06T14:32:27Z","last_seen":"2026-04-04T05:49:28.683008Z","times_seen":7914,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_fast_deep_equal_XYWIEKOD.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"0af3fe0c072a5bb3b6c731767187982f","sha1":"55db5afb57265dc92fd121fe9ae565ffb2f53b2c","sha256":"655bbe85da91e863401c6f96e24b41f5c2fe51a4245cecc2deb2b8c9600fef30","sha512":"8aab8cafc0b01c11f0b3b4bab4cb8b00ac25007153fd86b45ac8bfe325109c1a5215e89825fde4d7698a64f6c549e8140ed441ddb558d98a5654d52df9d568be","ssdeep":"","tlshash":"a41159c232e3a0d1c3e058cd1001d902f23969e9e4bca0c9d757e6b83cb2a53987672a","size":865,"data":"","first_seen":"2025-05-14T05:06:37.184748Z","last_seen":"2025-08-22T06:38:14.125712Z","times_seen":1811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_accept_language_parser_B6TW5FDZ.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"e3f1c4089db6b910890e85d97a2e2066","sha1":"85828920da3c3fd7856acde184e835ac314295cd","sha256":"6c28afe5a52e0f9b1138fe498b254c8671058a058b555651ccae8e91e7534614","sha512":"0fc9e47336d93f4f6ae6dbffaaee9145b46d4ba6c75aad12acbded8fc3468d1d8d29fb76440dba071ad362f725287ea38b5f48045e51c39fd5bf842f5ec0abd6","ssdeep":"","tlshash":"d821f09fbac2b5908394184d4e2ec055f23a2957641ce5fcd625e6827c407a186f2c0d","size":1297,"data":"","first_seen":"2025-05-14T05:06:37.190071Z","last_seen":"2025-08-22T06:38:14.173196Z","times_seen":1811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/330a4beb02.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"48dc517924250c11807239cb85cd57fb","sha1":"92bf240d6b67e26a7112e84152cfb9c217e2d10e","sha256":"146b70d8de34494529dddf07c85d4bf1e2570b213ca809041061eb068e4764c9","sha512":"c027b8ef50f4004c39996751bcf0121d700b60aa4313203dd79b114983b9f3ab7a25d22e4293a5fc3baa7c76b04fc0477b7e2efb4a4037c8261880333051c999","ssdeep":"","tlshash":"82c08c2008a121a02e0e9ec8b56170a1041460062fa8d8c00c74421a4062af0f89a004","size":147,"data":"","first_seen":"2025-07-23T16:09:37.567812Z","last_seen":"2025-07-29T04:15:45.285547Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/ead29c0989.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"31a8810ef78716a04633f276088b7ce9","sha1":"614e9f554a95be65b9d94ab8988866faed5adb11","sha256":"6035473206112e1cdcaa89c4fe94b84277deeb7b78a3c6ba7f66aba3bada21e5","sha512":"cbb2682c26697e70662c674dbececdc3c303a4fd32f827e98d10ae5e960d0c5a878bd8c7dd66f5c2af0cf19c54b8e614e2ceac10c3c34daf66fc0d63e68c62f9","ssdeep":"","tlshash":"0b31a6ecbaf870380e6dcaaa60392450d78c659d726dfcf4e3ee8a5822500dd52b4f41","size":1663,"data":"","first_seen":"2025-07-23T16:09:37.535548Z","last_seen":"2025-07-29T04:15:45.296331Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_2516fb85bf.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"17bec0cdbb1f200c132800aaa6138141","sha1":"ddd217ef11485abb04ebe4f477f7bd08247ba6c4","sha256":"5046bdd87efef7258f208c1d0621176d7f0ff505999b3aaf476b096fd1827796","sha512":"29144135a3a6cc22eb59805b0e9896e1387fa762deb611caa1edbbf31a3eb8f85b7d63042765a1d7f85271a4a8f482c79e07acd6f70fa07d734daec2d3b93b83","ssdeep":"96:jIVRqKr8upNHk2D/8a5W6x8Xsa3lvxJiLtp8tJr4M+AqjWqBAeDPC:UT37g6xQViLQJKAqjP6e+","tlshash":"0ea186567cb352781ea7a1e876010808f41f0271fce6b50adac3aba199df159017f7e0","size":4807,"data":"","first_seen":"2025-07-25T13:18:58.014005Z","last_seen":"2025-07-25T15:33:58.521968Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/fr/block","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"eval","is_inline":false,"md5":"d4716c9accbc143e92b80a1237a4c000","sha1":"88f93430f678829bb8a76acd4fc20771b316868b","sha256":"4d927ee3f5addcccde1277004c7f37ea2376f15b11aa0b7f51a65c270951e619","sha512":"3f9fcd751971af0660dd7bdffc6e4cf4b29b5365bed7ca3f909572b2da27da835af56096df60d1c0eaa6c7915b265bf9a0463b4add27cc873389fbc863732633","ssdeep":"3072:N2jTREChu3kotyMaa8uYP9HKAieP5CKAuW3ogXn:UjT5FotkuYMAi0gX","tlshash":"b2545fd52c41e714934a5fe422b82f53c088dc15ad889928d43dfe987aaf3fb29e55f0","size":300851,"data":"","first_seen":"2025-07-25T15:33:58.669754Z","last_seen":"2025-07-25T15:33:58.669754Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript,export const meta = import.meta;","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d772b7d405b447ecee54ab61cdd5108","sha1":"dd65fb9cd5a7cb94a40fe161f4f72303a61eb3b7","sha256":"b90ff694e492935b6036fb7e878d365dab51aafa46f0afb1e33414e7ecc3307b","sha512":"a3947640368602c9fd9dee887bb1a7e463890ff42e2ddd292c377593c5fad246d3e3363e9898cd1e5ecda9c59b5cf7c7cd0acfc2a5a1e5d3acec2cf0d62e20b2","ssdeep":"","tlshash":"1f800003800802380aa0c880028e80b00ab222203f00c08328088b302e3b08aca332a2","size":32,"data":"","first_seen":"2023-12-06T14:32:28Z","last_seen":"2026-04-04T05:49:28.682518Z","times_seen":7913,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/fr/block","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"6e5befed9131feb7423b940bd41fb4c8","sha1":"6ad4a8b091348e33d80d209fd752030e34b194c1","sha256":"eef021973e6fde6dfe15d7bac1c30ccab813c78ce89d875c0d0d4aa3626fa583","sha512":"8990fb0b0b78327a9991695b23bf49e1e15f289bf099cf9f6c0214aababa76327958ac6fa68b493d531c89b39b062828d76a887dcfec295e3d3417291c15eb71","ssdeep":"96:ihgdYI0yK9g9ktQglIelj+5gAmPrv/gKrLhZyaoQSBMOfQtSbNClcI:SgdR0vaktdew6UPrv/vLhcQtSbNwcI","tlshash":"39d1b491e41cfb2fec23990ef06b2f311e541a6975827b14e6ac872d34930b5e317a46","size":6333,"data":"","first_seen":"2025-07-25T15:33:58.742627Z","last_seen":"2025-07-25T15:33:58.742627Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/e93355a6/desktop/default/runtime-11c4d1c1.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"aab37b70014be5880b69434bf74ebd48","sha1":"2b0cbf6a6fda847d2562708e37799558bd5c54e5","sha256":"5631b579769d470abfd20bc919a9dd6da4968c0ee4cb1dda43e4c25661e5bc28","sha512":"04eeb1602554eef2612310890de1734ab026dc07c5ae3ab1be6c1e0887a6f394b7fc2d9ae603a0f229c92a22b264457b5ded63d367c87aba3d79d0dc420700ff","ssdeep":"384:Js51G0BCItnkMEL4u4B50BCItnk0/HfKk6M8/7JpW1:eqZItkMEL4u4B5ZItky6//7ni","tlshash":"bf821e5daf1acc672923dcc338213d21595820339c5647ece6fae2295018e6c75afe6f","size":18456,"data":"","first_seen":"2025-07-25T10:25:32.126481Z","last_seen":"2025-07-29T04:15:45.292433Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/e93355a6/desktop/default/vendors/app-415df399.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"679561b2493abfd62ccd15248e710bdb","sha1":"9d434c8c5e3fc14b3aff91c8df672ecd6af742ad","sha256":"34fd7fcb6ae87dd3ad7d4c6e894b99d624343933f1ed123cafe0446136d5412a","sha512":"2ddff065318387c525df9aec2f571ffd910ef9055fb0db3b264e6646bd6dfebc9824451489a9f30b34d8163e28a2a2365ddd1eba50369558b109ff6b7be54898","ssdeep":"12288:txnLX0yfGKmELxiaY4g1JzGbyPPaKG4iXFKkrqEm3XGVe:LX0yfGKmELxiaY4g1gbsS2iXDriHGVe","tlshash":"75154b99b981f2560aa32ae9c06b1017e32d6e5ebc0cd444f6e7cdd936998047137f2f","size":941496,"data":"","first_seen":"2025-07-24T22:41:32.497914Z","last_seen":"2025-07-29T04:15:45.274127Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/e93355a6/desktop/default/vendors/plugins.vue-notification-97c938b5.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"40b5abbf9da65f2bd7ec2ee060eb9c27","sha1":"17a1d2cce095298f2f813820216066ec56f798c1","sha256":"2086e02c299242f6f77a63c9ea30012cb36ca2d7f623dd436c7183a69613ba07","sha512":"781d7691a5aad7c328001566eca8d2209d14f2d0719132b190930de9584adeda3b12656ed94464b639ebb7a9d1c6b89fffdf857889d5967de9781f3514741ec2","ssdeep":"192:qU1hQXHv3CbfKpqEVwhSIkrReP+SdHtfGA2D3ow5EE9bJ52bFZLy2mp4ilVk:qn3CmpcDkAP+S/fGAWf5VbWbLy2mmijk","tlshash":"cc42a6ceb2c2b4650be760b6402f110af136a96879ab54d4f3b1d4f2adb564c413bf39","size":12563,"data":"","first_seen":"2025-07-02T09:11:07.795163Z","last_seen":"2025-07-30T04:19:29.442376Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/e93355a6/desktop/default/vendors/plugins.vue-js-modal-89ae6f8c.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"10190a398a63d9f56dc63db0d631c991","sha1":"73fc9c2e996f7e15d0f96440847a51274ab2cb3c","sha256":"5c9c03fb76b581128031ef1f8198888f485a644ebf4ca8516cde1979a06e127f","sha512":"b597e45cd0f32a74cc472d2b7c938d2d0234ee3f026dc3bfc5e46ffc4d6b4a56e8cd0c94bf320062a44e47609e372b24d59698e79d7652d36991b97641a3791d","ssdeep":"384:aBy0a9vOeCGAZIXfK2rVsAdm00uow4HQEjacGXGQVe6ubq8:FHyIXfPt4wE9GXGQcbq8","tlshash":"1cc2298977d8307442db5573627f2b0ab23e295474269888f772e8e65cb864d206ff3c","size":26667,"data":"","first_seen":"2025-07-24T22:41:32.600246Z","last_seen":"2025-07-29T04:15:45.27468Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"radar.cedexis.com/1/23802/radar.js","fqdn":"radar.cedexis.com","domain":"cedexis.com","tld":"com"},"ip":{"addr":"45.54.49.5","port":443,"asn":63911,"as":"NetActuate, Inc","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"82dec77fd0353c7c71ce053b8601387e","sha1":"fbbca95419e1d0c042e0a5fdf10f380aca66188c","sha256":"39f2b7b0fa78d37d0c84d2d6618bd635d86fd683d9bcdd5729850cb2a62522f7","sha512":"6872c895cb44711405e57a436dfbe15d094f9159e11ee2b89983c63b1f18f6acbdfaf0ccbb5e48b2bf24f366f16584c660bca4b6b14c048a134bb77a60f6563e","ssdeep":"","tlshash":"02e068ae9391a318537a2dbacc4e060ba0f6114888e5e4e029f5c2c00461bae072bfb4","size":390,"data":"","first_seen":"2024-02-13T14:23:26Z","last_seen":"2026-01-15T12:01:08.184588Z","times_seen":7496,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/e93355a6/desktop/default/analytics-ac143cd7.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"49712c3653568790b41ada21fc17150c","sha1":"dbd8e655605d8f4f5d2f4aa4aef1be7532889429","sha256":"de1ec607fa7ede5e48ed5179766f0c7e639f0770a6b7be1cdf6b14fa786f55ad","sha512":"5511150a5dffa47d9371868120ec5f046501ddb236e4b5f27d01571f05f8091edd0274560ad8a2414b49b9912282e747f8186ecabd8195d5d3873cbbec6609d4","ssdeep":"192:Qj33VeA9lshuxWarwKWJ3vQF+kHPQzYNvO6Rx+Akm:G3VeA7bxWarwKWFQFDHPiYfx+Akm","tlshash":"b2e18589bc89b47117ba14b8e77f9a0aa076171b24058081cae9d8d47c7eacf511be8d","size":7104,"data":"","first_seen":"2025-07-24T22:41:32.512819Z","last_seen":"2025-07-29T04:15:45.275206Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/5249ef47e8.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"44a67b6af7765c97be0db75fa4ba145b","sha1":"c2cb07c787c1f0ae851eebfad425e18452cd81e6","sha256":"aa2e425aecaa81c9c31056d493c25e3aa481041805b03c90f628a782b3dfbc5b","sha512":"6aa0f35136559722068857da26a8162f715300b9f886a0cb444749a570c2fc23a81a894af7cab12815d2bfc6760f5d251cff046e01a269561cd9be922a3dc546","ssdeep":"","tlshash":"be31b6fe57f5aeb0f11e8e9d7e0a71b093a80e4623ee50f5d14a8a65032d493d2528c2","size":1725,"data":"","first_seen":"2025-07-23T16:09:37.529605Z","last_seen":"2025-07-29T04:15:45.284521Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_6ff1664bd3.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"5bb3ed8c0eb424c7ad53a0653ab10a52","sha1":"f1f7d42986ccf6d068bd3b77f2e00d7f92230e14","sha256":"e2b58714f14049b21320f8e9fa914fe1a0afa9f63a3bb8eec925f110517f70f6","sha512":"7aa9e32ed8bcfb919570dadd4a87c12adb568dbbeb8c4a2aa44b9220d017d907eb3c2e7baf6a324784f83a41d207ddcf5305cb0d6bf6e1f841c1378d064880c0","ssdeep":"","tlshash":"3c11ef69f722e4e9214288dfd50aa1d7bf318d0e93513d11c0cd739463618a1e99db61","size":1039,"data":"","first_seen":"2025-07-25T13:18:57.992163Z","last_seen":"2025-07-25T15:33:58.494642Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/c22a550650.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"94f4ab7057137b6be57c534f34e4ca66","sha1":"50643b739b42f01637c7a32edf4a6635023918fc","sha256":"c753767786f9b373622c5fcd999a06dbb3140394fa1d1ddcdeb9caa7f6b29c89","sha512":"034509c88c961dae5bda9610f84bc9745a612fc5ee16eda8f7043f6f0db10d185a304caea36c2bb6e543d28f989b5dbefc2cc9a0fa81a9af78406d8d8777c866","ssdeep":"","tlshash":"a421a7303134e52b0bfe0bdcc8331850f32c2258673565d176cc6fa102ae506629ebb7","size":1166,"data":"","first_seen":"2025-07-23T16:09:37.614793Z","last_seen":"2025-07-30T04:19:29.469761Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/54ccc7a663.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"fd765535982d5d62aeab6b19a085d666","sha1":"558798f318e190ecafeba8bc5658075e1932409a","sha256":"72a6ad183e17d894754b72f7aa54ba4e74e89e4cebee7f9f74c3e19a0bae35b1","sha512":"2ca32dfb87f34724668011a558eca81a80897c2095fa33a86c93ba3290021bcf3fe2bdaf65b88973115d4896174528523571960a8c90c1b67f9450d44b0d069f","ssdeep":"","tlshash":"fc11c2dcaff53024650d8fc9f11425f30728365d2ec9e4ec456e3b748292761f58b966","size":855,"data":"","first_seen":"2025-07-23T16:09:37.522729Z","last_seen":"2025-07-29T04:15:45.316856Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/fr/block","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"Function","is_inline":false,"md5":"00beb9884d0391b342eadd30744b539a","sha1":"3124c0bd593822379d22f13d3e08e70a1bf5ea14","sha256":"92394eec5690449a4f6cfc9a7f97497a69e926b2365cb9a9aad3507a844f835c","sha512":"6fa2e21df54ca406f570cb639529d68edac5de27fd4bc3a9daa8fd0465b583ede1c1cabb550237deb75d8bf88f39e80c1a77777d794826ad3272630108e58661","ssdeep":"","tlshash":"539002492940210685661152001e5c58411491b094906c9140429c551d52020125ab5d","size":44,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-04-04T06:35:35.594304Z","times_seen":12996,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/fr/block","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"Function","is_inline":false,"md5":"580b3e56fc9ab6e8b4655f43ee057cc1","sha1":"5dfce565e446f4a167195de9a1a5dd26163c711c","sha256":"446f07b6e56de61d2c2d5b6ba408cc580b492a6d1ede8fc51cfde4ef75a2b382","sha512":"b2350579a3aaa5843b9b16c31782f3d7a4b850ba211d0074aa05d819c89ba49b482eb59aefcfb33f9fc9b270abb7cf7509e1254def23e9f98c116130c47f0018","ssdeep":"","tlshash":"e99002491d851041c56a1160041e1888442488761a40d8d1c480d9551c51630238e45c","size":47,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-04-04T06:35:35.59239Z","times_seen":12990,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/fr/block","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"50456f7b187d4cbb108bc0774c63059a","sha1":"a3510d019236c3990c760600c9ea60ee2c6b84e9","sha256":"7d9e6dd0d58a78caa91d11f38c827032a681ef25ff322e707f8a78226dab337b","sha512":"4047ad19ea1d024a2e61409414c422f0eec23ef267c8648ca417db41c4c83100b9c60f3ef98938796668997aa3211393c2525f2f462421d5e923770c2a1a077e","ssdeep":"3072:95ZDnVMdK8YAuGUvyYrVmVMdKmYAuGZzJHR/98SDt4oSSbK:fZDs86s/BzPDSolbK","tlshash":"0e24732e690c1c3e911f2fba854f7d4e5bbc5a2b20cb6c11ecae6e1914e3694456343f","size":218964,"data":"","first_seen":"2025-07-25T15:33:58.750072Z","last_seen":"2025-07-25T15:33:58.750072Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_chunk_7HDOEZTP.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"7e76c08e7f16815131a5f13a10c1efba","sha1":"5f800877b78a0713157fe119bc1a2d9a260f72e1","sha256":"c6f29a0c7c3ed884ccffd7a529fd2fc599e2da1f31af658146f0e36a3f4c00dc","sha512":"564dd139cad65e99fb210caf791d0582fa6312fb19e5c8395296361bd1904c2019d246132d42545f47f43a589bf3900e0468ed262251056c22d8172c55017e7b","ssdeep":"","tlshash":"b421f1e55fb87ba3627e26e4a02e0041e001d53752b4f1d4e294dfb464e945c035b4b6","size":1194,"data":"","first_seen":"2025-05-14T05:06:37.154171Z","last_seen":"2025-08-22T06:38:14.169571Z","times_seen":1811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_localforage_FJKG5M2E.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"02cf95f00794b77df34632e34a59c5be","sha1":"b64889fb6cbe78a141688ea761a627997ef8a8af","sha256":"bf78b7b3dd6ecbdea04c575edfb6022ed1b2e98c7a9cb9f02ab851ca638f1b83","sha512":"6bcdddd806b94dc8964c98ed5c8481f1ac5e74c707fe5d48760bd7d2edc2b8b52e58b3d7910d0ae316b3e196924d32734ccd5ffc33377df8de471e43c99fd6d3","ssdeep":"768:+DKAOpvMewHFuM96WwZACjzz46zSTKsBE1OvFXfX1UXk:+m8uPW43zEIOvdlUU","tlshash":"23d2c68c7799f02683bb3070907f580ef237a912594d90a0e591e5f86dbd75c822bfad","size":30277,"data":"","first_seen":"2025-05-14T05:06:37.193247Z","last_seen":"2025-08-22T06:38:14.178861Z","times_seen":1811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66\u0026cx=c\u0026gtm=45He57n0v9180563600za200\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5a56c8be5732fc99cb5ab522900a537","sha1":"c3499bf4c29388eb182f36a27bdcaa83fef9326c","sha256":"916205e144e80670f4fcc9d528c86e701b3c5b410bc37090c67026929fe3ea75","sha512":"f599adddc813ff81044199692fef916e5fc5abba0ca19f0e3ce44b3f3615b5fbde7f2109e7ac15848c2335ed37824ee130f38330e5dde80697dec88e7292d8dd","ssdeep":"3072:xV4wxwwmzivrnCZfZepoxWvO0v4007TvqoZwv08hy0ZGUW41AbIIiNUL2ZsOVfxx:COaxWH0avTrJNUJAxgQJEQcBjokPP8Ko","tlshash":"f0a4f8de73c674225296f468503f02cba97b28a2b49cc8aab1c9ccf02d7455a5177f7c","size":479282,"data":"","first_seen":"2025-07-25T15:33:58.716746Z","last_seen":"2025-07-25T15:33:58.716746Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/e93355a6/desktop/default/commons/app-6c596fd6.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"3add269b7ede524b11c8aa91e50986d7","sha1":"18f7cf0aa9bb237c79855e554e2f2eb556ebbe11","sha256":"caaa1a89e69cb16f9af89570f58fa877136fafa28eaca5f4c283381ce7616adb","sha512":"146ade1c31b15ac94ad29dab002582c1bbd5013a7903dd5d608a5fbd800953ae0130628118faaad21123eaa063681d49176f9aad887cdc55671f05d52c664772","ssdeep":"1536:A0UiXH2DHJjIAG3wvvjE+gjmZVBICrmh1G5YGf7BMr3y6MPe+PWKIZ1Ntm:/XHUp0qXjE+gjmZfmmYGNMrokN0","tlshash":"74d3d5dcf695b03117e721b5407f150bf23a7898680ac0a4f266e8d53db888ea167f7d","size":137774,"data":"","first_seen":"2025-07-24T22:41:32.625838Z","last_seen":"2025-07-29T04:15:45.275749Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/e93355a6/desktop/default/date-fns-locale-33-b3345199.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c4a3c05096aed8c82119bf813e62edc","sha1":"4c92cbbb8e618f24915c6670818f1d37b2141c8d","sha256":"d0b8308f4fa1eb9651710e9bcb7d02415f9916d11be43a7131abd73f1f74026f","sha512":"8386bc16a46a8689ad25e3730cf3f3b546e619b126bc14cb490c589afe73f298c3cf5f345cfc753798f04e530408f4efb32b6819382797aec459d78a6df52201","ssdeep":"96:WeysjQsHKsOiTgYIVRqKr8umwKb2D/8aStJdW0OY8Iza3lvxJiLNb+A6jW0kBneh:W6jnH9OXmq7CJkuWViLoA6jCteh","tlshash":"20d1764538b395e60ae7d1e8b8024549f99f493af4d7b802cbc7dfd09b9b11a0029bb1","size":6640,"data":"","first_seen":"2025-07-25T15:33:58.632113Z","last_seen":"2025-07-25T15:33:58.632113Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_vue_deps_DYMTJONH.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"1580a3cfe81fd30910a49dfe64cc8e7b","sha1":"314144dc49595482ba46c0b85b38d5f73ef73a7b","sha256":"8989a021d20f0fc08c43966a287cbd99e43142a5a0ff42eb232756a101de6035","sha512":"65a68a90c0bbac3609abafd1e200227d970f2a35a5158d699972651cdcdcc4c60e08dbe7e3f605621abb04e016e064f71057c9332d2a4e46dd704aad5ee3196b","ssdeep":"384:yo1wZ1yyQBPgmtk3aNPtFvsddbHyrKe/k43RuD6EgUBBmCWEg4bGy7IbEALvzAdw:lwZ1yyQBDk3a1tF+5E/uDRgQBpWEg2mh","tlshash":"de824be47bb9fd93339840dc80671b53f26948a7844cd074e799ae9330a454385b6bbe","size":19175,"data":"","first_seen":"2025-05-14T05:06:37.162459Z","last_seen":"2025-08-22T06:38:14.178048Z","times_seen":1811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/hd-api/external/assets/hdf.js","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"0009b06af6892358f6c573335f102046","sha1":"cb899ce5fb6756d389a12e5049f2180dec2366ed","sha256":"540a50ce4665aa5a15e6afcdf7a260860e1896e77955c7ed128d1e6489bedac3","sha512":"83e9ce72ca4725bf501fe711538455aaa2fb278095d4d3938615b1907416446b8a8ed1f4f34fb296ea4c9a6d6b6e0fecbe31afa240305e7d23baa4145b2cd1c8","ssdeep":"48:Pen1yuqKi6649JoXznZwhU6fINwld0mPr6eC5/F6ALWBl/NR3vMNNeEcxHb8JiTP:Y1yuqKioolwHgObfENerHbkiTgRx05","tlshash":"d581323660ee2d3153639052d53fe5e9f229a8073968ec4831fc588a0f40f6189b2e3b","size":4203,"data":"","first_seen":"2025-07-24T09:34:40.995531Z","last_seen":"2025-10-16T23:35:31.258248Z","times_seen":2029,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=DC-14030178\u0026cx=c\u0026gtm=45He57n0v9180563600za200\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4bdb59e4294336d33879cdb4d11ef5f9","sha1":"54c788fad99cfbf13328aecd22b21a6a762ebe71","sha256":"63e71dcae25f61ef43de3b19012885d5023d50b50e20cad36530b5aec723b732","sha512":"bbcaa42a8bfbe72f039654002227a129e0fdbab65612f4261a9e2d6a614a945e699fc93462627efdb9c16bd3605455c5137910ee95389e29794fe46472dfc8e2","ssdeep":"3072:y2onyZfZepox9R0zX037T8qoZwv08hy0ZGUW41AbIIyTu25VfxgQJTAmtcqm7oqM:pOaxAfavTrbTNxgQJEQcB7oT","tlshash":"136408cc73d6b4265392a478503f018bb17b6992f88cc895f186cce42e74aaa4177f7d","size":309944,"data":"","first_seen":"2025-07-25T09:06:39.16514Z","last_seen":"2025-07-25T15:33:58.60413Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/main-static/e93355a6/check-ob.js","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c065700c9c8c493403359e1f2baa10d9","sha1":"4630fe729e70bdf63fa7ba6c84ec277fd1f51030","sha256":"1e61f0c82ae82ffcf503fcd4b4c8ae27b32c11e19b882d5d13f3c44364c893f4","sha512":"b2e1c73cb94f5e3ceb35c3662bf4d72baf800a9a7c64318b1db07d50e9c885dbd94821ef3b3916d1b8b4fabb8f45cb588834b41c6a8a7f4d2c3e9c3866083ee7","ssdeep":"","tlshash":"96d0a79fb900211406939267d12f8668807724973f008182500597e069b8f4c4b37895","size":219,"data":"","first_seen":"2024-07-17T14:33:52Z","last_seen":"2026-01-22T06:40:31.153166Z","times_seen":6298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_libphonenumber_js_Q6RMKWT6.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"1da464d70e78b04b9b808e82e4ad9487","sha1":"0c79e65516d1525ecb43d13cfb4ccb0631095a28","sha256":"b4c72b8036ca6767ab61490178f901538646f2aa1001cb042caa134174a41595","sha512":"517231e24fe48dcf9e907f32f759a9d8cc0471202dd5a22dd27efffeeb989e0f12b0db848280f03739b2e267ce95feb128ee8e9305cdd4e299c3fd19695ffdb8","ssdeep":"3072:sOU03o4Pwjp9BumfaVpfMHgWH71RgZXo9k:sXpzumWpf2gWH71RgZok","tlshash":"5af3b9f73640ab6775b23b188e4ad28f6f9c9c51cc88908caae7d4db5d61c22707db14","size":158815,"data":"","first_seen":"2025-05-14T05:06:37.168433Z","last_seen":"2025-08-22T06:38:14.163241Z","times_seen":1811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"1xlite-76257.world/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-76257.