{"report_id":"1dcc7304-c2bd-4a87-929e-33b4eb689b3d","version":6,"status":"done","tags":[],"date":"2025-07-19T20:17:14Z","url":{"schema":"http","addr":"refpa14084.com/L?tag=d_1558737m_3028c_[]MS[]null[]null[]toto[]19220_30993_d70971_l138315_clickunder\u0026pb=a97213fad9d648e1a13d8fe56a5b07c1\u0026click_id=28981_286039_2_3_s6_2024106","fqdn":"refpa14084.com","domain":"refpa14084.com","tld":"com"},"ip":{"addr":"91.186.207.45","port":0,"asn":0,"as":"","country":"Iran","country_code":"IR"},"final":{"url":{"schema":"https","addr":"1xlite-14085.world/en/block","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"title":"1xBet"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-08-23T20:17:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"1xlite-14085.world","ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-06-10","domain_rank":0,"first_seen":"2025-07-18T12:09:43.923632Z","last_seen":"2025-07-18T12:09:43.923632Z","alert_count":19,"request_count":19,"received_data":982546,"sent_data":24277,"comment":"","tags":null,"fingerprints":null},{"fqdn":"refpa14084.com","ip":{"addr":"91.186.207.45","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"domain_registered":"2025-07-09","domain_rank":0,"first_seen":"2025-07-19T10:04:14.005176Z","last_seen":"2025-07-19T10:04:14.005176Z","alert_count":1,"request_count":1,"received_data":286323,"sent_data":640,"comment":"","tags":null,"fingerprints":null},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":0,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2025-07-16T15:33:00.505122Z","alert_count":0,"request_count":2,"received_data":1684,"sent_data":1944,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":7,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-07-16T15:12:46.836417Z","alert_count":0,"request_count":3,"received_data":1634,"sent_data":2488,"comment":"","tags":null,"fingerprints":null},{"fqdn":"radar.cedexis.com","ip":{"addr":"45.54.49.5","port":443,"asn":63911,"as":"NetActuate, Inc","country":"United States","country_code":"US"},"domain_registered":"2009-01-07","domain_rank":3035,"first_seen":"2013-11-27T02:31:43Z","last_seen":"2025-07-18T04:56:03.050711Z","alert_count":0,"request_count":2,"received_data":1415,"sent_data":852,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.no","ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":25607,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2025-07-16T15:44:29.202169Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":754,"comment":"","tags":null,"fingerprints":null},{"fqdn":"v3.traincdn.com","ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"domain_registered":"2022-11-10","domain_rank":0,"first_seen":"2022-11-25T10:00:40Z","last_seen":"2025-07-18T04:56:02.959262Z","alert_count":0,"request_count":69,"received_data":5620713,"sent_data":34779,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-07-16T15:11:30.352104Z","alert_count":0,"request_count":5,"received_data":1968064,"sent_data":2519,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-19","alert":"Sinkholed","trigger":"1xlite-14085.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/a70d3252/desktop/default/commons/app-b02bd1c8.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"cdd59493abdbe2a455843601a7d4d00b","sha1":"e5fa84f9f4dd2fdd114b1044ccf29eb85379a5e2","sha256":"45d4d2a0f69c09bd60f79cb1e82df89da3b82a98852eeb3dcdaf3e51d6931aeb","sha512":"702ef7e26e61ecab4a590f9d943a95cc8d4a9b33018aa2f26ba3101597444b8de3166de409e3538ef0489b8d13028deee74e9fee0c9dd4d61a4bf3c3407ef6bc","ssdeep":"1536:A0UiXH2DHJjIAG3wvvjE+gjmZVBGCrmhjG5YGf7BMr3y6MPc+PWK4s62tm:/XHUp0qXjE+gjmZxmkYGNMrii20","tlshash":"21d3d5dcf695b03117e721b5407f150bf23a7898680ac0a4f266e8d53db888ea167f7d","size":137774,"data":"","first_seen":"2025-07-09T10:12:06.343396Z","last_seen":"2025-07-23T11:05:54.737316Z","times_seen":261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/hd-api/external/assets/hdf.js","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"40eaa62ed21bd753172f4c307e2a41d0","sha1":"f7b03c6b004562311c8ca00466179629738b2a40","sha256":"60fed8cb321dc09e4e1d910b5822bd8f67d53d0962a41ddc9f5ac33edd4e2213","sha512":"f601b9e02d47a4c99a4e8f5d6814483c1b0564b0509868318462f5d57e7b581b1644d754e051a8012f9d6172a42bfc0eb4944ae555374320ea9495042c752ca2","ssdeep":"","tlshash":"4e81432660ee2d3153639052d13fe5eaf669a8073968ec4c71ec5d4a0f50f6185b2e3a","size":4083,"data":"","first_seen":"2025-06-05T12:46:19.083802Z","last_seen":"2025-07-24T07:52:37.98371Z","times_seen":1121,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript,export const meta = import.meta;","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d772b7d405b447ecee54ab61cdd5108","sha1":"dd65fb9cd5a7cb94a40fe161f4f72303a61eb3b7","sha256":"b90ff694e492935b6036fb7e878d365dab51aafa46f0afb1e33414e7ecc3307b","sha512":"a3947640368602c9fd9dee887bb1a7e463890ff42e2ddd292c377593c5fad246d3e3363e9898cd1e5ecda9c59b5cf7c7cd0acfc2a5a1e5d3acec2cf0d62e20b2","ssdeep":"","tlshash":"1f800003800802380aa0c880028e80b00ab222203f00c08328088b302e3b08aca332a2","size":32,"data":"","first_seen":"2023-12-06T14:32:28Z","last_seen":"2026-04-04T22:05:16.692096Z","times_seen":7916,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/a70d3252/desktop/default/Page.Block-99cca318.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"aac8def60dbf7ae9e7f51ef0fa542bec","sha1":"14be02d620abab789eea941b7834617c0112d4b7","sha256":"af031d0af3ce336cc64791a4046d7884c131b62e5f277b60e76680b1e0ffa1ce","sha512":"d88e6e2325ec47814cb9a9ac0d42e20ccc856a904c1c46542fcf5b745a5073f74a5205c1f2b53ae89b6d16ed3c0ca558b01f1069efd2fd6f4877a89842c8e09b","ssdeep":"","tlshash":"53f09e9b6562bc8d95e610d343b785b7b88c79ba0649596006a1c8a632f6c57081124f","size":476,"data":"","first_seen":"2025-07-16T07:17:14.739178Z","last_seen":"2025-07-24T09:34:40.931131Z","times_seen":152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_accept_language_parser_B6TW5FDZ.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"e3f1c4089db6b910890e85d97a2e2066","sha1":"85828920da3c3fd7856acde184e835ac314295cd","sha256":"6c28afe5a52e0f9b1138fe498b254c8671058a058b555651ccae8e91e7534614","sha512":"0fc9e47336d93f4f6ae6dbffaaee9145b46d4ba6c75aad12acbded8fc3468d1d8d29fb76440dba071ad362f725287ea38b5f48045e51c39fd5bf842f5ec0abd6","ssdeep":"","tlshash":"d821f09fbac2b5908394184d4e2ec055f23a2957641ce5fcd625e6827c407a186f2c0d","size":1297,"data":"","first_seen":"2025-05-14T05:06:37.190071Z","last_seen":"2025-08-22T06:38:14.173196Z","times_seen":1811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_c29ed659a5.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"b95f2867a4f69c6f87508d4376778ab8","sha1":"34b733244053bb0634826b593e14e88782e81680","sha256":"f318dcd075506078ef1811c0a12962c5fed8811ee39cc3c77691a81063e05340","sha512":"dd8d736d26cad47776c4e4706beed168dedd02d25dfa0570a7f4874fcb260ff78951ac7cb94d91d225837db6a33eebf5b236932fe7b2e2014a1c9f9d309b0c61","ssdeep":"384:6tP2qT4YEUXGPYsH3M95B59IBMNUiLPqnIJdlh3uY3V47Czazgjdk:SP2qT4pUX/sH3M95B5qB6UEPME1uY3nk","tlshash":"9972a7a6726c3a2683d648f240355603e72b0cb979104499fb7c6edb7c198cd42ffa78","size":16157,"data":"","first_seen":"2025-07-01T14:08:29.773148Z","last_seen":"2025-12-23T22:34:35.075094Z","times_seen":1892,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/captcha-api/assets/hunt-captcha.js","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"463ec5b64c24135eb67e671110b5d44b","sha1":"a7bd6aa5fc80405ffcb6d9e5ad1c51590e00ef7c","sha256":"117405693cdc1b81d14087d8fd50ecb1709a19fb6d7adb936ef31d7e8f6ab3c7","sha512":"9ba7157f7048b9491514dba2c3d2caed469158c8e2784e3d665ab566cda313d5222b650f470233ba3815821897da0b7a21cc99e6a537cb5d1a1f06a80417abad","ssdeep":"768:B7kSWofi7ZSUjCrT9gytyjTX4uV52Ut0S4Wf1baEedd60pNaJbI9mieLkoaTgkaS:C4i1Jn9j/N+osOS0VYz3zvU6mw","tlshash":"718322d034d9d234e3c3eae2a5bf0de8e97754cdfe8c094fd056a108a4d8db295a5a31","size":86579,"data":"","first_seen":"2025-07-16T08:51:00.52683Z","last_seen":"2025-07-21T07:52:30.016429Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/en/block","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"7bcdb973ab8af8e24ab11cb554a1ba6e","sha1":"24e8a10f240f2b06f81d7c173cd0a90606641fc1","sha256":"916ec4eb9b485eb47f43a17fe212e84e4b72600b45eb6d4588599ad495a57fcd","sha512":"1d890761e2a00081531fda5c0489ebf4df4140a9748bdc6d97bd355023e3e4ab09e19663ab319cf775e28ba71d99ab09f20d5414a561fa10fa3be2cb874484ca","ssdeep":"","tlshash":"e380044710411010cdd351d040573c44001044f114c4dc500040fdd11c53030110545c","size":34,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-04-05T04:25:20.960836Z","times_seen":13018,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/en/block","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"bc51ed8c76553717f10d58b2df60fd76","sha1":"e2d03a8fd8d280074b226c288880f9df299c7cb1","sha256":"bee994eaf88453f6343ba57571a069054c12c9b4e42f8cbad4f2ad75c7fb264c","sha512":"3207379b65060d0e80623fa966633b5ea31358b20de9aeb2c9416fa7d29f1972bf30809e39f0b826565e569d856dd2498ee0ec5285271c127f54daa7cf391911","ssdeep":"","tlshash":"489004473441140c47d7175410375c4c0c1500705441df400451dc510d51031114545c","size":39,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-04-05T04:25:20.952244Z","times_seen":13011,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16664555628\u0026cx=c\u0026gtm=45He57g1v9180563600za200\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ed10765ed2d02b59be4a4df87fa5c04d","sha1":"4dc05a7de64720a1934bbb90f988d4e7e9f5cee1","sha256":"a6c5727039976888bc3a2243fce58275ad311944037979292f5b6f01b96cd520","sha512":"feeca48e7cb679785f50456652851dc8a058909e16374a242ee0f96476af2b71e91370ce3f51f2b2c8c46b49ed6d0ef53a112f1c1960abf70f5767b528d3e542","ssdeep":"3072:w20ln5NqPx370x5pAW300B+1fOT0GBRznCrC14Md38nbR4mQC5FoAqhRctjND4gV:ILsr0x8L40bRYqFoAqbSj9Dz","tlshash":"527428cdb3c674229393a478503f018ba57b69a2b48ccc95f185cce42e74a9a8177f7d","size":356586,"data":"","first_seen":"2025-07-19T13:38:09.829937Z","last_seen":"2025-07-19T20:17:18.838751Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/a70d3252/desktop/default/DC-91ef4e0e.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d89cdfa33534b217cd72c431f203b494","sha1":"10bdddc449e29d097e1a3571580657d197e029fc","sha256":"d9e65032547a90fb16de5c8e4477252c62961d74ab72e0f4fcfd183933068806","sha512":"33d6008c76bcae185cea6f8baf4c042c4dcb1c05d0a3102050b49a4280b1cb6be0128976cda8ee620573c2e52b882942e5a28fd1c1d6a93571f07f19e68fca20","ssdeep":"","tlshash":"9551518a76eba42109f4406cbc3a26519623b641d40398ecbe7d6fc16d96d0fb13e835","size":2656,"data":"","first_seen":"2025-07-16T07:17:14.744528Z","last_seen":"2025-07-24T09:34:41.099414Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/en/block","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"6cc39c97d24ea677a3b8b33bc06ebe37","sha1":"753a3cc5a6c5cabf40beab71d3955f0d0b9301ee","sha256":"b2c91f15882c6636b78fc8ba29b53382acd75a4b97ead9121199b1a1781be2fa","sha512":"6871273367b143f70cbd260cf5ef62d4b72b688450c190ddcd725d05f1e4a24ee7acac75563b5661335dfa6f51ed81abc179b7e474938973d504527967cca828","ssdeep":"768:uHO2CoriX91Rtu7T9gClqEI74uVSIt0I8WJRb2eKdd6mlNavHI9mie/koITgkaqn:nCiN1RBR7QKMMKoHm9NPSSIe","tlshash":"218343d034d8d631e3c3e2e2a5bf0de5e97794cdff4d094fd0562108a8e8da296a5a31","size":84758,"data":"","first_seen":"2025-07-16T08:51:00.545545Z","last_seen":"2025-07-21T07:52:30.048599Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"radar.cedexis.com/1/23802/radar.js","fqdn":"radar.cedexis.com","domain":"cedexis.com","tld":"com"},"ip":{"addr":"45.54.49.5","port":443,"asn":63911,"as":"NetActuate, Inc","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"82dec77fd0353c7c71ce053b8601387e","sha1":"fbbca95419e1d0c042e0a5fdf10f380aca66188c","sha256":"39f2b7b0fa78d37d0c84d2d6618bd635d86fd683d9bcdd5729850cb2a62522f7","sha512":"6872c895cb44711405e57a436dfbe15d094f9159e11ee2b89983c63b1f18f6acbdfaf0ccbb5e48b2bf24f366f16584c660bca4b6b14c048a134bb77a60f6563e","ssdeep":"","tlshash":"02e068ae9391a318537a2dbacc4e060ba0f6114888e5e4e029f5c2c00461bae072bfb4","size":390,"data":"","first_seen":"2024-02-13T14:23:26Z","last_seen":"2026-01-15T12:01:08.184588Z","times_seen":7496,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/a70d3252/desktop/default/vendors/plugins.vue-js-modal-68f6d8af.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e3c1d147cd7b7419642af6c4f889a6d","sha1":"51c940a81be7013202d5b7745959201fbc108e74","sha256":"0d55cc88b766f0e5deceb32c8391e4167fd5668f3862a264d38aacf0c0542d85","sha512":"1ccaba9a80289690a906601dc56d21a0fbb61c36331922af1035cee0c3aeeede1738d0100eb0c06ae08ed777550640f6730a360fd5bc44642817c16d60607fe5","ssdeep":"384:HBy0a9vOeCGAZIXfK2rVsAdm00uow4HQEjacGXGQVe6ubq3:qHyIXfPt4wE9GXGQcbq3","tlshash":"9cc2298977d8307442db5573627f2b0ab23e295474269888f772e8e65cb864d206ff3c","size":26667,"data":"","first_seen":"2025-07-16T07:17:14.68788Z","last_seen":"2025-07-24T09:34:41.021866Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/d71c147601.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"7149806e71b7f51bea19d1b4dffeee18","sha1":"7f66b0ed9605832e6ea79c76813e3acdf1bce82e","sha256":"9aec8056434d23e52a0d6c0c5a6cf8816ff155546b31340ff1a5cc373c3f77ff","sha512":"242b714cd65bdc609334eb5544b61e7f74409ffeac85c5d9d589619b4a3d278c0462ea133865a1cd6681f07025d29b0753ad8a6efc8e8934ebc3381e0543952b","ssdeep":"","tlshash":"5221aa303074e56b0ffe4bd8c8331850f72c2158673665d176cc6fa10269506525e777","size":1166,"data":"","first_seen":"2025-07-16T08:51:00.525988Z","last_seen":"2025-07-23T11:17:13.065769Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/90bde40cf4.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"56b6f377aaac9200d0f33aec73396a57","sha1":"0cfe766fdf6196f17224e7bcc1eda6d1879eef45","sha256":"916a1d0b1fa7946a897d17c21c14ac6a0da20dbdd882c51049172f4a7253d9eb","sha512":"a2347f3df49241c6d3e7c4d35366e358c7aa243eac6fd1d2e6281279ee2c6f6d3afed5fcf939fbdaca6dd2ee7bb411f8026447fd20be325838c708feace7b5b8","ssdeep":"","tlshash":"8611c25c6ff53024690d8ec9f04025e70b28326d2ecae4fc446d3b648692b91f54fd26","size":855,"data":"","first_seen":"2025-07-16T08:51:00.48871Z","last_seen":"2025-07-23T11:17:13.079226Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/main-static/a70d3252/check-ob.js","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"c065700c9c8c493403359e1f2baa10d9","sha1":"4630fe729e70bdf63fa7ba6c84ec277fd1f51030","sha256":"1e61f0c82ae82ffcf503fcd4b4c8ae27b32c11e19b882d5d13f3c44364c893f4","sha512":"b2e1c73cb94f5e3ceb35c3662bf4d72baf800a9a7c64318b1db07d50e9c885dbd94821ef3b3916d1b8b4fabb8f45cb588834b41c6a8a7f4d2c3e9c3866083ee7","ssdeep":"","tlshash":"96d0a79fb900211406939267d12f8668807724973f008182500597e069b8f4c4b37895","size":219,"data":"","first_seen":"2024-07-17T14:33:52Z","last_seen":"2026-01-22T06:40:31.153166Z","times_seen":6298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/en/block","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"domTimer","is_inline":false,"md5":"01f4b51b4ba7edd00ad9f0a22259f06e","sha1":"00723d0eda4be61a7b1c542b0a08a94a94a60017","sha256":"9fdac1c31a22f55dbb8ca225ee28c3f7e88b41cce82968af0018c9f8b3bd35ba","sha512":"83d180c9960a53f88da3e3ff8616b4e095b7d642182f5855cfa386d48a19b888fedbde6433d1f926d9dd93d0a813a24590591729a6d8393543dfc490efee2070","ssdeep":"","tlshash":"29500000c000c0c0c000c03c0000000000003300c0c00030033000000c3000c0000003","size":10,"data":"","first_seen":"2024-09-21T15:04:59Z","last_seen":"2026-01-22T06:40:31.224966Z","times_seen":5888,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/a70d3252/desktop/default/app-77a4ae26.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"54ef8bb52135174eaeddab00f5967620","sha1":"2d88379626215a456ae436198cb99818f3ddde36","sha256":"5252c878a4ab72c53973ec074562e0126cf77050fd97ca7d670b69a72d58e7ee","sha512":"ed20d39e1ae42dd5e7a75eb14ed36ef717ab70b4136c61c63b4831b74548599201d34bfb7f05fc7a5d702447ee6518216f1141fe33069ac4aa34207148c9b5ff","ssdeep":"6144:MQhuhG0Fo8owWmGQk6TvR7LggC7jcupMA7Z9ncdr5yPHmwpxi3RGM7ZpJYamVGvm:AhGZgC7jcupMA7HH8ZXCSccPoahlDkX","tlshash":"feb46c65b5c8f48602f34bd9e03a0061e33916bd380ed064f7bdedda359bc09916a67b","size":504573,"data":"","first_seen":"2025-07-18T10:11:01.001227Z","last_seen":"2025-07-21T06:34:34.977275Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/hd-api/external/apps/c5e31d5915661de4393e3f1489b00ebc4497dd48/api.js","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"0b911773e0df627d77f8306c86e228aa","sha1":"0d584bb1a3294e4fe42df4582dcc8a2c8f77f7bb","sha256":"01e4926540498a77d866259516007d41fae1213ab9607db826f011d926fd6006","sha512":"e5b12e33421d07dc3bc364791ff891cee79355ada607fd61a1575065232ea04ba3c5a69983537039b01028ecb3490df5d1da6e10e6a9eede5bab0724af8b88af","ssdeep":"","tlshash":"1201d05d2d8960262bb434d2007bd9fcb3202535ba19d8c5d2ded9d22b5fe89083af9c","size":760,"data":"","first_seen":"2025-05-21T09:35:48.363906Z","last_seen":"2025-07-24T07:52:37.971597Z","times_seen":1326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/a70d3252/desktop/default/runtime-8d46a266.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e6b20e6d5e1c3749197854038bff304","sha1":"ee56b5b8bc285110ff3daec2349d0e3b770077f6","sha256":"7e384804ce913cc9b50e7940ef3bcc201fa77806f009b35fca41d51b0fe03955","sha512":"212ba54f5ccb555e41229af5cb4a7de25e16e20b1c9777ce9177d08a95cfdadf06bdc150b96e970577b38ed14c684448f1db8e84d55d84c3058fdd52d7a9b944","ssdeep":"384:Wr51OT/JCItnkMELNuOEOT/JCItnkj/HfKeqHq678T4te:cCIItkMELNuOEOIItkn8jvk","tlshash":"36820f5e9f1acca71923dcc338213c25585825335c5647aceafee2295018e6c75afe2f","size":18456,"data":"","first_seen":"2025-07-18T10:11:01.016798Z","last_seen":"2025-07-21T06:34:34.98974Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/a70d3252/desktop/default/vendors/plugins.v-tooltip-5e481844.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc2b2a119a466518331ef6cae439ef70","sha1":"ba77237fc8a951dc73ff2526f93423097f991bd6","sha256":"29b40a2cbdd11dd5656b63c920e1f1566de2b195f7771c38991c0bb7c99d242d","sha512":"5d00df6eb885cb1723e9d535b2d985db393aaf8349a708445571af4b8a7077316463f1fc5df97dc578dec80f2da7f65339d7c947f5289b0a8c20ccbd526e9587","ssdeep":"768:HfVkVWzVH5/MptsX4C3mWMZI+7tSCUC8Lk7t8R6zk+BaNfSby/Qw/HBg57bh0PG4:HfWWzF5kpOX/mTPRSCv1MH1WdRfm5d7","tlshash":"2f73c88e72d0f4b203e7b1b5403f620fb2776558b40ad014b6b1e6d4ac3da59a267e3d","size":76822,"data":"","first_seen":"2025-07-16T07:17:14.75065Z","last_seen":"2025-07-24T09:34:41.146356Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_libphonenumber_js_Q6RMKWT6.