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:56 GMT","end":"Sun, 14 Sep 2025 11:35:55 GMT"},"fingerprint":{"sha1":"31:43:B4:0C:D2:98:AC:D8:9F:DE:06:86:21:47:6E:95:8F:00:F9:E1","sha256":"1B:73:D9:EE:BD:C6:BB:28:5A:F5:F7:31:B4:05:54:84:74:83:B3:58:8F:D0:0F:1C:61:56:FE:BC:C3:63:34:D7"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-76257.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/fr/block\r\nContent-Type: application/json\r\nX-Lang: fr\r\nX-Uuid: 93324424-2bca-463b-8ddb-0019ceb4ea2a\r\nContent-Length: 89\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=fr; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder; postback_watcher=; auid=W7rOSWiDo8cKf5blAx7NAg==; window_width=1280; che_g=a90cb739-5ecd-5111-29c5-c4164698ddc5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\nx-dt: 285\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.099, wf-uht;dur=0.013\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3a216475fc98b3965280cafeb69dcd88","sha1":"f420d449fb98d55638c2d29393d99d22453ff873","sha256":"b3bcbd99831d8a7610f139c1c1e6050104932759ede08baf758967e08b1f74a8","sha512":"4d019f1fbb6038e0330e94958a8bd26fc6cc4b5066b74de93ea156ff918b7591c90fdbccaff715ede61a7f758130357730a54d1f12a8b6dbf16a797df9db9b2b","ssdeep":"","tlshash":"0f70000880220002000a080a03880a3cc830a0222080002238c30a203002ba0080aa02","first_seen":"2025-07-25T15:33:58.491054Z","last_seen":"2025-07-25T15:33:58.491054Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-25","alert":"Sinkholed","trigger":"1xlite-76257.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_6ff1664bd3.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:30.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_6ff1664bd3.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:30 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-4b202fcd8596f9e38933a841f0064a68-14004636ee97aaca-01\r\nlast-modified: Fri, 25 Jul 2025 12:32:41 GMT\r\netag: W/\"5bb3ed8c0eb424c7ad53a0653ab10a52\"\r\nx-amz-meta-mtime: 1753446525.35161588\r\ncontent-encoding: gzip\r\nexpires: Sat, 26 Jul 2025 14:06:52 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 5198\r\ncache: HIT\r\nx-cached-since: 2025-07-25T14:06:52+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1039,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, Unicode text, UTF-8 text, with very long lines (1036)","md5":"5bb3ed8c0eb424c7ad53a0653ab10a52","sha1":"f1f7d42986ccf6d068bd3b77f2e00d7f92230e14","sha256":"e2b58714f14049b21320f8e9fa914fe1a0afa9f63a3bb8eec925f110517f70f6","sha512":"7aa9e32ed8bcfb919570dadd4a87c12adb568dbbeb8c4a2aa44b9220d017d907eb3c2e7baf6a324784f83a41d207ddcf5305cb0d6bf6e1f841c1378d064880c0","ssdeep":"","tlshash":"3c11ef69f722e4e9214288dfd50aa1d7bf318d0e93513d11c0cd739463618a1e99db61","first_seen":"2025-07-25T13:18:57.992163Z","last_seen":"2025-07-25T15:33:58.494642Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/web-api/session","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:37.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-76257.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:56 GMT","end":"Sun, 14 Sep 2025 11:35:55 GMT"},"fingerprint":{"sha1":"31:43:B4:0C:D2:98:AC:D8:9F:DE:06:86:21:47:6E:95:8F:00:F9:E1","sha256":"1B:73:D9:EE:BD:C6:BB:28:5A:F5:F7:31:B4:05:54:84:74:83:B3:58:8F:D0:0F:1C:61:56:FE:BC:C3:63:34:D7"}}},"request":{"raw":"GET /web-api/session HTTP/1.1\r\nHost: 1xlite-76257.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/fr/block\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nx-app-n: v3-nuxt2\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=fr; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder; auid=W7rOSWiDo8cKf5blAx7NAg==; window_width=1280; che_g=a90cb739-5ecd-5111-29c5-c4164698ddc5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:37 GMT\r\ncache-control: no-cache, private\r\nserver-timing: dt_total;dur=0.060, p;dur=11.298, wf-uht;dur=0.036\r\nset-cookie: ua=deleted; expires=Thu, 01 Jan 1970 00:00:01 GMT; Max-Age=0; path=/\nSESSION=6b4281bcf5518db79aaa3867a54ddd64; path=/; secure; httponly; samesite=lax\r\nx-dt: 285\r\nx-time-ng: 0.012, 0.017\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-25","alert":"Sinkholed","trigger":"1xlite-76257.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/e93355a6/desktop/default/vendors/app-415df399.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:28.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/e93355a6/desktop/default/vendors/app-415df399.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:28 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-d849ac0cdfb446ccce0ec6b3518739f7-f2e21ff76decf078-01\r\nlast-modified: Fri, 25 Jul 2025 08:59:42 GMT\r\netag: W/\"679561b2493abfd62ccd15248e710bdb\"\r\nx-amz-meta-mtime: 1753433980.443970684\r\ncontent-encoding: gzip\r\nexpires: Sat, 26 Jul 2025 09:31:26 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.003\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 21708\r\ncache: HIT\r\nx-cached-since: 2025-07-25T09:31:40+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":941496,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64133)","md5":"679561b2493abfd62ccd15248e710bdb","sha1":"9d434c8c5e3fc14b3aff91c8df672ecd6af742ad","sha256":"34fd7fcb6ae87dd3ad7d4c6e894b99d624343933f1ed123cafe0446136d5412a","sha512":"2ddff065318387c525df9aec2f571ffd910ef9055fb0db3b264e6646bd6dfebc9824451489a9f30b34d8163e28a2a2365ddd1eba50369558b109ff6b7be54898","ssdeep":"12288:txnLX0yfGKmELxiaY4g1JzGbyPPaKG4iXFKkrqEm3XGVe:LX0yfGKmELxiaY4g1gbsS2iXDriHGVe","tlshash":"75154b99b981f2560aa32ae9c06b1017e32d6e5ebc0cd444f6e7cdd936998047137f2f","first_seen":"2025-07-24T22:41:32.497914Z","last_seen":"2025-07-29T04:15:45.274127Z","times_seen":38,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/e93355a6/desktop/default/app-f2b024d7.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:28.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/e93355a6/desktop/default/app-f2b024d7.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:28 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-6dc9661983c12c46145cfcd0bfea7d0e-bfa8945641f551de-01\r\nlast-modified: Fri, 25 Jul 2025 08:59:41 GMT\r\netag: W/\"fa6b36820e428669ade9b863fa996c9c\"\r\nx-amz-meta-mtime: 1753433980.423970484\r\ncontent-encoding: gzip\r\nexpires: Sat, 26 Jul 2025 09:31:26 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 21708\r\ncache: HIT\r\nx-cached-since: 2025-07-25T09:31:40+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":504778,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"fa6b36820e428669ade9b863fa996c9c","sha1":"7c2849f0bf109b714bdcd47f594161c6fb775e57","sha256":"28064ebe0a929d0de9e71f3e61770cca7523cf6962e6e3301dccc3243072cffd","sha512":"6b07628bc5b9cbaaca2d353dfb7251931a2eaba6b52a7e8b63341e615fcc19360dfff7c8fa86930dabe93f77d91a9ad6dbf8ad507699d91b752f883f5a9db189","ssdeep":"12288:LhhKgC7jcupMA7xyTfZyGQnZ0vwBhWtNN:LhQgC7jcupMA7CfZyGQ2","tlshash":"99b46c65b588f48602f34bd9e03a0071e33916ad380ed064f7bdedda359bc09d16a67b","first_seen":"2025-07-25T10:25:32.370681Z","last_seen":"2025-07-29T04:15:45.288672Z","times_seen":35,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_reset_password/fr/dictionary_4b53ead71ef8dfaa69f782056cd7f0ec.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_reset_password/fr/dictionary_4b53ead71ef8dfaa69f782056cd7f0ec.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 902\r\ntraceparent: 00-03bf662de04965dcce5280b3ee8e59f0-dbfebcd6d1dc82fb-01\r\nlast-modified: Wed, 11 Oct 2023 12:53:13 GMT\r\netag: \"bb5fe14bc42db5a6f2f97385403acae0\"\r\ncache-control: max-age=3600\r\nexpires: Thu, 16 Jan 2025 12:19:00 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2643\r\ncache: HIT\r\nx-cached-since: 2025-07-25T14:49:26+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":902,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bb5fe14bc42db5a6f2f97385403acae0","sha1":"c3da8741943eb2e39535f13f451c235f148f77fa","sha256":"48b7d5e3653a11f3323612cad1ced3deb4a99b868c6f751facb12a09b8dbc8e1","sha512":"bebcba673f21ffd78f5c68f1db8d5f8fd3196e059c427385ddb5e267dec988c14ad77d4a5fbf6c288ebb9c5ff7bbee34e220b861a0062c57ebc6ca7459df269e","ssdeep":"","tlshash":"0d11230252df0de31a8ac24251175e7332d4808ba28bc8c793b6c7aeb7fac96118081f","first_seen":"2025-06-24T03:34:37.849111Z","last_seen":"2026-03-07T17:24:21.991156Z","times_seen":53,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/3f5f95c6d9.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:30.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/3f5f95c6d9.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:30 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-6e4acde7d41b984c21feb1bac21b38db-fa5ea6cac4bbf13c-01\r\nlast-modified: Wed, 23 Jul 2025 11:55:36 GMT\r\netag: W/\"f520ef938ef8ef4ee14ae695f2aa1946\"\r\nx-amz-meta-mtime: 1753271379.323388855\r\ncontent-encoding: gzip\r\nexpires: Fri, 25 Jul 2025 15:44:16 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 85754\r\ncache: HIT\r\nx-cached-since: 2025-07-24T15:44:16+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3275,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3274)","md5":"f520ef938ef8ef4ee14ae695f2aa1946","sha1":"829b12254d61582c6da5621f211cca319ac4d6fb","sha256":"08098ba26b6afc6ffd38365d515bbf8b9839657208e3e6ead2e39e7cf863076b","sha512":"b2d3a0c10af2fdab835935d6eba2bc90d55dc032cff1e5ac0c7900a92843c2ea1404ad7fdd4949d88b404e8da1963d40f62c38c55e606839228c81dcaec04bcf","ssdeep":"","tlshash":"b861b9a5f8b9d0fa361780896c66b070e32b4dbc579c2461e1f8489c26cd540bbaf7d7","first_seen":"2025-07-23T16:09:37.583434Z","last_seen":"2025-07-29T04:15:45.311942Z","times_seen":47,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_8625586157.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:30.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_8625586157.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:30 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 222\r\ntraceparent: 00-117ced25f077700bac5a2cb11d0faf42-c368bacc57c8d02f-01\r\nlast-modified: Fri, 25 Jul 2025 12:32:41 GMT\r\netag: \"0bf04731c9f13a1e2c427a0cdcb03153\"\r\nx-amz-meta-mtime: 1753446525.352615977\r\nexpires: Sat, 26 Jul 2025 13:36:50 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 7000\r\ncache: HIT\r\nx-cached-since: 2025-07-25T13:36:50+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":222,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"0bf04731c9f13a1e2c427a0cdcb03153","sha1":"a9e2d046b2e5dec0e25814b05aafb21b17489372","sha256":"b64d491cf97872fbde9fda40166912e686b8899ce39feb458a815134808444ad","sha512":"cecd839f85e7cd1b0fdc552f5a2a24734b399e04c75633ccdb13437050028616e8cb6d98d40969c71824aa9d85f5aab205585441e686054cfebd056020817a74","ssdeep":"","tlshash":"77d0a704652b44f70b01b348d0ae1b75fbd9258b918d14067014b18fa00d418cb00989","first_seen":"2025-06-24T03:34:37.79718Z","last_seen":"2025-11-30T15:40:58.948565Z","times_seen":51,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":5,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"radar.cedexis.com/1707728419/stub.js","fqdn":"radar.cedexis.com","domain":"cedexis.com","tld":"com"},"ip":{"addr":"45.54.49.5","port":443,"asn":63911,"as":"NetActuate, Inc","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:40.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"radar.cedexis.com","organization":"Citrix Systems, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A2:3E:30:19:D5:41:3A:11:81:58:E3:B1:6F:F4:D2:78:0B:44:6F:D0","sha256":"BE:70:39:96:BA:51:8F:A7:6A:9D:E1:58:FB:D9:F7:6F:17:5C:DA:A9:6E:54:3F:8F:0B:3D:1E:DF:8C:44:B4:71"}}},"request":{"raw":"GET /1707728419/stub.js HTTP/1.1\r\nHost: radar.cedexis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 25 Jul 2025 15:33:40 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Mon, 12 Feb 2024 09:51:01 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"65c9ea05-186\"\r\nExpires: Fri, 08 Aug 2025 15:33:40 GMT\r\nCache-Control: max-age=1209600, public\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":390,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"82dec77fd0353c7c71ce053b8601387e","sha1":"fbbca95419e1d0c042e0a5fdf10f380aca66188c","sha256":"39f2b7b0fa78d37d0c84d2d6618bd635d86fd683d9bcdd5729850cb2a62522f7","sha512":"6872c895cb44711405e57a436dfbe15d094f9159e11ee2b89983c63b1f18f6acbdfaf0ccbb5e48b2bf24f366f16584c660bca4b6b14c048a134bb77a60f6563e","ssdeep":"","tlshash":"02e068ae9391a318537a2dbacc4e060ba0f6114888e5e4e029f5c2c00461bae072bfb4","first_seen":"2024-02-13T14:23:26Z","last_seen":"2026-01-15T12:01:08.184588Z","times_seen":7496,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/hd-api/external/verify","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:39.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-76257.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:56 GMT","end":"Sun, 14 Sep 2025 11:35:55 GMT"},"fingerprint":{"sha1":"31:43:B4:0C:D2:98:AC:D8:9F:DE:06:86:21:47:6E:95:8F:00:F9:E1","sha256":"1B:73:D9:EE:BD:C6:BB:28:5A:F5:F7:31:B4:05:54:84:74:83:B3:58:8F:D0:0F:1C:61:56:FE:BC:C3:63:34:D7"}}},"request":{"raw":"POST /hd-api/external/verify HTTP/1.1\r\nHost: 1xlite-76257.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/fr/block\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 108773\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=fr; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder; auid=W7rOSWiDo8cKf5blAx7NAg==; window_width=1280; che_g=a90cb739-5ecd-5111-29c5-c4164698ddc5; SESSION=6b4281bcf5518db79aaa3867a54ddd64\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:39 GMT\r\ncontent-type: application/json\r\ncontent-length: 610\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-dt: 285\r\nx-request-guid: 4277618093f137ba413162c3cacf30cd\r\nx-time-ng: 0.009\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.008, wf-uht;dur=0.048\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":742,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8ddd847d54364d47bc377391de8bce23","sha1":"f04c138b077092fda3651912013131f027ec84a0","sha256":"ec7550baa805a8614d629f1b83e0605e4a4973b9aa045af90470c4e80e9b3d31","sha512":"4efb265a0a079372ae83ba68d0391720858ec20754999570d316250191c207e014ffd48fd374f685d5407abde9fc3d76bcd94319ddd1dc335b171f8e36c3fb28","ssdeep":"","tlshash":"bf01e92080891b8c57cde6420faf8b1a44ca94f62e830032f16ac4e4f20f774f1018f1","first_seen":"2025-07-25T15:33:58.514368Z","last_seen":"2025-07-25T15:33:58.514368Z","times_seen":1,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":0,"dns":0,"connect":0,"send":30,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-25","alert":"Sinkholed","trigger":"1xlite-76257.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/e93355a6/desktop/default/analytics-ac143cd7.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:39.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/e93355a6/desktop/default/analytics-ac143cd7.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:39 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-d8c84b2e51187b90cced5e8a3baeafd1-90c97bda52e6cc5a-01\r\nlast-modified: Fri, 25 Jul 2025 08:59:41 GMT\r\netag: W/\"49712c3653568790b41ada21fc17150c\"\r\nx-amz-meta-mtime: 1753433980.423970484\r\ncontent-encoding: gzip\r\nexpires: Sat, 26 Jul 2025 09:31:36 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 21112\r\ncache: HIT\r\nx-cached-since: 2025-07-25T09:41:47+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7104,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7104), with no line terminators","md5":"49712c3653568790b41ada21fc17150c","sha1":"dbd8e655605d8f4f5d2f4aa4aef1be7532889429","sha256":"de1ec607fa7ede5e48ed5179766f0c7e639f0770a6b7be1cdf6b14fa786f55ad","sha512":"5511150a5dffa47d9371868120ec5f046501ddb236e4b5f27d01571f05f8091edd0274560ad8a2414b49b9912282e747f8186ecabd8195d5d3873cbbec6609d4","ssdeep":"192:Qj33VeA9lshuxWarwKWJ3vQF+kHPQzYNvO6Rx+Akm:G3VeA7bxWarwKWFQFDHPiYfx+Akm","tlshash":"b2e18589bc89b47117ba14b8e77f9a0aa076171b24058081cae9d8d47c7eacf511be8d","first_seen":"2025-07-24T22:41:32.512819Z","last_seen":"2025-07-29T04:15:45.275206Z","times_seen":38,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/fr?tag=d_224327m_3030c_[]MS[]null[]WLSmart[]general[]7113192_d28985_l62141_clickunder","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-25T15:33:27.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-76257.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:56 GMT","end":"Sun, 14 Sep 2025 11:35:55 GMT"},"fingerprint":{"sha1":"31:43:B4:0C:D2:98:AC:D8:9F:DE:06:86:21:47:6E:95:8F:00:F9:E1","sha256":"1B:73:D9:EE:BD:C6:BB:28:5A:F5:F7:31:B4:05:54:84:74:83:B3:58:8F:D0:0F:1C:61:56:FE:BC:C3:63:34:D7"}}},"request":{"raw":"GET /fr?tag=d_224327m_3030c_[]MS[]null[]WLSmart[]general[]7113192_d28985_l62141_clickunder HTTP/1.1\r\nHost: 1xlite-76257.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:27 GMT\r\nlocation: https://1xlite-76257.world/fr/block\r\nserver-timing: dt_total;dur=0.013, total;dur=196;desc=\"Nuxt Server Time\", wf-uht;dur=0.209\r\nset-cookie: platform_type=desktop; Path=/; Expires=Mon, 28 Jul 2025 15:33:27 GMT; Secure; SameSite=None; Partitioned\ngw-mm=; Path=/; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Secure; SameSite=None; Partitioned\nlng=fr; Path=/\ncookies_agree_type=3; Path=/\ntzo=2; Path=/\nis12h=0; Path=/\nreferral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; Path=/; Expires=Tue, 23 Sep 2025 15:33:27 GMT\nreflinkid=d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder; Path=/; Expires=Fri, 25 Jul 2025 16:33:27 GMT\npostback_watcher=; Path=/; Expires=Fri, 25 Jul 2025 15:33:31 GMT\nauid=W7rOSWiDo8cKf5blAx7NAg==; path=/; secure; httponly; samesite=lax\r\nx-dt: 285\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":287019,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":425,"timings":{"blocked":94,"dns":1,"connect":27,"send":0,"wait":236,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-25","alert":"Sinkholed","trigger":"1xlite-76257.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_vue_deps_DYMTJONH.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_vue_deps_DYMTJONH.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-cb5492f4c3416d38fe06dda06d46e695-6f3dca72637e8ee9-01\r\nlast-modified: Thu, 24 Jul 2025 14:07:04 GMT\r\netag: W/\"1580a3cfe81fd30910a49dfe64cc8e7b\"\r\nx-amz-meta-mtime: 1753365757.619102546\r\ncontent-encoding: gzip\r\nexpires: Fri, 25 Jul 2025 22:40:29 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 60780\r\ncache: HIT\r\nx-cached-since: 2025-07-24T22:40:29+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19175,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19034)","md5":"1580a3cfe81fd30910a49dfe64cc8e7b","sha1":"314144dc49595482ba46c0b85b38d5f73ef73a7b","sha256":"8989a021d20f0fc08c43966a287cbd99e43142a5a0ff42eb232756a101de6035","sha512":"65a68a90c0bbac3609abafd1e200227d970f2a35a5158d699972651cdcdcc4c60e08dbe7e3f605621abb04e016e064f71057c9332d2a4e46dd704aad5ee3196b","ssdeep":"384:yo1wZ1yyQBPgmtk3aNPtFvsddbHyrKe/k43RuD6EgUBBmCWEg4bGy7IbEALvzAdw:lwZ1yyQBDk3a1tF+5E/uDRgQBpWEg2mh","tlshash":"de824be47bb9fd93339840dc80671b53f26948a7844cd074e799ae9330a454385b6bbe","first_seen":"2025-05-14T05:06:37.162459Z","last_seen":"2025-08-22T06:38:14.178048Z","times_seen":1811,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_2516fb85bf.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:30.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_2516fb85bf.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:30 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-7dcacc63a342775d6fa21b4678df1740-661fb9f7a9db50c4-01\r\nlast-modified: Fri, 25 Jul 2025 12:57:11 GMT\r\netag: W/\"17bec0cdbb1f200c132800aaa6138141\"\r\nx-amz-meta-mtime: 1753448077.932461648\r\ncontent-encoding: gzip\r\nexpires: Sat, 26 Jul 2025 14:06:52 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 5198\r\ncache: HIT\r\nx-cached-since: 2025-07-25T14:06:52+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4807,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4762)","md5":"17bec0cdbb1f200c132800aaa6138141","sha1":"ddd217ef11485abb04ebe4f477f7bd08247ba6c4","sha256":"5046bdd87efef7258f208c1d0621176d7f0ff505999b3aaf476b096fd1827796","sha512":"29144135a3a6cc22eb59805b0e9896e1387fa762deb611caa1edbbf31a3eb8f85b7d63042765a1d7f85271a4a8f482c79e07acd6f70fa07d734daec2d3b93b83","ssdeep":"96:jIVRqKr8upNHk2D/8a5W6x8Xsa3lvxJiLtp8tJr4M+AqjWqBAeDPC:UT37g6xQViLQJKAqjP6e+","tlshash":"0ea186567cb352781ea7a1e876010808f41f0271fce6b50adac3aba199df159017f7e0","first_seen":"2025-07-25T13:18:58.014005Z","last_seen":"2025-07-25T15:33:58.521968Z","times_seen":2,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_block_pages/fr/dictionary_f2bb426f8028eeca47a252c5f51db70f.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:30.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_block_pages/fr/dictionary_f2bb426f8028eeca47a252c5f51db70f.