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"1da464d70e78b04b9b808e82e4ad9487","sha1":"0c79e65516d1525ecb43d13cfb4ccb0631095a28","sha256":"b4c72b8036ca6767ab61490178f901538646f2aa1001cb042caa134174a41595","sha512":"517231e24fe48dcf9e907f32f759a9d8cc0471202dd5a22dd27efffeeb989e0f12b0db848280f03739b2e267ce95feb128ee8e9305cdd4e299c3fd19695ffdb8","ssdeep":"3072:sOU03o4Pwjp9BumfaVpfMHgWH71RgZXo9k:sXpzumWpf2gWH71RgZok","tlshash":"5af3b9f73640ab6775b23b188e4ad28f6f9c9c51cc88908caae7d4db5d61c22707db14","size":158815,"data":"","first_seen":"2025-05-14T05:06:37.168433Z","last_seen":"2025-08-22T06:38:14.163241Z","times_seen":1811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KFGPRJ2V","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5f80255a8995bf1521f98d03e928f6c","sha1":"fb0dbf802380c4b8b02537f382190a255bfe62d7","sha256":"cd0a39ad2c48402c83ccdb8f89fd99fd6e1029dd9082287bb04bc76ee9a8dfcb","sha512":"e8afd520fb4e05b22a6d1ddcacbb41d838cedb2bf968d68d353122d69e74a7a49cc0d5e72e492ff067b3aa184c681e38fb893906839278610565beafe1ff1dd6","ssdeep":"3072:mI14ZniNqPx370U5pAWK00B81ftT0GBRznCrC14Md38nbR4mQC5FoAqhRctjNDyL:rsr0U8b40bRYqFoAqbSj9wDb","tlshash":"c07419cdb3c674628392a478503f014bb17b69a2f48cdc94f186d8e42d74aaa4277f7d","size":347447,"data":"","first_seen":"2025-07-19T13:38:09.810812Z","last_seen":"2025-07-19T20:49:50.753093Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/en/block","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"25d5649935d3d4acfc0a026a302c6001","sha1":"174a94d685711828d37b55da04e9c933534f6691","sha256":"2ae5899ac27717f04def806f58679b891cf3a91e2e8a9e9ed41e7fffef7d9b1a","sha512":"e507e5cd9c026f5dea0e9919720432fa6ccc9719ab74347c0ea0779f0dfdceb4c88fb4ba3cc8200357be207e48cc9d1b967dca3ccb499de78c0ff167a52fa21e","ssdeep":"","tlshash":"0f31636dfa1df0360911b5b9d03f730eeb3328a96825a0048454f896ac34e4fa416dcc","size":1736,"data":"","first_seen":"2025-07-18T10:11:01.027765Z","last_seen":"2025-07-21T06:34:34.995559Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/en/block","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"eval","is_inline":false,"md5":"5236f6ffdc0b23f0b4a458e72ccc2e96","sha1":"e312439a042f4c726d9566784a0783f5b66f86e9","sha256":"ed52fb4838e482b45678a5ac8ab73644c4ea46d6a9ac659c20219094e1fdf5d3","sha512":"f6790148161f5facd6212b07ca1035ee63e55978ca4ba57d7c0e003532ff99a92e8cf4b6f76fd65f23e4ff0e6dde846142b2a787c86c57e9ad537b0878257464","ssdeep":"","tlshash":"57511e55e03c5a3be933462e920f7f125eac55b22a892f5cb61c4bac25c60ce91136cb","size":2572,"data":"","first_seen":"2025-05-29T01:53:36.156764Z","last_seen":"2025-07-30T04:19:29.510227Z","times_seen":867,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/b5f65e3642.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"52adae5818b3da78f15683c64562b5be","sha1":"5ab2238fefeb1718cd8c708bbe8cb573abfef1b4","sha256":"40213f9faec2c389110d76a596f96f972b66107da97229729b9fafd455ea0de7","sha512":"36c4361d2335ef2cd6ea776a18535e72214a75d1c5ef4e88e648e02884c0884a98cf32866ec47715e439af5043c76e588ba7961278dd0c5fbf317b3d19ab09ad","ssdeep":"","tlshash":"8e31a6dcbaf870780e59caaa60392450d78c659d726dfce4e3de8a9422500dd5264f01","size":1663,"data":"","first_seen":"2025-07-16T08:51:00.477391Z","last_seen":"2025-07-23T11:17:13.028832Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb6c450f173b18336c2e9abea528759d","sha1":"fb40dd87e07aad792246a8e95acc805f88cc083f","sha256":"d2e5083f9143289dae242d17d07a3ad2f91cc0a134046a4c1b39a1cde72e3bf2","sha512":"b37cf816c7c2f5a477bf4d278031f0aeee89557a55d29e3b52ae840df230248e4ff7ae459645beb40cd3d2b5c9228389ca5fcc8eb313da3e8c9238d58c8bb657","ssdeep":"3072:xV4wxwwmzrprnGNqPx370/h5pAWt00BL1fBT0GBRznCrC14Md38nbKymQC5FoAqL:xsr0/h8z40bKuqFoAqbSj9KA3qNp+e","tlshash":"b0a4f8de73c6742252d6e478503f02cba97b29a2b49cc8aab1c9ccf02d7455a4177f78","size":476057,"data":"","first_seen":"2025-07-19T13:38:04.553212Z","last_seen":"2025-07-19T20:17:18.785599Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/fb29ee326f.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c915794d5c9c71a400bcc0ee7066210","sha1":"b4ad48f088a5fbca0aff387b9cd36e5e7d40a045","sha256":"cc6b7bc3317bef57e9d08534eaa77b799ece10076a4520bc69b10dcd83794c8e","sha512":"f8f1f542e1e3a12a21e062b9f5f6268da10b52184aa866c166fa771b5e663271fdc88708b3ea3b886da47a8870072cabbaa0d71ca776c295efcb9d68e1f619e5","ssdeep":"","tlshash":"9861a766f4b9d0fb761780856c62b070e32b0dbc579c2461e1e8089c26dd540ab6fbd7","size":3275,"data":"","first_seen":"2025-07-16T08:51:00.515728Z","last_seen":"2025-07-23T11:17:13.077267Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_chunk_7HDOEZTP.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"7e76c08e7f16815131a5f13a10c1efba","sha1":"5f800877b78a0713157fe119bc1a2d9a260f72e1","sha256":"c6f29a0c7c3ed884ccffd7a529fd2fc599e2da1f31af658146f0e36a3f4c00dc","sha512":"564dd139cad65e99fb210caf791d0582fa6312fb19e5c8395296361bd1904c2019d246132d42545f47f43a589bf3900e0468ed262251056c22d8172c55017e7b","ssdeep":"","tlshash":"b421f1e55fb87ba3627e26e4a02e0041e001d53752b4f1d4e294dfb464e945c035b4b6","size":1194,"data":"","first_seen":"2025-05-14T05:06:37.154171Z","last_seen":"2025-08-22T06:38:14.169571Z","times_seen":1811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/8a6741b232.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"a28c079ed8e99f32c7eb0130daaa6e9e","sha1":"ffae5d0896f08982eaad298cc81d1784bef0bcd5","sha256":"321bc8fec36f7e640de026f7f38354adc74914d42b6964f7247927def872d665","sha512":"0736941f2a865da1a246cf26757615afe2a5781c6588add89679e2e8a81fe2499db84a7141beab91c5bfe54d39e973a600e34b8944d4190009f3b71493344764","ssdeep":"","tlshash":"4cc02b214ca421a02e0fcec8787030b1043160063fbdecc00c34130650a3af0f8ab404","size":147,"data":"","first_seen":"2025-07-16T08:51:00.500694Z","last_seen":"2025-07-23T11:17:13.030527Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/en/block","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"28efce97cd94f75f3f8170882354db19","sha1":"1b0fd0beb8a69cf768d434a5e89745271cc290e4","sha256":"806481f4ca9cc3a33b676e5be0f70817587e6c4a3405d6ae5819e8c99ca80bc3","sha512":"c81c6013c9a63340d1474d355361316617ab3f4396f290a436607041cc545c9b9243272fcd63bf7b326d8c7e723cbd7fb256b181bba5abdc34f2aa9c9086c185","ssdeep":"3072:mxVcUV9BWIxm7w44ejW0fCZac3gc6lBqCcZwvy2NocmwFGSK+NqN:mHrBaw44eqSF4CXtqN","tlshash":"de544ecf3f4773ac91752a31221f309177986cd67559e349e7e03a14b8ba228eee7601","size":297696,"data":"","first_seen":"2025-07-19T20:17:18.906127Z","last_seen":"2025-07-19T20:17:18.906127Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_localforage_FJKG5M2E.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"02cf95f00794b77df34632e34a59c5be","sha1":"b64889fb6cbe78a141688ea761a627997ef8a8af","sha256":"bf78b7b3dd6ecbdea04c575edfb6022ed1b2e98c7a9cb9f02ab851ca638f1b83","sha512":"6bcdddd806b94dc8964c98ed5c8481f1ac5e74c707fe5d48760bd7d2edc2b8b52e58b3d7910d0ae316b3e196924d32734ccd5ffc33377df8de471e43c99fd6d3","ssdeep":"768:+DKAOpvMewHFuM96WwZACjzz46zSTKsBE1OvFXfX1UXk:+m8uPW43zEIOvdlUU","tlshash":"23d2c68c7799f02683bb3070907f580ef237a912594d90a0e591e5f86dbd75c822bfad","size":30277,"data":"","first_seen":"2025-05-14T05:06:37.193247Z","last_seen":"2025-08-22T06:38:14.178861Z","times_seen":1811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/en/block","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"a01893d8e129ad16c1e0fc5c7537f411","sha1":"0e46d1bf2718f848d9d596fa269eaedb31204772","sha256":"cbe7b89533bcd75b69f3e54807308551d68242ec1761e63bee1a99fc6e560175","sha512":"074e309b533fc11690afbeab9b4dda85851e086c0ede97936860c7a5c4120ed9a16c6ced4fffdad21ca322f6c6e51577bd4966c5264b4a9780495acc451aee65","ssdeep":"","tlshash":"0d9004f515405350c5533d54401f1d5400f105703c40cc71014cdcd10c710f0335d5dd","size":47,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-04-05T04:25:20.95698Z","times_seen":13000,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/en/block","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"94361ed86ab9b2fbb8d805c2025df46a","sha1":"3f428332f7a1c7196a85c93a373a966d75708c19","sha256":"eee4d228a49a86625f29410cf9a23d145e821a09cbb1f7a4d7557d206872715a","sha512":"c8f4fb7c642357730c6c59e0b49fe3ec16c228d83d4ce402dc62f01e451529b8087240afca37096cebdaaabf47c189dfde5e6e2d780440f663f0e2bc8cf88ff7","ssdeep":"","tlshash":"f6b012df6c8351104a9292e001dec8f0443620303b00cc45544ce7716d2e865de2625e","size":96,"data":"","first_seen":"2023-12-06T14:32:27Z","last_seen":"2026-04-04T22:05:16.684666Z","times_seen":7917,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/a70d3252/desktop/default/Betting.Core-9c80cbb4.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"4204034ad2ffe9e73329038fc4f70e81","sha1":"c53eb5c5c1b329d5e78222dbf671e0bb933f30a1","sha256":"b39d718633549737e24d724870f9c583d19f2047ec71b0494fe71d32cad2c45a","sha512":"8731e5bbc0da96d122a064edd0602578d004fa9d31746bf8d3a2b388cd288747ae0a5483022b185c33318cad9da44ecf6e26ada373c4d4987e44572df8b48ac0","ssdeep":"","tlshash":"7d4174c639e3b844c37b24c680ff01e2a0b86fa4340e15e8e442f9e0707599ac1e9fd6","size":2142,"data":"","first_seen":"2025-07-18T10:11:01.015974Z","last_seen":"2025-07-21T06:34:34.953454Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/a70d3252/desktop/default/analytics-b7a3986a.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9e8dfbeb71861e1be64e13c3885d35e","sha1":"99bacc35ff8c99aceae982440f90d562f6aab961","sha256":"b0e2d167084522273a17c8ff2a2adc88736deabf9f4a5bc254a656ebcdbe435a","sha512":"d71b500bb56d91a9bee8826f8ef97ab59f82079240010fe9f1609a7a6c5d8ba29bd1c32f08bf2817c69765bbf30117184c70105391a0b68075dbbe2959122053","ssdeep":"192:Fj33VeA9wshuQWacwnWJ3vQF+88PQzmqvO6Rx+pkm:F3VeAWbQWacwnWFQFD8PimSx+pkm","tlshash":"7ae19589bc89b47117bb14b8f77f9a0aa076171b24058081cae9d8d43c7eacf511be8d","size":7104,"data":"","first_seen":"2025-07-09T10:12:06.378199Z","last_seen":"2025-07-24T09:34:41.031233Z","times_seen":267,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/entry-304e92fc2d.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c3d8dbf1a2a88947d54b781b237ff3c","sha1":"eb928a4364d82fef203eeb5d587a8e966cfd854f","sha256":"7b32be74cf89901fea37ce259fd3b7eb9e769002a87838a1e88f3bd48f4bbd36","sha512":"a9165c05c68ee55bc3469e7d5f973909aaec4fb8533a6f9a0b13eed17d974844eebd9ce69957d9c18da819a79030712430d8670d549623dea48b629670cba283","ssdeep":"768:HcN7d17/og1lcpMAcKDkw7cj/MxfSTDXXeA8UC8QAAI+6EcqfXw3fVWIF8wSPsH8:c77/og1+FH08UC8QAAIv0aVw62","tlshash":"9dd2a17434a7b0b960da96586739bd53d6c80f9fe88afcd211cb89a713c305884167fb","size":30040,"data":"","first_seen":"2025-07-16T08:51:00.512581Z","last_seen":"2025-07-23T11:17:13.074258Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/5ba4109660.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"213b2e7d5e2418c7839101756ffd789f","sha1":"ae6a93e34e6d03ade43f6b7b77e3327fc16ae34f","sha256":"bfa42920771231a474d91d2a028a5a31f0b6b18e83491d2fcc3b32be7c691fba","sha512":"bd5095cff9dcfb858341f9f71909b9f9a6b54a37e60f6b2f7dfdf5da093f514e8d095bd4e0a56aac657bf77be21a7dc586bd35711b7d52ecabfefcf0dac6ca1e","ssdeep":"","tlshash":"a231d8be13f6e9f1b5498cd9bd0770b097a9094317ef64f8e10a8e15032c482d2138c7","size":1725,"data":"","first_seen":"2025-07-16T08:51:00.53619Z","last_seen":"2025-07-23T11:17:13.053813Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/en/block","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c0928f6d1dbaafe3eca20f0ef309afe","sha1":"33366a8773be6c5aa5d58bb43acceb01148e9758","sha256":"85970dd9e32de3fc8cb68d5d584c4a33fe0ad96e15ad45694c4fc3ea9fdb5333","sha512":"673e73961c52ffe555634b66c6bbf798d6c09212c82b9741d237f2b88d23626649e9af99ec28c30484e63abf4959b80b1aeebd593f3163732381f3d533e6cbf6","ssdeep":"96:ihgdY8q0yK9g9ktQglIelj+5g2mQrv/gKrLhZyaoQ2uBMOfQtSbNClcf:SgdZq0vaktdew6mQrv/vLhRQtSbNwcf","tlshash":"90d1b481e01cfa2fdc23991ef06b2f311e541a6979927b14e6ac872d34931b5e317a46","size":6333,"data":"","first_seen":"2025-07-18T11:11:23.418553Z","last_seen":"2025-07-21T06:34:34.997686Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_fast_deep_equal_XYWIEKOD.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"0af3fe0c072a5bb3b6c731767187982f","sha1":"55db5afb57265dc92fd121fe9ae565ffb2f53b2c","sha256":"655bbe85da91e863401c6f96e24b41f5c2fe51a4245cecc2deb2b8c9600fef30","sha512":"8aab8cafc0b01c11f0b3b4bab4cb8b00ac25007153fd86b45ac8bfe325109c1a5215e89825fde4d7698a64f6c549e8140ed441ddb558d98a5654d52df9d568be","ssdeep":"","tlshash":"a41159c232e3a0d1c3e058cd1001d902f23969e9e4bca0c9d757e6b83cb2a53987672a","size":865,"data":"","first_seen":"2025-05-14T05:06:37.184748Z","last_seen":"2025-08-22T06:38:14.125712Z","times_seen":1811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/en/block","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"eval","is_inline":false,"md5":"3233d70eaa9fa32babe2f590430c79c6","sha1":"3122a2fd28b1249b06ff9603d99af010cc386631","sha256":"9b42781b1a91526c821ab39bb32a2ce534607cd018c0b45d9f4e88baec8728a0","sha512":"a4e4d5999341b31c9facc484db4610c312599dd4701cc3c8209bf46275b5140c3f055c4412a21b897999d893cb2a2bdbf5783997697956183bd773c1942e5cfe","ssdeep":"3072:XgST1IW3vAFYsvoVRPIvDzT3qQoRiMYtt62qxQhw0/UKWQtGG8wNWSR:X7/2viZIvD1r6U79WSR","tlshash":"98641bcf3f46f3ac91652d25227f3c61778818c67559e318e7e0e618b4aa234eee7601","size":309398,"data":"","first_seen":"2025-07-19T20:17:18.832901Z","last_seen":"2025-07-19T20:17:18.832901Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/en/block","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad04ada6d6488b37c94fc594a4827651","sha1":"d36ed9c6f63c8feecee6193fd6a8b5169385ae63","sha256":"27219d364a5dcee4f7d5911e6248404dfbb1852fd7f015351b14f6abbc42a9aa","sha512":"cd95587a3940720ae034f01fc8dba704b50c4bbc3534774d0b6e2876eb18a70785cca3e0cab3c3de41a98341ae25e529144ebd6e27be15ec9ff02d718afe5398","ssdeep":"3072:95ZDSHldKZVlJilrSud7VyHldKoVlJilEOJHR/98tDvkoNS8p:fZDflUrLYltOkD8oE8p","tlshash":"8524a61f690c1c3e911f1bbac54f7d4e5bbc9e1a30cb6c11dcaaae2914e2684466347f","size":217721,"data":"","first_seen":"2025-07-19T20:17:18.910017Z","last_seen":"2025-07-19T20:17:18.910017Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/$_$.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"2cdaa92927f02e0b628f1ef4d7dd8caf","sha1":"9104a2e16ed080b80a42588b8aeb52ebec47ab7a","sha256":"ef8101ffea52addcdcfcc3a83f96ff2d4613fb3ae6d1c16bbe4852387b73a9db","sha512":"31da80bc1b17aa708fef74b0211af91fce1b4a5f518f11e5caa80f50e9a7791b6e94924e381f550fc44a02f4c1d785e5b95fa2464e7968b5cab079612d70d839","ssdeep":"","tlshash":"1ba002935a5ef66c209044860696e74733823d6a3477b1d625bc5509e6061474817257","size":69,"data":"","first_seen":"2025-05-14T05:06:37.199299Z","last_seen":"2026-03-18T19:40:26.76398Z","times_seen":5502,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/en/block","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"00beb9884d0391b342eadd30744b539a","sha1":"3124c0bd593822379d22f13d3e08e70a1bf5ea14","sha256":"92394eec5690449a4f6cfc9a7f97497a69e926b2365cb9a9aad3507a844f835c","sha512":"6fa2e21df54ca406f570cb639529d68edac5de27fd4bc3a9daa8fd0465b583ede1c1cabb550237deb75d8bf88f39e80c1a77777d794826ad3272630108e58661","ssdeep":"","tlshash":"539002492940210685661152001e5c58411491b094906c9140429c551d52020125ab5d","size":44,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-04-05T04:25:20.958243Z","times_seen":13009,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/en/block","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"580b3e56fc9ab6e8b4655f43ee057cc1","sha1":"5dfce565e446f4a167195de9a1a5dd26163c711c","sha256":"446f07b6e56de61d2c2d5b6ba408cc580b492a6d1ede8fc51cfde4ef75a2b382","sha512":"b2350579a3aaa5843b9b16c31782f3d7a4b850ba211d0074aa05d819c89ba49b482eb59aefcfb33f9fc9b270abb7cf7509e1254def23e9f98c116130c47f0018","ssdeep":"","tlshash":"e99002491d851041c56a1160041e1888442488761a40d8d1c480d9551c51630238e45c","size":47,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-04-05T04:25:20.957561Z","times_seen":13003,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66\u0026cx=c\u0026gtm=45He57g1v9180563600za200\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a23a14073626c9ef03c0c678dd87c1a0","sha1":"811d096bb21e74003d1d850900c30d9d10c63b31","sha256":"0189acd19d6d6ae19311947ffee33e8f0a7d0f5570fd587b18db7996f77e58e2","sha512":"94f764422f94e244832bb56310e43e5d8ca8bad6e5024e0a2549fb36a6dae1b6da044f6e21fc55d048222de393c9c31af9265d6481d84e395f10da5126d28da0","ssdeep":"3072:xV4wxwwmzrpJnGNqPx370/h5pAWA00BL1fBT0GBRznCrC14Md38nbKymQC5FoAqP:5sr0/h8640bKuqFoAqbSj9KA3qNp+A","tlshash":"3fa4f8de73c6742252d6e478503f02cba97b29a2b49cc8aab1c9ccf02d7455a4177f78","size":476067,"data":"","first_seen":"2025-07-19T20:17:18.884808Z","last_seen":"2025-07-19T20:17:18.884808Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=DC-14030178\u0026cx=c\u0026gtm=45He57g1v9180563600za200\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"05a15c74e7c81249d1f2209cbb81b353","sha1":"7329ebf885c240a0156479e48fbbfcad505e4532","sha256":"b10df73ab44ff93cbbdd45bd0f367d1f462874ccd0892cbb82e0cd7d00f9ac71","sha512":"81b2b52279b3a2fe3cb1de6ba9fcdc87a9570eb9a0930f3cf0e08956db982db4b118f4ab853593b589810b8ee18dd0f2a00f5ca95a52147df6fddc5b83167768","ssdeep":"3072:yvZnpNqPx370M5pAWh60BM1fpT0GBRznCrC14Md3frRQml5FoAqhRctjNDNgfNU:asr0M8c47RfFoAqbSj9Ue","tlshash":"9f6418cdb3d6b4624393a478503f018bb17b6992f88cc895f185c8e42d74aaa8177f7d","size":306808,"data":"","first_seen":"2025-07-19T20:17:18.858976Z","last_seen":"2025-07-19T20:17:18.858976Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/a70d3252/desktop/default/vendors/app-2a057bc4.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"893ce42b3a34ec31c93484a50e958c04","sha1":"c06e848bb3d5e383dd91e0a68f2676eb801d58ab","sha256":"116e6d9852ce9d909fa47c1af2f2cc2c6b193be03fc61cb4ca1a14fddd9bf6aa","sha512":"ce7cb3a033704f2002a8089c807d6421dc8dd08fd230cd40fc6a3c9cf5f969521c5ae6018cad2ecf08deb32c3270a05aec65bf7696a3b6b4d46a93ed1047ce3f","ssdeep":"12288:ixnLX0yfGFmtCxiqY7g12zyp5LIaKY3JeQdWZKEm3WwV0:WX0yfGFmtCxiqY7g1Vp5ZXJehZCGwV0","tlshash":"00154b99b981f2560aa32ae9c06b1017e32d6e5ebc0cd444f6e7cdd936998047136f2f","size":941435,"data":"","first_seen":"2025-07-17T12:41:26.499143Z","last_seen":"2025-07-22T07:49:32.012197Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/a70d3252/desktop/default/vendors/plugins.vue-notification-8d897e1e.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd924054a3b26f452298f24cfe66cd8e","sha1":"ffd754f3c37a6d442f05ed9ff1c49dc90ba41a66","sha256":"4ae96bbde50fee55c7a9d48fc6b91b2ef95e692b31517bd100d12b32f87ee1ad","sha512":"adee5d0a6fdbd793658ce33e7332af9c73e7fa14b02582036427b102a9f3da91bea897991d339ea2786b17abb490e4aebe7495111d7b3d17e47390cbadd45354","ssdeep":"192:zU1hQXHv3CbfKpqEVwhSIkrReP+SdHtfGA2D3ow5EE9bJ52bFZLy2mp4ilVk:zn3CmpcDkAP+S/fGAWf5VbWbLy2mmijk","tlshash":"014296ceb2c2b4650be760b6402f110af136a96869ab54d4f3b1d4f2adb564c413bf39","size":12563,"data":"","first_seen":"2025-07-16T07:17:14.730482Z","last_seen":"2025-07-24T09:34:41.003171Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_vue_deps_DYMTJONH.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"1580a3cfe81fd30910a49dfe64cc8e7b","sha1":"314144dc49595482ba46c0b85b38d5f73ef73a7b","sha256":"8989a021d20f0fc08c43966a287cbd99e43142a5a0ff42eb232756a101de6035","sha512":"65a68a90c0bbac3609abafd1e200227d970f2a35a5158d699972651cdcdcc4c60e08dbe7e3f605621abb04e016e064f71057c9332d2a4e46dd704aad5ee3196b","ssdeep":"384:yo1wZ1yyQBPgmtk3aNPtFvsddbHyrKe/k43RuD6EgUBBmCWEg4bGy7IbEALvzAdw:lwZ1yyQBDk3a1tF+5E/uDRgQBpWEg2mh","tlshash":"de824be47bb9fd93339840dc80671b53f26948a7844cd074e799ae9330a454385b6bbe","size":19175,"data":"","first_seen":"2025-05-14T05:06:37.162459Z","last_seen":"2025-08-22T06:38:14.178048Z","times_seen":1811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_popper_js_E2H7ZPXQ.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"3cf0cae38afae9add22f7884e5061231","sha1":"2a41037501375a439385a76a047876619683418f","sha256":"322482e3beae5a985d069beea981614510fda90a5df7295b776a324d461fc43d","sha512":"b61ed44fab86cdc14e9e1b8af7924afec6148d03d878007f89d1beb7a24a1862efaa2d6b43dcc04df35c6920ef742ffc5a59a2434b798554394d3e28f88b7a13","ssdeep":"384:nPP7iayBuR9vu3z1JXvykd2+LaqHdC6RjVnTGm/7piCXmH8kCCcvJTCyCu+meAxu:riZwO3XvO+NMSJt3XmckXcv4nxJAxiH5","tlshash":"7d92a28c7684b0a287a7a2a7a07f860f71376865650e9004f59cf6ec3c35dba507bc7d","size":21252,"data":"","first_seen":"2025-05-14T05:06:37.148925Z","last_seen":"2025-08-22T06:38:14.115567Z","times_seen":1787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_base-app_6beaa69080.