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:30 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-a901528c84024a629bea47885876a273-a45a0123f9404179-01\r\nlast-modified: Tue, 22 Jul 2025 10:06:59 GMT\r\netag: W/\"bd8e94a33a6a5b79fe41ed4dd3d58e24\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Tue, 22 Jul 2025 11:25:09 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 3055\r\ncache: HIT\r\nx-cached-since: 2025-07-25T14:42:35+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2647,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"bd8e94a33a6a5b79fe41ed4dd3d58e24","sha1":"f6aa63f1e8c5c83d988716fd87e1ae9f9e5e4e7d","sha256":"137be7f4d24dc7cb789774b97ebba5b3ce4a34c8a0c3185a675a85ddfe13942d","sha512":"e6b9fd828fe55b50af42ac1da01cacdd1d895d1c5704881e0a299c78039844759a4781ee0db83b307fe35645ef18ca104fdd8210b7410581115309902e7766ee","ssdeep":"","tlshash":"ce51c516377c14dc398c42907f10afe66915091dfb9622d0f6dcc6ac322e8cda0a758e","first_seen":"2025-07-25T13:18:57.785445Z","last_seen":"2025-10-30T09:05:37.283034Z","times_seen":24,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/1c0cd0740fccd19a9816be06e69f0a1b.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:30.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/1c0cd0740fccd19a9816be06e69f0a1b.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:30 GMT\r\ncontent-type: application/json\r\ncontent-length: 473\r\ntraceparent: 00-40c7441cd4438ffc93b025bcc89394d0-7597cf74a7c9a5a9-01\r\nlast-modified: Thu, 16 May 2024 20:41:30 GMT\r\netag: \"e67aa19ef00fd2285c7b4ecbb6018306\"\r\nexpires: Fri, 25 Jul 2025 12:41:12 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2515\r\ncache: HIT\r\nx-cached-since: 2025-07-25T14:51:35+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":473,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e67aa19ef00fd2285c7b4ecbb6018306","sha1":"5b01d4786d6fbfbd5de7901eb4359a55466f434a","sha256":"135c1042c31e3674d8a1b3b9e7179f4f36868048ca6058ea458ff291b8880b5e","sha512":"014c2ef0dd816273532f1c79526f14831c3201ee520ac1153d3ff3478c8242dbc43b631280f049f141d7edf8449122f17ac67b6e374130201baa176ba9ed8a62","ssdeep":"","tlshash":"1ff0e242f6e00c73146b90add9e2f60d83c45f039c496468399d6b4c2794a29119ad7e","first_seen":"2023-06-08T21:08:06Z","last_seen":"2025-07-30T04:19:29.488563Z","times_seen":1942,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:38.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:38 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63920\r\ntraceparent: 00-becfa4b539ec3681b930d4f435a01fdf-6b89c5b7d192963e-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"a65527fcb58f66a7cfbc0e6b160538b4\"\r\nexpires: Mon, 21 Jul 2025 22:35:56 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1805\r\ncache: HIT\r\nx-cached-since: 2025-07-25T15:03:33+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":63920,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63920, version 1.0","md5":"a65527fcb58f66a7cfbc0e6b160538b4","sha1":"45d260e7fa343401b5bb0df982a014f53e2d253b","sha256":"fb13c3a1cbac60649b76f7d7f85c1645d35ac69b85ce5f4eb0692505ecc2cd45","sha512":"8448e96abe326f43285b2d8b0d75beaf0e9c9e051e8754841d907b30eb303ae24c447011306da6a1703b9192d02aeff76a4517bdf94ec6e7dc360ce3538802af","ssdeep":"1536:UIG3hJMkJeK8ic5iZGnJ4URj9vqXOQ6UqYdbuA5RVK1:UL31hcLlRjDQ6Uq4W1","tlshash":"7f5302df8de32a148ff78772668885f4f4927c68898c8e7345526a8907f07d6b96c04f","first_seen":"2023-05-07T18:04:27Z","last_seen":"2026-04-04T06:13:29.80601Z","times_seen":10141,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-ui/3.3.314/Desktop/Default/merged.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:28.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-ui/3.3.314/Desktop/Default/merged.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:28 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-11a8d08a4597ae4f61589201d7a819f9-aae59a1296659f33-01\r\nlast-modified: Fri, 25 Jul 2025 13:51:18 GMT\r\netag: W/\"75f5da80caf4a8f46595d4394ad4e40b\"\r\nx-amz-meta-mtime: 1753451444.200944993\r\ncontent-encoding: gzip\r\nexpires: Sat, 26 Jul 2025 13:55:17 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 5869\r\ncache: HIT\r\nx-cached-since: 2025-07-25T13:55:39+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":856279,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"75f5da80caf4a8f46595d4394ad4e40b","sha1":"4649c89f9408cb528decf15f5149bcbe535ab113","sha256":"7dab1d1a30cfb46d2309a8d1b10a9bb5854301b42dca446f64d7dbc285f6001f","sha512":"d74e7b1c6bf6ebb3f9034d3f4bcd3d85096deac601bba212c5ab8ca1eba4e2373532493839c17e265443a9e8e244df58452bb41760724b8b5a6fe9ddcfa371db","ssdeep":"24576:LxEvoQ30ffnqKvmfpBxJvYyRe2eRtTGxvON7OS2L8K687Z:o","tlshash":"ee05761cf25cd1353e37e63162849ffd6720b6479722287ef49a029a0ec3542719aeb7","first_seen":"2025-07-25T13:18:56.680256Z","last_seen":"2025-07-28T06:11:53.933476Z","times_seen":39,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":91,"dns":14,"connect":4,"send":0,"wait":4,"receive":0,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_registration/fr/dictionary_15312a0c59113aeb353481a6c5a8ae8d.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_registration/fr/dictionary_15312a0c59113aeb353481a6c5a8ae8d.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-956cb32bc151eef8acd201c13cf6501f-e67cc60d33c69b9c-01\r\nlast-modified: Thu, 24 Jul 2025 18:07:01 GMT\r\netag: W/\"e14377ad6b7edfb679a88b26a2bd6065\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Thu, 24 Jul 2025 19:34:36 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1544\r\ncache: HIT\r\nx-cached-since: 2025-07-25T15:07:45+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25714,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"24a25e647ccaf3814700654cc8b8debd","sha1":"de9a3a520edf6f6a3e6c5ddc070c5c92fdfb67b0","sha256":"535344bea7193a295358cdb73f2f9ec1f594324efb835660cd800849dcf84e4a","sha512":"0fbd932f9db591ba375d97a5b226092019ac561b32165a20cfa66e9db5d2891ea77444522d970b526f621243bd19a445a7859db064a8f3e2f7d0c71cd269e313","ssdeep":"768:Wopc3O56aCKlIzItLwdQph4ekhbP4n5vBJ8bnRZkNH:jtRkhkR","tlshash":"3eb2d88e4ee89cbb07c34157bf839fcb127d0248b597c494cbaa861a16666d8d7331dc","first_seen":"2025-07-25T13:18:56.127204Z","last_seen":"2025-07-25T15:33:58.534761Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/56f58c6d078ff0e8f698576f33bb478d.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:30.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/56f58c6d078ff0e8f698576f33bb478d.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:30 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-abe37d365413895a73ad9265d0c8e741-4dfd3ea4763bf818-01\r\nlast-modified: Thu, 27 Feb 2025 09:06:12 GMT\r\netag: W/\"4b08975411699bcd7464f49777e866bf\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 27 Feb 2025 10:17:14 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 304\r\ncache: HIT\r\nx-cached-since: 2025-07-25T15:28:26+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3557,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4b08975411699bcd7464f49777e866bf","sha1":"2a9b0a0f3eadf5f3e1ef688bacd9560dd59c73d2","sha256":"b6208d18413f8988db2e0040ff72516c0cb5e06d3d9692b5b098808ab46fc378","sha512":"4851dd31f3260cdd021a657cbc17cc20c51888f90e841de3ac1edff169e9fa90c743e8214810bd549f362896a1e28b9b6aa25200746ceef48ef8b2d344f67dbb","ssdeep":"","tlshash":"ba712945faf01c33103f62ad94f3b64e93984f97981b681939ad7a4c6b98809406bc7e","first_seen":"2025-03-01T06:06:39.060162Z","last_seen":"2026-03-31T06:06:31.554275Z","times_seen":1858,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:30.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-76257.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:56 GMT","end":"Sun, 14 Sep 2025 11:35:55 GMT"},"fingerprint":{"sha1":"31:43:B4:0C:D2:98:AC:D8:9F:DE:06:86:21:47:6E:95:8F:00:F9:E1","sha256":"1B:73:D9:EE:BD:C6:BB:28:5A:F5:F7:31:B4:05:54:84:74:83:B3:58:8F:D0:0F:1C:61:56:FE:BC:C3:63:34:D7"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json HTTP/1.1\r\nHost: 1xlite-76257.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/fr/block\r\nContent-Type: application/json\r\nX-Lang: fr\r\nX-Uuid: 93324424-2bca-463b-8ddb-0019ceb4ea2a\r\nContent-Length: 19\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=fr; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder; postback_watcher=; auid=W7rOSWiDo8cKf5blAx7NAg==; window_width=1280; che_g=a90cb739-5ecd-5111-29c5-c4164698ddc5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:30 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nx-dt: 285\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.007, wf-uht;dur=0.013\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-04-04T06:42:11.017853Z","times_seen":225951,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-25","alert":"Sinkholed","trigger":"1xlite-76257.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:30.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-76257.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:56 GMT","end":"Sun, 14 Sep 2025 11:35:55 GMT"},"fingerprint":{"sha1":"31:43:B4:0C:D2:98:AC:D8:9F:DE:06:86:21:47:6E:95:8F:00:F9:E1","sha256":"1B:73:D9:EE:BD:C6:BB:28:5A:F5:F7:31:B4:05:54:84:74:83:B3:58:8F:D0:0F:1C:61:56:FE:BC:C3:63:34:D7"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-76257.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/fr/block\r\nContent-Type: application/json\r\nX-Lang: fr\r\nX-Uuid: 93324424-2bca-463b-8ddb-0019ceb4ea2a\r\nContent-Length: 72\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=fr; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder; postback_watcher=; auid=W7rOSWiDo8cKf5blAx7NAg==; window_width=1280; che_g=a90cb739-5ecd-5111-29c5-c4164698ddc5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:30 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\nx-dt: 285\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.083, wf-uht;dur=0.015\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5cafa574ddd7c734d077b1116dd7e7c8","sha1":"4f1ace3e64a8581fb5c7ca0bb6679b0ff63fa24b","sha256":"ae55248e83dc6e367d47433f3fd13b910d257b995ddbedaeab8f474ed9edc3b5","sha512":"bbdf406142d510651ead1de4042b67d3f64156ffca7d8347174b5f3a2031e334c23d217778311cb2a2f74a795bda58cde2abf77455f7c24dbdaf4938d466ab5a","ssdeep":"","tlshash":"0d700008a0300082080008a0028c8a2ac822a002e000002238c80b303002bf8200a0a2","first_seen":"2025-07-25T15:33:58.544191Z","last_seen":"2025-07-25T15:33:58.544191Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-25","alert":"Sinkholed","trigger":"1xlite-76257.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:41.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-76257.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:56 GMT","end":"Sun, 14 Sep 2025 11:35:55 GMT"},"fingerprint":{"sha1":"31:43:B4:0C:D2:98:AC:D8:9F:DE:06:86:21:47:6E:95:8F:00:F9:E1","sha256":"1B:73:D9:EE:BD:C6:BB:28:5A:F5:F7:31:B4:05:54:84:74:83:B3:58:8F:D0:0F:1C:61:56:FE:BC:C3:63:34:D7"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-76257.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/fr/block\r\nContent-Type: application/json\r\nX-Lang: fr\r\nX-Uuid: 93324424-2bca-463b-8ddb-0019ceb4ea2a\r\nContent-Length: 109\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=fr; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder; auid=W7rOSWiDo8cKf5blAx7NAg==; window_width=1280; che_g=a90cb739-5ecd-5111-29c5-c4164698ddc5; SESSION=6b4281bcf5518db79aaa3867a54ddd64; _gcl_au=1.1.1892791516.1753457620; _ga_7JGWL9SV66=GS2.1.s1753457620$o1$g0$t1753457620$j60$l0$h1736693786; _ga=GA1.1.60252338.1753457620\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:41 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\nx-dt: 285\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.010, wf-uht;dur=0.022\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"39ad915201ce97ad51e893fb4af534b0","sha1":"1fbdd2f8561e32eea30d817bdb147632d4ada7fd","sha256":"60ffed08db0ca1656226552a181473a47740fe4c1e9cda2e831caa04fc192424","sha512":"14f33a42dbc1f299890fa01ec713216bc994d8f83b6c884aa9c4581a4f8de7fefd0188fab894addcc077db552d9e738bb68de582e7ce609bf44b08c7c720fcaa","ssdeep":"","tlshash":"41700008a3a08820808a0000028a0fe8c820a0022880002330e08f3c30a0ba0008a082","first_seen":"2025-07-25T15:33:58.551767Z","last_seen":"2025-07-25T15:33:58.551767Z","times_seen":1,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-25","alert":"Sinkholed","trigger":"1xlite-76257.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je57n0v897130004za200zb9180563600zd9180563600\u0026_p=1753457619523\u0026em=tv.1~em.HQSpD-oY2vsjeKpaadUPcibtNS-8MBsvMFAPbee-TAg\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211~104948813~105134979~105134981\u0026cid=60252338.1753457620\u0026ecid=1736693786\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026ec_mode=a\u0026_s=2\u0026sid=1753457620\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-76257.world%2Ffr%2Fblock\u0026dt=1xBet\u0026_tu=Kg\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026ep.optimize_id=GTM-5R4MT54\u0026tfd=13193","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:40.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"A2:8A:24:AD:51:7D:A4:62:BB:34:6F:C9:21:A1:B9:E1:2D:A6:0E:C1","sha256":"9F:B9:94:8F:84:D3:44:71:A7:81:72:C8:80:4D:14:02:E3:E0:30:0C:F1:17:27:83:00:82:D9:C3:68:D3:B3:AF"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je57n0v897130004za200zb9180563600zd9180563600\u0026_p=1753457619523\u0026em=tv.1~em.HQSpD-oY2vsjeKpaadUPcibtNS-8MBsvMFAPbee-TAg\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211~104948813~105134979~105134981\u0026cid=60252338.1753457620\u0026ecid=1736693786\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026ec_mode=a\u0026_s=2\u0026sid=1753457620\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-76257.world%2Ffr%2Fblock\u0026dt=1xBet\u0026_tu=Kg\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026ep.optimize_id=GTM-5R4MT54\u0026tfd=13193 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://1xlite-76257.world\r\ndate: Fri, 25 Jul 2025 15:33:40 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:158:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:158:0\r\nreport-to: {\"group\":\"ascnsrsggc:158:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:158:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":61,"dns":0,"connect":20,"send":0,"wait":32,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-76257.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:56 GMT","end":"Sun, 14 Sep 2025 11:35:55 GMT"},"fingerprint":{"sha1":"31:43:B4:0C:D2:98:AC:D8:9F:DE:06:86:21:47:6E:95:8F:00:F9:E1","sha256":"1B:73:D9:EE:BD:C6:BB:28:5A:F5:F7:31:B4:05:54:84:74:83:B3:58:8F:D0:0F:1C:61:56:FE:BC:C3:63:34:D7"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json HTTP/1.1\r\nHost: 1xlite-76257.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/fr/block\r\nContent-Type: application/json\r\nX-Lang: fr\r\nX-Uuid: 93324424-2bca-463b-8ddb-0019ceb4ea2a\r\nContent-Length: 19\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=fr; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder; postback_watcher=; auid=W7rOSWiDo8cKf5blAx7NAg==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nx-dt: 285\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.017, wf-uht;dur=0.012\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-04-04T06:42:11.017853Z","times_seen":225951,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-25","alert":"Sinkholed","trigger":"1xlite-76257.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/checker/redirect/stat/run/","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-76257.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:56 GMT","end":"Sun, 14 Sep 2025 11:35:55 GMT"},"fingerprint":{"sha1":"31:43:B4:0C:D2:98:AC:D8:9F:DE:06:86:21:47:6E:95:8F:00:F9:E1","sha256":"1B:73:D9:EE:BD:C6:BB:28:5A:F5:F7:31:B4:05:54:84:74:83:B3:58:8F:D0:0F:1C:61:56:FE:BC:C3:63:34:D7"}}},"request":{"raw":"GET /checker/redirect/stat/run/ HTTP/1.1\r\nHost: 1xlite-76257.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/fr/block\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nx-app-n: v3-nuxt2\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=fr; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder; postback_watcher=; auid=W7rOSWiDo8cKf5blAx7NAg==; window_width=1280; che_g=a90cb739-5ecd-5111-29c5-c4164698ddc5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nx-time-ng: 0.001\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: wf-uht;dur=0.013\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":76,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"27c2416c1b923fecbcfc18d2fe0b93c8","sha1":"c2bf774eb23aea67e9f24cb3c4aef31dc2575276","sha256":"235990e7fa35e87bda0de418d7f4f59e238d6bcc4663db671e512f67f0e1a74b","sha512":"0dc09e9eef985ee0bd7efe165202aa03c9d8a70cedad1dcbcfbdec32a3711429cd462b34fe239fa8e168db64adc310c715659aed143df8a5d04bb950cbdbb09d","ssdeep":"","tlshash":"65a0026e4529289f97ff281b98072d14c6bd6361c3c7d4d4ce17271927e73b005169ad","first_seen":"2025-06-04T08:40:55.36282Z","last_seen":"2025-08-01T00:54:00.468785Z","times_seen":599,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-25","alert":"Sinkholed","trigger":"1xlite-76257.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"radar.cedexis.com/1/23802/radar.js","fqdn":"radar.cedexis.com","domain":"cedexis.com","tld":"com"},"ip":{"addr":"45.54.49.5","port":443,"asn":63911,"as":"NetActuate, Inc","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:39.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"radar.cedexis.com","organization":"Citrix Systems, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A2:3E:30:19:D5:41:3A:11:81:58:E3:B1:6F:F4:D2:78:0B:44:6F:D0","sha256":"BE:70:39:96:BA:51:8F:A7:6A:9D:E1:58:FB:D9:F7:6F:17:5C:DA:A9:6E:54:3F:8F:0B:3D:1E:DF:8C:44:B4:71"}}},"request":{"raw":"GET /1/23802/radar.js HTTP/1.1\r\nHost: radar.cedexis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 25 Jul 2025 15:33:40 GMT\r\nContent-Type: text/html\r\nContent-Length: 138\r\nConnection: keep-alive\r\nLocation: /1707728419/stub.js\r\nExpires: Fri, 25 Jul 2025 15:43:40 GMT\r\nCache-Control: max-age=600\r\nVary: User-Agent,DNT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":null,"data":{"size":390,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":47,"dns":0,"connect":20,"send":0,"wait":110,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/hd-api/external/assets/hdf.js","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:37.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-76257.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:56 GMT","end":"Sun, 14 Sep 2025 11:35:55 GMT"},"fingerprint":{"sha1":"31:43:B4:0C:D2:98:AC:D8:9F:DE:06:86:21:47:6E:95:8F:00:F9:E1","sha256":"1B:73:D9:EE:BD:C6:BB:28:5A:F5:F7:31:B4:05:54:84:74:83:B3:58:8F:D0:0F:1C:61:56:FE:BC:C3:63:34:D7"}}},"request":{"raw":"GET /hd-api/external/assets/hdf.js HTTP/1.1\r\nHost: 1xlite-76257.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/fr/block\r\nCookie: platform_type=desktop; lng=fr; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder; auid=W7rOSWiDo8cKf5blAx7NAg==; window_width=1280; che_g=a90cb739-5ecd-5111-29c5-c4164698ddc5; SESSION=6b4281bcf5518db79aaa3867a54ddd64\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:37 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 1687\r\ncache-control: public, max-age=300\r\ncontent-encoding: gzip\r\netag: 0009b06af6892358f6c573335f102046\r\nvary: Accept-Encoding\r\nx-dt: 455\r\nx-request-guid: ee770fe93d2a16874f23baea7238aabd\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.075, wf-uht;dur=\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4203,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"C++ source, ASCII text, with very long lines (874)","md5":"0009b06af6892358f6c573335f102046","sha1":"cb899ce5fb6756d389a12e5049f2180dec2366ed","sha256":"540a50ce4665aa5a15e6afcdf7a260860e1896e77955c7ed128d1e6489bedac3","sha512":"83e9ce72ca4725bf501fe711538455aaa2fb278095d4d3938615b1907416446b8a8ed1f4f34fb296ea4c9a6d6b6e0fecbe31afa240305e7d23baa4145b2cd1c8","ssdeep":"48:Pen1yuqKi6649JoXznZwhU6fINwld0mPr6eC5/F6ALWBl/NR3vMNNeEcxHb8JiTP:Y1yuqKioolwHgObfENerHbkiTgRx05","tlshash":"d581323660ee2d3153639052d53fe5e9f229a8073968ec4831fc588a0f40f6189b2e3b","first_seen":"2025-07-24T09:34:40.995531Z","last_seen":"2025-10-16T23:35:31.258248Z","times_seen":2029,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-25","alert":"Sinkholed","trigger":"1xlite-76257.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/e93355a6/desktop/default/runtime-11c4d1c1.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:28.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/e93355a6/desktop/default/runtime-11c4d1c1.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:28 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-d1dd3f545c0ec71243f4ecae64999531-1c3b8854092d50dc-01\r\nlast-modified: Fri, 25 Jul 2025 08:59:42 GMT\r\netag: W/\"aab37b70014be5880b69434bf74ebd48\"\r\nx-amz-meta-mtime: 1753433980.436970614\r\ncontent-encoding: gzip\r\nexpires: Sat, 26 Jul 2025 09:31:26 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 21709\r\ncache: HIT\r\nx-cached-since: 2025-07-25T09:31:39+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18456,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (18456), with no line terminators","md5":"aab37b70014be5880b69434bf74ebd48","sha1":"2b0cbf6a6fda847d2562708e37799558bd5c54e5","sha256":"5631b579769d470abfd20bc919a9dd6da4968c0ee4cb1dda43e4c25661e5bc28","sha512":"04eeb1602554eef2612310890de1734ab026dc07c5ae3ab1be6c1e0887a6f394b7fc2d9ae603a0f229c92a22b264457b5ded63d367c87aba3d79d0dc420700ff","ssdeep":"384:Js51G0BCItnkMEL4u4B50BCItnk0/HfKk6M8/7JpW1:eqZItkMEL4u4B5ZItky6//7ni","tlshash":"bf821e5daf1acc672923dcc338213d21595820339c5647ece6fae2295018e6c75afe6f","first_seen":"2025-07-25T10:25:32.126481Z","last_seen":"2025-07-29T04:15:45.292433Z","times_seen":35,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/8192228305b202797f207eeb6842287c.png","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/8192228305b202797f207eeb6842287c.png HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: image/png\r\ncontent-length: 5202\r\ntraceparent: 00-4cbb8a594f53f1a490aa6c057faafb2d-95527ea56fe9c4b0-01\r\nlast-modified: Wed, 26 Jun 2024 08:22:59 GMT\r\netag: \"b9a636eef54b2844b571fe7de49184a7\"\r\nexpires: Fri, 25 Jul 2025 04:40:01 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2056\r\ncache: HIT\r\nx-cached-since: 2025-07-25T14:59:13+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5202,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 514 x 514, 8-bit colormap, non-interlaced","md5":"b9a636eef54b2844b571fe7de49184a7","sha1":"bf653690790ced40eb3189da075a275d951d1607","sha256":"001bfcdd52b658d46543a1aec889d35b73b3909b47097cc011b95e96fc9e3743","sha512":"7b288a27a69c91697042ebb6f80f48cf25e0c6260620ee8f4b0e7afa75430b95c394c3f284445e0628b347341b89480e2e7098510bc07f4db43ecc46d893c38f","ssdeep":"96:561aQaPXOi0Ui/+kgrJtv72TgGuDG9JAsXgQrjQ:470T0PEnv7Sgc9vPQ","tlshash":"56b19e22d46fe4a53230c81b67c1820a1df839c6e72c29d0e8ed4db5e2c8b7f84883c4","first_seen":"2023-11-17T17:46:27Z","last_seen":"2026-01-13T06:38:33.673472Z","times_seen":5260,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/29a3670504d216c11e0a869168b66a09.