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"47286570d1c64ce7f0eb3d4d009048b4","sha1":"28e039b364415e8d83756ff16edecd5767b5a235","sha256":"5c866bf9966e47e67616550b3c20555374028d9100defb7e853f469c25019d06","sha512":"d96779e84e5403cf709fd177f4ddf6db7b826528416dad0d2cbf156f0b86eeb9f75c4a66610a4abcc023fee72a68b53c7b82f8120a63a2fa59ccf1ff484c3967","ssdeep":"24576:a5gXLaj/6hUoYAf0/Gn1AjnNVzU42fipn5v:amXLaj/6hUoYAs/Gn1UTU42fo5v","tlshash":"1a657c55b016b8221dd744eb90370643b19c5a9e8496f8a0f6fadcf837ce814529fbbc","size":1436846,"data":"","first_seen":"2025-07-16T08:51:00.45477Z","last_seen":"2025-07-23T11:17:13.025452Z","times_seen":181,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/233d6516d0.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"5f81df557d39d1978b9e69bc6234b769","sha1":"afd789007fef0f81b9acf83a8614e5c7e3c19b51","sha256":"0dfc8424d610d5cf652ef22801e7d26bc97f3b2a1a4c58834e97d17ebe066d8b","sha512":"b9b848ec2136173326ecd4f741ae56509585c2053d985040764b826c524ee54f36ff9ce98e8c314be21bb97486c46cc6370a55f0106ccdfb7a4bf1fdbc30098d","ssdeep":"","tlshash":"f271a6b871f5607477a45ece6c3724b3e2983604341cd4e4e3adca7526db0a281a7d76","size":3805,"data":"","first_seen":"2025-07-16T08:51:00.445879Z","last_seen":"2025-07-23T11:17:13.037446Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/d71c147601.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:52.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/d71c147601.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:52 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-bc755e224a2cc50ab54b5654bbfd37d8-f74daf45a43debe9-01\r\nlast-modified: Wed, 16 Jul 2025 08:21:14 GMT\r\netag: W/\"7149806e71b7f51bea19d1b4dffeee18\"\r\nx-amz-meta-mtime: 1752653611.098586158\r\ncontent-encoding: gzip\r\nexpires: Sat, 19 Jul 2025 12:21:15 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 28507\r\ncache: HIT\r\nx-cached-since: 2025-07-19T12:21:45+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1166,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1165)","md5":"7149806e71b7f51bea19d1b4dffeee18","sha1":"7f66b0ed9605832e6ea79c76813e3acdf1bce82e","sha256":"9aec8056434d23e52a0d6c0c5a6cf8816ff155546b31340ff1a5cc373c3f77ff","sha512":"242b714cd65bdc609334eb5544b61e7f74409ffeac85c5d9d589619b4a3d278c0462ea133865a1cd6681f07025d29b0753ad8a6efc8e8934ebc3381e0543952b","ssdeep":"","tlshash":"5221aa303074e56b0ffe4bd8c8331850f72c2158673665d176cc6fa10269506525e777","first_seen":"2025-07-16T08:51:00.525988Z","last_seen":"2025-07-23T11:17:13.065769Z","times_seen":141,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:17:02.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:40:16 GMT","end":"Mon, 15 Sep 2025 08:40:15 GMT"},"fingerprint":{"sha1":"3A:12:37:38:16:E5:9F:51:4E:B7:1D:5F:1F:C0:84:BB:92:EA:9E:20","sha256":"7C:C3:2F:91:ED:C8:F9:0D:09:BC:07:8E:79:FB:C7:5D:07:2F:F1:59:CD:23:2D:49:F9:C7:19:B9:05:9B:BF:6F"}}},"request":{"raw":"GET /gtag/js?id=G-7JGWL9SV66 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 19 Jul 2025 20:17:02 GMT\r\nexpires: Sat, 19 Jul 2025 20:17:02 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0\r\nreport-to: {\"group\":\"ascgcycc:1077:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 151850\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":476057,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12571)","md5":"fb6c450f173b18336c2e9abea528759d","sha1":"fb40dd87e07aad792246a8e95acc805f88cc083f","sha256":"d2e5083f9143289dae242d17d07a3ad2f91cc0a134046a4c1b39a1cde72e3bf2","sha512":"b37cf816c7c2f5a477bf4d278031f0aeee89557a55d29e3b52ae840df230248e4ff7ae459645beb40cd3d2b5c9228389ca5fcc8eb313da3e8c9238d58c8bb657","ssdeep":"3072:xV4wxwwmzrprnGNqPx370/h5pAWt00BL1fBT0GBRznCrC14Md38nbKymQC5FoAqL:xsr0/h8z40bKuqFoAqbSj9KA3qNp+e","tlshash":"b0a4f8de73c6742252d6e478503f02cba97b29a2b49cc8aab1c9ccf02d7455a4177f78","first_seen":"2025-07-19T13:38:04.553212Z","last_seen":"2025-07-19T20:17:18.785599Z","times_seen":2,"resource_available":true,"data":null}},"time_used":387,"timings":{"blocked":115,"dns":3,"connect":26,"send":0,"wait":107,"receive":31,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:51.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-14085.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:31 GMT","end":"Sun, 14 Sep 2025 11:35:30 GMT"},"fingerprint":{"sha1":"16:6B:F5:11:18:6D:50:EE:C3:3B:30:0B:A0:68:68:59:D3:46:70:60","sha256":"3D:14:FF:6F:86:DD:37:D5:64:D5:5E:13:22:DB:7F:18:CC:EF:48:CA:A0:47:E5:2E:B0:A3:60:F5:9C:AD:CA:7B"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-14085.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 51645942-8645-45c4-a80c-6f76830eb962\r\nContent-Length: 88\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder; postback_watcher=%7B%22tag%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22pb%22%3A%22a97213fad9d648e1a13d8fe56a5b07c1%22%2C%22click_id%22%3A%2228981_286039_2_3_s6_2024106%22%7D; auid=uaJaGmh7/TFe7ahABBD5Ag==; window_width=1280; che_g=f639fbf7-d01f-f016-5c71-f18071eea5bc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:51 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\nx-dt: 285\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.101, wf-uht;dur=0.012\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9d4db51ea2811043d3e48d9f91e5e1da","sha1":"7fa190ee2489f1758ba5c5a147af4f64a69bf988","sha256":"f64c9d48f38bddb6031f1247059bb394c92c13d9de797a7f19b977c6dd7b4518","sha512":"eea283e976a2ea9cd17a546d47d7b54da2c929a4c0c85c1d3d5e98e09352659535f9b621ac2ddf8f56b4afd06289c210f363462b888d96a31b3ae182b3f6016e","ssdeep":"","tlshash":"78700080b880a2a2280a2002220a0c080220c002f0f2282020800a3220aabe2802e002","first_seen":"2025-07-19T20:17:18.789442Z","last_seen":"2025-07-19T20:17:18.789442Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-19","alert":"Sinkholed","trigger":"1xlite-14085.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/a1c3d1930127b405102a4616863435b5.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:52.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/a1c3d1930127b405102a4616863435b5.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:52 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-eee6332462b95d08a534289b2a20eb25-bfe79dc390c73dc4-01\r\nlast-modified: Thu, 05 Jun 2025 12:29:20 GMT\r\netag: W/\"f9867cd5bf362d5d518027321410c262\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 05 Jun 2025 13:42:00 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2273\r\ncache: HIT\r\nx-cached-since: 2025-07-19T19:38:59+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2853,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f9867cd5bf362d5d518027321410c262","sha1":"c8152b1f17123f07b027c8ab359062dc5f7c1456","sha256":"baa9a4f415e8e8b95c2269ac32d20c6850852d9973e47937440e2761a6d8ee65","sha512":"c683f667f713e8d0c05ffd4ff13c8202ab10cb1bd9c808e7f97aa2ed5128a4c4f33e7db7d67d6f75244d0895576d55e8ac9d90d34dcd2a71212c31e9af7898c7","ssdeep":"","tlshash":"0351288df6e41c33012f19bdc0f7666993d84f0fa94a7c283a9d6d8d1bd491900aad3e","first_seen":"2025-06-05T12:46:19.14768Z","last_seen":"2025-07-21T00:36:53.704109Z","times_seen":657,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/c0e02032d1.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:50.089Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/c0e02032d1.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:50 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-c57f03882c298fbc2b3652f066ba23ca-af42e1b502e0055f-01\r\nlast-modified: Wed, 16 Jul 2025 08:21:14 GMT\r\netag: W/\"3d3e04f603cc58802ff96240abbdc3aa\"\r\nx-amz-meta-mtime: 1752653611.10658633\r\ncontent-encoding: gzip\r\nexpires: Fri, 18 Jul 2025 01:03:43 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 67878\r\ncache: HIT\r\nx-cached-since: 2025-07-19T01:25:32+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11073,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (11072)","md5":"3d3e04f603cc58802ff96240abbdc3aa","sha1":"e7e6a5d59c97236922354b40d288736f034a1ce3","sha256":"611f7a963cd4aa278f1ba51f2401247df8c658929b76bfdce45bec08be83d7bd","sha512":"7e83129353390d84ab95d6f7e877ffd699e3b8fdb735ca7b5500f23b1a1aa907f0b14429479b7434c5d68c44699444d1c26bf5a47df750d3dc13986cb98049dd","ssdeep":"192:mLhAtZO73iyDDW7qE/cVgnmnh8lbIJkUgPuiPBvDDQ7q+tI84gE:QA7OLisDUqE/q8lbIYuwBLDCq+tH4T","tlshash":"663226adc9e495231d26b5216388be7c85f0f06aee314e55f81ec2104ad3f9f15e0e79","first_seen":"2025-05-21T19:03:48.568644Z","last_seen":"2025-08-13T11:06:58.695546Z","times_seen":1387,"resource_available":false,"data":null}},"time_used":712,"timings":{"blocked":343,"dns":4,"connect":4,"send":0,"wait":1,"receive":0,"ssl":353},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/a70d3252/desktop/default/vendors/plugins.vue-notification-8d897e1e.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:51.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/a70d3252/desktop/default/vendors/plugins.vue-notification-8d897e1e.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-33f94b416edab6516cf7ddb08cb6904c-74aa4973dacfe0a0-01\r\nlast-modified: Fri, 18 Jul 2025 08:46:39 GMT\r\netag: W/\"fd924054a3b26f452298f24cfe66cd8e\"\r\nx-amz-meta-mtime: 1752828399.076364039\r\ncontent-encoding: gzip\r\nexpires: Sat, 19 Jul 2025 09:10:08 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 39784\r\ncache: HIT\r\nx-cached-since: 2025-07-19T09:13:47+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12563,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12563), with no line terminators","md5":"fd924054a3b26f452298f24cfe66cd8e","sha1":"ffd754f3c37a6d442f05ed9ff1c49dc90ba41a66","sha256":"4ae96bbde50fee55c7a9d48fc6b91b2ef95e692b31517bd100d12b32f87ee1ad","sha512":"adee5d0a6fdbd793658ce33e7332af9c73e7fa14b02582036427b102a9f3da91bea897991d339ea2786b17abb490e4aebe7495111d7b3d17e47390cbadd45354","ssdeep":"192:zU1hQXHv3CbfKpqEVwhSIkrReP+SdHtfGA2D3ow5EE9bJ52bFZLy2mp4ilVk:zn3CmpcDkAP+S/fGAWf5VbWbLy2mmijk","tlshash":"014296ceb2c2b4650be760b6402f110af136a96869ab54d4f3b1d4f2adb564c413bf39","first_seen":"2025-07-16T07:17:14.730482Z","last_seen":"2025-07-24T09:34:41.003171Z","times_seen":154,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:51.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-14085.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:31 GMT","end":"Sun, 14 Sep 2025 11:35:30 GMT"},"fingerprint":{"sha1":"16:6B:F5:11:18:6D:50:EE:C3:3B:30:0B:A0:68:68:59:D3:46:70:60","sha256":"3D:14:FF:6F:86:DD:37:D5:64:D5:5E:13:22:DB:7F:18:CC:EF:48:CA:A0:47:E5:2E:B0:A3:60:F5:9C:AD:CA:7B"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json HTTP/1.1\r\nHost: 1xlite-14085.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 51645942-8645-45c4-a80c-6f76830eb962\r\nContent-Length: 19\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder; postback_watcher=%7B%22tag%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22pb%22%3A%22a97213fad9d648e1a13d8fe56a5b07c1%22%2C%22click_id%22%3A%2228981_286039_2_3_s6_2024106%22%7D; auid=uaJaGmh7/TFe7ahABBD5Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:51 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nx-dt: 285\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.055, wf-uht;dur=0.012\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-04-05T05:45:52.191129Z","times_seen":227275,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-19","alert":"Sinkholed","trigger":"1xlite-14085.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/6293f1a8ca.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:50.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/6293f1a8ca.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:50 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 650\r\ntraceparent: 00-1e9c428bc0d8bc67b0ef151573f22251-d3af646f229e1fa4-01\r\nlast-modified: Wed, 16 Jul 2025 08:21:14 GMT\r\netag: \"5d70ac7829c3ae41ce5c0971c798fbcf\"\r\nx-amz-meta-mtime: 1752653611.094586072\r\nexpires: Thu, 17 Jul 2025 10:52:01 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 33533\r\ncache: HIT\r\nx-cached-since: 2025-07-19T10:57:57+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":650,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"5d70ac7829c3ae41ce5c0971c798fbcf","sha1":"9996ce3a09f56d3e37d67fbe7e1efb301ea2f261","sha256":"0e76b1cd191bd618caea37cb7fb6673d12c7cdff7ea47e939758eda5764a140b","sha512":"252de1044fbdbe3aadeb7c6c5ffac0e6103e9afd2435c3e10e9969fa557bf50ebe854140f285fe01ccee973229429c94c3a388d99a278aa4a6bf495b08bcd3c6","ssdeep":"","tlshash":"f6f0a71a367db1981fb7c1553aa046490056f627d34d70d8b857c15e6d8a6032f9816f","first_seen":"2025-05-19T11:36:06.860726Z","last_seen":"2025-07-29T04:15:45.286067Z","times_seen":1291,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":91,"dns":7,"connect":5,"send":0,"wait":7,"receive":1,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/checker/redirect/stat/run/","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:51.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-14085.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:31 GMT","end":"Sun, 14 Sep 2025 11:35:30 GMT"},"fingerprint":{"sha1":"16:6B:F5:11:18:6D:50:EE:C3:3B:30:0B:A0:68:68:59:D3:46:70:60","sha256":"3D:14:FF:6F:86:DD:37:D5:64:D5:5E:13:22:DB:7F:18:CC:EF:48:CA:A0:47:E5:2E:B0:A3:60:F5:9C:AD:CA:7B"}}},"request":{"raw":"GET /checker/redirect/stat/run/ HTTP/1.1\r\nHost: 1xlite-14085.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/en/block\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nx-app-n: v3-nuxt2\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder; postback_watcher=%7B%22tag%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22pb%22%3A%22a97213fad9d648e1a13d8fe56a5b07c1%22%2C%22click_id%22%3A%2228981_286039_2_3_s6_2024106%22%7D; auid=uaJaGmh7/TFe7ahABBD5Ag==; window_width=1280; che_g=f639fbf7-d01f-f016-5c71-f18071eea5bc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\nx-time-ng: 0.001\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: wf-uht;dur=0.010\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":76,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"27c2416c1b923fecbcfc18d2fe0b93c8","sha1":"c2bf774eb23aea67e9f24cb3c4aef31dc2575276","sha256":"235990e7fa35e87bda0de418d7f4f59e238d6bcc4663db671e512f67f0e1a74b","sha512":"0dc09e9eef985ee0bd7efe165202aa03c9d8a70cedad1dcbcfbdec32a3711429cd462b34fe239fa8e168db64adc310c715659aed143df8a5d04bb950cbdbb09d","ssdeep":"","tlshash":"65a0026e4529289f97ff281b98072d14c6bd6361c3c7d4d4ce17271927e73b005169ad","first_seen":"2025-06-04T08:40:55.36282Z","last_seen":"2025-08-01T00:54:00.468785Z","times_seen":599,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-19","alert":"Sinkholed","trigger":"1xlite-14085.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_block_pages/en/dictionary_9b848ba427b59305d3df2cf0bc5dd080.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:52.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_block_pages/en/dictionary_9b848ba427b59305d3df2cf0bc5dd080.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:52 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-72f8812e78eb5deccaeb4c7aaa032ddc-9e7fb824aa9f6397-01\r\nlast-modified: Fri, 18 Jul 2025 16:06:55 GMT\r\netag: W/\"c557f8f9061794bef4f6b3a5f96cbbb5\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Fri, 18 Jul 2025 17:34:19 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 3195\r\ncache: HIT\r\nx-cached-since: 2025-07-19T19:23:37+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2352,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c557f8f9061794bef4f6b3a5f96cbbb5","sha1":"11add862eba30ce83a5f5c71ba4c53b305fd1774","sha256":"bf6a49d0686075ed43f0babe55f6b983cd8a2db79da3f31cc36c9f4d192130d5","sha512":"fe4bcb92b635b15ad1dfe2fed7b19c5bc14523a435815bb2cd572b20cf4b27150293acdee78753bcefa52eb6505124e20a4b46465fa161f0ad7841716909cc9e","ssdeep":"","tlshash":"b941745b733c55e5392841403d0d6d6a7b520168be9161c8fa8cdc9d332f8cae23b62f","first_seen":"2025-07-18T16:37:04.820544Z","last_seen":"2025-10-30T11:47:43.214083Z","times_seen":2348,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/hd-api/external/assets/hdf.js","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:59.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-14085.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:31 GMT","end":"Sun, 14 Sep 2025 11:35:30 GMT"},"fingerprint":{"sha1":"16:6B:F5:11:18:6D:50:EE:C3:3B:30:0B:A0:68:68:59:D3:46:70:60","sha256":"3D:14:FF:6F:86:DD:37:D5:64:D5:5E:13:22:DB:7F:18:CC:EF:48:CA:A0:47:E5:2E:B0:A3:60:F5:9C:AD:CA:7B"}}},"request":{"raw":"GET /hd-api/external/assets/hdf.js HTTP/1.1\r\nHost: 1xlite-14085.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/en/block\r\nCookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder; postback_watcher=%7B%22tag%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22pb%22%3A%22a97213fad9d648e1a13d8fe56a5b07c1%22%2C%22click_id%22%3A%2228981_286039_2_3_s6_2024106%22%7D; auid=uaJaGmh7/TFe7ahABBD5Ag==; window_width=1280; che_g=f639fbf7-d01f-f016-5c71-f18071eea5bc; SESSION=dd1fd03e55038357478dc06799866a93\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:59 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 1620\r\ncache-control: public, max-age=300\r\ncontent-encoding: gzip\r\netag: 40eaa62ed21bd753172f4c307e2a41d0\r\nvary: Accept-Encoding\r\nx-dt: 455\r\nx-request-guid: 8707421bf7750b1237e10f2427d9ab70\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.006, wf-uht;dur=\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4083,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"C++ source, ASCII text, with very long lines (874)","md5":"40eaa62ed21bd753172f4c307e2a41d0","sha1":"f7b03c6b004562311c8ca00466179629738b2a40","sha256":"60fed8cb321dc09e4e1d910b5822bd8f67d53d0962a41ddc9f5ac33edd4e2213","sha512":"f601b9e02d47a4c99a4e8f5d6814483c1b0564b0509868318462f5d57e7b581b1644d754e051a8012f9d6172a42bfc0eb4944ae555374320ea9495042c752ca2","ssdeep":"","tlshash":"4e81432660ee2d3153639052d13fe5eaf669a8073968ec4c71ec5d4a0f50f6185b2e3a","first_seen":"2025-06-05T12:46:19.083802Z","last_seen":"2025-07-24T07:52:37.98371Z","times_seen":1121,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-19","alert":"Sinkholed","trigger":"1xlite-14085.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/593f1a6d4223015f3145bf447897f4f2.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:52.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/593f1a6d4223015f3145bf447897f4f2.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:52 GMT\r\ncontent-type: application/json\r\ncontent-length: 241\r\ntraceparent: 00-2a6e3650aaa4a0a48602b8434c12e553-cdc5ec432605b03b-01\r\nlast-modified: Thu, 27 Feb 2025 13:24:25 GMT\r\netag: \"39257fbb62736206d5245e08925d7b60\"\r\nexpires: Thu, 27 Feb 2025 14:48:35 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2360\r\ncache: HIT\r\nx-cached-since: 2025-07-19T19:37:32+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":241,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"39257fbb62736206d5245e08925d7b60","sha1":"4c11e3cb6a16b884772b88acdba30a2ad98e86b8","sha256":"3a3cf0f5c60899ffb49d9825516aec475fd7b78cea8ae0b5b58dfb4e658f041e","sha512":"e9b44ac92bbad9c54e500f735f553154c92897c80700709b61b39443f76edbd1d3d38d0d6014e6052cc5f5931b78c55194e308c86336f809de1541efa1e0ac8f","ssdeep":"","tlshash":"58d02e40f2e01833201f94f981b5a109e74b0b03e402a808fa0c21881bac8252426c3a","first_seen":"2025-03-01T06:06:39.04916Z","last_seen":"2025-10-28T05:34:45.039411Z","times_seen":3826,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/$_$.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:51.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/$_$.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 69\r\ntraceparent: 00-59ce7396f7e1cf805f569282cc1bb672-d3a9d2f4d38da48b-01\r\nlast-modified: Wed, 16 Jul 2025 08:21:14 GMT\r\netag: \"2cdaa92927f02e0b628f1ef4d7dd8caf\"\r\nx-amz-meta-mtime: 1752653611.102586244\r\nexpires: Thu, 17 Jul 2025 19:46:09 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1597\r\ncache: HIT\r\nx-cached-since: 2025-07-19T19:50:14+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":69,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"2cdaa92927f02e0b628f1ef4d7dd8caf","sha1":"9104a2e16ed080b80a42588b8aeb52ebec47ab7a","sha256":"ef8101ffea52addcdcfcc3a83f96ff2d4613fb3ae6d1c16bbe4852387b73a9db","sha512":"31da80bc1b17aa708fef74b0211af91fce1b4a5f518f11e5caa80f50e9a7791b6e94924e381f550fc44a02f4c1d785e5b95fa2464e7968b5cab079612d70d839","ssdeep":"","tlshash":"1ba002935a5ef66c209044860696e74733823d6a3477b1d625bc5509e6061474817257","first_seen":"2025-05-14T05:06:37.199299Z","last_seen":"2026-03-18T19:40:26.76398Z","times_seen":5502,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/233d6516d0.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:52.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/233d6516d0.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:52 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-0d9f87ea871bd5bf250b45873af859e1-34db06ca4a5b1441-01\r\nlast-modified: Wed, 16 Jul 2025 08:21:14 GMT\r\netag: W/\"5f81df557d39d1978b9e69bc6234b769\"\r\nx-amz-meta-mtime: 1752653611.102586244\r\ncontent-encoding: gzip\r\nexpires: Thu, 17 Jul 2025 08:24:04 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 42044\r\ncache: HIT\r\nx-cached-since: 2025-07-19T08:36:08+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3805,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3802)","md5":"5f81df557d39d1978b9e69bc6234b769","sha1":"afd789007fef0f81b9acf83a8614e5c7e3c19b51","sha256":"0dfc8424d610d5cf652ef22801e7d26bc97f3b2a1a4c58834e97d17ebe066d8b","sha512":"b9b848ec2136173326ecd4f741ae56509585c2053d985040764b826c524ee54f36ff9ce98e8c314be21bb97486c46cc6370a55f0106ccdfb7a4bf1fdbc30098d","ssdeep":"","tlshash":"f271a6b871f5607477a45ece6c3724b3e2983604341cd4e4e3adca7526db0a281a7d76","first_seen":"2025-07-16T08:51:00.445879Z","last_seen":"2025-07-23T11:17:13.037446Z","times_seen":141,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/90bde40cf4.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:52.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/90bde40cf4.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:52 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 855\r\ntraceparent: 00-403b216e7046ac19a9b1b7b7e5648e4c-62c9fa758a8b1e68-01\r\nlast-modified: Wed, 16 Jul 2025 08:21:14 GMT\r\netag: \"56b6f377aaac9200d0f33aec73396a57\"\r\nx-amz-meta-mtime: 1752653611.096586115\r\nexpires: Thu, 17 Jul 2025 08:24:06 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 42043\r\ncache: HIT\r\nx-cached-since: 2025-07-19T08:36:09+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":855,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (854)","md5":"56b6f377aaac9200d0f33aec73396a57","sha1":"0cfe766fdf6196f17224e7bcc1eda6d1879eef45","sha256":"916a1d0b1fa7946a897d17c21c14ac6a0da20dbdd882c51049172f4a7253d9eb","sha512":"a2347f3df49241c6d3e7c4d35366e358c7aa243eac6fd1d2e6281279ee2c6f6d3afed5fcf939fbdaca6dd2ee7bb411f8026447fd20be325838c708feace7b5b8","ssdeep":"","tlshash":"8611c25c6ff53024690d8ec9f04025e70b28326d2ecae4fc446d3b648692b91f54fd26","first_seen":"2025-07-16T08:51:00.48871Z","last_seen":"2025-07-23T11:17:13.079226Z","times_seen":141,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_coupon/en/dictionary_cddbc9f9f68eec0edd648d7fc656a30a.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:51.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_coupon/en/dictionary_cddbc9f9f68eec0edd648d7fc656a30a.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-21d15cde408b592ad8c823d963efa2ce-a0a362a10ac2bdd3-01\r\nlast-modified: Mon, 07 Jul 2025 16:06:32 GMT\r\netag: W/\"e7fa5d4b44fe5d441391a5338da8f25b\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Thu, 17 Jul 2025 15:41:39 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 3562\r\ncache: HIT\r\nx-cached-since: 2025-07-19T19:17:29+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27690,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e7fa5d4b44fe5d441391a5338da8f25b","sha1":"d26a581526af70713c444d3ed734bfbfccb9e606","sha256":"333d915c8dbdea6f31c0e9e057bdc08c451bead6286ae5f1f59b9012ab741684","sha512":"d44bbdc7aabdc2fbd0356bea070747373d4ffe0f0bca940d4f234dcb371fc7f40fb70de97c2f5ff83d586db4df5a7d287f689c3b8af99f980adddb56cc0bffcd","ssdeep":"384:1lY9/8i+GZCH6CqyXLbh18QnBehe6pjfsE6oCNhWxB5gVInt5DQHibGqT:nYQKeSjIodhg4t5DQMzT","tlshash":"fec2723e7403fcbbf58600c4aeabbda361b80098d3a9ce5b94db481e21e75de5157847","first_seen":"2025-07-07T17:10:32.980616Z","last_seen":"2025-08-05T10:20:54.832026Z","times_seen":459,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/a70d3252/desktop/default/Page.Block-99cca318.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:50.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/a70d3252/desktop/default/Page.Block-99cca318.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 476\r\ntraceparent: 00-75e4d6e8ec694ce76396380d96691f3c-f4eb76aa79cdea7f-01\r\nlast-modified: Fri, 18 Jul 2025 08:46:39 GMT\r\netag: \"aac8def60dbf7ae9e7f51ef0fa542bec\"\r\nx-amz-meta-mtime: 1752828399.064363929\r\nexpires: Sat, 19 Jul 2025 09:10:19 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 39787\r\ncache: HIT\r\nx-cached-since: 2025-07-19T09:13:43+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":476,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (476), with no line terminators","md5":"aac8def60dbf7ae9e7f51ef0fa542bec","sha1":"14be02d620abab789eea941b7834617c0112d4b7","sha256":"af031d0af3ce336cc64791a4046d7884c131b62e5f277b60e76680b1e0ffa1ce","sha512":"d88e6e2325ec47814cb9a9ac0d42e20ccc856a904c1c46542fcf5b745a5073f74a5205c1f2b53ae89b6d16ed3c0ca558b01f1069efd2fd6f4877a89842c8e09b","ssdeep":"","tlshash":"53f09e9b6562bc8d95e610d343b785b7b88c79ba0649596006a1c8a632f6c57081124f","first_seen":"2025-07-16T07:17:14.739178Z","last_seen":"2025-07-24T09:34:40.931131Z","times_seen":152,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/d9c2365ca58e0fb54268fd4914d751b9.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:51.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/d9c2365ca58e0fb54268fd4914d751b9.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:51 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-d6323a2f3873567809c305fe9031c214-b2671e669d12ecee-01\r\nlast-modified: Mon, 16 Jun 2025 11:25:45 GMT\r\netag: W/\"1a7ec72aad44f9540cb604d7cde5ff38\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 17 Jul 2025 14:23:16 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1799\r\ncache: HIT\r\nx-cached-since: 2025-07-19T19:46:52+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14466,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1a7ec72aad44f9540cb604d7cde5ff38","sha1":"65e5851d652e0471c213282efb5eeee31ae813db","sha256":"94d4bf6bc00a09b766ea0ba441e860dc40ee6d398be80e89016dd0ee662869d6","sha512":"05c4574c3785992daed7bb3616a938d1d04dc9679132ee8997147a21c32d2dab5537e51060ecce9969c4e2ea5c4ba97299c5f2622a3f6fb097c066e189d37f79","ssdeep":"96:75b7Ba79eu4QWGAdryCiQFpzLJLJeHZVZYpH3UGHSTSSbbGiJinHs:u7kJ2VK3UsyinHs","tlshash":"935246d9bae41c33112b60bdd5f7f91aa3dc1f439d4aa8287eac6d4c1b6050500aed7e","first_seen":"2025-06-17T07:58:23.417687Z","last_seen":"2025-11-14T10:22:49.434452Z","times_seen":2557,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_css_9c29d1.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:50.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_css_9c29d1.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:50 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-092fb017aa51e24530495ced4c1a9ddc-b0ed2fe0c89b93df-01\r\nlast-modified: Sat, 19 Jul 2025 08:13:45 GMT\r\netag: W/\"e2951151a267e612b3b7e708b81709ec\"\r\nx-amz-meta-mtime: 1752912694.004400397\r\ncontent-encoding: gzip\r\nexpires: Sun, 20 Jul 2025 12:54:48 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 26522\r\ncache: HIT\r\nx-cached-since: 2025-07-19T12:54:48+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4166,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3743)","md5":"e2951151a267e612b3b7e708b81709ec","sha1":"b3a1b9af992a8b4a4009441163bab5c829ff35ba","sha256":"9c29d122f50348d33af9c06097d927c10950fa7d532f768eb84944b6077047f4","sha512":"c0f9c6c28fc25e889016c30351de6defb94246cbc720dcf5cb8fb075c0e51aa94423b96b93bcdfce3f030d47fc5cd22312fe1dcef2546bb2fd66238b4ca7e41b","ssdeep":"48:72e0VsMQbBQhzRVRlHLHYOR8avyVws/cVNkvK5LGsagLGsBTufum50:Z0EbBQ77VHY+DKuj5QxKufum50","tlshash":"8081539ab8b8c176ad27e82301898e7e4275f9dad9161c8ef69f871715c3e5240908bc","first_seen":"2025-07-09T10:12:06.327695Z","last_seen":"2025-07-30T04:19:29.497446Z","times_seen":408,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":96,"dns":6,"connect":4,"send":0,"wait":7,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:17:00.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:17:00 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63920\r\ntraceparent: 00-03645d8c7dbe9448a2f47dba443fc717-7fda3fd24daaac8f-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"a65527fcb58f66a7cfbc0e6b160538b4\"\r\nexpires: Fri, 18 Jul 2025 03:58:25 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 3272\r\ncache: HIT\r\nx-cached-since: 2025-07-19T19:22:28+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":63920,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63920, version 1.0","md5":"a65527fcb58f66a7cfbc0e6b160538b4","sha1":"45d260e7fa343401b5bb0df982a014f53e2d253b","sha256":"fb13c3a1cbac60649b76f7d7f85c1645d35ac69b85ce5f4eb0692505ecc2cd45","sha512":"8448e96abe326f43285b2d8b0d75beaf0e9c9e051e8754841d907b30eb303ae24c447011306da6a1703b9192d02aeff76a4517bdf94ec6e7dc360ce3538802af","ssdeep":"1536:UIG3hJMkJeK8ic5iZGnJ4URj9vqXOQ6UqYdbuA5RVK1:UL31hcLlRjDQ6Uq4W1","tlshash":"7f5302df8de32a148ff78772668885f4f4927c68898c8e7345526a8907f07d6b96c04f","first_seen":"2023-05-07T18:04:27Z","last_seen":"2026-04-05T04:03:57.04139Z","times_seen":10192,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refpa14084.com/L?tag=d_1558737m_3028c_[]MS[]null[]null[]toto[]19220_30993_d70971_l138315_clickunder\u0026pb=a97213fad9d648e1a13d8fe56a5b07c1\u0026click_id=28981_286039_2_3_s6_2024106","fqdn":"refpa14084.com","domain":"refpa14084.com","tld":"com"},"ip":{"addr":"91.186.207.45","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-19T20:16:48.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refpa14084.com","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Jul 2025 05:41:59 GMT","end":"Tue, 07 Oct 2025 05:41:58 GMT"},"fingerprint":{"sha1":"AE:FF:0B:3C:71:DA:7C:61:9E:07:C6:A7:13:AD:E0:8F:83:8D:2B:E2","sha256":"94:C7:A7:38:E7:C8:85:38:22:28:63:35:12:FA:B5:7C:42:46:57:26:76:CE:D4:87:EE:87:97:3E:A9:AF:1F:B4"}}},"request":{"raw":"GET /L?tag=d_1558737m_3028c_[]MS[]null[]null[]toto[]19220_30993_d70971_l138315_clickunder\u0026pb=a97213fad9d648e1a13d8fe56a5b07c1\u0026click_id=28981_286039_2_3_s6_2024106 HTTP/1.1\r\nHost: refpa14084.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 303 See Other\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:49 GMT\r\nlocation: https://1xlite-14085.world:443/en?tag=d_1558737m_3028c_[]MS[]null[]null[]toto[]19220_30993_d70971_l138315_clickunder\u0026pb=a97213fad9d648e1a13d8fe56a5b07c1\u0026click_id=28981_286039_2_3_s6_2024106\r\nset-cookie: A_3028_v=0; expires=Sun, 20 Jul 2025 20:16:48 GMT; path=/; secure\nA_3028_c=1; expires=Sun, 20 Jul 2025 20:16:48 GMT; path=/; secure\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: wf-uht;dur=0.223\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"303","status_text":"See Other","fingerprints":null,"data":{"size":285775,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T05:47:04.311114Z","times_seen":13362114,"resource_available":true,"data":null}},"time_used":435,"timings":{"blocked":92,"dns":0,"connect":28,"send":0,"wait":250,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-19","alert":"Sinkholed","trigger":"refpa14084.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/1c0cd0740fccd19a9816be06e69f0a1b.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:52.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/1c0cd0740fccd19a9816be06e69f0a1b.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:52 GMT\r\ncontent-type: application/json\r\ncontent-length: 473\r\ntraceparent: 00-eb96c48335ceae715aed3e320e1b2f34-c1c391f5e05cf6e4-01\r\nlast-modified: Thu, 16 May 2024 20:41:30 GMT\r\netag: \"e67aa19ef00fd2285c7b4ecbb6018306\"\r\nexpires: Thu, 17 Jul 2025 18:31:11 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1551\r\ncache: HIT\r\nx-cached-since: 2025-07-19T19:51:01+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":473,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e67aa19ef00fd2285c7b4ecbb6018306","sha1":"5b01d4786d6fbfbd5de7901eb4359a55466f434a","sha256":"135c1042c31e3674d8a1b3b9e7179f4f36868048ca6058ea458ff291b8880b5e","sha512":"014c2ef0dd816273532f1c79526f14831c3201ee520ac1153d3ff3478c8242dbc43b631280f049f141d7edf8449122f17ac67b6e374130201baa176ba9ed8a62","ssdeep":"","tlshash":"1ff0e242f6e00c73146b90add9e2f60d83c45f039c496468399d6b4c2794a29119ad7e","first_seen":"2023-06-08T21:08:06Z","last_seen":"2025-07-30T04:19:29.488563Z","times_seen":1942,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/b5f65e3642.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:52.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/b5f65e3642.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:52 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-c4e9331f85c3178df1b8eaf074d5309b-c7bc618f09c6fcfe-01\r\nlast-modified: Wed, 16 Jul 2025 08:21:14 GMT\r\netag: W/\"52adae5818b3da78f15683c64562b5be\"\r\nx-amz-meta-mtime: 1752653611.096586115\r\ncontent-encoding: gzip\r\nexpires: Thu, 17 Jul 2025 08:24:06 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 42043\r\ncache: HIT\r\nx-cached-since: 2025-07-19T08:36:09+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1663,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1662)","md5":"52adae5818b3da78f15683c64562b5be","sha1":"5ab2238fefeb1718cd8c708bbe8cb573abfef1b4","sha256":"40213f9faec2c389110d76a596f96f972b66107da97229729b9fafd455ea0de7","sha512":"36c4361d2335ef2cd6ea776a18535e72214a75d1c5ef4e88e648e02884c0884a98cf32866ec47715e439af5043c76e588ba7961278dd0c5fbf317b3d19ab09ad","ssdeep":"","tlshash":"8e31a6dcbaf870780e59caaa60392450d78c659d726dfce4e3de8a9422500dd5264f01","first_seen":"2025-07-16T08:51:00.477391Z","last_seen":"2025-07-23T11:17:13.028832Z","times_seen":141,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/hd-api/external/01982455-3218-7ee9-869b-c1a92e28acc0.js","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:59.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-14085.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:31 GMT","end":"Sun, 14 Sep 2025 11:35:30 GMT"},"fingerprint":{"sha1":"16:6B:F5:11:18:6D:50:EE:C3:3B:30:0B:A0:68:68:59:D3:46:70:60","sha256":"3D:14:FF:6F:86:DD:37:D5:64:D5:5E:13:22:DB:7F:18:CC:EF:48:CA:A0:47:E5:2E:B0:A3:60:F5:9C:AD:CA:7B"}}},"request":{"raw":"GET /hd-api/external/01982455-3218-7ee9-869b-c1a92e28acc0.js HTTP/1.1\r\nHost: 1xlite-14085.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/en/block\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder; postback_watcher=%7B%22tag%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22pb%22%3A%22a97213fad9d648e1a13d8fe56a5b07c1%22%2C%22click_id%22%3A%2228981_286039_2_3_s6_2024106%22%7D; auid=uaJaGmh7/TFe7ahABBD5Ag==; window_width=1280; che_g=f639fbf7-d01f-f016-5c71-f18071eea5bc; SESSION=dd1fd03e55038357478dc06799866a93\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:59 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: private, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-dt: 285\r\nx-hd-trace-id: d95cc8d4-384a-4d86-b098-b41332ee0e44\r\nx-request-guid: a4c8cd4120c511a49dd0779e1867693b\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.008, wf-uht;dur=0.012\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":309398,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3233d70eaa9fa32babe2f590430c79c6","sha1":"3122a2fd28b1249b06ff9603d99af010cc386631","sha256":"9b42781b1a91526c821ab39bb32a2ce534607cd018c0b45d9f4e88baec8728a0","sha512":"a4e4d5999341b31c9facc484db4610c312599dd4701cc3c8209bf46275b5140c3f055c4412a21b897999d893cb2a2bdbf5783997697956183bd773c1942e5cfe","ssdeep":"3072:XgST1IW3vAFYsvoVRPIvDzT3qQoRiMYtt62qxQhw0/UKWQtGG8wNWSR:X7/2viZIvD1r6U79WSR","tlshash":"98641bcf3f46f3ac91652d25227f3c61778818c67559e318e7e0e618b4aa234eee7601","first_seen":"2025-07-19T20:17:18.832901Z","last_seen":"2025-07-19T20:17:18.832901Z","times_seen":1,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-19","alert":"Sinkholed","trigger":"1xlite-14085.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je57g1v897130004za200zb9180563600\u0026_p=1752956222055\u0026em=tv.1~em.ODS1igyfeIhzOTHENqwIfH1sb8t0oxg8FT6iY2YCmeo\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211\u0026cid=1784108769.1752956223\u0026ecid=1479700072\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026ec_mode=a\u0026_s=1\u0026sid=1752956222\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-14085.world%2Fen%2Fblock\u0026dt=1xBet\u0026_tu=Kg\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026ep.optimize_id=GTM-5R4MT54\u0026upn.ref_id=1\u0026tfd=14352","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:17:03.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:40:16 GMT","end":"Mon, 15 Sep 2025 08:40:15 GMT"},"fingerprint":{"sha1":"3A:12:37:38:16:E5:9F:51:4E:B7:1D:5F:1F:C0:84:BB:92:EA:9E:20","sha256":"7C:C3:2F:91:ED:C8:F9:0D:09:BC:07:8E:79:FB:C7:5D:07:2F:F1:59:CD:23:2D:49:F9:C7:19:B9:05:9B:BF:6F"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je57g1v897130004za200zb9180563600\u0026_p=1752956222055\u0026em=tv.1~em.ODS1igyfeIhzOTHENqwIfH1sb8t0oxg8FT6iY2YCmeo\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211\u0026cid=1784108769.1752956223\u0026ecid=1479700072\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026ec_mode=a\u0026_s=1\u0026sid=1752956222\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-14085.world%2Fen%2Fblock\u0026dt=1xBet\u0026_tu=Kg\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026ep.optimize_id=GTM-5R4MT54\u0026upn.ref_id=1\u0026tfd=14352 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://1xlite-14085.world\r\ndate: Sat, 19 Jul 2025 20:17:03 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:158:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:158:0\r\nreport-to: {\"group\":\"ascnsrsggc:158:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:158:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T05:47:04.311114Z","times_seen":13362114,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":42,"dns":0,"connect":8,"send":0,"wait":17,"receive":1,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/a70d3252/desktop/default/css/7fe5f71b.