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:30.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/29a3670504d216c11e0a869168b66a09.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:30 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-76add9d4baa7338a1b435dd9334ddb1f-4d596836f867d93a-01\r\nlast-modified: Mon, 21 Jul 2025 00:50:45 GMT\r\netag: W/\"b5a6dbdf3f12e11d0c5275b2ca6dc739\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 21 Jul 2025 02:06:52 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 852\r\ncache: HIT\r\nx-cached-since: 2025-07-25T15:19:18+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3091,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b5a6dbdf3f12e11d0c5275b2ca6dc739","sha1":"a8495df42a8f1e18c12dc1723660d062bbc8fb6b","sha256":"8febfd79d9b9b1298af34575340a4288d6d5b01ee4e50c57f5a5509d602412f2","sha512":"813327003eefeef8e9772adc05530b46f52fc044d76f5ed1393854052836ae2f89a0118697367681afbab9084b4e215c3120bf09ea2713553a7e8286ca9afe2d","ssdeep":"","tlshash":"85514b4df6e41c33012f19bdc0f76a6993d84f4f694a7c283a9d6c4d1bd451900aad3e","first_seen":"2025-07-21T03:11:29.13175Z","last_seen":"2026-01-11T03:06:49.449217Z","times_seen":2816,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_coupon/fr/dictionary_d84143587bd566e40af45f62860c7716.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_coupon/fr/dictionary_d84143587bd566e40af45f62860c7716.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-605da6918718c46355ac9f4404468c04-64efa3e92c86482e-01\r\nlast-modified: Tue, 22 Jul 2025 20:06:52 GMT\r\netag: W/\"4f8f0b73b02cab6f5ac3c379c760c27c\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Tue, 22 Jul 2025 21:32:04 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1544\r\ncache: HIT\r\nx-cached-since: 2025-07-25T15:07:45+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31564,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (30537), with no line terminators","md5":"5dee10a861ac663ede671677fb70ec60","sha1":"8232f8de00c8e975db12052cf3dd8cab4b9acd5e","sha256":"02938457d70feb7eabacff9e592f8cd8795ebce719a8bf9d63d18e71c06e1a8e","sha512":"ba885e4a1f22137c080aa1cbdaecd06220d40f58f4a8621b28c21469dbfb5650b266b7ef70d072a214e9a110afa3bdd6770cb3dd824dfb886672d06e7940e235","ssdeep":"768:bYoiiBTiuk4QoLtMONIqmQKVuxFaFU7Kooz+eNO9PLo0v:bYJ8MONIkKdFAozUToQ","tlshash":"d5e2763e64c7e8dab9c606c0bf267e6740b8016ae3dade03c5c65a1902f78de9146497","first_seen":"2025-07-25T13:18:56.375277Z","last_seen":"2025-07-31T04:16:11.774904Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/5249ef47e8.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/5249ef47e8.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-f31a7d8dca97e62314643df0d2d53402-b75fe9c90e3a8753-01\r\nlast-modified: Wed, 23 Jul 2025 11:55:36 GMT\r\netag: W/\"44a67b6af7765c97be0db75fa4ba145b\"\r\nx-amz-meta-mtime: 1753271379.325389024\r\ncontent-encoding: gzip\r\nexpires: Thu, 24 Jul 2025 11:59:11 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 12595\r\ncache: HIT\r\nx-cached-since: 2025-07-25T12:03:34+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1725,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1388)","md5":"44a67b6af7765c97be0db75fa4ba145b","sha1":"c2cb07c787c1f0ae851eebfad425e18452cd81e6","sha256":"aa2e425aecaa81c9c31056d493c25e3aa481041805b03c90f628a782b3dfbc5b","sha512":"6aa0f35136559722068857da26a8162f715300b9f886a0cb444749a570c2fc23a81a894af7cab12815d2bfc6760f5d251cff046e01a269561cd9be922a3dc546","ssdeep":"","tlshash":"be31b6fe57f5aeb0f11e8e9d7e0a71b093a80e4623ee50f5d14a8a65032d493d2528c2","first_seen":"2025-07-23T16:09:37.529605Z","last_seen":"2025-07-29T04:15:45.284521Z","times_seen":47,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/fc03516ae4c718991727836d377493ff.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:30.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/fc03516ae4c718991727836d377493ff.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:30 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-c46b5cd6dc5b6cc68e73a34469440fb7-a41e9c0ff5d6887b-01\r\nlast-modified: Wed, 12 Mar 2025 09:35:22 GMT\r\netag: W/\"2b474bcc2f009b70e64e2b5a95dd50a4\"\r\ncontent-encoding: gzip\r\nexpires: Wed, 12 Mar 2025 11:03:31 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 304\r\ncache: HIT\r\nx-cached-since: 2025-07-25T15:28:26+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13278,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2b474bcc2f009b70e64e2b5a95dd50a4","sha1":"1fd5ee2d54da7dfbf61e67efd938a89c548fc866","sha256":"f86d880575f3f65ddaaf9e8a0e3746bbbefcefe7e6c0c4441e9e20ceffdca237","sha512":"44e69e9c7b95c1c4d34d20ba2d409c4ec197c7cba57f9ba277bf17c4ae062e325198bb4bd18705fc4b1748b771f0f09664dee44f028fd122090d54db43b5871e","ssdeep":"96:xzuCaZt3rgNz6Ag/q/1mymUnfMVsCHJSwDw9TkTCKx5JJu5:xzDztLmymUnwHcw2Kx5JJm","tlshash":"0d52eb85fbe02d33103f50ad85b2b60da3881f576c4b7815bead2b8d2b94619046ed7e","first_seen":"2025-03-13T18:19:01.423219Z","last_seen":"2025-07-30T04:19:29.491306Z","times_seen":1803,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/version.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:28.183Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /version.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:28 GMT\r\ncontent-type: application/json\r\ncontent-length: 11\r\ntraceparent: 00-24448ca3b2a72063652bd8119b2292af-43cb64324a48ffe2-01\r\nlast-modified: Fri, 25 Jul 2025 09:00:08 GMT\r\netag: \"1895d6c994acdacaf509968d20335e8f\"\r\nx-amz-meta-mtime: 1753434008.717253734\r\nexpires: Fri, 25 Jul 2025 09:03:08 GMT\r\ncache-control: max-age=60\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 25\r\ncache: HIT\r\nx-cached-since: 2025-07-25T15:33:03+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text","md5":"1895d6c994acdacaf509968d20335e8f","sha1":"0ce205148587481a6674a958bb793ed6ba78f61e","sha256":"a9dfe5d321351271644783a5f1c9cfbe3d5767af60ede9d968a9fad0740f8d8c","sha512":"c7e73aa36baa246b3b382e2c8ad4e4babb3ae8d7d463226c2bbfd44187b9e67d071d1e97e75b62379f02751b4fd9f7cc6e3c902b0351f91a40b7e28ec7ab078c","ssdeep":"","tlshash":"835000000c303000f0000000c00003030000c033000000000c03f00c000000300000cc","first_seen":"2025-07-25T09:06:37.262503Z","last_seen":"2025-07-29T04:15:45.279067Z","times_seen":52,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":77,"dns":11,"connect":1,"send":0,"wait":2,"receive":0,"ssl":56},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/e93355a6/desktop/default/vendors/plugins.v-tooltip-3a2e3e44.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/e93355a6/desktop/default/vendors/plugins.v-tooltip-3a2e3e44.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-e8a1cb453965ee200498e22174493fa0-8d8a21d8c489045a-01\r\nlast-modified: Fri, 25 Jul 2025 08:59:42 GMT\r\netag: W/\"057b3060ea854dd1c4cbf525a0cc30aa\"\r\nx-amz-meta-mtime: 1753433980.444970694\r\ncontent-encoding: gzip\r\nexpires: Sat, 26 Jul 2025 09:31:28 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.003\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 21705\r\ncache: HIT\r\nx-cached-since: 2025-07-25T09:31:44+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":76822,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65476)","md5":"057b3060ea854dd1c4cbf525a0cc30aa","sha1":"5427e7202b2f61a96dc9ecbec59bb5ed248b54a3","sha256":"1412b162c5155637f034c7bd1e761efd04eb923ed5e3bc81e8e249f456e3e7ed","sha512":"31dedbe2b123b317cf8fb9c7ecfa85ad3cecde57f1792ec198fe275a3017b8549d47005f365ce4cc4840a295da9dcd96913ac5e3280278b5295fb042d422775c","ssdeep":"768:HNVP6aMVmTYKotqNGDzAWMZI+7tSCUC8Lk7t8R6zk+BaNfSby/Qw/HJg57bh0PGN:HNkaMATroYNmATPRSCv1MH9WdRfm5EZ","tlshash":"1f73b88e72d0f4b203e7b1b5403f620fb2776558b40ad014b6b1e6d4ac3da59a267e3d","first_seen":"2025-07-24T22:41:32.575152Z","last_seen":"2025-07-29T04:15:45.310059Z","times_seen":38,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/$_$.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/$_$.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 69\r\ntraceparent: 00-7415d7df2c4a7d470005aad06ec96985-fe964a077840dbbc-01\r\nlast-modified: Wed, 23 Jul 2025 11:55:36 GMT\r\netag: \"2cdaa92927f02e0b628f1ef4d7dd8caf\"\r\nx-amz-meta-mtime: 1753271379.318388431\r\nexpires: Thu, 24 Jul 2025 19:54:46 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 70715\r\ncache: HIT\r\nx-cached-since: 2025-07-24T19:54:54+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":69,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"2cdaa92927f02e0b628f1ef4d7dd8caf","sha1":"9104a2e16ed080b80a42588b8aeb52ebec47ab7a","sha256":"ef8101ffea52addcdcfcc3a83f96ff2d4613fb3ae6d1c16bbe4852387b73a9db","sha512":"31da80bc1b17aa708fef74b0211af91fce1b4a5f518f11e5caa80f50e9a7791b6e94924e381f550fc44a02f4c1d785e5b95fa2464e7968b5cab079612d70d839","ssdeep":"","tlshash":"1ba002935a5ef66c209044860696e74733823d6a3477b1d625bc5509e6061474817257","first_seen":"2025-05-14T05:06:37.199299Z","last_seen":"2026-03-18T19:40:26.76398Z","times_seen":5502,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_libphonenumber_js_Q6RMKWT6.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_libphonenumber_js_Q6RMKWT6.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-2c171a257b0154b618fb737478c99449-383fa8b3e57f37f8-01\r\nlast-modified: Thu, 24 Jul 2025 14:07:04 GMT\r\netag: W/\"1da464d70e78b04b9b808e82e4ad9487\"\r\nx-amz-meta-mtime: 1753365757.618102513\r\ncontent-encoding: gzip\r\nexpires: Sat, 26 Jul 2025 08:24:06 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 25763\r\ncache: HIT\r\nx-cached-since: 2025-07-25T08:24:06+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":158815,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65509)","md5":"1da464d70e78b04b9b808e82e4ad9487","sha1":"0c79e65516d1525ecb43d13cfb4ccb0631095a28","sha256":"b4c72b8036ca6767ab61490178f901538646f2aa1001cb042caa134174a41595","sha512":"517231e24fe48dcf9e907f32f759a9d8cc0471202dd5a22dd27efffeeb989e0f12b0db848280f03739b2e267ce95feb128ee8e9305cdd4e299c3fd19695ffdb8","ssdeep":"3072:sOU03o4Pwjp9BumfaVpfMHgWH71RgZXo9k:sXpzumWpf2gWH71RgZok","tlshash":"5af3b9f73640ab6775b23b188e4ad28f6f9c9c51cc88908caae7d4db5d61c22707db14","first_seen":"2025-05-14T05:06:37.168433Z","last_seen":"2025-08-22T06:38:14.163241Z","times_seen":1811,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_chunk_7HDOEZTP.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_chunk_7HDOEZTP.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-df6e44226f7ee8952c6c56650ee455c3-7585567c65b73a5c-01\r\nlast-modified: Thu, 24 Jul 2025 14:07:04 GMT\r\netag: W/\"7e76c08e7f16815131a5f13a10c1efba\"\r\nx-amz-meta-mtime: 1753365757.618102513\r\ncontent-encoding: gzip\r\nexpires: Sat, 26 Jul 2025 08:23:46 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 25783\r\ncache: HIT\r\nx-cached-since: 2025-07-25T08:23:46+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1194,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1193)","md5":"7e76c08e7f16815131a5f13a10c1efba","sha1":"5f800877b78a0713157fe119bc1a2d9a260f72e1","sha256":"c6f29a0c7c3ed884ccffd7a529fd2fc599e2da1f31af658146f0e36a3f4c00dc","sha512":"564dd139cad65e99fb210caf791d0582fa6312fb19e5c8395296361bd1904c2019d246132d42545f47f43a589bf3900e0468ed262251056c22d8172c55017e7b","ssdeep":"","tlshash":"b421f1e55fb87ba3627e26e4a02e0041e001d53752b4f1d4e294dfb464e945c035b4b6","first_seen":"2025-05-14T05:06:37.154171Z","last_seen":"2025-08-22T06:38:14.169571Z","times_seen":1811,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:39.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"A2:8A:24:AD:51:7D:A4:62:BB:34:6F:C9:21:A1:B9:E1:2D:A6:0E:C1","sha256":"9F:B9:94:8F:84:D3:44:71:A7:81:72:C8:80:4D:14:02:E3:E0:30:0C:F1:17:27:83:00:82:D9:C3:68:D3:B3:AF"}}},"request":{"raw":"GET /gtag/js?id=G-7JGWL9SV66 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 25 Jul 2025 15:33:39 GMT\r\nexpires: Fri, 25 Jul 2025 15:33:39 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1099:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1099:0\r\nreport-to: {\"group\":\"ascgcycc:1099:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1099:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 153093\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":479272,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12571)","md5":"72dc378f575de9628980d93ea5a9a935","sha1":"17d144dcc6ec11d5613c35673fb7c0a5bc3267a8","sha256":"e13252625d9920b6889388560694721220ccb63ebbf02e31f6b46b2ce89ffdf1","sha512":"09e0b61e59728ead398831ff0fd272e20c45c0d467d7c1b9452ce501ccc6eed627bfb4b36913ab6dd81287530155bdb17739220b39bc822fa8bd06381ecbef4a","ssdeep":"3072:xV4wxwwmzivHnCZfZepoxWvO0C4007TvqoZwv08hy0ZGUW41AbIIiNUL2ZsOVfxY:mOaxWHPavTrJNUJAxgQJEQcBjokPP8K/","tlshash":"61a4f8de73c674225296f468503f02cba97b28a2b49cc8aab1c9ccf02d7455a5177f7c","first_seen":"2025-07-25T15:33:58.58785Z","last_seen":"2025-07-25T15:33:58.58785Z","times_seen":1,"resource_available":true,"data":null}},"time_used":449,"timings":{"blocked":184,"dns":1,"connect":8,"send":0,"wait":44,"receive":29,"ssl":180},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/54ccc7a663.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:30.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/54ccc7a663.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:30 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 855\r\ntraceparent: 00-dd2136c5de87412c8381d8842869be61-917bded6fd9e94c4-01\r\nlast-modified: Wed, 23 Jul 2025 11:55:36 GMT\r\netag: \"fd765535982d5d62aeab6b19a085d666\"\r\nx-amz-meta-mtime: 1753271379.325389024\r\nexpires: Thu, 24 Jul 2025 11:59:12 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 12595\r\ncache: HIT\r\nx-cached-since: 2025-07-25T12:03:35+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":855,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (854)","md5":"fd765535982d5d62aeab6b19a085d666","sha1":"558798f318e190ecafeba8bc5658075e1932409a","sha256":"72a6ad183e17d894754b72f7aa54ba4e74e89e4cebee7f9f74c3e19a0bae35b1","sha512":"2ca32dfb87f34724668011a558eca81a80897c2095fa33a86c93ba3290021bcf3fe2bdaf65b88973115d4896174528523571960a8c90c1b67f9450d44b0d069f","ssdeep":"","tlshash":"fc11c2dcaff53024650d8fc9f11425f30728365d2ec9e4ec456e3b748292761f58b966","first_seen":"2025-07-23T16:09:37.522729Z","last_seen":"2025-07-29T04:15:45.316856Z","times_seen":47,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/e93355a6/desktop/default/Page.Block-32cba7ed.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:28.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/e93355a6/desktop/default/Page.Block-32cba7ed.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:28 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 476\r\ntraceparent: 00-1b244b5aca9898de6b6c2037e2e760f7-4acf6b0d8cf2aca2-01\r\nlast-modified: Fri, 25 Jul 2025 08:59:41 GMT\r\netag: \"daac658846a34a4337c8b762f4eeaff2\"\r\nx-amz-meta-mtime: 1753433980.420970454\r\nexpires: Sat, 26 Jul 2025 09:31:39 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 21709\r\ncache: HIT\r\nx-cached-since: 2025-07-25T09:31:39+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":476,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (476), with no line terminators","md5":"daac658846a34a4337c8b762f4eeaff2","sha1":"3803a676d5f2bdc5ef2d1ae2bf13454a50787ddd","sha256":"831f6e4f5fe3a9719f9a590dc4828660e12cd0e297bb7d8aeadc9f605c66b362","sha512":"fba94cd0095ac860e3e8f95576d09c55f798875128905ed21e796110e9c136ad5df646bd203dc2c17e3bd8a87ecc4e5c02f0779dc81fcab659f5a3ddda666885","ssdeep":"","tlshash":"b8f09e9b6562bc8d95e6109343b681f7b88c797a0649596006a1c8a532f7c56481125f","first_seen":"2025-07-24T22:41:32.593123Z","last_seen":"2025-07-29T04:15:45.309536Z","times_seen":38,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_auth/fr/dictionary_bb704176f7ee638747aee6a5b863a302.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_auth/fr/dictionary_bb704176f7ee638747aee6a5b863a302.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-29041d8a8a790c79b6cdea746ca64799-9d52c22004b589c1-01\r\nlast-modified: Fri, 18 Jul 2025 12:07:39 GMT\r\netag: W/\"5a3a3ac3e0999e9ca9a6a3c053c39832\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Fri, 18 Jul 2025 13:34:13 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2794\r\ncache: HIT\r\nx-cached-since: 2025-07-25T14:46:55+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10895,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b4c57f06ef7b12d2fae6292bbb04c16d","sha1":"e6a5eeedc8f579c13b7eabd5089c0df66ace8d28","sha256":"9aa58d839301cc664bec0e63da8f4b773318c69908440969d7b76a230b0f15dd","sha512":"eafb85e36fde92b32eda06af28cc0e4e86329f30e062d8ac33c2a63890192af176112ae6c0a2d90e091c096775d6de0e555cd839bf3379c8bbde3785c632f306","ssdeep":"192:YEGocZH6nX22Aoi+PcsUxwfZZU7tb4Mfoo2xzLVxgD6KPPCiJ8sNtF3SQ+fM4rKK:YjoIHKX22AoPcsUxsURb4Mfoo0zLPgDm","tlshash":"ae22641944f40c8acfc7c692be525b8dd2b40e68e57a8e948de5c23b4292790d69f3d8","first_seen":"2025-07-21T12:33:40.426789Z","last_seen":"2025-08-21T00:34:16.704995Z","times_seen":8,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/bfa3e9fd30e7d63c0906602f42c13468.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/bfa3e9fd30e7d63c0906602f42c13468.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: application/json\r\ncontent-length: 182\r\ntraceparent: 00-9b5fd40504542337434335df6fdd4413-3379f3596e7ceb2c-01\r\nlast-modified: Thu, 27 Feb 2025 08:55:26 GMT\r\netag: \"0a64a07e9a34e8a5b5e97e80a10888c5\"\r\nexpires: Mon, 21 Jul 2025 22:50:21 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 867\r\ncache: HIT\r\nx-cached-since: 2025-07-25T15:19:02+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":182,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0a64a07e9a34e8a5b5e97e80a10888c5","sha1":"82545cbc39b7dcc031dd10dea841a0b3698243d6","sha256":"7201497e7e8cdf9d35bf6998e43dcde5feea535f9828ce3ee98785781016126c","sha512":"fd619b94af18c7082a4f18556f1443081c8dc650b263c49c56f2514184d4f62e253ad87a220baa9396d7a06bc9ec3cc8ec75eee829a6c1016c4a3af2c1afa5ae","ssdeep":"","tlshash":"f0c02220e5f88823012b68bc80eaa55417504b2339021c20374c0a884b6162400149b8","first_seen":"2025-02-27T19:55:38.982186Z","last_seen":"2026-03-31T06:06:31.551304Z","times_seen":4136,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_c29ed659a5.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_c29ed659a5.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-1a5a458e21ada3ddbbf4882ee910fead-0ef5aafbe8801c1b-01\r\nlast-modified: Fri, 25 Jul 2025 09:59:44 GMT\r\netag: W/\"b95f2867a4f69c6f87508d4376778ab8\"\r\nx-amz-meta-mtime: 1753437442.498731865\r\ncontent-encoding: gzip\r\nexpires: Sat, 26 Jul 2025 13:06:25 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 8737\r\ncache: HIT\r\nx-cached-since: 2025-07-25T13:07:52+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16157,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (16156)","md5":"b95f2867a4f69c6f87508d4376778ab8","sha1":"34b733244053bb0634826b593e14e88782e81680","sha256":"f318dcd075506078ef1811c0a12962c5fed8811ee39cc3c77691a81063e05340","sha512":"dd8d736d26cad47776c4e4706beed168dedd02d25dfa0570a7f4874fcb260ff78951ac7cb94d91d225837db6a33eebf5b236932fe7b2e2014a1c9f9d309b0c61","ssdeep":"384:6tP2qT4YEUXGPYsH3M95B59IBMNUiLPqnIJdlh3uY3V47Czazgjdk:SP2qT4pUX/sH3M95B5qB6UEPME1uY3nk","tlshash":"9972a7a6726c3a2683d648f240355603e72b0cb979104499fb7c6edb7c198cd42ffa78","first_seen":"2025-07-01T14:08:29.773148Z","last_seen":"2025-12-23T22:34:35.075094Z","times_seen":1892,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_localforage_FJKG5M2E.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_localforage_FJKG5M2E.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-3a8db92ec3ab7ecc911a2c2577683dd0-be124bc804c31094-01\r\nlast-modified: Thu, 24 Jul 2025 14:07:04 GMT\r\netag: W/\"02cf95f00794b77df34632e34a59c5be\"\r\nx-amz-meta-mtime: 1753365757.618102513\r\ncontent-encoding: gzip\r\nexpires: Sat, 26 Jul 2025 08:23:46 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 25783\r\ncache: HIT\r\nx-cached-since: 2025-07-25T08:23:46+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30277,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (30255)","md5":"02cf95f00794b77df34632e34a59c5be","sha1":"b64889fb6cbe78a141688ea761a627997ef8a8af","sha256":"bf78b7b3dd6ecbdea04c575edfb6022ed1b2e98c7a9cb9f02ab851ca638f1b83","sha512":"6bcdddd806b94dc8964c98ed5c8481f1ac5e74c707fe5d48760bd7d2edc2b8b52e58b3d7910d0ae316b3e196924d32734ccd5ffc33377df8de471e43c99fd6d3","ssdeep":"768:+DKAOpvMewHFuM96WwZACjzz46zSTKsBE1OvFXfX1UXk:+m8uPW43zEIOvdlUU","tlshash":"23d2c68c7799f02683bb3070907f580ef237a912594d90a0e591e5f86dbd75c822bfad","first_seen":"2025-05-14T05:06:37.193247Z","last_seen":"2025-08-22T06:38:14.178861Z","times_seen":1811,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=DC-14030178\u0026cx=c\u0026gtm=45He57n0v9180563600za200\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:40.