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:51.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/a70d3252/desktop/default/css/7fe5f71b.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:51 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-ca7cdd892425921157889b3fcd0915a9-42b495992c00631b-01\r\nlast-modified: Fri, 18 Jul 2025 08:46:39 GMT\r\netag: W/\"c610b8710368de3bf2f1c5bb581b6a3a\"\r\nx-amz-meta-mtime: 1752828399.068363966\r\ncontent-encoding: gzip\r\nexpires: Sat, 19 Jul 2025 09:10:08 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 39784\r\ncache: HIT\r\nx-cached-since: 2025-07-19T09:13:47+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3313,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3313), with no line terminators","md5":"c610b8710368de3bf2f1c5bb581b6a3a","sha1":"f67bc86785d434adb2e81a356a7926b8818ac567","sha256":"fad7111846310042401990719146401178f22e2618abf2b058e641b6495e8eba","sha512":"2dfecbd28b59bcf4b361736ce304f33792631b766506b80767f23033cbd37c1a83371af59b833032390f647b69824e9eeeb1f99530e18047f74cd30ffda0e5b1","ssdeep":"","tlshash":"0161c13e9cbc24359e7f472b7053ce84e199a39092030f8afdbb755a4c8b21d3895176","first_seen":"2024-05-14T21:30:49Z","last_seen":"2026-01-22T06:40:31.190981Z","times_seen":5786,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:17:00.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:17:00 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63748\r\ntraceparent: 00-66fd843fdccd4c8d43003cdd72b8da6e-ecd000f4dd90cb93-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"6887b6f24414dbc612dbf42ccdc76b70\"\r\nexpires: Thu, 16 Jan 2025 10:32:14 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 550\r\ncache: HIT\r\nx-cached-since: 2025-07-19T20:07:50+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":63748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63748, version 1.0","md5":"6887b6f24414dbc612dbf42ccdc76b70","sha1":"8068d3abfbc6cbf35b55919da45b1f4d2d136238","sha256":"fc5c015fc32518f1ed810fa84ca28941eb9d5a3c81acc8df69a4dbbeedef7b0c","sha512":"00f08f9dd648972c9571547e06172d5505dd13f577fe2e65a497d3856172807ac11c996984e4138d2eb2ac784257fe61864aee15752fe9e9e76f98db931e0c2a","ssdeep":"1536:KtdCG+Dz6RxAx457zL0ASEn091Y0H1mTOzI/OzMFOoTX4u:MMG+yRpzN091Y0VtI/pOoTt","tlshash":"8b5302485551fae2cac3073c0f7a89dbb37a776d519224cd98b69f830d37964bea2070","first_seen":"2023-06-14T19:15:49Z","last_seen":"2026-04-05T04:03:57.042465Z","times_seen":10314,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_accept_language_parser_B6TW5FDZ.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:52.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_accept_language_parser_B6TW5FDZ.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:52 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-27a4a911024b5847ef1c94ae35aaa85d-3100ce0c7cb39adc-01\r\nlast-modified: Sat, 19 Jul 2025 08:13:43 GMT\r\netag: W/\"e3f1c4089db6b910890e85d97a2e2066\"\r\nx-amz-meta-mtime: 1752912694.025401997\r\ncontent-encoding: gzip\r\nexpires: Sun, 20 Jul 2025 15:21:02 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 17750\r\ncache: HIT\r\nx-cached-since: 2025-07-19T15:21:02+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1297,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1265)","md5":"e3f1c4089db6b910890e85d97a2e2066","sha1":"85828920da3c3fd7856acde184e835ac314295cd","sha256":"6c28afe5a52e0f9b1138fe498b254c8671058a058b555651ccae8e91e7534614","sha512":"0fc9e47336d93f4f6ae6dbffaaee9145b46d4ba6c75aad12acbded8fc3468d1d8d29fb76440dba071ad362f725287ea38b5f48045e51c39fd5bf842f5ec0abd6","ssdeep":"","tlshash":"d821f09fbac2b5908394184d4e2ec055f23a2957641ce5fcd625e6827c407a186f2c0d","first_seen":"2025-05-14T05:06:37.190071Z","last_seen":"2025-08-22T06:38:14.173196Z","times_seen":1811,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16664555628\u0026cx=c\u0026gtm=45He57g1v9180563600za200\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:17:02.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:40:16 GMT","end":"Mon, 15 Sep 2025 08:40:15 GMT"},"fingerprint":{"sha1":"3A:12:37:38:16:E5:9F:51:4E:B7:1D:5F:1F:C0:84:BB:92:EA:9E:20","sha256":"7C:C3:2F:91:ED:C8:F9:0D:09:BC:07:8E:79:FB:C7:5D:07:2F:F1:59:CD:23:2D:49:F9:C7:19:B9:05:9B:BF:6F"}}},"request":{"raw":"GET /gtag/destination?id=AW-16664555628\u0026cx=c\u0026gtm=45He57g1v9180563600za200\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 19 Jul 2025 20:17:02 GMT\r\nexpires: Sat, 19 Jul 2025 20:17:02 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 19 Jul 2025 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcysghrgc:42:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcysghrgc:42:0\r\nreport-to: {\"group\":\"ascgcysghrgc:42:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcysghrgc:42:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 121096\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":356586,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"ed10765ed2d02b59be4a4df87fa5c04d","sha1":"4dc05a7de64720a1934bbb90f988d4e7e9f5cee1","sha256":"a6c5727039976888bc3a2243fce58275ad311944037979292f5b6f01b96cd520","sha512":"feeca48e7cb679785f50456652851dc8a058909e16374a242ee0f96476af2b71e91370ce3f51f2b2c8c46b49ed6d0ef53a112f1c1960abf70f5767b528d3e542","ssdeep":"3072:w20ln5NqPx370x5pAW300B+1fOT0GBRznCrC14Md38nbR4mQC5FoAqhRctjND4gV:ILsr0x8L40bRYqFoAqbSj9Dz","tlshash":"527428cdb3c674229393a478503f018ba57b69a2b48ccc95f185cce42e74a9a8177f7d","first_seen":"2025-07-19T13:38:09.829937Z","last_seen":"2025-07-19T20:17:18.838751Z","times_seen":3,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/5ba4109660.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:52.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/5ba4109660.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:52 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-8d3d6ddb1d34c847ee62af2914cfc3ee-6b7936de82e10666-01\r\nlast-modified: Wed, 16 Jul 2025 08:21:14 GMT\r\netag: W/\"213b2e7d5e2418c7839101756ffd789f\"\r\nx-amz-meta-mtime: 1752653611.103586265\r\ncontent-encoding: gzip\r\nexpires: Sat, 19 Jul 2025 17:33:07 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 9808\r\ncache: HIT\r\nx-cached-since: 2025-07-19T17:33:24+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1725,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1388)","md5":"213b2e7d5e2418c7839101756ffd789f","sha1":"ae6a93e34e6d03ade43f6b7b77e3327fc16ae34f","sha256":"bfa42920771231a474d91d2a028a5a31f0b6b18e83491d2fcc3b32be7c691fba","sha512":"bd5095cff9dcfb858341f9f71909b9f9a6b54a37e60f6b2f7dfdf5da093f514e8d095bd4e0a56aac657bf77be21a7dc586bd35711b7d52ecabfefcf0dac6ca1e","ssdeep":"","tlshash":"a231d8be13f6e9f1b5498cd9bd0770b097a9094317ef64f8e10a8e15032c482d2138c7","first_seen":"2025-07-16T08:51:00.53619Z","last_seen":"2025-07-23T11:17:13.053813Z","times_seen":141,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/a70d3252/desktop/default/vendors/plugins.v-tooltip-5e481844.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:51.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/a70d3252/desktop/default/vendors/plugins.v-tooltip-5e481844.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-1b97deb8799fcdddbc2bec696c332041-2ed61f7a2d17c430-01\r\nlast-modified: Fri, 18 Jul 2025 08:46:39 GMT\r\netag: W/\"fc2b2a119a466518331ef6cae439ef70\"\r\nx-amz-meta-mtime: 1752828399.076364039\r\ncontent-encoding: gzip\r\nexpires: Sat, 19 Jul 2025 21:47:45 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 80946\r\ncache: HIT\r\nx-cached-since: 2025-07-18T21:47:45+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":76822,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65476)","md5":"fc2b2a119a466518331ef6cae439ef70","sha1":"ba77237fc8a951dc73ff2526f93423097f991bd6","sha256":"29b40a2cbdd11dd5656b63c920e1f1566de2b195f7771c38991c0bb7c99d242d","sha512":"5d00df6eb885cb1723e9d535b2d985db393aaf8349a708445571af4b8a7077316463f1fc5df97dc578dec80f2da7f65339d7c947f5289b0a8c20ccbd526e9587","ssdeep":"768:HfVkVWzVH5/MptsX4C3mWMZI+7tSCUC8Lk7t8R6zk+BaNfSby/Qw/HBg57bh0PG4:HfWWzF5kpOX/mTPRSCv1MH1WdRfm5d7","tlshash":"2f73c88e72d0f4b203e7b1b5403f620fb2776558b40ad014b6b1e6d4ac3da59a267e3d","first_seen":"2025-07-16T07:17:14.75065Z","last_seen":"2025-07-24T09:34:41.146356Z","times_seen":154,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_registration/en/dictionary_1e825bca2c52cd207d6fbf7ae456ca3d.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:51.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_registration/en/dictionary_1e825bca2c52cd207d6fbf7ae456ca3d.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-647bfd1f9391f2ec043e280c1849529c-c81dbc5d8e18e63b-01\r\nlast-modified: Mon, 14 Jul 2025 12:07:00 GMT\r\netag: W/\"f63d73a8218769b1c70f490823f2e1cb\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Mon, 14 Jul 2025 13:12:16 GMT\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 3562\r\ncache: HIT\r\nx-cached-since: 2025-07-19T19:17:29+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22173,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9d1a48e2a7e19fcfc5db6e3fea734295","sha1":"6506b7a4a1725bb7d36b9687870e0f46cdbc24e9","sha256":"79536776b3b8296ab4cf97d7c6c4c3c4ef3ecb0cb362c9a34529c1b1709132cd","sha512":"2f39c4ea94ff20288bb87663cd25c3b957099f12d559f21a5d3f7552f16466749837b36f3e8a6e9efa658af7dcb60c770c2f38449e0ce5f68b88764ec0d47ca3","ssdeep":"384:gtqYZ6LlTYvzH5W8qD8bqBJxkhxa/Y5egwZYcW1lvxPTqC:zqLHuDDzxkPa+3XJXTqC","tlshash":"b4a2b64f9f788c7307c3060b7d8b6b9a26fe5158769208298fbd8a6d1375b91933309d","first_seen":"2025-07-14T12:16:32.062339Z","last_seen":"2025-07-23T09:25:04.649337Z","times_seen":209,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_forgot_password/en/dictionary_776c0b6a6ae43ea4503f983fa859981a.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:51.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_forgot_password/en/dictionary_776c0b6a6ae43ea4503f983fa859981a.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-0ab0ecb84ca42c8b102958429e366cfc-1860a8d1743d7058-01\r\nlast-modified: Thu, 26 Jun 2025 16:06:49 GMT\r\netag: W/\"9e075dc2a068d12162e260d49c92f233\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Thu, 26 Jun 2025 17:12:47 GMT\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2196\r\ncache: HIT\r\nx-cached-since: 2025-07-19T19:40:15+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4086,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9e075dc2a068d12162e260d49c92f233","sha1":"9c748240ee9aeeb922f9998005c557517763a979","sha256":"81b3796da635e227e36b1a44c3224d8e0ccda902293beb08f84d870ed3bcee99","sha512":"6572c0bd8d55d4edc9ff8f263ef021d454593330e2f09759a2a26153870083e1d2cc308575d01196919d60a86170bd6b24436163427692b99eed38d0643eac9e","ssdeep":"","tlshash":"13819e0959831ef21abf8e90705e88663be5d06bde1764140fb5c30f3377e93668284a","first_seen":"2025-06-26T22:02:08.124583Z","last_seen":"2025-12-10T17:51:01.422955Z","times_seen":3966,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/8a6741b232.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:52.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/8a6741b232.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:52 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 147\r\ntraceparent: 00-6c91740b3845890416b8ba385cc434a7-02fd59f4d6d03193-01\r\nlast-modified: Wed, 16 Jul 2025 08:21:14 GMT\r\netag: \"a28c079ed8e99f32c7eb0130daaa6e9e\"\r\nx-amz-meta-mtime: 1752653611.095586093\r\nexpires: Thu, 17 Jul 2025 20:21:59 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 85924\r\ncache: HIT\r\nx-cached-since: 2025-07-18T20:24:48+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":147,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"a28c079ed8e99f32c7eb0130daaa6e9e","sha1":"ffae5d0896f08982eaad298cc81d1784bef0bcd5","sha256":"321bc8fec36f7e640de026f7f38354adc74914d42b6964f7247927def872d665","sha512":"0736941f2a865da1a246cf26757615afe2a5781c6588add89679e2e8a81fe2499db84a7141beab91c5bfe54d39e973a600e34b8944d4190009f3b71493344764","ssdeep":"","tlshash":"4cc02b214ca421a02e0fcec8787030b1043160063fbdecc00c34130650a3af0f8ab404","first_seen":"2025-07-16T08:51:00.500694Z","last_seen":"2025-07-23T11:17:13.030527Z","times_seen":141,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?en=page_view\u0026dl=https%3A%2F%2F1xlite-14085.world%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=968380677.1752956223\u0026dt=1xBet\u0026auid=1468548047.1752956223\u0026navt=n\u0026npa=1\u0026gtm=45He57g1v9180563600za200\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211~104948814\u0026tft=1752956222687\u0026tfd=13867\u0026apve=1\u0026apvf=f","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:17:02.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:42:14 GMT","end":"Mon, 15 Sep 2025 08:42:13 GMT"},"fingerprint":{"sha1":"18:68:D7:A6:6E:58:DB:F0:4B:B6:53:AF:BA:2B:82:59:4F:36:D8:73","sha256":"C2:66:D2:BC:13:71:4F:72:4A:DE:85:BA:8D:BA:D1:40:C2:E6:CB:25:A3:25:62:EB:D9:17:BF:87:E7:EF:4D:67"}}},"request":{"raw":"POST /ccm/collect?en=page_view\u0026dl=https%3A%2F%2F1xlite-14085.world%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=968380677.1752956223\u0026dt=1xBet\u0026auid=1468548047.1752956223\u0026navt=n\u0026npa=1\u0026gtm=45He57g1v9180563600za200\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211~104948814\u0026tft=1752956222687\u0026tfd=13867\u0026apve=1\u0026apvf=f HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ndate: Sat, 19 Jul 2025 20:17:02 GMT\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncontent-type: text/plain\r\npragma: no-cache\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://1xlite-14085.world\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T05:47:04.311114Z","times_seen":13362114,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":94,"dns":0,"connect":20,"send":0,"wait":35,"receive":0,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:50.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:50 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63920\r\ntraceparent: 00-edd09b7d7427b0307004036acb6f63df-0951ff048a108f26-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"a65527fcb58f66a7cfbc0e6b160538b4\"\r\nexpires: Fri, 18 Jul 2025 03:58:25 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 3262\r\ncache: HIT\r\nx-cached-since: 2025-07-19T19:22:28+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":63920,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63920, version 1.0","md5":"a65527fcb58f66a7cfbc0e6b160538b4","sha1":"45d260e7fa343401b5bb0df982a014f53e2d253b","sha256":"fb13c3a1cbac60649b76f7d7f85c1645d35ac69b85ce5f4eb0692505ecc2cd45","sha512":"8448e96abe326f43285b2d8b0d75beaf0e9c9e051e8754841d907b30eb303ae24c447011306da6a1703b9192d02aeff76a4517bdf94ec6e7dc360ce3538802af","ssdeep":"1536:UIG3hJMkJeK8ic5iZGnJ4URj9vqXOQ6UqYdbuA5RVK1:UL31hcLlRjDQ6Uq4W1","tlshash":"7f5302df8de32a148ff78772668885f4f4927c68898c8e7345526a8907f07d6b96c04f","first_seen":"2023-05-07T18:04:27Z","last_seen":"2026-04-05T04:03:57.04139Z","times_seen":10192,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_localforage_FJKG5M2E.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:52.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_localforage_FJKG5M2E.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:52 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-a68872f23302c4cfe62c751a6e4c9aa8-201ee1e15346e5a3-01\r\nlast-modified: Fri, 18 Jul 2025 15:38:16 GMT\r\netag: W/\"02cf95f00794b77df34632e34a59c5be\"\r\nx-amz-meta-mtime: 1752852886.324220574\r\ncontent-encoding: gzip\r\nexpires: Sun, 20 Jul 2025 08:22:47 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 42845\r\ncache: HIT\r\nx-cached-since: 2025-07-19T08:22:47+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30277,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (30255)","md5":"02cf95f00794b77df34632e34a59c5be","sha1":"b64889fb6cbe78a141688ea761a627997ef8a8af","sha256":"bf78b7b3dd6ecbdea04c575edfb6022ed1b2e98c7a9cb9f02ab851ca638f1b83","sha512":"6bcdddd806b94dc8964c98ed5c8481f1ac5e74c707fe5d48760bd7d2edc2b8b52e58b3d7910d0ae316b3e196924d32734ccd5ffc33377df8de471e43c99fd6d3","ssdeep":"768:+DKAOpvMewHFuM96WwZACjzz46zSTKsBE1OvFXfX1UXk:+m8uPW43zEIOvdlUU","tlshash":"23d2c68c7799f02683bb3070907f580ef237a912594d90a0e591e5f86dbd75c822bfad","first_seen":"2025-05-14T05:06:37.193247Z","last_seen":"2025-08-22T06:38:14.178861Z","times_seen":1811,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"radar.cedexis.com/1/23802/radar.js","fqdn":"radar.cedexis.com","domain":"cedexis.com","tld":"com"},"ip":{"addr":"45.54.49.5","port":443,"asn":63911,"as":"NetActuate, Inc","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:17:02.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"radar.cedexis.com","organization":"Citrix Systems, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A2:3E:30:19:D5:41:3A:11:81:58:E3:B1:6F:F4:D2:78:0B:44:6F:D0","sha256":"BE:70:39:96:BA:51:8F:A7:6A:9D:E1:58:FB:D9:F7:6F:17:5C:DA:A9:6E:54:3F:8F:0B:3D:1E:DF:8C:44:B4:71"}}},"request":{"raw":"GET /1/23802/radar.js HTTP/1.1\r\nHost: radar.cedexis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 19 Jul 2025 20:17:02 GMT\r\nContent-Type: text/html\r\nContent-Length: 138\r\nConnection: keep-alive\r\nLocation: /1707728419/stub.js\r\nExpires: Sat, 19 Jul 2025 20:27:02 GMT\r\nCache-Control: max-age=600\r\nVary: User-Agent,DNT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":null,"data":{"size":390,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T05:47:04.311114Z","times_seen":13362114,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":27,"dns":0,"connect":20,"send":0,"wait":20,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:51.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-14085.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:31 GMT","end":"Sun, 14 Sep 2025 11:35:30 GMT"},"fingerprint":{"sha1":"16:6B:F5:11:18:6D:50:EE:C3:3B:30:0B:A0:68:68:59:D3:46:70:60","sha256":"3D:14:FF:6F:86:DD:37:D5:64:D5:5E:13:22:DB:7F:18:CC:EF:48:CA:A0:47:E5:2E:B0:A3:60:F5:9C:AD:CA:7B"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-14085.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 51645942-8645-45c4-a80c-6f76830eb962\r\nContent-Length: 98\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder; postback_watcher=%7B%22tag%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22pb%22%3A%22a97213fad9d648e1a13d8fe56a5b07c1%22%2C%22click_id%22%3A%2228981_286039_2_3_s6_2024106%22%7D; auid=uaJaGmh7/TFe7ahABBD5Ag==; window_width=1920\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:51 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\nx-dt: 285\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.076, wf-uht;dur=0.011\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a7831370543ff77a5200672a70db1283","sha1":"56c3c191543d70a915d5eceff521ee2b7091018f","sha256":"e55bf627f92d0255e203ba30a0544d98b8a7ac15b4a35abb36db98c2b1dbec9f","sha512":"63c39b0703cb60367c3c5e4995b2cdf1ebda5bcc9dc7500c3d6b3af1ca52cf0e0a4a3488fea47f4e0e00b749e90b9961eddce660bf763e7485299b6454df485a","ssdeep":"","tlshash":"9c7000a03280cac2080820a2220a0c08a2a0c00280c0802020800a2b2882bb3020e082","first_seen":"2025-07-19T20:17:18.847935Z","last_seen":"2025-07-19T20:17:18.847935Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-19","alert":"Sinkholed","trigger":"1xlite-14085.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/a70d3252/desktop/default/css/dad7a6e4.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:50.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/a70d3252/desktop/default/css/dad7a6e4.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:50 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-740291d69e2da32d7d2febc2ad21b35e-4346013eb225da5f-01\r\nlast-modified: Fri, 18 Jul 2025 08:46:39 GMT\r\netag: W/\"f14bcc7510c4f26df7bd2f918d16d8f8\"\r\nx-amz-meta-mtime: 1752828399.068363966\r\ncontent-encoding: gzip\r\nexpires: Sun, 20 Jul 2025 19:20:49 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 3361\r\ncache: HIT\r\nx-cached-since: 2025-07-19T19:20:49+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40883,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (40883), with no line terminators","md5":"f14bcc7510c4f26df7bd2f918d16d8f8","sha1":"4ef37e2e86bd42557aa87de9f72705873e834412","sha256":"498a8486a41b0056acc3eade4549254931682bd42d59a8d3636506e9e55f04cc","sha512":"73ed74945d122263d6246d92e9a957703b3f3e34a8d3b2e7052cd67dbed764645b77c3508cdb356f327256c6b5decdcb7ee20ed69b1e4ecf541550e78162c833","ssdeep":"768:SRTaXC59ApQzOoU/aW1XuJV2/DF0TcNh5MQe43GUJKf:KTEC59ApQzlU/aWz3GU4","tlshash":"e003105eeca8d1760d3bf521a288be3c01b0f42ade314d97e90e576518c3f9b15e0e69","first_seen":"2025-07-09T10:12:06.36181Z","last_seen":"2025-07-30T04:19:29.418725Z","times_seen":313,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":87,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/a70d3252/desktop/default/runtime-8d46a266.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:50.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/a70d3252/desktop/default/runtime-8d46a266.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-3afa6c36a0040d3caf22c9b6d0cd9943-ce8777767932576d-01\r\nlast-modified: Fri, 18 Jul 2025 08:46:39 GMT\r\netag: W/\"3e6b20e6d5e1c3749197854038bff304\"\r\nx-amz-meta-mtime: 1752828399.076364039\r\ncontent-encoding: gzip\r\nexpires: Sat, 19 Jul 2025 09:10:08 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 39787\r\ncache: HIT\r\nx-cached-since: 2025-07-19T09:13:43+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18456,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (18456), with no line terminators","md5":"3e6b20e6d5e1c3749197854038bff304","sha1":"ee56b5b8bc285110ff3daec2349d0e3b770077f6","sha256":"7e384804ce913cc9b50e7940ef3bcc201fa77806f009b35fca41d51b0fe03955","sha512":"212ba54f5ccb555e41229af5cb4a7de25e16e20b1c9777ce9177d08a95cfdadf06bdc150b96e970577b38ed14c684448f1db8e84d55d84c3058fdd52d7a9b944","ssdeep":"384:Wr51OT/JCItnkMELNuOEOT/JCItnkj/HfKeqHq678T4te:cCIItkMELNuOEOIItkn8jvk","tlshash":"36820f5e9f1acca71923dcc338213c25585825335c5647aceafee2295018e6c75afe2f","first_seen":"2025-07-18T10:11:01.016798Z","last_seen":"2025-07-21T06:34:34.98974Z","times_seen":75,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_fast_deep_equal_XYWIEKOD.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:52.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_fast_deep_equal_XYWIEKOD.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:52 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 865\r\ntraceparent: 00-a30f2d1d8bdbd60ba607d29b4ef52470-eedb0314b6027fcd-01\r\nlast-modified: Sat, 19 Jul 2025 08:13:43 GMT\r\netag: \"0af3fe0c072a5bb3b6c731767187982f\"\r\nx-amz-meta-mtime: 1752912694.026402073\r\nexpires: Sun, 20 Jul 2025 08:22:47 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 42845\r\ncache: HIT\r\nx-cached-since: 2025-07-19T08:22:47+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":865,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (840)","md5":"0af3fe0c072a5bb3b6c731767187982f","sha1":"55db5afb57265dc92fd121fe9ae565ffb2f53b2c","sha256":"655bbe85da91e863401c6f96e24b41f5c2fe51a4245cecc2deb2b8c9600fef30","sha512":"8aab8cafc0b01c11f0b3b4bab4cb8b00ac25007153fd86b45ac8bfe325109c1a5215e89825fde4d7698a64f6c549e8140ed441ddb558d98a5654d52df9d568be","ssdeep":"","tlshash":"a41159c232e3a0d1c3e058cd1001d902f23969e9e4bca0c9d757e6b83cb2a53987672a","first_seen":"2025-05-14T05:06:37.184748Z","last_seen":"2025-08-22T06:38:14.125712Z","times_seen":1811,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_popper_js_E2H7ZPXQ.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:52.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_popper_js_E2H7ZPXQ.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:52 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-1ebdc90a4625d78a8854b99c15b30726-81148c8bbced158f-01\r\nlast-modified: Fri, 18 Jul 2025 15:38:16 GMT\r\netag: W/\"3cf0cae38afae9add22f7884e5061231\"\r\nx-amz-meta-mtime: 1752852886.324220574\r\ncontent-encoding: gzip\r\nexpires: Sat, 19 Jul 2025 23:56:28 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 73224\r\ncache: HIT\r\nx-cached-since: 2025-07-18T23:56:28+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21252,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21232)","md5":"3cf0cae38afae9add22f7884e5061231","sha1":"2a41037501375a439385a76a047876619683418f","sha256":"322482e3beae5a985d069beea981614510fda90a5df7295b776a324d461fc43d","sha512":"b61ed44fab86cdc14e9e1b8af7924afec6148d03d878007f89d1beb7a24a1862efaa2d6b43dcc04df35c6920ef742ffc5a59a2434b798554394d3e28f88b7a13","ssdeep":"384:nPP7iayBuR9vu3z1JXvykd2+LaqHdC6RjVnTGm/7piCXmH8kCCcvJTCyCu+meAxu:riZwO3XvO+NMSJt3XmckXcv4nxJAxiH5","tlshash":"7d92a28c7684b0a287a7a2a7a07f860f71376865650e9004f59cf6ec3c35dba507bc7d","first_seen":"2025-05-14T05:06:37.148925Z","last_seen":"2025-08-22T06:38:14.115567Z","times_seen":1787,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=DC-14030178\u0026cx=c\u0026gtm=45He57g1v9180563600za200\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:17:02.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:40:16 GMT","end":"Mon, 15 Sep 2025 08:40:15 GMT"},"fingerprint":{"sha1":"3A:12:37:38:16:E5:9F:51:4E:B7:1D:5F:1F:C0:84:BB:92:EA:9E:20","sha256":"7C:C3:2F:91:ED:C8:F9:0D:09:BC:07:8E:79:FB:C7:5D:07:2F:F1:59:CD:23:2D:49:F9:C7:19:B9:05:9B:BF:6F"}}},"request":{"raw":"GET /gtag/destination?id=DC-14030178\u0026cx=c\u0026gtm=45He57g1v9180563600za200\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 19 Jul 2025 20:17:02 GMT\r\nexpires: Sat, 19 Jul 2025 20:17:02 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 19 Jul 2025 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcysghrgc:42:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcysghrgc:42:0\r\nreport-to: {\"group\":\"ascgcysghrgc:42:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcysghrgc:42:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 107101\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":306808,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"05a15c74e7c81249d1f2209cbb81b353","sha1":"7329ebf885c240a0156479e48fbbfcad505e4532","sha256":"b10df73ab44ff93cbbdd45bd0f367d1f462874ccd0892cbb82e0cd7d00f9ac71","sha512":"81b2b52279b3a2fe3cb1de6ba9fcdc87a9570eb9a0930f3cf0e08956db982db4b118f4ab853593b589810b8ee18dd0f2a00f5ca95a52147df6fddc5b83167768","ssdeep":"3072:yvZnpNqPx370M5pAWh60BM1fpT0GBRznCrC14Md3frRQml5FoAqhRctjNDNgfNU:asr0M8c47RfFoAqbSj9Ue","tlshash":"9f6418cdb3d6b4624393a478503f018bb17b6992f88cc895f185c8e42d74aaa8177f7d","first_seen":"2025-07-19T20:17:18.858976Z","last_seen":"2025-07-19T20:17:18.858976Z","times_seen":1,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je57g1v897130004za200zb9180563600\u0026_p=1752956222055\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211\u0026cid=1784108769.1752956223\u0026ecid=1479700072\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AEAAAAQ\u0026_s=2\u0026sid=1752956222\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-14085.world%2Fen%2Fblock\u0026dt=1xBet\u0026en=scroll\u0026ep.optimize_id=GTM-5R4MT54\u0026epn.percent_scrolled=90\u0026tfd=19482","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:17:08.308Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:40:16 GMT","end":"Mon, 15 Sep 2025 08:40:15 GMT"},"fingerprint":{"sha1":"3A:12:37:38:16:E5:9F:51:4E:B7:1D:5F:1F:C0:84:BB:92:EA:9E:20","sha256":"7C:C3:2F:91:ED:C8:F9:0D:09:BC:07:8E:79:FB:C7:5D:07:2F:F1:59:CD:23:2D:49:F9:C7:19:B9:05:9B:BF:6F"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je57g1v897130004za200zb9180563600\u0026_p=1752956222055\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211\u0026cid=1784108769.1752956223\u0026ecid=1479700072\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AEAAAAQ\u0026_s=2\u0026sid=1752956222\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-14085.world%2Fen%2Fblock\u0026dt=1xBet\u0026en=scroll\u0026ep.optimize_id=GTM-5R4MT54\u0026epn.percent_scrolled=90\u0026tfd=19482 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://1xlite-14085.world\r\ndate: Sat, 19 Jul 2025 20:17:08 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:158:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:158:0\r\nreport-to: {\"group\":\"ascnsrsggc:158:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:158:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T05:47:04.311114Z","times_seen":13362114,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/a70d3252/desktop/default/css/e45d3c54.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:50.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/a70d3252/desktop/default/css/e45d3c54.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:50 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-707ca92b9174359521850c6d773b9ba7-581f2cac49a14ca3-01\r\nlast-modified: Fri, 18 Jul 2025 08:46:39 GMT\r\netag: W/\"74ac1e9c5cab64b7d31ed8deccbd2659\"\r\nx-amz-meta-mtime: 1752828399.068363966\r\ncontent-encoding: gzip\r\nexpires: Sat, 19 Jul 2025 09:10:08 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 39905\r\ncache: HIT\r\nx-cached-since: 2025-07-19T09:11:45+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13478,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (13478), with no line terminators","md5":"74ac1e9c5cab64b7d31ed8deccbd2659","sha1":"ed589fe1c672ce7baa4ae8caa2d969d2941c4332","sha256":"5cbce6d9cbdb897a99ac14285ec6dca35d84382aa1a94cf96e555b5811039dbe","sha512":"e5b3700942353954b6e780a64bfb64f825870b01719aafba4344319e2ee3887864d4c418ace6a62a31da07a5caed77e91e4a7fa290d4b75b50ee89978e2d85d8","ssdeep":"192:vmNOH7nvxxxY4aBtZLJh6NYdt+8yvvo9lvhvuvoUwlthLbBQ:vHJxxY4aJJq6PBQ","tlshash":"e752c71ed52a52a10d328c9671ceff783539722628979331f44e5658cddbb9b03d0bb8","first_seen":"2025-06-24T12:47:20.811529Z","last_seen":"2025-08-06T09:09:01.151971Z","times_seen":868,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":110,"dns":9,"connect":5,"send":0,"wait":3,"receive":0,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-7JGWL9SV66\u0026cid=1784108769.1752956223\u0026gtm=45je57g1v897130004za200zb9180563600\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211\u0026z=1558001495","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:17:03.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:43:14 GMT","end":"Mon, 15 Sep 2025 08:43:13 GMT"},"fingerprint":{"sha1":"A8:B1:20:9F:85:E5:F5:7D:94:F3:52:D0:EF:BC:D2:DB:A6:FA:8F:4F","sha256":"0D:F1:7D:E0:4E:0F:7F:AB:0C:25:F9:0D:BE:7C:03:4E:BB:1A:08:01:8F:75:76:40:A5:59:8C:84:64:9F:06:F9"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-7JGWL9SV66\u0026cid=1784108769.1752956223\u0026gtm=45je57g1v897130004za200zb9180563600\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211\u0026z=1558001495 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 19 Jul 2025 20:17:03 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-05T05:47:19.687302Z","times_seen":765363,"resource_available":true,"data":null}},"time_used":557,"timings":{"blocked":254,"dns":13,"connect":22,"send":0,"wait":35,"receive":0,"ssl":227},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/ac02f639a86763a884adc5615fe65e72.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:51.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/ac02f639a86763a884adc5615fe65e72.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:51 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-fdd51d21a9d5e38c6efbedbf3b9a841a-e939c54b6cb4dde2-01\r\nlast-modified: Thu, 27 Feb 2025 09:04:01 GMT\r\netag: W/\"811ce3b7877d19901e45430cb6523d62\"\r\ncontent-encoding: gzip\r\nexpires: Wed, 16 Jul 2025 23:32:15 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1799\r\ncache: HIT\r\nx-cached-since: 2025-07-19T19:46:52+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14232,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"811ce3b7877d19901e45430cb6523d62","sha1":"16a905115a678fdef3923f91c6f76cbab613e84d","sha256":"10fbb74dbac63abfe9c4f5a77abc03757ef3527a479d4ae70dc977b515eec8cb","sha512":"21a43d793bd4200ff9972a793442fe492b6a1699f20053c4f01695f69f918685bf30f03f778346c2f61bac40d2e51bb25360d0ffc15448200c666ab4edf38e65","ssdeep":"96:BDkGHVTSY15XWGsQfGJo/JamRKkmP9kDeD3LzwCyi8TunZh:bVTS1KXR9RKkekDGoCyXOD","tlshash":"59523d65f6f40c33113b98ae65f76a8953948f07aa6d7c293b9c2b4c1f1462e0076d3e","first_seen":"2025-02-27T19:55:39.119779Z","last_seen":"2026-01-05T12:50:32.841809Z","times_seen":4543,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/46fe3f96f4140750e81ded48911f3e30.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:51.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/46fe3f96f4140750e81ded48911f3e30.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:51 GMT\r\ncontent-type: application/json\r\ncontent-length: 747\r\ntraceparent: 00-24b5d69e89be4eedff8903dd8253f662-b67f65ef05ee330b-01\r\nlast-modified: Thu, 27 Feb 2025 13:26:35 GMT\r\netag: \"f4e90636ec9cff061c4301b3cefdd0d6\"\r\nexpires: Wed, 16 Jul 2025 22:59:58 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 3191\r\ncache: HIT\r\nx-cached-since: 2025-07-19T19:23:40+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":747,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f4e90636ec9cff061c4301b3cefdd0d6","sha1":"c506efe9c3672c58434ea10021dab0ad81b1ad98","sha256":"30666f138ccc12735e2f8a6405ddce4a3d8756b9445e3b2732fa2970f14dbcea","sha512":"2db1a1a4419db47b4256906f9c660b85479bb83d2ab0757d1b1c24cdf94d97bdc4a7140d5d8ea31cbf612a77ba1ae6ef46bbd77eb42d24b6d83afebbc46c9216","ssdeep":"","tlshash":"2a012d94bde4083719374ca981a2595d63844b0398297c087adf3d4c5b2096d056e9be","first_seen":"2025-03-01T06:06:39.041672Z","last_seen":"2025-12-04T11:53:51.978889Z","times_seen":4943,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/web-api/session","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:59.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-14085.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:31 GMT","end":"Sun, 14 Sep 2025 11:35:30 GMT"},"fingerprint":{"sha1":"16:6B:F5:11:18:6D:50:EE:C3:3B:30:0B:A0:68:68:59:D3:46:70:60","sha256":"3D:14:FF:6F:86:DD:37:D5:64:D5:5E:13:22:DB:7F:18:CC:EF:48:CA:A0:47:E5:2E:B0:A3:60:F5:9C:AD:CA:7B"}}},"request":{"raw":"GET /web-api/session HTTP/1.1\r\nHost: 1xlite-14085.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/en/block\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nx-app-n: v3-nuxt2\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder; postback_watcher=%7B%22tag%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22pb%22%3A%22a97213fad9d648e1a13d8fe56a5b07c1%22%2C%22click_id%22%3A%2228981_286039_2_3_s6_2024106%22%7D; auid=uaJaGmh7/TFe7ahABBD5Ag==; window_width=1280; che_g=f639fbf7-d01f-f016-5c71-f18071eea5bc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:59 GMT\r\ncache-control: no-cache, private\r\nserver-timing: dt_total;dur=0.007, p;dur=19.176, wf-uht;dur=0.029\r\nset-cookie: ua=deleted; expires=Thu, 01 Jan 1970 00:00:01 GMT; Max-Age=0; path=/\nSESSION=dd1fd03e55038357478dc06799866a93; path=/; secure; httponly; samesite=lax\r\nx-dt: 285\r\nx-time-ng: 0.020, 0.020\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T05:47:04.311114Z","times_seen":13362114,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-19","alert":"Sinkholed","trigger":"1xlite-14085.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:17:03.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-14085.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:31 GMT","end":"Sun, 14 Sep 2025 11:35:30 GMT"},"fingerprint":{"sha1":"16:6B:F5:11:18:6D:50:EE:C3:3B:30:0B:A0:68:68:59:D3:46:70:60","sha256":"3D:14:FF:6F:86:DD:37:D5:64:D5:5E:13:22:DB:7F:18:CC:EF:48:CA:A0:47:E5:2E:B0:A3:60:F5:9C:AD:CA:7B"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-14085.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 51645942-8645-45c4-a80c-6f76830eb962\r\nContent-Length: 109\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder; postback_watcher=%7B%22tag%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22pb%22%3A%22a97213fad9d648e1a13d8fe56a5b07c1%22%2C%22click_id%22%3A%2228981_286039_2_3_s6_2024106%22%7D; auid=uaJaGmh7/TFe7ahABBD5Ag==; window_width=1280; che_g=f639fbf7-d01f-f016-5c71-f18071eea5bc; SESSION=dd1fd03e55038357478dc06799866a93; _gcl_au=1.1.1468548047.1752956223; _ga_7JGWL9SV66=GS2.1.s1752956222$o1$g0$t1752956223$j59$l0$h1479700072; _ga=GA1.1.1784108769.1752956223\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:17:03 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\nx-dt: 285\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.008, wf-uht;dur=0.012\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9f83a433377b09e94f5a7de499f4057b","sha1":"8135e1595d2d381bdbe2f3c5f88e03597bc4723c","sha256":"920225ff4080853a7820fce5dcdfca8933899a37e7a12bc3d352427a91bc2b61","sha512":"d4ed9d61d4ba53ab215cfd1ceec0d066629b46e024c1d9feb78d474d3865779ac6784adfd43c2d1d1239c2dcc99661aabbb98b436070e202cd06978df063187d","ssdeep":"","tlshash":"36700000308080800282a000822008082220c8c0c880032020808a322082aa2030a802","first_seen":"2025-07-19T20:17:18.865095Z","last_seen":"2025-07-19T20:17:18.865095Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-19","alert":"Sinkholed","trigger":"1xlite-14085.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/gmp/conversion;src=14030178;type=xbet;cat=uniqu0;ord=1;num=1734625424122;npa=1;auiddc=1468548047.1752956223;pscdl=noapi;frm=0;_tu=KpA;gtm=45fe57g1v9190735530z89180563600za200zb9180563600;gcd=13l3l3l2l1l1;dma_cps=syphamo;dma=1;dc_fmt=4;tag_exp=101509157~103116026~103200004~103233427~104684208~104684211;epver=2;dc_random=1752956223407;~oref=https%3A%2F%2F1xlite-14085.world%2Fen%2Fblock?","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:17:03.