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"A2:8A:24:AD:51:7D:A4:62:BB:34:6F:C9:21:A1:B9:E1:2D:A6:0E:C1","sha256":"9F:B9:94:8F:84:D3:44:71:A7:81:72:C8:80:4D:14:02:E3:E0:30:0C:F1:17:27:83:00:82:D9:C3:68:D3:B3:AF"}}},"request":{"raw":"GET /gtag/destination?id=DC-14030178\u0026cx=c\u0026gtm=45He57n0v9180563600za200\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 25 Jul 2025 15:33:40 GMT\r\nexpires: Fri, 25 Jul 2025 15:33:40 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 25 Jul 2025 15:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcysghrgc:42:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcysghrgc:42:0\r\nreport-to: {\"group\":\"ascgcysghrgc:42:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcysghrgc:42:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 108322\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":309944,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"4bdb59e4294336d33879cdb4d11ef5f9","sha1":"54c788fad99cfbf13328aecd22b21a6a762ebe71","sha256":"63e71dcae25f61ef43de3b19012885d5023d50b50e20cad36530b5aec723b732","sha512":"bbcaa42a8bfbe72f039654002227a129e0fdbab65612f4261a9e2d6a614a945e699fc93462627efdb9c16bd3605455c5137910ee95389e29794fe46472dfc8e2","ssdeep":"3072:y2onyZfZepox9R0zX037T8qoZwv08hy0ZGUW41AbIIyTu25VfxgQJTAmtcqm7oqM:pOaxAfavTrbTNxgQJEQcB7oT","tlshash":"136408cc73d6b4265392a478503f018bb17b6992f88cc895f186cce42e74aaa4177f7d","first_seen":"2025-07-25T09:06:39.16514Z","last_seen":"2025-07-25T15:33:58.60413Z","times_seen":2,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/main-static/e93355a6/check-ob.js","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:28.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-76257.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:56 GMT","end":"Sun, 14 Sep 2025 11:35:55 GMT"},"fingerprint":{"sha1":"31:43:B4:0C:D2:98:AC:D8:9F:DE:06:86:21:47:6E:95:8F:00:F9:E1","sha256":"1B:73:D9:EE:BD:C6:BB:28:5A:F5:F7:31:B4:05:54:84:74:83:B3:58:8F:D0:0F:1C:61:56:FE:BC:C3:63:34:D7"}}},"request":{"raw":"GET /main-static/e93355a6/check-ob.js HTTP/1.1\r\nHost: 1xlite-76257.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/fr/block\r\nCookie: platform_type=desktop; lng=fr; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder; postback_watcher=; auid=W7rOSWiDo8cKf5blAx7NAg==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:28 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 219\r\nlast-modified: Fri, 25 Jul 2025 09:00:08 GMT\r\netag: \"c065700c9c8c493403359e1f2baa10d9\"\r\nx-amz-meta-mtime: 1753434008.246249019\r\nexpires: Sat, 26 Jul 2025 14:32:19 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: wf-uht;dur=\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":219,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"c065700c9c8c493403359e1f2baa10d9","sha1":"4630fe729e70bdf63fa7ba6c84ec277fd1f51030","sha256":"1e61f0c82ae82ffcf503fcd4b4c8ae27b32c11e19b882d5d13f3c44364c893f4","sha512":"b2e1c73cb94f5e3ceb35c3662bf4d72baf800a9a7c64318b1db07d50e9c885dbd94821ef3b3916d1b8b4fabb8f45cb588834b41c6a8a7f4d2c3e9c3866083ee7","ssdeep":"","tlshash":"96d0a79fb900211406939267d12f8668807724973f008182500597e069b8f4c4b37895","first_seen":"2024-07-17T14:33:52Z","last_seen":"2026-01-22T06:40:31.153166Z","times_seen":6298,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-25","alert":"Sinkholed","trigger":"1xlite-76257.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/6293f1a8ca.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:28.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/6293f1a8ca.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:28 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 650\r\ntraceparent: 00-6aa77646cfee4649f01cf640e0a05d57-4a2d242de2da221c-01\r\nlast-modified: Wed, 23 Jul 2025 11:55:36 GMT\r\netag: \"5d70ac7829c3ae41ce5c0971c798fbcf\"\r\nx-amz-meta-mtime: 1753271379.326389109\r\nexpires: Fri, 25 Jul 2025 11:05:41 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 15890\r\ncache: HIT\r\nx-cached-since: 2025-07-25T11:08:38+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":650,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"5d70ac7829c3ae41ce5c0971c798fbcf","sha1":"9996ce3a09f56d3e37d67fbe7e1efb301ea2f261","sha256":"0e76b1cd191bd618caea37cb7fb6673d12c7cdff7ea47e939758eda5764a140b","sha512":"252de1044fbdbe3aadeb7c6c5ffac0e6103e9afd2435c3e10e9969fa557bf50ebe854140f285fe01ccee973229429c94c3a388d99a278aa4a6bf495b08bcd3c6","ssdeep":"","tlshash":"f6f0a71a367db1981fb7c1553aa046490056f627d34d70d8b857c15e6d8a6032f9816f","first_seen":"2025-05-19T11:36:06.860726Z","last_seen":"2025-07-29T04:15:45.286067Z","times_seen":1291,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":113,"dns":18,"connect":4,"send":0,"wait":3,"receive":0,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/site-admin/colors/5f15e3c7aeec67408f0d3a466b2350bc.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/site-admin/colors/5f15e3c7aeec67408f0d3a466b2350bc.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: text/css\r\ntraceparent: 00-42901beefdd845c7ab11dba7c7a5b4e5-3a8c4a9f4ced369b-01\r\nlast-modified: Wed, 23 Jul 2025 08:05:30 GMT\r\netag: W/\"5f15e3c7aeec67408f0d3a466b2350bc\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Wed, 23 Jul 2025 19:05:01 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2386\r\ncache: HIT\r\nx-cached-since: 2025-07-25T14:53:43+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40085,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (40085), with no line terminators","md5":"5f15e3c7aeec67408f0d3a466b2350bc","sha1":"0834bae16fc717a919b87bd2909430fad996b4a3","sha256":"ea2e11e162fda639104bd372080669cd502bb3b7521d08f51d6ba31f8759d6e3","sha512":"73a91c416df4f6bac60b246d9657ec385b3a023907b3d70f273471a388de0edb838608828b73e157599fa35350e9c28ebd47ce8bc9b575b41487ba5bc8976eaf","ssdeep":"384:+EO1mFsK75xWt5JkyunibMhS4EW7I9peN:+EO1mFsK75xWt5JkyunibMhS4pI9peN","tlshash":"90036a7ded91c1712a591931911c677f3d36e9daae240f8fd02c63e670c1b022be4a7a","first_seen":"2025-07-23T08:27:06.903239Z","last_seen":"2025-07-29T04:15:45.283011Z","times_seen":65,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/d9842b87b9dabdc4cdc248c062355299.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/d9842b87b9dabdc4cdc248c062355299.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-c2494120d432a4a6cd056de941b6cbd7-9cb6d9b3f185c63d-01\r\nlast-modified: Thu, 23 Jan 2025 13:19:10 GMT\r\netag: W/\"0614058b667e6dfa1cdecc6e0e53131c\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 23 Jan 2025 14:50:28 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 303\r\ncache: HIT\r\nx-cached-since: 2025-07-25T15:28:26+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7321,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0614058b667e6dfa1cdecc6e0e53131c","sha1":"4f20f88c436fb5cbd82cf1dcfeaa14e52195a369","sha256":"be16474b0f19b7536ebdd3d0f8867b151eaa4638411ddb46845f887a5d51a653","sha512":"42d1910a360b9b574251bf6bc3a7bb94ddd3892771b9b17fe27838cfb50198827104a677767742e602eae3cc93e0e14903914dce6ff3af1a9cad2d66f43c62a8","ssdeep":"48:TzABBABGkABjABFygABCN/ABCNYN8ABWHABaEABzzEFABIIX4ABBxSHsABYiwAB/:lFbClXCL3cblP+XyLO5GIa","tlshash":"37e11684fff05c33112f94ad98b27a89a3884f07a91a7d1c7f9d294c1f5451a04aadbe","first_seen":"2025-01-27T03:54:57.625203Z","last_seen":"2025-08-01T05:37:23.910867Z","times_seen":1273,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/e93355a6/desktop/default/Betting.Core-b0836407.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/e93355a6/desktop/default/Betting.Core-b0836407.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-9546a1d5520511e8623bb08b77b5aa17-c865d9eca9e2d9ba-01\r\nlast-modified: Fri, 25 Jul 2025 08:59:41 GMT\r\netag: W/\"28cbdd4ebb7497d9f4971c9f23ac9a03\"\r\nx-amz-meta-mtime: 1753433980.420970454\r\ncontent-encoding: gzip\r\nexpires: Sat, 26 Jul 2025 09:31:33 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 21112\r\ncache: HIT\r\nx-cached-since: 2025-07-25T09:41:37+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2009,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2009), with no line terminators","md5":"28cbdd4ebb7497d9f4971c9f23ac9a03","sha1":"005f79b657df0b13dc72f5af8a4969486c8cd568","sha256":"6f1a0533d18204aad9ff8cb37043be5bc08418244c154f1d5939060050ca6074","sha512":"0bc283424de44c90b1282938f894cd1ab08e8c0f5a60ffe5b0aae050f043aab17e5e7d10d426aee1a333c20c601b6257898a1f508f81b8c5050d61ca73478ac0","ssdeep":"","tlshash":"9041b54638d274480b3e05dd40bb58f6f0a56d98385e01fca9c2dae035a9a87c0e7ecb","first_seen":"2025-07-25T10:25:32.297069Z","last_seen":"2025-07-29T04:15:45.284008Z","times_seen":35,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/fr/block","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-25T15:33:27.593Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-76257.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:56 GMT","end":"Sun, 14 Sep 2025 11:35:55 GMT"},"fingerprint":{"sha1":"31:43:B4:0C:D2:98:AC:D8:9F:DE:06:86:21:47:6E:95:8F:00:F9:E1","sha256":"1B:73:D9:EE:BD:C6:BB:28:5A:F5:F7:31:B4:05:54:84:74:83:B3:58:8F:D0:0F:1C:61:56:FE:BC:C3:63:34:D7"}}},"request":{"raw":"GET /fr/block HTTP/1.1\r\nHost: 1xlite-76257.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=fr; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder; postback_watcher=; auid=W7rOSWiDo8cKf5blAx7NAg==\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 203 Non Authoritative\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:27 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 287019\r\naccept-ranges: none\r\nserver-timing: dt_total;dur=0.004, total;dur=194;desc=\"Nuxt Server Time\"\r\nset-cookie: gw-mm=; Path=/; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Secure; SameSite=None; Partitioned\nlng=fr; Path=/\ncookies_agree_type=3; Path=/\ntzo=2; Path=/\nis12h=0; Path=/\r\nx-dt: 285\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"203","status_text":"Non Authoritative","fingerprints":null,"data":{"size":287019,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (54212)","md5":"6e61e80a4c618dd73ca5c90d75d76252","sha1":"7b0f39ebc1663933dd2c7cb1aa5f0318069c2f25","sha256":"888917a87ae642c9a17e0fc387a8d886202e211d8718421efe5cba74638d24c4","sha512":"827d2d3ea69676e27d052b70ec91892475553410a8036acf99440785937b09348c32b610d2529cc3b12392d6107ba158384a24058dfd5575ba92a8b4466a2d05","ssdeep":"6144:QEO1mF375xWt5JkyunibMhnIpeJZDs86s/BzPDSolbj:QEO1mF375xWt5JkyunibMhIpeJ1sns/d","tlshash":"9b54a52ea90c4c3e551f2a7ac54f7e4e1b7caa1b24db2d01ec6d6f6914d368007a247f","first_seen":"2025-07-25T15:33:58.61765Z","last_seen":"2025-07-25T15:33:58.61765Z","times_seen":1,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":287,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-25","alert":"Sinkholed","trigger":"1xlite-76257.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-ui/2.3.273/Desktop/Default/client.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:28.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-ui/2.3.273/Desktop/Default/client.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:28 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-655f567789fa890a73fcebd010057c7f-89a1c34afe3fd5e1-01\r\nlast-modified: Fri, 27 Jun 2025 13:38:05 GMT\r\netag: W/\"a8a44b273c4f19498dfe5dfbe6d66b5f\"\r\nx-amz-meta-mtime: 1751031482.572809748\r\ncontent-encoding: gzip\r\nexpires: Thu, 03 Jul 2025 09:30:19 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 54180\r\ncache: HIT\r\nx-cached-since: 2025-07-25T00:30:28+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":645724,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a8a44b273c4f19498dfe5dfbe6d66b5f","sha1":"6d68353f0344e5f497f983d9843493c5cba4416e","sha256":"3a55dbb30fd14dbf83a9bd142e1a2cdff2008b12994f1e1cea74cd55b2c6792a","sha512":"273e8d7d3b18691b6e08821b482381aeea7042cc9605ef88b5fa92a3621d4cb84d32c5398cf45b18dc99a821634052b907edb6ba2b1f0170c52ecdf65c51c74c","ssdeep":"6144:VeAjJKlbYNYHPKNuive9uW7/vrhoi99ET/qvW7hAnUCF:IDoUKi99ET/qveAnUCF","tlshash":"dbd4932cf59dd1353e3be62153885ffc2a20b6479b221c7af459035b1ec365221a2dbb","first_seen":"2025-07-09T10:12:06.30113Z","last_seen":"2025-08-22T06:38:14.128944Z","times_seen":782,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":80,"dns":19,"connect":1,"send":0,"wait":5,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/60608cbba85ee2e8946c25b55281a0bc.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:30.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/60608cbba85ee2e8946c25b55281a0bc.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:30 GMT\r\ncontent-type: application/json\r\ncontent-length: 328\r\ntraceparent: 00-acd20676ec59e018a453d5adbc15385a-d893b4dfd77d5f04-01\r\nlast-modified: Thu, 27 Feb 2025 10:51:50 GMT\r\netag: \"4347fc050ebe622e30a7bf78a213b5a0\"\r\nexpires: Thu, 27 Feb 2025 12:17:56 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 304\r\ncache: HIT\r\nx-cached-since: 2025-07-25T15:28:26+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":328,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4347fc050ebe622e30a7bf78a213b5a0","sha1":"c05b3b571980b01ff9f07e6adc1c29c58be70bd1","sha256":"ed1b1193a248bf273141c31b7f74dd1224416b3757e5a71f2e7d579c50d65d57","sha512":"06f340eeb16b0716703d2bda345c7ad58fa2e37877a09f36657a20bd06a62ca538672ed91f24ddf1af25a86651e64638519d1fbf09c94ed0323674fe5e0342c8","ssdeep":"","tlshash":"02e02614f6e40c33022f106e80e3a28c93958f13a9086c163b1c758c0f00c19405ac3a","first_seen":"2025-02-27T19:55:39.007967Z","last_seen":"2025-07-30T04:19:29.492638Z","times_seen":1637,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:28.609Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63920\r\ntraceparent: 00-df79f57834d029d78c144fe3f869d80d-7e407b6312437aab-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"a65527fcb58f66a7cfbc0e6b160538b4\"\r\nexpires: Mon, 21 Jul 2025 22:35:56 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1795\r\ncache: HIT\r\nx-cached-since: 2025-07-25T15:03:33+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":63920,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63920, version 1.0","md5":"a65527fcb58f66a7cfbc0e6b160538b4","sha1":"45d260e7fa343401b5bb0df982a014f53e2d253b","sha256":"fb13c3a1cbac60649b76f7d7f85c1645d35ac69b85ce5f4eb0692505ecc2cd45","sha512":"8448e96abe326f43285b2d8b0d75beaf0e9c9e051e8754841d907b30eb303ae24c447011306da6a1703b9192d02aeff76a4517bdf94ec6e7dc360ce3538802af","ssdeep":"1536:UIG3hJMkJeK8ic5iZGnJ4URj9vqXOQ6UqYdbuA5RVK1:UL31hcLlRjDQ6Uq4W1","tlshash":"7f5302df8de32a148ff78772668885f4f4927c68898c8e7345526a8907f07d6b96c04f","first_seen":"2023-05-07T18:04:27Z","last_seen":"2026-04-04T06:13:29.80601Z","times_seen":10141,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_game/fr/dictionary_fe2e944361096a9f4949edda13da9708.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_game/fr/dictionary_fe2e944361096a9f4949edda13da9708.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-e65a5cb483c43aa5264f4981943844f8-0aacc72d58e50771-01\r\nlast-modified: Thu, 17 Jul 2025 18:09:22 GMT\r\netag: W/\"badd6f67a9ee9119fc24243623def7d2\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Thu, 17 Jul 2025 19:34:09 GMT\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1827\r\ncache: HIT\r\nx-cached-since: 2025-07-25T15:03:02+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24538,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d00eb94b788aa9ed7e022bf5406e7d11","sha1":"78f5869167db4f770fedf763bf3ba8032ac6f773","sha256":"5a0a6cab79080c4e5185e46ea9608cadf100edbabd9630adee638f4008e597e9","sha512":"27dfea8e0ccb5f368ca48c4c1d6ec0a99ec706eb381c4ac54457a4ce0b8a431172ec424351e56a922cbf0dc2bc1106cbfb3dcf846b0b470a39e0edb4ecea82d5","ssdeep":"384:GRJxtDbt2gtYQ0Hs3y6FlILNKno7RHGnH2PvufyBciEm:axJt/tYQ0Hs3y6I+o7RHbvJBciv","tlshash":"a0b2fb18389ed9eac6fa46f075ea3bd2b3f4889f56606241fc4c952e2d857d5a00f01f","first_seen":"2025-07-21T12:33:40.458081Z","last_seen":"2025-07-31T04:16:11.659355Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_base-app_cc3ca14dcd.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_base-app_cc3ca14dcd.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-ec20e76f841f9ec4dff1daff5b6eb861-02eab8ecb0374c46-01\r\nlast-modified: Fri, 25 Jul 2025 09:21:44 GMT\r\netag: W/\"c58601710e546b79ab54a2aef54db180\"\r\nx-amz-meta-mtime: 1753435111.200966164\r\ncontent-encoding: gzip\r\nexpires: Sat, 26 Jul 2025 09:40:05 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 21112\r\ncache: HIT\r\nx-cached-since: 2025-07-25T09:41:37+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1425882,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (23471)","md5":"c58601710e546b79ab54a2aef54db180","sha1":"6b832479d957a655f0a2dd650de010fc582cbaa5","sha256":"48803694493b7e1a501e929c38f49dcc0ebf4e1cd59ddbf981310dd54a671f0f","sha512":"bfc829c2d2d667a44ac76d540ca626282f54148a19bd70fa799a6dba5928ecce1f2d299466a39cdb74f4cbb46399ba4955e54c52907a1a9f1c6b3a394317db7c","ssdeep":"12288:vsBaLij/Dws0Dl5A0eBTwodCFaFIU00BlU9elXlmczR7DG16Inzy8d0jaIRg8:Eeij/DwsoTA5xwK0elU91czAnW8d0/V","tlshash":"97657d55b01ab9121dd744eb90370643b19c5a9e8496f8a0f6fadcf837ce804529fbbc","first_seen":"2025-07-23T16:09:37.575649Z","last_seen":"2025-07-30T04:19:29.508322Z","times_seen":67,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/e93355a6/desktop/default/vendors/plugins.vue-js-modal-89ae6f8c.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/e93355a6/desktop/default/vendors/plugins.vue-js-modal-89ae6f8c.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-3a507f2c84e9f3f7e3421cd9763193d6-c92cf3f5bd3b093e-01\r\nlast-modified: Fri, 25 Jul 2025 08:59:42 GMT\r\netag: W/\"10190a398a63d9f56dc63db0d631c991\"\r\nx-amz-meta-mtime: 1753433980.444970694\r\ncontent-encoding: gzip\r\nexpires: Sat, 26 Jul 2025 09:31:30 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 21703\r\ncache: HIT\r\nx-cached-since: 2025-07-25T09:31:46+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26667,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (26667), with no line terminators","md5":"10190a398a63d9f56dc63db0d631c991","sha1":"73fc9c2e996f7e15d0f96440847a51274ab2cb3c","sha256":"5c9c03fb76b581128031ef1f8198888f485a644ebf4ca8516cde1979a06e127f","sha512":"b597e45cd0f32a74cc472d2b7c938d2d0234ee3f026dc3bfc5e46ffc4d6b4a56e8cd0c94bf320062a44e47609e372b24d59698e79d7652d36991b97641a3791d","ssdeep":"384:aBy0a9vOeCGAZIXfK2rVsAdm00uow4HQEjacGXGQVe6ubq8:FHyIXfPt4wE9GXGQcbq8","tlshash":"1cc2298977d8307442db5573627f2b0ab23e295474269888f772e8e65cb864d206ff3c","first_seen":"2025-07-24T22:41:32.600246Z","last_seen":"2025-07-29T04:15:45.27468Z","times_seen":38,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/e93355a6/desktop/default/date-fns-locale-33-b3345199.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/e93355a6/desktop/default/date-fns-locale-33-b3345199.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-12c4dfd95cdd9614147e77dee8925e84-d3ac86ea207e3f5b-01\r\nlast-modified: Fri, 25 Jul 2025 08:59:42 GMT\r\netag: W/\"9c4a3c05096aed8c82119bf813e62edc\"\r\nx-amz-meta-mtime: 1753433980.425970504\r\ncontent-encoding: gzip\r\nexpires: Sat, 26 Jul 2025 12:54:10 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 9559\r\ncache: HIT\r\nx-cached-since: 2025-07-25T12:54:10+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6640,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6587), with no line terminators","md5":"9c4a3c05096aed8c82119bf813e62edc","sha1":"4c92cbbb8e618f24915c6670818f1d37b2141c8d","sha256":"d0b8308f4fa1eb9651710e9bcb7d02415f9916d11be43a7131abd73f1f74026f","sha512":"8386bc16a46a8689ad25e3730cf3f3b546e619b126bc14cb490c589afe73f298c3cf5f345cfc753798f04e530408f4efb32b6819382797aec459d78a6df52201","ssdeep":"96:WeysjQsHKsOiTgYIVRqKr8umwKb2D/8aStJdW0OY8Iza3lvxJiLNb+A6jW0kBneh:W6jnH9OXmq7CJkuWViLoA6jCteh","tlshash":"20d1764538b395e60ae7d1e8b8024549f99f493af4d7b802cbc7dfd09b9b11a0029bb1","first_seen":"2025-07-25T15:33:58.632113Z","last_seen":"2025-07-25T15:33:58.632113Z","times_seen":1,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/593f1a6d4223015f3145bf447897f4f2.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:30.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/593f1a6d4223015f3145bf447897f4f2.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:30 GMT\r\ncontent-type: application/json\r\ncontent-length: 241\r\ntraceparent: 00-90e0da6387072ce95406c98e6c973806-aaded11a303d547f-01\r\nlast-modified: Thu, 27 Feb 2025 13:24:25 GMT\r\netag: \"39257fbb62736206d5245e08925d7b60\"\r\nexpires: Thu, 27 Feb 2025 14:48:35 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 304\r\ncache: HIT\r\nx-cached-since: 2025-07-25T15:28:26+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":241,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"39257fbb62736206d5245e08925d7b60","sha1":"4c11e3cb6a16b884772b88acdba30a2ad98e86b8","sha256":"3a3cf0f5c60899ffb49d9825516aec475fd7b78cea8ae0b5b58dfb4e658f041e","sha512":"e9b44ac92bbad9c54e500f735f553154c92897c80700709b61b39443f76edbd1d3d38d0d6014e6052cc5f5931b78c55194e308c86336f809de1541efa1e0ac8f","ssdeep":"","tlshash":"58d02e40f2e01833201f94f981b5a109e74b0b03e402a808fa0c21881bac8252426c3a","first_seen":"2025-03-01T06:06:39.04916Z","last_seen":"2025-10-28T05:34:45.039411Z","times_seen":3826,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/e93355a6/desktop/default/css/7fe5f71b.