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:40:16 GMT","end":"Mon, 15 Sep 2025 08:40:15 GMT"},"fingerprint":{"sha1":"B9:AB:CF:25:07:76:A5:52:8A:C6:4E:00:9A:A3:2B:D3:B6:32:A6:32","sha256":"BD:DA:50:EC:92:BD:74:5E:26:6B:7B:A3:D1:57:18:4D:FA:93:28:23:4E:B5:B5:B3:8E:11:6B:16:D9:66:FD:7E"}}},"request":{"raw":"POST /gmp/conversion;src=14030178;type=xbet;cat=uniqu0;ord=1;num=1734625424122;npa=1;auiddc=1468548047.1752956223;pscdl=noapi;frm=0;_tu=KpA;gtm=45fe57g1v9190735530z89180563600za200zb9180563600;gcd=13l3l3l2l1l1;dma_cps=syphamo;dma=1;dc_fmt=4;tag_exp=101509157~103116026~103200004~103233427~104684208~104684211;epver=2;dc_random=1752956223407;~oref=https%3A%2F%2F1xlite-14085.world%2Fen%2Fblock? HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 19 Jul 2025 20:17:03 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://1xlite-14085.world\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-05T05:47:19.687302Z","times_seen":765363,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":15,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/en?tag=d_1558737m_3028c_[]MS[]null[]null[]toto[]19220_30993_d70971_l138315_clickunder\u0026pb=a97213fad9d648e1a13d8fe56a5b07c1\u0026click_id=28981_286039_2_3_s6_2024106","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-19T20:16:49.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-14085.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:31 GMT","end":"Sun, 14 Sep 2025 11:35:30 GMT"},"fingerprint":{"sha1":"16:6B:F5:11:18:6D:50:EE:C3:3B:30:0B:A0:68:68:59:D3:46:70:60","sha256":"3D:14:FF:6F:86:DD:37:D5:64:D5:5E:13:22:DB:7F:18:CC:EF:48:CA:A0:47:E5:2E:B0:A3:60:F5:9C:AD:CA:7B"}}},"request":{"raw":"GET /en?tag=d_1558737m_3028c_[]MS[]null[]null[]toto[]19220_30993_d70971_l138315_clickunder\u0026pb=a97213fad9d648e1a13d8fe56a5b07c1\u0026click_id=28981_286039_2_3_s6_2024106 HTTP/1.1\r\nHost: 1xlite-14085.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:49 GMT\r\nlocation: https://1xlite-14085.world/en/block\r\nserver-timing: dt_total;dur=0.011, total;dur=141;desc=\"Nuxt Server Time\", wf-uht;dur=0.153\r\nset-cookie: platform_type=desktop; Path=/; Expires=Tue, 22 Jul 2025 20:16:49 GMT; Secure; SameSite=None; Partitioned\ngw-mm=; Path=/; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Secure; SameSite=None; Partitioned\nlng=en; Path=/\ncookies_agree_type=3; Path=/\ntzo=2; Path=/\nis12h=0; Path=/\nreferral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; Path=/; Expires=Wed, 17 Sep 2025 20:16:49 GMT\nreflinkid=d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder; Path=/; Expires=Sat, 19 Jul 2025 21:16:49 GMT\npostback_watcher=%7B%22tag%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22pb%22%3A%22a97213fad9d648e1a13d8fe56a5b07c1%22%2C%22click_id%22%3A%2228981_286039_2_3_s6_2024106%22%7D; Path=/; Expires=Mon, 18 Aug 2025 20:16:49 GMT\nauid=uaJaGmh7/TFe7ahABBD5Ag==; path=/; secure; httponly; samesite=lax\r\nx-dt: 285\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":285775,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T05:47:04.311114Z","times_seen":13362114,"resource_available":true,"data":null}},"time_used":381,"timings":{"blocked":100,"dns":1,"connect":27,"send":0,"wait":180,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-19","alert":"Sinkholed","trigger":"1xlite-14085.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/56f58c6d078ff0e8f698576f33bb478d.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:52.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/56f58c6d078ff0e8f698576f33bb478d.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:52 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-48ac8b7b5c35446400e973246344dae6-0ae07ac4f4fac79a-01\r\nlast-modified: Thu, 27 Feb 2025 09:06:12 GMT\r\netag: W/\"4b08975411699bcd7464f49777e866bf\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 27 Feb 2025 10:17:14 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1551\r\ncache: HIT\r\nx-cached-since: 2025-07-19T19:51:01+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3557,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4b08975411699bcd7464f49777e866bf","sha1":"2a9b0a0f3eadf5f3e1ef688bacd9560dd59c73d2","sha256":"b6208d18413f8988db2e0040ff72516c0cb5e06d3d9692b5b098808ab46fc378","sha512":"4851dd31f3260cdd021a657cbc17cc20c51888f90e841de3ac1edff169e9fa90c743e8214810bd549f362896a1e28b9b6aa25200746ceef48ef8b2d344f67dbb","ssdeep":"","tlshash":"ba712945faf01c33103f62ad94f3b64e93984f97981b681939ad7a4c6b98809406bc7e","first_seen":"2025-03-01T06:06:39.060162Z","last_seen":"2026-03-31T06:06:31.554275Z","times_seen":1858,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/vision.json","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:51.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-14085.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:31 GMT","end":"Sun, 14 Sep 2025 11:35:30 GMT"},"fingerprint":{"sha1":"16:6B:F5:11:18:6D:50:EE:C3:3B:30:0B:A0:68:68:59:D3:46:70:60","sha256":"3D:14:FF:6F:86:DD:37:D5:64:D5:5E:13:22:DB:7F:18:CC:EF:48:CA:A0:47:E5:2E:B0:A3:60:F5:9C:AD:CA:7B"}}},"request":{"raw":"GET /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/vision.json HTTP/1.1\r\nHost: 1xlite-14085.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 51645942-8645-45c4-a80c-6f76830eb962\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder; postback_watcher=%7B%22tag%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22pb%22%3A%22a97213fad9d648e1a13d8fe56a5b07c1%22%2C%22click_id%22%3A%2228981_286039_2_3_s6_2024106%22%7D; auid=uaJaGmh7/TFe7ahABBD5Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:51 GMT\r\nx-dt: 285\r\nx-rejected: E001\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.010, wf-uht;dur=0.008\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T05:47:04.311114Z","times_seen":13362114,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-19","alert":"Sinkholed","trigger":"1xlite-14085.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_ba5801319ccd290c39d7b396cf81d929.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:51.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_ba5801319ccd290c39d7b396cf81d929.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-b2dd9f0360458cc157a2b85573d3cd10-abedf40b93ed2692-01\r\nlast-modified: Thu, 17 Jul 2025 16:07:48 GMT\r\netag: W/\"1d89c5caf0749b2b128004ae3321ce44\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Thu, 17 Jul 2025 17:34:04 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1041\r\ncache: HIT\r\nx-cached-since: 2025-07-19T19:59:30+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":139496,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1d89c5caf0749b2b128004ae3321ce44","sha1":"704f833c29445b789897283d0854709ee8e86e92","sha256":"101a7bfe3cdf45e643357ef2990cd3c1e262fa2fa730451845d227abacff1132","sha512":"9757f74303175d2296848415f82b21fd4215e64bee561ad78c0206071c6f1dfa94da154439385bb9f095008a500df710dfa901cfc948170d7b75d9072c1786cd","ssdeep":"3072:/NAMI9Z0rkk7etAfRxxlRNE/IjGArLCTdsc6Wr/CfMJmeprZh:/fIsoJ2fVlRNE/IjGQCTd9CfMJme1P","tlshash":"c4d3e70a194c6e7f0fda22ddf94edf4962b40055aab2c822d8eec11e7197fd2817714b","first_seen":"2025-07-17T16:40:32.015481Z","last_seen":"2025-07-21T11:41:49.019656Z","times_seen":113,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/bfa3e9fd30e7d63c0906602f42c13468.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:51.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/bfa3e9fd30e7d63c0906602f42c13468.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:51 GMT\r\ncontent-type: application/json\r\ncontent-length: 182\r\ntraceparent: 00-854b436f1155dee3248ea94783110b0c-2725376456d8fb7e-01\r\nlast-modified: Thu, 27 Feb 2025 08:55:26 GMT\r\netag: \"0a64a07e9a34e8a5b5e97e80a10888c5\"\r\nexpires: Tue, 15 Jul 2025 23:12:09 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2388\r\ncache: HIT\r\nx-cached-since: 2025-07-19T19:37:03+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":182,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0a64a07e9a34e8a5b5e97e80a10888c5","sha1":"82545cbc39b7dcc031dd10dea841a0b3698243d6","sha256":"7201497e7e8cdf9d35bf6998e43dcde5feea535f9828ce3ee98785781016126c","sha512":"fd619b94af18c7082a4f18556f1443081c8dc650b263c49c56f2514184d4f62e253ad87a220baa9396d7a06bc9ec3cc8ec75eee829a6c1016c4a3af2c1afa5ae","ssdeep":"","tlshash":"f0c02220e5f88823012b68bc80eaa55417504b2339021c20374c0a884b6162400149b8","first_seen":"2025-02-27T19:55:38.982186Z","last_seen":"2026-03-31T06:06:31.551304Z","times_seen":4136,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_libphonenumber_js_Q6RMKWT6.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:51.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_libphonenumber_js_Q6RMKWT6.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-1ee03fb701eb3938fbe7989a492b0a38-4de2f7dfcacd1186-01\r\nlast-modified: Fri, 18 Jul 2025 15:38:16 GMT\r\netag: W/\"1da464d70e78b04b9b808e82e4ad9487\"\r\nx-amz-meta-mtime: 1752852886.324220574\r\ncontent-encoding: gzip\r\nexpires: Sun, 20 Jul 2025 08:22:45 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 42802\r\ncache: HIT\r\nx-cached-since: 2025-07-19T08:23:29+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":158815,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65509)","md5":"1da464d70e78b04b9b808e82e4ad9487","sha1":"0c79e65516d1525ecb43d13cfb4ccb0631095a28","sha256":"b4c72b8036ca6767ab61490178f901538646f2aa1001cb042caa134174a41595","sha512":"517231e24fe48dcf9e907f32f759a9d8cc0471202dd5a22dd27efffeeb989e0f12b0db848280f03739b2e267ce95feb128ee8e9305cdd4e299c3fd19695ffdb8","ssdeep":"3072:sOU03o4Pwjp9BumfaVpfMHgWH71RgZXo9k:sXpzumWpf2gWH71RgZok","tlshash":"5af3b9f73640ab6775b23b188e4ad28f6f9c9c51cc88908caae7d4db5d61c22707db14","first_seen":"2025-05-14T05:06:37.168433Z","last_seen":"2025-08-22T06:38:14.163241Z","times_seen":1811,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:52.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-14085.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:31 GMT","end":"Sun, 14 Sep 2025 11:35:30 GMT"},"fingerprint":{"sha1":"16:6B:F5:11:18:6D:50:EE:C3:3B:30:0B:A0:68:68:59:D3:46:70:60","sha256":"3D:14:FF:6F:86:DD:37:D5:64:D5:5E:13:22:DB:7F:18:CC:EF:48:CA:A0:47:E5:2E:B0:A3:60:F5:9C:AD:CA:7B"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-14085.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 51645942-8645-45c4-a80c-6f76830eb962\r\nContent-Length: 72\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder; postback_watcher=%7B%22tag%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22pb%22%3A%22a97213fad9d648e1a13d8fe56a5b07c1%22%2C%22click_id%22%3A%2228981_286039_2_3_s6_2024106%22%7D; auid=uaJaGmh7/TFe7ahABBD5Ag==; window_width=1280; che_g=f639fbf7-d01f-f016-5c71-f18071eea5bc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:52 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\nx-dt: 285\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.008, wf-uht;dur=0.013\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"339ab14dfc726668715aef855e1f18cc","sha1":"dc7d87547c11e494f720535a76a5534774adad9f","sha256":"025d895757996fc0fc8fc90840331581d0b45475e7a6f1b8db963e9c15005267","sha512":"7c956d2ee76bea9d161bd417786cc36374cb3d846084947a4f6dceb15a107df3c7338a5414774d3d6344a636f3637cd85249e51ec1138aa450644b7b42aac1e0","ssdeep":"","tlshash":"12700000b0a2c0ca082020800200082c0220c00380c000203ac00aa220c2ba20c3a803","first_seen":"2025-07-19T20:17:18.870449Z","last_seen":"2025-07-19T20:17:18.870449Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-19","alert":"Sinkholed","trigger":"1xlite-14085.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/en/block","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"","requested_by":"","date":"2025-07-19T20:16:49.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-14085.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:31 GMT","end":"Sun, 14 Sep 2025 11:35:30 GMT"},"fingerprint":{"sha1":"16:6B:F5:11:18:6D:50:EE:C3:3B:30:0B:A0:68:68:59:D3:46:70:60","sha256":"3D:14:FF:6F:86:DD:37:D5:64:D5:5E:13:22:DB:7F:18:CC:EF:48:CA:A0:47:E5:2E:B0:A3:60:F5:9C:AD:CA:7B"}}},"request":{"raw":"GET /en/block HTTP/1.1\r\nHost: 1xlite-14085.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder; postback_watcher=%7B%22tag%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22pb%22%3A%22a97213fad9d648e1a13d8fe56a5b07c1%22%2C%22click_id%22%3A%2228981_286039_2_3_s6_2024106%22%7D; auid=uaJaGmh7/TFe7ahABBD5Ag==\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 203 Non Authoritative\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:49 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 285775\r\naccept-ranges: none\r\nserver-timing: dt_total;dur=0.004, total;dur=66;desc=\"Nuxt Server Time\"\r\nset-cookie: gw-mm=; Path=/; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Secure; SameSite=None; Partitioned\nlng=en; Path=/\ncookies_agree_type=3; Path=/\ntzo=2; Path=/\nis12h=0; Path=/\r\nx-dt: 285\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"203","status_text":"Non Authoritative","fingerprints":null,"data":{"size":285775,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (54212)","md5":"ef0688027266f6a9b4a9a9a5b2c0d5a4","sha1":"5f4f6e23bc6da5557280e318fcb1f38d0873b8db","sha256":"dba7d01aa6da3c9d5d3a8b535a8c0c92a90c62a951f8b984969bd8554d67d3a8","sha512":"8e08135b0bf54b9a0d901b265bd8dade1599bd6f4644359431a4755893407e0fdd26b5e6ff9ad3effbd954105f559c7afdf62cae1e77e99bfe64a4843e5b4cd3","ssdeep":"6144:oKEL1mF375xWt5JkyunibMhnIpe6ZDflUrLYltOkD8oE8Q:oKEL1mF375xWt5JkyunibMhIpe61fcLn","tlshash":"ce54b52ea9084c3e551f1abac54f7e4e1b7cda1a34db2d06dc6e6f6910d278007a247f","first_seen":"2025-07-19T20:17:18.872045Z","last_seen":"2025-07-19T20:17:18.872045Z","times_seen":1,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-19","alert":"Sinkholed","trigger":"1xlite-14085.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/a70d3252/desktop/default/Betting.Core-9c80cbb4.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:51.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/a70d3252/desktop/default/Betting.Core-9c80cbb4.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-4fd2c9c22500390fa16b5ca9ab1672b2-1f466093f4132084-01\r\nlast-modified: Fri, 18 Jul 2025 08:46:39 GMT\r\netag: W/\"4204034ad2ffe9e73329038fc4f70e81\"\r\nx-amz-meta-mtime: 1752828399.064363929\r\ncontent-encoding: gzip\r\nexpires: Sat, 19 Jul 2025 09:10:09 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 39783\r\ncache: HIT\r\nx-cached-since: 2025-07-19T09:13:48+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2142,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2142), with no line terminators","md5":"4204034ad2ffe9e73329038fc4f70e81","sha1":"c53eb5c5c1b329d5e78222dbf671e0bb933f30a1","sha256":"b39d718633549737e24d724870f9c583d19f2047ec71b0494fe71d32cad2c45a","sha512":"8731e5bbc0da96d122a064edd0602578d004fa9d31746bf8d3a2b388cd288747ae0a5483022b185c33318cad9da44ecf6e26ada373c4d4987e44572df8b48ac0","ssdeep":"","tlshash":"7d4174c639e3b844c37b24c680ff01e2a0b86fa4340e15e8e442f9e0707599ac1e9fd6","first_seen":"2025-07-18T10:11:01.015974Z","last_seen":"2025-07-21T06:34:34.953454Z","times_seen":75,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_base-app_6beaa69080.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:51.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_base-app_6beaa69080.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-4a8724fea6f27183b3c8ba48a928c600-3e1a8b785b8454fc-01\r\nlast-modified: Sat, 19 Jul 2025 08:13:45 GMT\r\netag: W/\"47286570d1c64ce7f0eb3d4d009048b4\"\r\nx-amz-meta-mtime: 1752912694.00340032\r\ncontent-encoding: gzip\r\nexpires: Sun, 20 Jul 2025 11:20:36 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 31892\r\ncache: HIT\r\nx-cached-since: 2025-07-19T11:25:19+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1436846,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (23471)","md5":"47286570d1c64ce7f0eb3d4d009048b4","sha1":"28e039b364415e8d83756ff16edecd5767b5a235","sha256":"5c866bf9966e47e67616550b3c20555374028d9100defb7e853f469c25019d06","sha512":"d96779e84e5403cf709fd177f4ddf6db7b826528416dad0d2cbf156f0b86eeb9f75c4a66610a4abcc023fee72a68b53c7b82f8120a63a2fa59ccf1ff484c3967","ssdeep":"24576:a5gXLaj/6hUoYAf0/Gn1AjnNVzU42fipn5v:amXLaj/6hUoYAs/Gn1UTU42fo5v","tlshash":"1a657c55b016b8221dd744eb90370643b19c5a9e8496f8a0f6fadcf837ce814529fbbc","first_seen":"2025-07-16T08:51:00.45477Z","last_seen":"2025-07-23T11:17:13.025452Z","times_seen":181,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KFGPRJ2V","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:17:02.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:40:16 GMT","end":"Mon, 15 Sep 2025 08:40:15 GMT"},"fingerprint":{"sha1":"3A:12:37:38:16:E5:9F:51:4E:B7:1D:5F:1F:C0:84:BB:92:EA:9E:20","sha256":"7C:C3:2F:91:ED:C8:F9:0D:09:BC:07:8E:79:FB:C7:5D:07:2F:F1:59:CD:23:2D:49:F9:C7:19:B9:05:9B:BF:6F"}}},"request":{"raw":"GET /gtm.js?id=GTM-KFGPRJ2V HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 19 Jul 2025 20:17:02 GMT\r\nexpires: Sat, 19 Jul 2025 20:17:02 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 19 Jul 2025 18:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1319:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1319:0\r\nreport-to: {\"group\":\"ascgcycc:1319:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1319:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 120156\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":347447,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4828)","md5":"f5f80255a8995bf1521f98d03e928f6c","sha1":"fb0dbf802380c4b8b02537f382190a255bfe62d7","sha256":"cd0a39ad2c48402c83ccdb8f89fd99fd6e1029dd9082287bb04bc76ee9a8dfcb","sha512":"e8afd520fb4e05b22a6d1ddcacbb41d838cedb2bf968d68d353122d69e74a7a49cc0d5e72e492ff067b3aa184c681e38fb893906839278610565beafe1ff1dd6","ssdeep":"3072:mI14ZniNqPx370U5pAWK00B81ftT0GBRznCrC14Md38nbR4mQC5FoAqhRctjNDyL:rsr0U8b40bRYqFoAqbSj9wDb","tlshash":"c07419cdb3c674628392a478503f014bb17b69a2f48cdc94f186d8e42d74aaa4277f7d","first_seen":"2025-07-19T13:38:09.810812Z","last_seen":"2025-07-19T20:49:50.753093Z","times_seen":4,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":69,"dns":15,"connect":21,"send":0,"wait":33,"receive":69,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_express_day/en/dictionary_84e511afe97bad68fa98353e8037b65e.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:51.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_express_day/en/dictionary_84e511afe97bad68fa98353e8037b65e.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-f884f2adda90588d0129ac6b698dc434-2b863e12f894461b-01\r\nlast-modified: Mon, 30 Jun 2025 14:06:32 GMT\r\netag: W/\"26f10f416f0a3743c3362a51dd558a4b\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Mon, 14 Jul 2025 21:59:56 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 917\r\ncache: HIT\r\nx-cached-since: 2025-07-19T20:01:34+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1202,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"26f10f416f0a3743c3362a51dd558a4b","sha1":"6b458c43b5e31fc0515de1eb1a0e535855a3e936","sha256":"8374658000ae2d2747471b9535397e6de0c036d4e1a767a2a523047f8d06cb73","sha512":"1a6b1e740800f48106a46ff15b36fdeaec72cb4fa2e7a06957a52609f7b5481f1c0bca9e6a07a4112e0a1dbc75918e78fd5085517dd0051b4546b84338715321","ssdeep":"","tlshash":"d7210aa71034073e9d132b2bad3f929006c0485052e8b487379f39fb37ccd949e6d6aa","first_seen":"2025-06-30T16:12:32.415153Z","last_seen":"2025-10-15T02:35:25.221046Z","times_seen":2212,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/d9842b87b9dabdc4cdc248c062355299.