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/e93355a6/desktop/default/css/7fe5f71b.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-9b8db4aae7e330c8e4bd832d1dec0624-d0774f421144d999-01\r\nlast-modified: Fri, 25 Jul 2025 08:59:42 GMT\r\netag: W/\"c610b8710368de3bf2f1c5bb581b6a3a\"\r\nx-amz-meta-mtime: 1753433980.439970644\r\ncontent-encoding: gzip\r\nexpires: Sat, 26 Jul 2025 09:31:28 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 21704\r\ncache: HIT\r\nx-cached-since: 2025-07-25T09:31:45+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3313,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3313), with no line terminators","md5":"c610b8710368de3bf2f1c5bb581b6a3a","sha1":"f67bc86785d434adb2e81a356a7926b8818ac567","sha256":"fad7111846310042401990719146401178f22e2618abf2b058e641b6495e8eba","sha512":"2dfecbd28b59bcf4b361736ce304f33792631b766506b80767f23033cbd37c1a83371af59b833032390f647b69824e9eeeb1f99530e18047f74cd30ffda0e5b1","ssdeep":"","tlshash":"0161c13e9cbc24359e7f472b7053ce84e199a39092030f8afdbb755a4c8b21d3895176","first_seen":"2024-05-14T21:30:49Z","last_seen":"2026-01-22T06:40:31.190981Z","times_seen":5786,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/d9c2365ca58e0fb54268fd4914d751b9.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/d9c2365ca58e0fb54268fd4914d751b9.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-fe74a3bb3c1f73e817bb739e53bc44e5-78a1d79cd19d658d-01\r\nlast-modified: Mon, 16 Jun 2025 11:25:45 GMT\r\netag: W/\"1a7ec72aad44f9540cb604d7cde5ff38\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 24 Jul 2025 19:42:04 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2537\r\ncache: HIT\r\nx-cached-since: 2025-07-25T14:51:12+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14466,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1a7ec72aad44f9540cb604d7cde5ff38","sha1":"65e5851d652e0471c213282efb5eeee31ae813db","sha256":"94d4bf6bc00a09b766ea0ba441e860dc40ee6d398be80e89016dd0ee662869d6","sha512":"05c4574c3785992daed7bb3616a938d1d04dc9679132ee8997147a21c32d2dab5537e51060ecce9969c4e2ea5c4ba97299c5f2622a3f6fb097c066e189d37f79","ssdeep":"96:75b7Ba79eu4QWGAdryCiQFpzLJLJeHZVZYpH3UGHSTSSbbGiJinHs:u7kJ2VK3UsyinHs","tlshash":"935246d9bae41c33112b60bdd5f7f91aa3dc1f439d4aa8287eac6d4c1b6050500aed7e","first_seen":"2025-06-17T07:58:23.417687Z","last_seen":"2025-11-14T10:22:49.434452Z","times_seen":2557,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/hd-api/external/apps/c5e31d5915661de4393e3f1489b00ebc4497dd48/api.js","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:37.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-76257.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:56 GMT","end":"Sun, 14 Sep 2025 11:35:55 GMT"},"fingerprint":{"sha1":"31:43:B4:0C:D2:98:AC:D8:9F:DE:06:86:21:47:6E:95:8F:00:F9:E1","sha256":"1B:73:D9:EE:BD:C6:BB:28:5A:F5:F7:31:B4:05:54:84:74:83:B3:58:8F:D0:0F:1C:61:56:FE:BC:C3:63:34:D7"}}},"request":{"raw":"GET /hd-api/external/apps/c5e31d5915661de4393e3f1489b00ebc4497dd48/api.js HTTP/1.1\r\nHost: 1xlite-76257.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/fr/block\r\nCookie: platform_type=desktop; lng=fr; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder; auid=W7rOSWiDo8cKf5blAx7NAg==; window_width=1280; che_g=a90cb739-5ecd-5111-29c5-c4164698ddc5; SESSION=6b4281bcf5518db79aaa3867a54ddd64\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:37 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 615\r\ncache-control: public, max-age=300\r\ncontent-encoding: gzip\r\netag: 32053c9c355cf85427a5cc3f07de0b09\r\nvary: Accept-Encoding\r\nx-dt: 455\r\nx-request-guid: ccf8334e881fde2582b6d02bcb045cfd\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.076, wf-uht;dur=\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1024,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1023)","md5":"32053c9c355cf85427a5cc3f07de0b09","sha1":"f3c13d6a657ffa2ca8997f54f4779f0c02f1600a","sha256":"0ec410318f3ecc3a3aef3de68e99190845248bcc12282aa15eb9acc87f8837d3","sha512":"cbb8c7ef0bbed264989bf5b4af7d216cdeacc5684641c37d429e5ceca7dc04e55254e81f319cd856e7b4f447565bf5abf4e9915f5725eb57cfb142f113362078","ssdeep":"","tlshash":"2211756e18ed58291a9275c402b7ccfc642036363219d4c495ede9e1072ff990032f5c","first_seen":"2025-07-24T09:34:41.13762Z","last_seen":"2026-04-04T05:49:28.54922Z","times_seen":3849,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-25","alert":"Sinkholed","trigger":"1xlite-76257.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16664555628\u0026cx=c\u0026gtm=45He57n0v9180563600za200\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:40.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"A2:8A:24:AD:51:7D:A4:62:BB:34:6F:C9:21:A1:B9:E1:2D:A6:0E:C1","sha256":"9F:B9:94:8F:84:D3:44:71:A7:81:72:C8:80:4D:14:02:E3:E0:30:0C:F1:17:27:83:00:82:D9:C3:68:D3:B3:AF"}}},"request":{"raw":"GET /gtag/destination?id=AW-16664555628\u0026cx=c\u0026gtm=45He57n0v9180563600za200\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 25 Jul 2025 15:33:40 GMT\r\nexpires: Fri, 25 Jul 2025 15:33:40 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 25 Jul 2025 15:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcysghrgc:42:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcysghrgc:42:0\r\nreport-to: {\"group\":\"ascgcysghrgc:42:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcysghrgc:42:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 122225\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":359737,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"f662cbf63a805ce5a26ea67b7c4d9434","sha1":"cfc91a93837b74a0d68f4a5d1cbf0d1623b6dff4","sha256":"c74328320adfbf1a4701b9ce11d943157bf7e2821211bae65958b904c13a8b20","sha512":"58ff34a02745318a4f6cee5cdabc09c9945f80bcb1a06e38caf861767d52a3a5fc7b6574d00590a40bce300aeebfdb5c7e353da304874f17f030b2446a0bcb9a","ssdeep":"3072:wIHdncZfZepoxyR0B40H7TfqoZwv08hy0ZGUW41AbIIiNTs2ZsOVfxgQJTAmtcqc:FSOaxx9avTrJNTaAxgQJEQcB7o0","tlshash":"317418cd73c6742293a3b478503f018ba57b69a2b48cc895f185cce42e74a9a4277f7d","first_seen":"2025-07-25T10:25:32.167509Z","last_seen":"2025-07-25T15:33:58.642575Z","times_seen":2,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_forgot_password/fr/dictionary_65e9a21492fcf30dd069b0d5242f894d.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_forgot_password/fr/dictionary_65e9a21492fcf30dd069b0d5242f894d.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-056f02883b31ec52698fc1d16d74dc4e-ecb1ab31d1904af1-01\r\nlast-modified: Fri, 27 Jun 2025 10:07:00 GMT\r\netag: W/\"2d4e7508bc5572db63283a6de95da634\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Fri, 27 Jun 2025 12:08:15 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2643\r\ncache: HIT\r\nx-cached-since: 2025-07-25T14:49:26+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4744,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2d4e7508bc5572db63283a6de95da634","sha1":"f1b111ddc1ef9fb691b241fe3a414e565acd994e","sha256":"04c762797f8985d9e75ba9d36417bc15223173a1b33bdaf1edacd0d4f75254b8","sha512":"d71a406e06b698cff139af37f47073fc440979e675f3ab72f55fe0414bc955359b1fe013840c62fac6a841f612de42f9ad850daabcfb2b2c9fc7eb926c64e3b7","ssdeep":"96:kTEGIK2iihrXxDkvG7aX8iKMiKci2FjiPvIfMFemdbXK22ipiDKiDi:8QriUmX8GqdXiba22ovN","tlshash":"cda1fd455cd30ce509efcac0b6629d5627f4926efe57e4001a72d30f3337de6a28698a","first_seen":"2025-07-21T12:33:40.44682Z","last_seen":"2025-11-30T15:40:58.961972Z","times_seen":50,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je57n0v897130004za200zb9180563600zd9180563600\u0026_p=1753457619523\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211~104948813~105134979~105134981\u0026cid=60252338.1753457620\u0026ecid=1736693786\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AEAAAAQ\u0026_s=1\u0026sid=1753457620\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-76257.world%2Ffr%2Fblock\u0026dt=1xBet\u0026en=scroll\u0026ep.optimize_id=GTM-5R4MT54\u0026epn.percent_scrolled=90\u0026upn.ref_id=1\u0026tfd=13192","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:40.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"A2:8A:24:AD:51:7D:A4:62:BB:34:6F:C9:21:A1:B9:E1:2D:A6:0E:C1","sha256":"9F:B9:94:8F:84:D3:44:71:A7:81:72:C8:80:4D:14:02:E3:E0:30:0C:F1:17:27:83:00:82:D9:C3:68:D3:B3:AF"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je57n0v897130004za200zb9180563600zd9180563600\u0026_p=1753457619523\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211~104948813~105134979~105134981\u0026cid=60252338.1753457620\u0026ecid=1736693786\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AEAAAAQ\u0026_s=1\u0026sid=1753457620\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-76257.world%2Ffr%2Fblock\u0026dt=1xBet\u0026en=scroll\u0026ep.optimize_id=GTM-5R4MT54\u0026epn.percent_scrolled=90\u0026upn.ref_id=1\u0026tfd=13192 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://1xlite-76257.world\r\ndate: Fri, 25 Jul 2025 15:33:40 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:158:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:158:0\r\nreport-to: {\"group\":\"ascnsrsggc:158:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:158:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":65,"dns":0,"connect":24,"send":0,"wait":31,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_css_9c29d1.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:28.169Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_css_9c29d1.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:28 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-10cfeb1f2f5c8f9c685ba190475c01a8-4ae01555f6daa582-01\r\nlast-modified: Thu, 24 Jul 2025 14:07:15 GMT\r\netag: W/\"e2951151a267e612b3b7e708b81709ec\"\r\nx-amz-meta-mtime: 1753365757.568100872\r\ncontent-encoding: gzip\r\nexpires: Sat, 26 Jul 2025 06:42:54 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 31834\r\ncache: HIT\r\nx-cached-since: 2025-07-25T06:42:54+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4166,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3743)","md5":"e2951151a267e612b3b7e708b81709ec","sha1":"b3a1b9af992a8b4a4009441163bab5c829ff35ba","sha256":"9c29d122f50348d33af9c06097d927c10950fa7d532f768eb84944b6077047f4","sha512":"c0f9c6c28fc25e889016c30351de6defb94246cbc720dcf5cb8fb075c0e51aa94423b96b93bcdfce3f030d47fc5cd22312fe1dcef2546bb2fd66238b4ca7e41b","ssdeep":"48:72e0VsMQbBQhzRVRlHLHYOR8avyVws/cVNkvK5LGsagLGsBTufum50:Z0EbBQ77VHY+DKuj5QxKufum50","tlshash":"8081539ab8b8c176ad27e82301898e7e4275f9dad9161c8ef69f871715c3e5240908bc","first_seen":"2025-07-09T10:12:06.327695Z","last_seen":"2025-07-30T04:19:29.497446Z","times_seen":408,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":87,"dns":16,"connect":4,"send":0,"wait":5,"receive":0,"ssl":65},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-76257.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:56 GMT","end":"Sun, 14 Sep 2025 11:35:55 GMT"},"fingerprint":{"sha1":"31:43:B4:0C:D2:98:AC:D8:9F:DE:06:86:21:47:6E:95:8F:00:F9:E1","sha256":"1B:73:D9:EE:BD:C6:BB:28:5A:F5:F7:31:B4:05:54:84:74:83:B3:58:8F:D0:0F:1C:61:56:FE:BC:C3:63:34:D7"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-76257.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/fr/block\r\nContent-Type: application/json\r\nX-Lang: fr\r\nX-Uuid: 93324424-2bca-463b-8ddb-0019ceb4ea2a\r\nContent-Length: 48\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=fr; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder; postback_watcher=; auid=W7rOSWiDo8cKf5blAx7NAg==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\nx-dt: 285\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.059, wf-uht;dur=0.010\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0abb3b78ad17ef521688fccb8192e10c","sha1":"0275d920d2b15aedd56cf03ea01ded1484940e5e","sha256":"68fc468b887bc04fab77835fef967bd92be1b5ced61172f2f8f4b31c9909ca53","sha512":"c74d41aa907dc2f3876d1a72d451161fe573e5137f8523f316920b3cc4d7c6cbb8052fb107c4eeaf0e6ee0ebedb89105889fac89cc9a93157e3b96f634b64035","ssdeep":"","tlshash":"03700028802a0c008008080083882a28c830b00a2082082230c00a203000ba2800a882","first_seen":"2025-07-25T15:33:58.649603Z","last_seen":"2025-07-25T15:33:58.649603Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-25","alert":"Sinkholed","trigger":"1xlite-76257.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/c22a550650.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:30.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/c22a550650.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:30 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-dffb2413defadd77fd3c6beb42e8b38d-fb61a03409d811e0-01\r\nlast-modified: Wed, 23 Jul 2025 11:55:36 GMT\r\netag: W/\"94f4ab7057137b6be57c534f34e4ca66\"\r\nx-amz-meta-mtime: 1753271379.326389109\r\ncontent-encoding: gzip\r\nexpires: Fri, 25 Jul 2025 21:41:54 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.519\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 64296\r\ncache: HIT\r\nx-cached-since: 2025-07-24T21:41:54+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1166,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1165)","md5":"94f4ab7057137b6be57c534f34e4ca66","sha1":"50643b739b42f01637c7a32edf4a6635023918fc","sha256":"c753767786f9b373622c5fcd999a06dbb3140394fa1d1ddcdeb9caa7f6b29c89","sha512":"034509c88c961dae5bda9610f84bc9745a612fc5ee16eda8f7043f6f0db10d185a304caea36c2bb6e543d28f989b5dbefc2cc9a0fa81a9af78406d8d8777c866","ssdeep":"","tlshash":"a421a7303134e52b0bfe0bdcc8331850f32c2258673565d176cc6fa102ae506629ebb7","first_seen":"2025-07-23T16:09:37.614793Z","last_seen":"2025-07-30T04:19:29.469761Z","times_seen":50,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/e93355a6/desktop/default/DC-959fd200.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/e93355a6/desktop/default/DC-959fd200.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-59c620bd9a4694de76c119d557fad10d-30ae74ec2f5ffbc1-01\r\nlast-modified: Fri, 25 Jul 2025 08:59:41 GMT\r\netag: W/\"a3df5cc9ba0a840cdb2d4798638498df\"\r\nx-amz-meta-mtime: 1753433980.420970454\r\ncontent-encoding: gzip\r\nexpires: Sat, 26 Jul 2025 09:31:33 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 21112\r\ncache: HIT\r\nx-cached-since: 2025-07-25T09:41:37+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2656,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2656), with no line terminators","md5":"a3df5cc9ba0a840cdb2d4798638498df","sha1":"687d23f094a5a3d5da9417f915f13ccb367de488","sha256":"a3f621e953f5a899e2ee85120b4bd6826c01a19350980c174bd0a2dc6dd18e6d","sha512":"80f39423a5f833a26d2fe8fd97e58923709b367827c373ec65c2707cef6e30edf065d794f3488856cb32386f77331f335d7585104f39f366c740d4983cec54d2","ssdeep":"","tlshash":"8051518a76eba42109f4406cbc3a26519623b641d40398ecbe7d6fc16d86d0fb13e835","first_seen":"2025-07-02T09:11:07.776267Z","last_seen":"2025-07-30T04:19:29.486395Z","times_seen":52,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/330a4beb02.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:30.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/330a4beb02.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:30 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 147\r\ntraceparent: 00-415068f52e0471c1706d60fada8b4a6a-051754bf15053e25-01\r\nlast-modified: Wed, 23 Jul 2025 11:55:36 GMT\r\netag: \"48dc517924250c11807239cb85cd57fb\"\r\nx-amz-meta-mtime: 1753271379.32238877\r\nexpires: Thu, 24 Jul 2025 11:59:12 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 12595\r\ncache: HIT\r\nx-cached-since: 2025-07-25T12:03:35+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":147,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"48dc517924250c11807239cb85cd57fb","sha1":"92bf240d6b67e26a7112e84152cfb9c217e2d10e","sha256":"146b70d8de34494529dddf07c85d4bf1e2570b213ca809041061eb068e4764c9","sha512":"c027b8ef50f4004c39996751bcf0121d700b60aa4313203dd79b114983b9f3ab7a25d22e4293a5fc3baa7c76b04fc0477b7e2efb4a4037c8261880333051c999","ssdeep":"","tlshash":"82c08c2008a121a02e0e9ec8b56170a1041460062fa8d8c00c74421a4062af0f89a004","first_seen":"2025-07-23T16:09:37.567812Z","last_seen":"2025-07-29T04:15:45.285547Z","times_seen":47,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/ead29c0989.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:30.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/ead29c0989.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:30 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-ee83044bafa58a0a7c91dfa01ab3268d-e46e0cfd780cebed-01\r\nlast-modified: Wed, 23 Jul 2025 11:55:36 GMT\r\netag: W/\"31a8810ef78716a04633f276088b7ce9\"\r\nx-amz-meta-mtime: 1753271379.332389617\r\ncontent-encoding: gzip\r\nexpires: Thu, 24 Jul 2025 11:59:12 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 12595\r\ncache: HIT\r\nx-cached-since: 2025-07-25T12:03:35+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1663,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1662)","md5":"31a8810ef78716a04633f276088b7ce9","sha1":"614e9f554a95be65b9d94ab8988866faed5adb11","sha256":"6035473206112e1cdcaa89c4fe94b84277deeb7b78a3c6ba7f66aba3bada21e5","sha512":"cbb2682c26697e70662c674dbececdc3c303a4fd32f827e98d10ae5e960d0c5a878bd8c7dd66f5c2af0cf19c54b8e614e2ceac10c3c34daf66fc0d63e68c62f9","ssdeep":"","tlshash":"0b31a6ecbaf870380e6dcaaa60392450d78c659d726dfcf4e3ee8a5822500dd52b4f41","first_seen":"2025-07-23T16:09:37.535548Z","last_seen":"2025-07-29T04:15:45.296331Z","times_seen":47,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:38.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:38 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63748\r\ntraceparent: 00-b17b772876b1388c122597e114fa501c-4d0a03b0665362a3-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"6887b6f24414dbc612dbf42ccdc76b70\"\r\nexpires: Thu, 16 Jan 2025 10:32:14 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2301\r\ncache: HIT\r\nx-cached-since: 2025-07-25T14:55:17+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":63748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63748, version 1.0","md5":"6887b6f24414dbc612dbf42ccdc76b70","sha1":"8068d3abfbc6cbf35b55919da45b1f4d2d136238","sha256":"fc5c015fc32518f1ed810fa84ca28941eb9d5a3c81acc8df69a4dbbeedef7b0c","sha512":"00f08f9dd648972c9571547e06172d5505dd13f577fe2e65a497d3856172807ac11c996984e4138d2eb2ac784257fe61864aee15752fe9e9e76f98db931e0c2a","ssdeep":"1536:KtdCG+Dz6RxAx457zL0ASEn091Y0H1mTOzI/OzMFOoTX4u:MMG+yRpzN091Y0VtI/pOoTt","tlshash":"8b5302485551fae2cac3073c0f7a89dbb37a776d519224cd98b69f830d37964bea2070","first_seen":"2023-06-14T19:15:49Z","last_seen":"2026-04-04T06:13:29.794511Z","times_seen":10263,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/b5cd9a5e87d930de856c92da15aa121e.png","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:28.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/b5cd9a5e87d930de856c92da15aa121e.png HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:28 GMT\r\ncontent-type: image/png\r\ncontent-length: 653\r\ntraceparent: 00-8d0582ae89f155488b489449b6786ebe-2da6f3490f257dbf-01\r\nlast-modified: Wed, 26 Jun 2024 08:18:02 GMT\r\netag: \"e6f0766cbd95db33da44e7a9140648f2\"\r\nexpires: Thu, 16 Jan 2025 10:46:36 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1434\r\ncache: HIT\r\nx-cached-since: 2025-07-25T15:09:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":653,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"e6f0766cbd95db33da44e7a9140648f2","sha1":"5f196b1bfe8c3f92bd2ebcd67124e72e81ae6aaf","sha256":"c0399d478788d5d483f104a2e8cb7c32f41cb40e9df0c22e831b2bfa2db63ec0","sha512":"249da39baba03408de98c7fa9a9342ef120436037ab6245b3b4a5f1a206291caaf67481c6ed67064544576697d41ab82499abffec998d837812292a050bf826a","ssdeep":"","tlshash":"90f083e032254a855c02ac7fc33414448fb226cc3682bb09e012887119d24a79dd1368","first_seen":"2023-04-05T22:56:35Z","last_seen":"2026-04-03T12:07:45.643999Z","times_seen":6597,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/e93355a6/desktop/default/vendors/plugins.vue-notification-97c938b5.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/e93355a6/desktop/default/vendors/plugins.vue-notification-97c938b5.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-de4071fb32e019bde1fb6f8556ea59d5-3d452571f7da09eb-01\r\nlast-modified: Fri, 25 Jul 2025 08:59:42 GMT\r\netag: W/\"40b5abbf9da65f2bd7ec2ee060eb9c27\"\r\nx-amz-meta-mtime: 1753433980.444970694\r\ncontent-encoding: gzip\r\nexpires: Sat, 26 Jul 2025 09:31:28 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 21705\r\ncache: HIT\r\nx-cached-since: 2025-07-25T09:31:44+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12563,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12563), with no line terminators","md5":"40b5abbf9da65f2bd7ec2ee060eb9c27","sha1":"17a1d2cce095298f2f813820216066ec56f798c1","sha256":"2086e02c299242f6f77a63c9ea30012cb36ca2d7f623dd436c7183a69613ba07","sha512":"781d7691a5aad7c328001566eca8d2209d14f2d0719132b190930de9584adeda3b12656ed94464b639ebb7a9d1c6b89fffdf857889d5967de9781f3514741ec2","ssdeep":"192:qU1hQXHv3CbfKpqEVwhSIkrReP+SdHtfGA2D3ow5EE9bJ52bFZLy2mp4ilVk:qn3CmpcDkAP+S/fGAWf5VbWbLy2mmijk","tlshash":"cc42a6ceb2c2b4650be760b6402f110af136a96879ab54d4f3b1d4f2adb564c413bf39","first_seen":"2025-07-02T09:11:07.795163Z","last_seen":"2025-07-30T04:19:29.442376Z","times_seen":52,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/site-admin/css_vars/29b5cda95fa390c124de39b6aeca6d24.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/site-admin/css_vars/29b5cda95fa390c124de39b6aeca6d24.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: text/css\r\ncontent-length: 46\r\ntraceparent: 00-6e5c8d01bd4597a20f0fbb8762d06816-fb3628747e6e1398-01\r\nlast-modified: Thu, 20 Mar 2025 13:29:31 GMT\r\netag: \"29b5cda95fa390c124de39b6aeca6d24\"\r\ncache-control: max-age=3600\r\nexpires: Fri, 25 Jul 2025 05:00:14 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1631\r\ncache: HIT\r\nx-cached-since: 2025-07-25T15:06:18+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":46,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"29b5cda95fa390c124de39b6aeca6d24","sha1":"46f68f69533c1fdc737eb36e8e7af7672178e610","sha256":"6021ec0aede22eadcb8401fe945d345202320437c7be01b157f0cb282ebe7c88","sha512":"8a62d0b23596f91ed5dbd111fce75e940b4b6fe542716d9fad76d610eb9a90f67bad145f3dcfd977b5a7a6d414d66e94c0abcaf6cabce2310d94af56cdf0e13b","ssdeep":"","tlshash":"54900294a50c22502025c656109c48d0119412566621255851533451b4438405960188","first_seen":"2025-03-20T19:27:14.305804Z","last_seen":"2025-11-18T11:41:52.983768Z","times_seen":4852,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?en=page_view\u0026dl=https%3A%2F%2F1xlite-76257.world%2Ffr%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=866125908.1753457620\u0026dt=1xBet\u0026auid=1892791516.1753457620\u0026navt=n\u0026npa=1\u0026gtm=45He57n0v9180563600za200zd9180563600\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211~104948813\u0026tft=1753457620030\u0026tfd=12827\u0026apve=1\u0026apvf=sb","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:40.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:54 GMT","end":"Mon, 29 Sep 2025 08:35:53 GMT"},"fingerprint":{"sha1":"F3:96:6E:68:01:34:12:AD:6A:03:D8:EF:BD:47:E1:FD:A4:AA:FB:C5","sha256":"BF:6D:12:A9:D7:AB:31:65:56:63:8F:97:4E:12:51:58:55:9A:75:81:94:F8:34:D1:46:46:48:4B:34:CB:8A:9E"}}},"request":{"raw":"POST /ccm/collect?en=page_view\u0026dl=https%3A%2F%2F1xlite-76257.world%2Ffr%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=866125908.1753457620\u0026dt=1xBet\u0026auid=1892791516.1753457620\u0026navt=n\u0026npa=1\u0026gtm=45He57n0v9180563600za200zd9180563600\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211~104948813\u0026tft=1753457620030\u0026tfd=12827\u0026apve=1\u0026apvf=sb HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ndate: Fri, 25 Jul 2025 15:33:40 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncontent-type: text/plain\r\npragma: no-cache\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://1xlite-76257.world\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":129,"dns":0,"connect":29,"send":0,"wait":51,"receive":2,"ssl":85},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/8b4e10c31932a559912f415b65fba92c.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:30.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/8b4e10c31932a559912f415b65fba92c.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:30 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-1e3e30558ac44822b20e2b50a35ed65c-72e87fe320971ebc-01\r\nlast-modified: Thu, 27 Feb 2025 08:17:13 GMT\r\netag: W/\"499d57f89b2bf5fed52d984d865fd72c\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 27 Feb 2025 11:06:29 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 852\r\ncache: HIT\r\nx-cached-since: 2025-07-25T15:19:18+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1342,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"499d57f89b2bf5fed52d984d865fd72c","sha1":"f3dd138886f2c1e257d3ac2214b7e3cba57e56b2","sha256":"9467cf5576ce2a97d9e44e53915a9c4ae529c134cc1ea5a3c62ea304eebda0c8","sha512":"38ba45be7e97a3698d488c7e4669bc1b6fa7451b9a1537b5f48088decdcc7a491fab4f8ec3d60525b227fb28b648dbe403ba326d81d0ba883f48753e39c1b527","ssdeep":"","tlshash":"5a215788f7e00c73016b92ad44f7a68d93884f17a85a3d18be5c3e4d1b5891a005fd7e","first_seen":"2025-04-07T23:34:47.992537Z","last_seen":"2025-07-30T04:19:29.45081Z","times_seen":1629,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/hd-api/external/01984237-ead9-7ffb-9041-352592fa9429.js","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:37.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-76257.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:56 GMT","end":"Sun, 14 Sep 2025 11:35:55 GMT"},"fingerprint":{"sha1":"31:43:B4:0C:D2:98:AC:D8:9F:DE:06:86:21:47:6E:95:8F:00:F9:E1","sha256":"1B:73:D9:EE:BD:C6:BB:28:5A:F5:F7:31:B4:05:54:84:74:83:B3:58:8F:D0:0F:1C:61:56:FE:BC:C3:63:34:D7"}}},"request":{"raw":"GET /hd-api/external/01984237-ead9-7ffb-9041-352592fa9429.js HTTP/1.1\r\nHost: 1xlite-76257.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/fr/block\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=fr; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder; auid=W7rOSWiDo8cKf5blAx7NAg==; window_width=1280; che_g=a90cb739-5ecd-5111-29c5-c4164698ddc5; SESSION=6b4281bcf5518db79aaa3867a54ddd64\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:37 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 87964\r\ncache-control: private, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-dt: 285\r\nx-hd-trace-id: e43a4251-9680-4354-91ec-b6c370a2185f\r\nx-request-guid: 4a1337338ef99795b0c1c5122da68643\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.089, wf-uht;dur=0.015\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":300851,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d4716c9accbc143e92b80a1237a4c000","sha1":"88f93430f678829bb8a76acd4fc20771b316868b","sha256":"4d927ee3f5addcccde1277004c7f37ea2376f15b11aa0b7f51a65c270951e619","sha512":"3f9fcd751971af0660dd7bdffc6e4cf4b29b5365bed7ca3f909572b2da27da835af56096df60d1c0eaa6c7915b265bf9a0463b4add27cc873389fbc863732633","ssdeep":"3072:N2jTREChu3kotyMaa8uYP9HKAieP5CKAuW3ogXn:UjT5FotkuYMAi0gX","tlshash":"b2545fd52c41e714934a5fe422b82f53c088dc15ad889928d43dfe987aaf3fb29e55f0","first_seen":"2025-07-25T15:33:58.669754Z","last_seen":"2025-07-25T15:33:58.669754Z","times_seen":1,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-25","alert":"Sinkholed","trigger":"1xlite-76257.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/seo-module-api/api/public/v1/analytics-counters?project[id]=285\u0026domain[host]=1xlite-76257.world","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-76257.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:56 GMT","end":"Sun, 14 Sep 2025 11:35:55 GMT"},"fingerprint":{"sha1":"31:43:B4:0C:D2:98:AC:D8:9F:DE:06:86:21:47:6E:95:8F:00:F9:E1","sha256":"1B:73:D9:EE:BD:C6:BB:28:5A:F5:F7:31:B4:05:54:84:74:83:B3:58:8F:D0:0F:1C:61:56:FE:BC:C3:63:34:D7"}}},"request":{"raw":"GET /seo-module-api/api/public/v1/analytics-counters?project[id]=285\u0026domain[host]=1xlite-76257.world HTTP/1.1\r\nHost: 1xlite-76257.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/fr/block\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nx-app-n: v3-nuxt2\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=fr; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder; postback_watcher=; auid=W7rOSWiDo8cKf5blAx7NAg==; window_width=1920\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: application/json\r\ncontent-length: 107\r\ncache-control: max-age=1200, must-revalidate, public, s-maxage=1800, stale-if-error=86400, stale-while-revalidate=300\r\nx-content-digest: en6d0e5d6e0146a49c358c0eaad1d2ef38\r\nage: 731\r\nx-request-id: b9adec4b673f7835753639f3845c4fa8\r\nx-request-guid: b9adec4b673f7835753639f3845c4fa8\r\ncontent-encoding: br\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: p;dur=0.43487548828125, wf-uht;dur=0.013\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":105,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6abfe5f6641fddde82c2ca29cf5c6a7a","sha1":"958379bc84073d266358a27b3cf86b15484f5f6d","sha256":"ede01772dfd8da2cc82f245e454ce360b2ceb13b7d1c330bbc1d68fe41255c19","sha512":"ecbaa34447669af053d49cc9b252812fc653923247f4b9e3629a55ba0cd919810e81b0f8be8f11a74401e0ed9c889bc7e6b02587b289c3b41142505b6a8fb42a","ssdeep":"","tlshash":"1db092219588ecb825036880409e1813d47870658ea616404d10c772806c1143421b7f","first_seen":"2024-05-18T12:55:24Z","last_seen":"2026-03-30T04:38:43.789364Z","times_seen":2956,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-25","alert":"Sinkholed","trigger":"1xlite-76257.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/bff-api/config/group/get?groups=d.technical\u0026lang=fr","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:30.249Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-76257.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:56 GMT","end":"Sun, 14 Sep 2025 11:35:55 GMT"},"fingerprint":{"sha1":"31:43:B4:0C:D2:98:AC:D8:9F:DE:06:86:21:47:6E:95:8F:00:F9:E1","sha256":"1B:73:D9:EE:BD:C6:BB:28:5A:F5:F7:31:B4:05:54:84:74:83:B3:58:8F:D0:0F:1C:61:56:FE:BC:C3:63:34:D7"}}},"request":{"raw":"GET /bff-api/config/group/get?groups=d.technical\u0026lang=fr HTTP/1.1\r\nHost: 1xlite-76257.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/fr/block\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nis-srv: false\r\nx-svc-source: __TECHNICAL_PAGES_APP__\r\nx-app-n: __TECHNICAL_PAGES_APP__\r\nx-geoip2-country-code: ru\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=fr; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder; postback_watcher=; auid=W7rOSWiDo8cKf5blAx7NAg==; window_width=1920; che_g=a90cb739-5ecd-5111-29c5-c4164698ddc5\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:30 GMT\r\ncontent-type: application/json\r\ncontent-length: 742\r\ncache-control: no-cache, private\r\nserver-timing: dt_total;dur=0.054, bff;dur=112.97, wf-uht;dur=0.144\r\nx-dt: 285\r\nx-pod: R-hwfzs\r\nx-time-ng: 0.131\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":742,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4eb311659e468207be5833d01806a6bc","sha1":"5470741fa048379479314630596a5491a24baa52","sha256":"614a8b74dbb5809ee856b8f0d67ef11d72c7b5d7180d3a9929915e02f5254c76","sha512":"95bbe62d24bbf459cf43f18c530ac8ad75d53fa70c368d05efbca987c19d2f6a0e0b7f5bf74e91800a90617a01e5bda9642b5da3841f47842b87aefe26a9df52","ssdeep":"","tlshash":"c501845e00a5ca3d706c063adb865e109eed502b3284b851fe0cacac60d6ddef95680f","first_seen":"2025-07-18T16:37:04.833261Z","last_seen":"2025-11-06T09:03:00.039673Z","times_seen":977,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-25","alert":"Sinkholed","trigger":"1xlite-76257.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/captcha-api/assets/hunt-captcha.js","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:37.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-76257.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:56 GMT","end":"Sun, 14 Sep 2025 11:35:55 GMT"},"fingerprint":{"sha1":"31:43:B4:0C:D2:98:AC:D8:9F:DE:06:86:21:47:6E:95:8F:00:F9:E1","sha256":"1B:73:D9:EE:BD:C6:BB:28:5A:F5:F7:31:B4:05:54:84:74:83:B3:58:8F:D0:0F:1C:61:56:FE:BC:C3:63:34:D7"}}},"request":{"raw":"GET /captcha-api/assets/hunt-captcha.js HTTP/1.1\r\nHost: 1xlite-76257.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/fr/block\r\nCookie: platform_type=desktop; lng=fr; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder; auid=W7rOSWiDo8cKf5blAx7NAg==; window_width=1280; che_g=a90cb739-5ecd-5111-29c5-c4164698ddc5; SESSION=6b4281bcf5518db79aaa3867a54ddd64\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:37 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=300\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-dt: 455\r\nx-request-id: fd7fb19c1df9fed1de2ac7071da76457\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.007, wf-uht;dur=\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":90635,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"22906b563f32dc7581d2da2f250d1ff8","sha1":"dd437f9b6a50c02605b9dd28082bf38449613f66","sha256":"7b62895856e59e4d4dbabd2168f8686f486fa542f8e1a2020e6bd12e30ce60d6","sha512":"16b99e2c44c61ecfc03d22ad9d0257d192f846dfb4b0cc231cda3ee1be9ab04f0ba370ff56c522dcab76a73467f03b85363c8e0d713f4276203a80f0a5828823","ssdeep":"768:Qj3V034Wt41dGnLJhvSQIrfFTWvIGqiYuPGj0aO+Pu6EUMHqkrTa4BYsOYYY+mGR:z4441EnrsztSrI7KzpImI0+OW","tlshash":"ad9345c13a40a0652783ccac93762de8ddad8887bfa83d6454e9fe945ad4d26f7c4433","first_seen":"2025-07-25T09:06:37.210756Z","last_seen":"2025-07-28T10:52:42.408691Z","times_seen":54,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-25","alert":"Sinkholed","trigger":"1xlite-76257.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/vision.json","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-76257.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:56 GMT","end":"Sun, 14 Sep 2025 11:35:55 GMT"},"fingerprint":{"sha1":"31:43:B4:0C:D2:98:AC:D8:9F:DE:06:86:21:47:6E:95:8F:00:F9:E1","sha256":"1B:73:D9:EE:BD:C6:BB:28:5A:F5:F7:31:B4:05:54:84:74:83:B3:58:8F:D0:0F:1C:61:56:FE:BC:C3:63:34:D7"}}},"request":{"raw":"GET /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/vision.json HTTP/1.1\r\nHost: 1xlite-76257.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/fr/block\r\nContent-Type: application/json\r\nX-Lang: fr\r\nX-Uuid: 93324424-2bca-463b-8ddb-0019ceb4ea2a\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=fr; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder; postback_watcher=; auid=W7rOSWiDo8cKf5blAx7NAg==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\nx-dt: 285\r\nx-rejected: E001\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.066, wf-uht;dur=0.008\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T06:46:00.057853Z","times_seen":13320224,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-25","alert":"Sinkholed","trigger":"1xlite-76257.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_express_day/fr/dictionary_7bbf9934b79376a6b424b7d31a7ed014.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_express_day/fr/dictionary_7bbf9934b79376a6b424b7d31a7ed014.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-04463e661da7b00ac008382d3530089e-43a776196d2958c3-01\r\nlast-modified: Mon, 30 Jun 2025 14:06:53 GMT\r\netag: W/\"cd7cc05993c87ec6bb1b3fd88f305ea4\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Fri, 25 Jul 2025 07:23:59 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1814\r\ncache: HIT\r\nx-cached-since: 2025-07-25T15:03:15+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1276,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"cd7cc05993c87ec6bb1b3fd88f305ea4","sha1":"a9cc941716d416792043a0979fbd705361ef5a0d","sha256":"9218a9bc85b21cd1af6a5f4053bb825a92d1faa6b8e01d8b7973527b21f8437e","sha512":"871d2448f0b742cc331adf812a51bbd867d743bffaf7433537c68522bc470f27c7788efa68111e16488e81a98bb644a9cf18de6e161a54306f1ecc76178c67f6","ssdeep":"","tlshash":"a2214bf9e1e824491d471f827a6e6a6005b48d1251ccac86874f33ef238dcc0ad4625f","first_seen":"2025-07-21T12:33:40.436923Z","last_seen":"2025-10-13T10:38:03.61418Z","times_seen":22,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/entry-4478b66794.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/entry-4478b66794.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-67242c7a25050d24d031632885a41f57-df14bf5e56afa1ee-01\r\nlast-modified: Wed, 23 Jul 2025 11:55:36 GMT\r\netag: W/\"60bdcbeafb3fcbf3f4d86eb61efec263\"\r\nx-amz-meta-mtime: 1753271379.332389617\r\ncontent-encoding: gzip\r\nexpires: Thu, 24 Jul 2025 11:59:00 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 12641\r\ncache: HIT\r\nx-cached-since: 2025-07-25T12:02:48+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29933,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29417)","md5":"60bdcbeafb3fcbf3f4d86eb61efec263","sha1":"51dbc41e5978ed79f34b446e8a27005b1d4b9e89","sha256":"8752a416cde315c74c27feea354a8b39e20c9ab4988248bcfde69ff3a71572b7","sha512":"95af155aede681ec5650dd29ff5ed28f9f55ddda4eb5735eae242e6f0ead2da1535c5fabcaef0556fac0e8065f4e7f493971723f3bd1f2f4432b4c15012e58ac","ssdeep":"768:HjnN7ag7yg1l6IMHvGLkw/4j/M2fSh7XXef8UC8QAAI+hRmAqfBIszevCNLtiUok:x7Pyg1UfgC8UC8QAAI+0+Dg","tlshash":"1ed2a17434a7b0b560daa5586739bd53d6c81f9fe88af8d211cb88ab13c305884467fb","first_seen":"2025-07-23T16:09:37.573652Z","last_seen":"2025-07-29T04:15:45.269733Z","times_seen":47,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-7JGWL9SV66\u0026cid=60252338.1753457620\u0026gtm=45je57n0v897130004za200zb9180563600zd9180563600\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211~104948813~105134979~105134981\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211~104948813~105134979~105134981\u0026z=268236234","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:40.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:36:51 GMT","end":"Mon, 29 Sep 2025 08:36:50 GMT"},"fingerprint":{"sha1":"5F:6E:88:84:0D:03:06:C9:1C:FD:3B:27:60:0A:E4:F1:38:44:0C:17","sha256":"E7:9E:7F:BF:9C:B7:AD:C0:57:A6:D9:DE:DB:56:01:D6:5D:91:C7:10:F3:88:D7:BE:AE:36:96:71:3F:99:51:24"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-7JGWL9SV66\u0026cid=60252338.1753457620\u0026gtm=45je57n0v897130004za200zb9180563600zd9180563600\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211~104948813~105134979~105134981\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211~104948813~105134979~105134981\u0026z=268236234 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 25 Jul 2025 15:33:40 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T06:45:41.005484Z","times_seen":761893,"resource_available":true,"data":null}},"time_used":204,"timings":{"blocked":91,"dns":1,"connect":8,"send":0,"wait":21,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:28.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:28 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63748\r\ntraceparent: 00-9be4c6d8a09559aaeabc8284b591bc4f-1da30231f78a4c6c-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"6887b6f24414dbc612dbf42ccdc76b70\"\r\nexpires: Thu, 16 Jan 2025 10:32:14 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2291\r\ncache: HIT\r\nx-cached-since: 2025-07-25T14:55:17+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":63748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63748, version 1.0","md5":"6887b6f24414dbc612dbf42ccdc76b70","sha1":"8068d3abfbc6cbf35b55919da45b1f4d2d136238","sha256":"fc5c015fc32518f1ed810fa84ca28941eb9d5a3c81acc8df69a4dbbeedef7b0c","sha512":"00f08f9dd648972c9571547e06172d5505dd13f577fe2e65a497d3856172807ac11c996984e4138d2eb2ac784257fe61864aee15752fe9e9e76f98db931e0c2a","ssdeep":"1536:KtdCG+Dz6RxAx457zL0ASEn091Y0H1mTOzI/OzMFOoTX4u:MMG+yRpzN091Y0VtI/pOoTt","tlshash":"8b5302485551fae2cac3073c0f7a89dbb37a776d519224cd98b69f830d37964bea2070","first_seen":"2023-06-14T19:15:49Z","last_seen":"2026-04-04T06:13:29.794511Z","times_seen":10263,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/ac02f639a86763a884adc5615fe65e72.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/ac02f639a86763a884adc5615fe65e72.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-6662f029494bdf3220c6dcc1ea901a3b-8d8994464a35251d-01\r\nlast-modified: Thu, 27 Feb 2025 09:04:01 GMT\r\netag: W/\"811ce3b7877d19901e45430cb6523d62\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 21 Jul 2025 10:55:36 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 867\r\ncache: HIT\r\nx-cached-since: 2025-07-25T15:19:02+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14232,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"811ce3b7877d19901e45430cb6523d62","sha1":"16a905115a678fdef3923f91c6f76cbab613e84d","sha256":"10fbb74dbac63abfe9c4f5a77abc03757ef3527a479d4ae70dc977b515eec8cb","sha512":"21a43d793bd4200ff9972a793442fe492b6a1699f20053c4f01695f69f918685bf30f03f778346c2f61bac40d2e51bb25360d0ffc15448200c666ab4edf38e65","ssdeep":"96:BDkGHVTSY15XWGsQfGJo/JamRKkmP9kDeD3LzwCyi8TunZh:bVTS1KXR9RKkekDGoCyXOD","tlshash":"59523d65f6f40c33113b98ae65f76a8953948f07aa6d7c293b9c2b4c1f1462e0076d3e","first_seen":"2025-02-27T19:55:39.119779Z","last_seen":"2026-01-05T12:50:32.841809Z","times_seen":4543,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/78e1228f56f3d966ed7fcfded728f899.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/78e1228f56f3d966ed7fcfded728f899.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-2dbbb46c17130b284efc34f815c231f4-29bae8a5fe084e07-01\r\nlast-modified: Tue, 01 Jul 2025 08:15:39 GMT\r\netag: W/\"bc3c79e764880121898f78d58c54ac21\"\r\ncontent-encoding: gzip\r\nexpires: Wed, 23 Jul 2025 19:11:43 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 867\r\ncache: HIT\r\nx-cached-since: 2025-07-25T15:19:02+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23270,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bc3c79e764880121898f78d58c54ac21","sha1":"0e1fb57593fa0c59e51e06040bf3a6b4c868b430","sha256":"8bcfd2c3d6f34658a491941dbffa8478d7c2462340b78e1dd82d4b91c9a3163d","sha512":"63da1c6ef993321d7dd3d938d84eaa3adb4302350929172b0ddab87ae6cc824621b61d6d32da936a3c65b7eca1ae953eb142cfd1de1ed27ec703575c2219ec06","ssdeep":"384:hrLr0fLSwUj+uZbC445IOhT9TYXw1LyaNuRBC1WjTZU:hvkO+ylRBW","tlshash":"a0a24b85faf40c33102f90ae95f3ba0e93d85f879d4a6c14bfac2a4d2b54519016bd7e","first_seen":"2025-07-01T08:49:13.464333Z","last_seen":"2025-08-05T10:20:54.890994Z","times_seen":519,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/e93355a6/desktop/default/css/dad7a6e4.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:28.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/e93355a6/desktop/default/css/dad7a6e4.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:28 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-60fdede53c3ee9a94c7a5a1f7e66bfb9-25630beb3ec262d8-01\r\nlast-modified: Fri, 25 Jul 2025 08:59:42 GMT\r\netag: W/\"f14bcc7510c4f26df7bd2f918d16d8f8\"\r\nx-amz-meta-mtime: 1753433980.441970664\r\ncontent-encoding: gzip\r\nexpires: Sat, 26 Jul 2025 09:31:24 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 21709\r\ncache: HIT\r\nx-cached-since: 2025-07-25T09:31:39+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40883,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (40883), with no line terminators","md5":"f14bcc7510c4f26df7bd2f918d16d8f8","sha1":"4ef37e2e86bd42557aa87de9f72705873e834412","sha256":"498a8486a41b0056acc3eade4549254931682bd42d59a8d3636506e9e55f04cc","sha512":"73ed74945d122263d6246d92e9a957703b3f3e34a8d3b2e7052cd67dbed764645b77c3508cdb356f327256c6b5decdcb7ee20ed69b1e4ecf541550e78162c833","ssdeep":"768:SRTaXC59ApQzOoU/aW1XuJV2/DF0TcNh5MQe43GUJKf:KTEC59ApQzlU/aWz3GU4","tlshash":"e003105eeca8d1760d3bf521a288be3c01b0f42ade314d97e90e576518c3f9b15e0e69","first_seen":"2025-07-09T10:12:06.36181Z","last_seen":"2025-07-30T04:19:29.418725Z","times_seen":313,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_fast_deep_equal_XYWIEKOD.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_fast_deep_equal_XYWIEKOD.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 865\r\ntraceparent: 00-32fd80efd7f128b36ed3e526af4b3e7f-52378305d110dd07-01\r\nlast-modified: Thu, 24 Jul 2025 14:07:04 GMT\r\netag: \"0af3fe0c072a5bb3b6c731767187982f\"\r\nx-amz-meta-mtime: 1753365757.618102513\r\nexpires: Sat, 26 Jul 2025 08:23:40 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 25789\r\ncache: HIT\r\nx-cached-since: 2025-07-25T08:23:40+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":865,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (840)","md5":"0af3fe0c072a5bb3b6c731767187982f","sha1":"55db5afb57265dc92fd121fe9ae565ffb2f53b2c","sha256":"655bbe85da91e863401c6f96e24b41f5c2fe51a4245cecc2deb2b8c9600fef30","sha512":"8aab8cafc0b01c11f0b3b4bab4cb8b00ac25007153fd86b45ac8bfe325109c1a5215e89825fde4d7698a64f6c549e8140ed441ddb558d98a5654d52df9d568be","ssdeep":"","tlshash":"a41159c232e3a0d1c3e058cd1001d902f23969e9e4bca0c9d757e6b83cb2a53987672a","first_seen":"2025-05-14T05:06:37.184748Z","last_seen":"2025-08-22T06:38:14.125712Z","times_seen":1811,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/e3dd2d416ede1d7659584842878349f6.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:30.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/e3dd2d416ede1d7659584842878349f6.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:30 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-0ec21947dc387b0f89cf63dbd30cd2f8-1811c387b582e1a2-01\r\nlast-modified: Thu, 16 May 2024 19:05:13 GMT\r\netag: W/\"338264fc869e8f0b86b0d6c9d92102b0\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 24 Jul 2025 23:37:43 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 304\r\ncache: HIT\r\nx-cached-since: 2025-07-25T15:28:26+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1085,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"338264fc869e8f0b86b0d6c9d92102b0","sha1":"83b4d35816df0e1486b766251e74d23f28b77824","sha256":"015355a44429f40dd63b566dd1e9b1b76af3dfa28dcd25a43e82820ba0847b8d","sha512":"ed669b39fbca032d9cfaef0f0e7acb42c95d98581f95efb8f4896a22b45d4ba3f4cb9ea99904f75e770b64d57441beec15c63767323f3ea3e8deee47f23c01e9","ssdeep":"","tlshash":"bd11eb69f7f40833112fd4ae4df2668d93844f17994dbc193e6c2a4c5fa442604baa7e","first_seen":"2023-05-25T17:41:30Z","last_seen":"2025-07-30T04:19:29.49492Z","times_seen":1689,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/e93355a6/desktop/default/css/e45d3c54.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:28.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/e93355a6/desktop/default/css/e45d3c54.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:28 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-a3745e92232c8244925d3801d443c0ee-1e1ecbe0680ee25f-01\r\nlast-modified: Fri, 25 Jul 2025 08:59:42 GMT\r\netag: W/\"74ac1e9c5cab64b7d31ed8deccbd2659\"\r\nx-amz-meta-mtime: 1753433980.441970664\r\ncontent-encoding: gzip\r\nexpires: Sat, 26 Jul 2025 09:31:24 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 21710\r\ncache: HIT\r\nx-cached-since: 2025-07-25T09:31:38+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13478,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (13478), with no line terminators","md5":"74ac1e9c5cab64b7d31ed8deccbd2659","sha1":"ed589fe1c672ce7baa4ae8caa2d969d2941c4332","sha256":"5cbce6d9cbdb897a99ac14285ec6dca35d84382aa1a94cf96e555b5811039dbe","sha512":"e5b3700942353954b6e780a64bfb64f825870b01719aafba4344319e2ee3887864d4c418ace6a62a31da07a5caed77e91e4a7fa290d4b75b50ee89978e2d85d8","ssdeep":"192:vmNOH7nvxxxY4aBtZLJh6NYdt+8yvvo9lvhvuvoUwlthLbBQ:vHJxxY4aJJq6PBQ","tlshash":"e752c71ed52a52a10d328c9671ceff783539722628979331f44e5658cddbb9b03d0bb8","first_seen":"2025-06-24T12:47:20.811529Z","last_seen":"2025-08-06T09:09:01.151971Z","times_seen":868,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":85,"dns":20,"connect":4,"send":0,"wait":8,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/8d3f04041a.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:30.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/8d3f04041a.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:30 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-02446a1ddb7ee07ffb47fe552a674772-3e2a221325fdebae-01\r\nlast-modified: Wed, 23 Jul 2025 11:55:36 GMT\r\netag: W/\"3d486591d7311d8201a4732c9df634d4\"\r\nx-amz-meta-mtime: 1753271379.326389109\r\ncontent-encoding: gzip\r\nexpires: Thu, 24 Jul 2025 11:59:11 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.012\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 12596\r\ncache: HIT\r\nx-cached-since: 2025-07-25T12:03:34+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3805,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3802)","md5":"3d486591d7311d8201a4732c9df634d4","sha1":"06376465470eb21ee23f53257ca7693ab87e4355","sha256":"7ba280e74cc52eca45277851dbced7b0ed75abdcbbd1100336f6462062a28c0b","sha512":"608a96e37afc101ba6aa5d70fe3fc60745b244ba27a127207aa1a32549625b18527c9915baa1562903a291ea76fe652151c19fe1358129a607dca916b31cdfea","ssdeep":"","tlshash":"f871a6b871f5607477a45ece6c3724b3e29c3604341cd4e4e3adca7526cb0a281a7db6","first_seen":"2025-07-23T16:09:37.550211Z","last_seen":"2025-07-30T04:19:29.434728Z","times_seen":50,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/gmp/conversion;src=14030178;type=xbet;cat=uniqu0;ord=1;num=9492901911955;npa=1;auiddc=1892791516.1753457620;pscdl=noapi;frm=0;_tu=KpA;gtm=45fe57n0v9190735530z89180563600za200zb9180563600zd9180563600;gcd=13l3l3l2l1l1;dma_cps=syphamo;dma=1;dc_fmt=4;tag_exp=101509157~103116026~103200004~103233427~104684208~104684211~104948813;epver=2;dc_random=1753457620370;~oref=https%3A%2F%2F1xlite-76257.world%2Ffr%2Fblock?","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:40.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:54 GMT","end":"Mon, 29 Sep 2025 08:35:53 GMT"},"fingerprint":{"sha1":"F3:96:6E:68:01:34:12:AD:6A:03:D8:EF:BD:47:E1:FD:A4:AA:FB:C5","sha256":"BF:6D:12:A9:D7:AB:31:65:56:63:8F:97:4E:12:51:58:55:9A:75:81:94:F8:34:D1:46:46:48:4B:34:CB:8A:9E"}}},"request":{"raw":"POST /gmp/conversion;src=14030178;type=xbet;cat=uniqu0;ord=1;num=9492901911955;npa=1;auiddc=1892791516.1753457620;pscdl=noapi;frm=0;_tu=KpA;gtm=45fe57n0v9190735530z89180563600za200zb9180563600zd9180563600;gcd=13l3l3l2l1l1;dma_cps=syphamo;dma=1;dc_fmt=4;tag_exp=101509157~103116026~103200004~103233427~104684208~104684211~104948813;epver=2;dc_random=1753457620370;~oref=https%3A%2F%2F1xlite-76257.world%2Ffr%2Fblock? HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 25 Jul 2025 15:33:40 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://1xlite-76257.world\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T06:45:41.005484Z","times_seen":761893,"resource_available":true,"data":null}},"time_used":524,"timings":{"blocked":234,"dns":1,"connect":28,"send":0,"wait":52,"receive":5,"ssl":198},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/c0e02032d1.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:28.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/c0e02032d1.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:28 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-6b362942e874d4d423bbe8f122f05275-acbcf743c5d9c40c-01\r\nlast-modified: Wed, 23 Jul 2025 11:55:36 GMT\r\netag: W/\"3d3e04f603cc58802ff96240abbdc3aa\"\r\nx-amz-meta-mtime: 1753271379.326389109\r\ncontent-encoding: gzip\r\nexpires: Thu, 24 Jul 2025 11:58:08 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.003\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 12666\r\ncache: HIT\r\nx-cached-since: 2025-07-25T12:02:22+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11073,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (11072)","md5":"3d3e04f603cc58802ff96240abbdc3aa","sha1":"e7e6a5d59c97236922354b40d288736f034a1ce3","sha256":"611f7a963cd4aa278f1ba51f2401247df8c658929b76bfdce45bec08be83d7bd","sha512":"7e83129353390d84ab95d6f7e877ffd699e3b8fdb735ca7b5500f23b1a1aa907f0b14429479b7434c5d68c44699444d1c26bf5a47df750d3dc13986cb98049dd","ssdeep":"192:mLhAtZO73iyDDW7qE/cVgnmnh8lbIJkUgPuiPBvDDQ7q+tI84gE:QA7OLisDUqE/q8lbIYuwBLDCq+tH4T","tlshash":"663226adc9e495231d26b5216388be7c85f0f06aee314e55f81ec2104ad3f9f15e0e79","first_seen":"2025-05-21T19:03:48.568644Z","last_seen":"2025-08-13T11:06:58.695546Z","times_seen":1387,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":150,"dns":15,"connect":4,"send":0,"wait":1,"receive":0,"ssl":133},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_main/fr/dictionary_deba1ba0958d27462123416dffe63c0e.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_main/fr/dictionary_deba1ba0958d27462123416dffe63c0e.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-fc2bb38d43b4473b8d25e3571a278979-868f3f7f1c1d2a3f-01\r\nlast-modified: Fri, 25 Jul 2025 08:07:07 GMT\r\netag: W/\"7b5d5ae852327daf9303b36ef83d1ab4\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Fri, 25 Jul 2025 09:19:33 GMT\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 3451\r\ncache: HIT\r\nx-cached-since: 2025-07-25T14:35:58+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":151539,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"632ae9419d2795eb26b1a5e378fd80e3","sha1":"d522e5bf81c750d0985ff186f09a748e1e00e8a4","sha256":"8a1d8913f8c6ac64ddf42d3c4eb0c741579f046b3faed6023b41114125047bb9","sha512":"f705be126b4715a4f1790fbb773e726c6f377c4dd2edf5becd5b7f191c39f39ba17c14faa889fcc5aab2152c53c49d965a5182f32dd6e76149c5ee8131457224","ssdeep":"3072:8W9MOMMI9Z0rkk7etAfRg0oEGW+rjH+OmScln/MMcV2Ld2blUApx41S:dM0IsoJ2fJohWojHb77Vzbh4k","tlshash":"c7e31a1b68cc5ebf0bca22d9fe56ef4691b40009a6b7c421d8eac20e7197ed5817714f","first_seen":"2025-07-25T13:18:57.865389Z","last_seen":"2025-07-25T15:33:58.700446Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KFGPRJ2V","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:39.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"A2:8A:24:AD:51:7D:A4:62:BB:34:6F:C9:21:A1:B9:E1:2D:A6:0E:C1","sha256":"9F:B9:94:8F:84:D3:44:71:A7:81:72:C8:80:4D:14:02:E3:E0:30:0C:F1:17:27:83:00:82:D9:C3:68:D3:B3:AF"}}},"request":{"raw":"GET /gtm.js?id=GTM-KFGPRJ2V HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 25 Jul 2025 15:33:39 GMT\r\nexpires: Fri, 25 Jul 2025 15:33:39 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 25 Jul 2025 15:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1341:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1341:0\r\nreport-to: {\"group\":\"ascgcycc:1341:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1341:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 121283\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":350341,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4828)","md5":"e2e95104df792b9db6c6c5f64715575f","sha1":"c742d543624a6bc2eff37b68314b5be98151ce14","sha256":"7b29eef9512b8b941e25d38fb163b4a83d1f7c286f3bc08d86763a4ab65c27b4","sha512":"ddc2885a88cb9885ea193a39589b71980887783ac31dfdfc46f714c8e6b7d11b256c3c2e5f811a928d4b880228cba5d940520b455fc3593e872d6ee17ea1726f","ssdeep":"3072:mI14/nBZfZepoxgR064097T0qoZwv08hy0ZGUW41AbIIiNTs2ZsOVfxgQJTAmtcT:qOaxb3avTrJNTaAxgQJEQcB7oHy","tlshash":"73742acdb3c674628392b478503f014bb17b69a2f48cd894f186d8e42e74a6a4277f7d","first_seen":"2025-07-25T15:33:58.703051Z","last_seen":"2025-07-25T15:33:58.703051Z","times_seen":1,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":116,"dns":15,"connect":8,"send":0,"wait":27,"receive":32,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/e93355a6/desktop/default/commons/app-6c596fd6.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:28.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/e93355a6/desktop/default/commons/app-6c596fd6.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:28 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-fb7b25e8d6bdc6fd3017955470d53c17-021553728a33aba2-01\r\nlast-modified: Fri, 25 Jul 2025 08:59:42 GMT\r\netag: W/\"3add269b7ede524b11c8aa91e50986d7\"\r\nx-amz-meta-mtime: 1753433980.437970624\r\ncontent-encoding: gzip\r\nexpires: Sat, 26 Jul 2025 09:31:26 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 21708\r\ncache: HIT\r\nx-cached-since: 2025-07-25T09:31:40+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":137774,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65476)","md5":"3add269b7ede524b11c8aa91e50986d7","sha1":"18f7cf0aa9bb237c79855e554e2f2eb556ebbe11","sha256":"caaa1a89e69cb16f9af89570f58fa877136fafa28eaca5f4c283381ce7616adb","sha512":"146ade1c31b15ac94ad29dab002582c1bbd5013a7903dd5d608a5fbd800953ae0130628118faaad21123eaa063681d49176f9aad887cdc55671f05d52c664772","ssdeep":"1536:A0UiXH2DHJjIAG3wvvjE+gjmZVBICrmh1G5YGf7BMr3y6MPe+PWKIZ1Ntm:/XHUp0qXjE+gjmZfmmYGNMrokN0","tlshash":"74d3d5dcf695b03117e721b5407f150bf23a7898680ac0a4f266e8d53db888ea167f7d","first_seen":"2025-07-24T22:41:32.625838Z","last_seen":"2025-07-29T04:15:45.275749Z","times_seen":38,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_accept_language_parser_B6TW5FDZ.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.900Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_accept_language_parser_B6TW5FDZ.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-ee269d2e64229fcd6499c1592e9b40da-dc5140b3e180fb17-01\r\nlast-modified: Thu, 24 Jul 2025 14:07:04 GMT\r\netag: W/\"e3f1c4089db6b910890e85d97a2e2066\"\r\nx-amz-meta-mtime: 1753365757.617102481\r\ncontent-encoding: gzip\r\nexpires: Sat, 26 Jul 2025 08:00:53 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 27156\r\ncache: HIT\r\nx-cached-since: 2025-07-25T08:00:53+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1297,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1265)","md5":"e3f1c4089db6b910890e85d97a2e2066","sha1":"85828920da3c3fd7856acde184e835ac314295cd","sha256":"6c28afe5a52e0f9b1138fe498b254c8671058a058b555651ccae8e91e7534614","sha512":"0fc9e47336d93f4f6ae6dbffaaee9145b46d4ba6c75aad12acbded8fc3468d1d8d29fb76440dba071ad362f725287ea38b5f48045e51c39fd5bf842f5ec0abd6","ssdeep":"","tlshash":"d821f09fbac2b5908394184d4e2ec055f23a2957641ce5fcd625e6827c407a186f2c0d","first_seen":"2025-05-14T05:06:37.190071Z","last_seen":"2025-08-22T06:38:14.173196Z","times_seen":1811,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_popper_js_E2H7ZPXQ.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_popper_js_E2H7ZPXQ.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-f55fe13c23d6dbe7771f8aad84ec64a8-83c22839d95a7046-01\r\nlast-modified: Fri, 25 Jul 2025 09:59:42 GMT\r\netag: W/\"3cf0cae38afae9add22f7884e5061231\"\r\nx-amz-meta-mtime: 1753437442.531732958\r\ncontent-encoding: gzip\r\nexpires: Sat, 26 Jul 2025 10:54:50 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 16719\r\ncache: HIT\r\nx-cached-since: 2025-07-25T10:54:50+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21252,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21232)","md5":"3cf0cae38afae9add22f7884e5061231","sha1":"2a41037501375a439385a76a047876619683418f","sha256":"322482e3beae5a985d069beea981614510fda90a5df7295b776a324d461fc43d","sha512":"b61ed44fab86cdc14e9e1b8af7924afec6148d03d878007f89d1beb7a24a1862efaa2d6b43dcc04df35c6920ef742ffc5a59a2434b798554394d3e28f88b7a13","ssdeep":"384:nPP7iayBuR9vu3z1JXvykd2+LaqHdC6RjVnTGm/7piCXmH8kCCcvJTCyCu+meAxu:riZwO3XvO+NMSJt3XmckXcv4nxJAxiH5","tlshash":"7d92a28c7684b0a287a7a2a7a07f860f71376865650e9004f59cf6ec3c35dba507bc7d","first_seen":"2025-05-14T05:06:37.148925Z","last_seen":"2025-08-22T06:38:14.115567Z","times_seen":1787,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/46fe3f96f4140750e81ded48911f3e30.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/46fe3f96f4140750e81ded48911f3e30.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: application/json\r\ncontent-length: 747\r\ntraceparent: 00-2e622d03fc54b102d0c433adbbfc8f0f-46b3d1ebcae54f3b-01\r\nlast-modified: Thu, 27 Feb 2025 13:26:35 GMT\r\netag: \"f4e90636ec9cff061c4301b3cefdd0d6\"\r\nexpires: Fri, 25 Jul 2025 01:59:54 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1623\r\ncache: HIT\r\nx-cached-since: 2025-07-25T15:06:26+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":747,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f4e90636ec9cff061c4301b3cefdd0d6","sha1":"c506efe9c3672c58434ea10021dab0ad81b1ad98","sha256":"30666f138ccc12735e2f8a6405ddce4a3d8756b9445e3b2732fa2970f14dbcea","sha512":"2db1a1a4419db47b4256906f9c660b85479bb83d2ab0757d1b1c24cdf94d97bdc4a7140d5d8ea31cbf612a77ba1ae6ef46bbd77eb42d24b6d83afebbc46c9216","ssdeep":"","tlshash":"2a012d94bde4083719374ca981a2595d63844b0398297c087adf3d4c5b2096d056e9be","first_seen":"2025-03-01T06:06:39.041672Z","last_seen":"2025-12-04T11:53:51.978889Z","times_seen":4943,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-76257.world/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-76257.world","domain":"1xlite-76257.world","tld":"world"},"ip":{"addr":"91.186.206.73","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:29.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-76257.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:56 GMT","end":"Sun, 14 Sep 2025 11:35:55 GMT"},"fingerprint":{"sha1":"31:43:B4:0C:D2:98:AC:D8:9F:DE:06:86:21:47:6E:95:8F:00:F9:E1","sha256":"1B:73:D9:EE:BD:C6:BB:28:5A:F5:F7:31:B4:05:54:84:74:83:B3:58:8F:D0:0F:1C:61:56:FE:BC:C3:63:34:D7"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-76257.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-76257.world/fr/block\r\nContent-Type: application/json\r\nX-Lang: fr\r\nX-Uuid: 93324424-2bca-463b-8ddb-0019ceb4ea2a\r\nContent-Length: 98\r\nOrigin: https://1xlite-76257.world\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=fr; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_3030c_%5B%5DMS%5B%5Dnull%5B%5DWLSmart%5B%5Dgeneral%5B%5D7113192_d28985_l62141_clickunder; postback_watcher=; auid=W7rOSWiDo8cKf5blAx7NAg==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 25 Jul 2025 15:33:29 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\nx-dt: 285\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.053, wf-uht;dur=0.011\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c10c89a84775528b0add035d6b226064","sha1":"404adf280de4af9dc50cd1d113a350e78d9ece30","sha256":"ec8e2f8b043275c906861dd120b1d498a78789b63ebf3360f6d4420183af7dba","sha512":"0d7f180081cb2537bb20962493c8e2325989d558302f40c1d173a9e73fc6663946a2085059e8b5196cbcbf9b545be2149a7bd8394da137957a26847e4f015d90","ssdeep":"","tlshash":"8e70000888a20000000800a083880e2cea30a2022000882230c00a203000ba0083aa02","first_seen":"2025-07-25T15:33:58.714083Z","last_seen":"2025-07-25T15:33:58.714083Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-25","alert":"Sinkholed","trigger":"1xlite-76257.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66\u0026cx=c\u0026gtm=45He57n0v9180563600za200\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-76257.world/fr/block","date":"2025-07-25T15:33:40.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"A2:8A:24:AD:51:7D:A4:62:BB:34:6F:C9:21:A1:B9:E1:2D:A6:0E:C1","sha256":"9F:B9:94:8F:84:D3:44:71:A7:81:72:C8:80:4D:14:02:E3:E0:30:0C:F1:17:27:83:00:82:D9:C3:68:D3:B3:AF"}}},"request":{"raw":"GET /gtag/js?id=G-7JGWL9SV66\u0026cx=c\u0026gtm=45He57n0v9180563600za200\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-76257.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 25 Jul 2025 15:33:40 GMT\r\nexpires: Fri, 25 Jul 2025 15:33:40 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1099:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1099:0\r\nreport-to: {\"group\":\"ascgcycc:1099:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1099:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 153214\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":479282,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12571)","md5":"e5a56c8be5732fc99cb5ab522900a537","sha1":"c3499bf4c29388eb182f36a27bdcaa83fef9326c","sha256":"916205e144e80670f4fcc9d528c86e701b3c5b410bc37090c67026929fe3ea75","sha512":"f599adddc813ff81044199692fef916e5fc5abba0ca19f0e3ce44b3f3615b5fbde7f2109e7ac15848c2335ed37824ee130f38330e5dde80697dec88e7292d8dd","ssdeep":"3072:xV4wxwwmzivrnCZfZepoxWvO0v4007TvqoZwv08hy0ZGUW41AbIIiNUL2ZsOVfxx:COaxWH0avTrJNUJAxgQJEQcBjokPP8Ko","tlshash":"f0a4f8de73c674225296f468503f02cba97b28a2b49cc8aab1c9ccf02d7455a5177f7c","first_seen":"2025-07-25T15:33:58.716746Z","last_seen":"2025-07-25T15:33:58.716746Z","times_seen":1,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}