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:51.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/d9842b87b9dabdc4cdc248c062355299.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:51 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-b31f77e437460fbf8f14123b97181d54-0d1c391acb2727f3-01\r\nlast-modified: Thu, 23 Jan 2025 13:19:10 GMT\r\netag: W/\"0614058b667e6dfa1cdecc6e0e53131c\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 23 Jan 2025 14:50:28 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1597\r\ncache: HIT\r\nx-cached-since: 2025-07-19T19:50:14+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7321,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0614058b667e6dfa1cdecc6e0e53131c","sha1":"4f20f88c436fb5cbd82cf1dcfeaa14e52195a369","sha256":"be16474b0f19b7536ebdd3d0f8867b151eaa4638411ddb46845f887a5d51a653","sha512":"42d1910a360b9b574251bf6bc3a7bb94ddd3892771b9b17fe27838cfb50198827104a677767742e602eae3cc93e0e14903914dce6ff3af1a9cad2d66f43c62a8","ssdeep":"48:TzABBABGkABjABFygABCN/ABCNYN8ABWHABaEABzzEFABIIX4ABBxSHsABYiwAB/:lFbClXCL3cblP+XyLO5GIa","tlshash":"37e11684fff05c33112f94ad98b27a89a3884f07a91a7d1c7f9d294c1f5451a04aadbe","first_seen":"2025-01-27T03:54:57.625203Z","last_seen":"2025-08-01T05:37:23.910867Z","times_seen":1273,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/entry-304e92fc2d.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:51.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/entry-304e92fc2d.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-c9411cb6ded1101d9aa95370eb72587b-1573de7b1c74bd8b-01\r\nlast-modified: Wed, 16 Jul 2025 08:21:14 GMT\r\netag: W/\"4c3d8dbf1a2a88947d54b781b237ff3c\"\r\nx-amz-meta-mtime: 1752653611.099586179\r\ncontent-encoding: gzip\r\nexpires: Thu, 17 Jul 2025 08:24:02 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 42303\r\ncache: HIT\r\nx-cached-since: 2025-07-19T08:31:48+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30040,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29524)","md5":"4c3d8dbf1a2a88947d54b781b237ff3c","sha1":"eb928a4364d82fef203eeb5d587a8e966cfd854f","sha256":"7b32be74cf89901fea37ce259fd3b7eb9e769002a87838a1e88f3bd48f4bbd36","sha512":"a9165c05c68ee55bc3469e7d5f973909aaec4fb8533a6f9a0b13eed17d974844eebd9ce69957d9c18da819a79030712430d8670d549623dea48b629670cba283","ssdeep":"768:HcN7d17/og1lcpMAcKDkw7cj/MxfSTDXXeA8UC8QAAI+6EcqfXw3fVWIF8wSPsH8:c77/og1+FH08UC8QAAIv0aVw62","tlshash":"9dd2a17434a7b0b960da96586739bd53d6c80f9fe88afcd211cb89a713c305884167fb","first_seen":"2025-07-16T08:51:00.512581Z","last_seen":"2025-07-23T11:17:13.074258Z","times_seen":141,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/e3dd2d416ede1d7659584842878349f6.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:52.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/e3dd2d416ede1d7659584842878349f6.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:52 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-de8d5cb39e7b9093bbb7a43f230a65e9-aef06f3b25c0b158-01\r\nlast-modified: Thu, 16 May 2024 19:05:13 GMT\r\netag: W/\"338264fc869e8f0b86b0d6c9d92102b0\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 17 Jul 2025 23:02:45 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1551\r\ncache: HIT\r\nx-cached-since: 2025-07-19T19:51:01+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1085,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"338264fc869e8f0b86b0d6c9d92102b0","sha1":"83b4d35816df0e1486b766251e74d23f28b77824","sha256":"015355a44429f40dd63b566dd1e9b1b76af3dfa28dcd25a43e82820ba0847b8d","sha512":"ed669b39fbca032d9cfaef0f0e7acb42c95d98581f95efb8f4896a22b45d4ba3f4cb9ea99904f75e770b64d57441beec15c63767323f3ea3e8deee47f23c01e9","ssdeep":"","tlshash":"bd11eb69f7f40833112fd4ae4df2668d93844f17994dbc193e6c2a4c5fa442604baa7e","first_seen":"2023-05-25T17:41:30Z","last_seen":"2025-07-30T04:19:29.49492Z","times_seen":1689,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/site-admin/colors/1d460dd6668d3a7fae9466949edb033f.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:51.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/site-admin/colors/1d460dd6668d3a7fae9466949edb033f.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:51 GMT\r\ncontent-type: text/css\r\ntraceparent: 00-330e8c9bbd1075b6a8697afdaaf6e01a-1d1e319615c718ee-01\r\nlast-modified: Wed, 16 Jul 2025 14:05:21 GMT\r\netag: W/\"1d460dd6668d3a7fae9466949edb033f\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Wed, 16 Jul 2025 15:14:07 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2394\r\ncache: HIT\r\nx-cached-since: 2025-07-19T19:36:57+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40085,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (40085), with no line terminators","md5":"1d460dd6668d3a7fae9466949edb033f","sha1":"b7c34ce1f8e6b8f9b8e8b523a66a20cee075a49b","sha256":"3bdb068a33276a91b91ae2e4a92ab384919205dc0951d07763608d2053cd8380","sha512":"d7b7038cbdc1c72edf22a3ff09a560713a33d9bab75dcb55dd2331c62089e757381ee74b05c81846d86b5dc8e52744667bf2579ea28e35e61543e7aa2a6a2c80","ssdeep":"384:+EL1mFsK75xWt5JkyunibMhS4EW7I9peN:+EL1mFsK75xWt5JkyunibMhS4pI9peN","tlshash":"9f036a7ded91c1712a591931911c677f3d36e9daae240f8fd02c63e670c1b022be4a7a","first_seen":"2025-07-16T20:50:43.409996Z","last_seen":"2025-07-23T06:33:21.157246Z","times_seen":136,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/60608cbba85ee2e8946c25b55281a0bc.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:52.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/60608cbba85ee2e8946c25b55281a0bc.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:52 GMT\r\ncontent-type: application/json\r\ncontent-length: 328\r\ntraceparent: 00-382da6c64b77a31536ccc6869a7ad597-9f67542225664412-01\r\nlast-modified: Thu, 27 Feb 2025 10:51:50 GMT\r\netag: \"4347fc050ebe622e30a7bf78a213b5a0\"\r\nexpires: Thu, 27 Feb 2025 12:17:56 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1551\r\ncache: HIT\r\nx-cached-since: 2025-07-19T19:51:01+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":328,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4347fc050ebe622e30a7bf78a213b5a0","sha1":"c05b3b571980b01ff9f07e6adc1c29c58be70bd1","sha256":"ed1b1193a248bf273141c31b7f74dd1224416b3757e5a71f2e7d579c50d65d57","sha512":"06f340eeb16b0716703d2bda345c7ad58fa2e37877a09f36657a20bd06a62ca538672ed91f24ddf1af25a86651e64638519d1fbf09c94ed0323674fe5e0342c8","ssdeep":"","tlshash":"02e02614f6e40c33022f106e80e3a28c93958f13a9086c163b1c758c0f00c19405ac3a","first_seen":"2025-02-27T19:55:39.007967Z","last_seen":"2025-07-30T04:19:29.492638Z","times_seen":1637,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:52.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-14085.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:31 GMT","end":"Sun, 14 Sep 2025 11:35:30 GMT"},"fingerprint":{"sha1":"16:6B:F5:11:18:6D:50:EE:C3:3B:30:0B:A0:68:68:59:D3:46:70:60","sha256":"3D:14:FF:6F:86:DD:37:D5:64:D5:5E:13:22:DB:7F:18:CC:EF:48:CA:A0:47:E5:2E:B0:A3:60:F5:9C:AD:CA:7B"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json HTTP/1.1\r\nHost: 1xlite-14085.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 51645942-8645-45c4-a80c-6f76830eb962\r\nContent-Length: 19\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder; postback_watcher=%7B%22tag%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22pb%22%3A%22a97213fad9d648e1a13d8fe56a5b07c1%22%2C%22click_id%22%3A%2228981_286039_2_3_s6_2024106%22%7D; auid=uaJaGmh7/TFe7ahABBD5Ag==; window_width=1280; che_g=f639fbf7-d01f-f016-5c71-f18071eea5bc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:52 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nx-dt: 285\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.009, wf-uht;dur=0.008\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-04-05T05:45:52.191129Z","times_seen":227275,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-19","alert":"Sinkholed","trigger":"1xlite-14085.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/captcha-api/assets/hunt-captcha.js","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:59.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-14085.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:31 GMT","end":"Sun, 14 Sep 2025 11:35:30 GMT"},"fingerprint":{"sha1":"16:6B:F5:11:18:6D:50:EE:C3:3B:30:0B:A0:68:68:59:D3:46:70:60","sha256":"3D:14:FF:6F:86:DD:37:D5:64:D5:5E:13:22:DB:7F:18:CC:EF:48:CA:A0:47:E5:2E:B0:A3:60:F5:9C:AD:CA:7B"}}},"request":{"raw":"GET /captcha-api/assets/hunt-captcha.js HTTP/1.1\r\nHost: 1xlite-14085.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/en/block\r\nCookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder; postback_watcher=%7B%22tag%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22pb%22%3A%22a97213fad9d648e1a13d8fe56a5b07c1%22%2C%22click_id%22%3A%2228981_286039_2_3_s6_2024106%22%7D; auid=uaJaGmh7/TFe7ahABBD5Ag==; window_width=1280; che_g=f639fbf7-d01f-f016-5c71-f18071eea5bc; SESSION=dd1fd03e55038357478dc06799866a93\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:59 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=300\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-dt: 455\r\nx-request-id: 18a6b801bde6d7784e4b60a15b15c606\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.005, wf-uht;dur=\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":86579,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"463ec5b64c24135eb67e671110b5d44b","sha1":"a7bd6aa5fc80405ffcb6d9e5ad1c51590e00ef7c","sha256":"117405693cdc1b81d14087d8fd50ecb1709a19fb6d7adb936ef31d7e8f6ab3c7","sha512":"9ba7157f7048b9491514dba2c3d2caed469158c8e2784e3d665ab566cda313d5222b650f470233ba3815821897da0b7a21cc99e6a537cb5d1a1f06a80417abad","ssdeep":"768:B7kSWofi7ZSUjCrT9gytyjTX4uV52Ut0S4Wf1baEedd60pNaJbI9mieLkoaTgkaS:C4i1Jn9j/N+osOS0VYz3zvU6mw","tlshash":"718322d034d9d234e3c3eae2a5bf0de8e97754cdfe8c094fd056a108a4d8db295a5a31","first_seen":"2025-07-16T08:51:00.52683Z","last_seen":"2025-07-21T07:52:30.016429Z","times_seen":151,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-19","alert":"Sinkholed","trigger":"1xlite-14085.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:50.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:50 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63748\r\ntraceparent: 00-0cc900c7ec0d6bd31ecc89d196fd769f-9d8c5c6068166fa3-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"6887b6f24414dbc612dbf42ccdc76b70\"\r\nexpires: Thu, 16 Jan 2025 10:32:14 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 540\r\ncache: HIT\r\nx-cached-since: 2025-07-19T20:07:50+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":63748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63748, version 1.0","md5":"6887b6f24414dbc612dbf42ccdc76b70","sha1":"8068d3abfbc6cbf35b55919da45b1f4d2d136238","sha256":"fc5c015fc32518f1ed810fa84ca28941eb9d5a3c81acc8df69a4dbbeedef7b0c","sha512":"00f08f9dd648972c9571547e06172d5505dd13f577fe2e65a497d3856172807ac11c996984e4138d2eb2ac784257fe61864aee15752fe9e9e76f98db931e0c2a","ssdeep":"1536:KtdCG+Dz6RxAx457zL0ASEn091Y0H1mTOzI/OzMFOoTX4u:MMG+yRpzN091Y0VtI/pOoTt","tlshash":"8b5302485551fae2cac3073c0f7a89dbb37a776d519224cd98b69f830d37964bea2070","first_seen":"2023-06-14T19:15:49Z","last_seen":"2026-04-05T04:03:57.042465Z","times_seen":10314,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/a70d3252/desktop/default/commons/app-b02bd1c8.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:50.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/a70d3252/desktop/default/commons/app-b02bd1c8.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-c3d4dfe972720bceeeeb3b9e73de053f-582e7f6f0cada2b3-01\r\nlast-modified: Fri, 18 Jul 2025 08:46:39 GMT\r\netag: W/\"cdd59493abdbe2a455843601a7d4d00b\"\r\nx-amz-meta-mtime: 1752828399.068363966\r\ncontent-encoding: gzip\r\nexpires: Sat, 19 Jul 2025 09:10:08 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 39787\r\ncache: HIT\r\nx-cached-since: 2025-07-19T09:13:43+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":137774,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65476)","md5":"cdd59493abdbe2a455843601a7d4d00b","sha1":"e5fa84f9f4dd2fdd114b1044ccf29eb85379a5e2","sha256":"45d4d2a0f69c09bd60f79cb1e82df89da3b82a98852eeb3dcdaf3e51d6931aeb","sha512":"702ef7e26e61ecab4a590f9d943a95cc8d4a9b33018aa2f26ba3101597444b8de3166de409e3538ef0489b8d13028deee74e9fee0c9dd4d61a4bf3c3407ef6bc","ssdeep":"1536:A0UiXH2DHJjIAG3wvvjE+gjmZVBGCrmhjG5YGf7BMr3y6MPc+PWK4s62tm:/XHUp0qXjE+gjmZxmkYGNMrii20","tlshash":"21d3d5dcf695b03117e721b5407f150bf23a7898680ac0a4f266e8d53db888ea167f7d","first_seen":"2025-07-09T10:12:06.343396Z","last_seen":"2025-07-23T11:05:54.737316Z","times_seen":261,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/a70d3252/desktop/default/DC-91ef4e0e.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:51.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/a70d3252/desktop/default/DC-91ef4e0e.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-1044cb4cf00a669b9e7d4c75bff8e724-ec62c6d0fa6cc6c8-01\r\nlast-modified: Fri, 18 Jul 2025 08:46:39 GMT\r\netag: W/\"d89cdfa33534b217cd72c431f203b494\"\r\nx-amz-meta-mtime: 1752828399.064363929\r\ncontent-encoding: gzip\r\nexpires: Sat, 19 Jul 2025 09:10:09 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 39783\r\ncache: HIT\r\nx-cached-since: 2025-07-19T09:13:48+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2656,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2656), with no line terminators","md5":"d89cdfa33534b217cd72c431f203b494","sha1":"10bdddc449e29d097e1a3571580657d197e029fc","sha256":"d9e65032547a90fb16de5c8e4477252c62961d74ab72e0f4fcfd183933068806","sha512":"33d6008c76bcae185cea6f8baf4c042c4dcb1c05d0a3102050b49a4280b1cb6be0128976cda8ee620573c2e52b882942e5a28fd1c1d6a93571f07f19e68fca20","ssdeep":"","tlshash":"9551518a76eba42109f4406cbc3a26519623b641d40398ecbe7d6fc16d96d0fb13e835","first_seen":"2025-07-16T07:17:14.744528Z","last_seen":"2025-07-24T09:34:41.099414Z","times_seen":154,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"radar.cedexis.com/1707728419/stub.js","fqdn":"radar.cedexis.com","domain":"cedexis.com","tld":"com"},"ip":{"addr":"45.54.49.5","port":443,"asn":63911,"as":"NetActuate, Inc","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:17:02.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"radar.cedexis.com","organization":"Citrix Systems, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A2:3E:30:19:D5:41:3A:11:81:58:E3:B1:6F:F4:D2:78:0B:44:6F:D0","sha256":"BE:70:39:96:BA:51:8F:A7:6A:9D:E1:58:FB:D9:F7:6F:17:5C:DA:A9:6E:54:3F:8F:0B:3D:1E:DF:8C:44:B4:71"}}},"request":{"raw":"GET /1707728419/stub.js HTTP/1.1\r\nHost: radar.cedexis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 19 Jul 2025 20:17:02 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Mon, 12 Feb 2024 09:50:42 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"65c9e9f2-186\"\r\nExpires: Sat, 02 Aug 2025 20:17:02 GMT\r\nCache-Control: max-age=1209600, public\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":390,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"82dec77fd0353c7c71ce053b8601387e","sha1":"fbbca95419e1d0c042e0a5fdf10f380aca66188c","sha256":"39f2b7b0fa78d37d0c84d2d6618bd635d86fd683d9bcdd5729850cb2a62522f7","sha512":"6872c895cb44711405e57a436dfbe15d094f9159e11ee2b89983c63b1f18f6acbdfaf0ccbb5e48b2bf24f366f16584c660bca4b6b14c048a134bb77a60f6563e","ssdeep":"","tlshash":"02e068ae9391a318537a2dbacc4e060ba0f6114888e5e4e029f5c2c00461bae072bfb4","first_seen":"2024-02-13T14:23:26Z","last_seen":"2026-01-15T12:01:08.184588Z","times_seen":7496,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/version.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:50.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /version.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:50 GMT\r\ncontent-type: application/json\r\ncontent-length: 11\r\ntraceparent: 00-4e5a362cb5dd9f021a3bd0a4d7b86f9d-af033715b2be6f4d-01\r\nlast-modified: Fri, 18 Jul 2025 08:50:14 GMT\r\netag: \"20605ded3600c0a48409a82b2aa9b2a6\"\r\nx-amz-meta-mtime: 1752828614.505446216\r\nexpires: Fri, 18 Jul 2025 08:52:43 GMT\r\ncache-control: max-age=60\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 7\r\ncache: HIT\r\nx-cached-since: 2025-07-19T20:16:43+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text","md5":"20605ded3600c0a48409a82b2aa9b2a6","sha1":"655d6f1c9c67f1ca451bd96a75618aaa9a33a717","sha256":"3bd86713ad4e26701fe8fb35f4a5dd2e7a44f98a4131e300039d9ce1a6ebbcea","sha512":"05bfbe9af5955f543595746c01f9fa49bd2032cb3aec3f4bb01b311cdb762555069aafedd651799c8b003593083611caeebc3943df9ddee4c1b1b926243ced61","ssdeep":"","tlshash":"82500030c00300000000003cc0c000cccc0303000000000000000000c000ccc3300000","first_seen":"2025-07-18T08:54:24.975799Z","last_seen":"2025-07-21T06:34:34.951918Z","times_seen":108,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":94,"dns":28,"connect":3,"send":0,"wait":1,"receive":1,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?en=page_view\u0026dl=https%3A%2F%2F1xlite-14085.world%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=968380677.1752956223\u0026dt=1xBet\u0026auid=1468548047.1752956223\u0026navt=n\u0026npa=1\u0026gtm=45He57g1v9180563600za200\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211~104948814\u0026tft=1752956222687\u0026tfd=13867\u0026apve=1\u0026apvf=f\u0026img=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:17:03.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:40:16 GMT","end":"Mon, 15 Sep 2025 08:40:15 GMT"},"fingerprint":{"sha1":"B9:AB:CF:25:07:76:A5:52:8A:C6:4E:00:9A:A3:2B:D3:B6:32:A6:32","sha256":"BD:DA:50:EC:92:BD:74:5E:26:6B:7B:A3:D1:57:18:4D:FA:93:28:23:4E:B5:B5:B3:8E:11:6B:16:D9:66:FD:7E"}}},"request":{"raw":"GET /ccm/collect?en=page_view\u0026dl=https%3A%2F%2F1xlite-14085.world%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=968380677.1752956223\u0026dt=1xBet\u0026auid=1468548047.1752956223\u0026navt=n\u0026npa=1\u0026gtm=45He57g1v9180563600za200\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211~104948814\u0026tft=1752956222687\u0026tfd=13867\u0026apve=1\u0026apvf=f\u0026img=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npragma: no-cache\r\ncontent-type: text/plain\r\ndate: Sat, 19 Jul 2025 20:17:03 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T05:47:04.311114Z","times_seen":13362114,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/main-static/a70d3252/check-ob.js","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:50.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-14085.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:31 GMT","end":"Sun, 14 Sep 2025 11:35:30 GMT"},"fingerprint":{"sha1":"16:6B:F5:11:18:6D:50:EE:C3:3B:30:0B:A0:68:68:59:D3:46:70:60","sha256":"3D:14:FF:6F:86:DD:37:D5:64:D5:5E:13:22:DB:7F:18:CC:EF:48:CA:A0:47:E5:2E:B0:A3:60:F5:9C:AD:CA:7B"}}},"request":{"raw":"GET /main-static/a70d3252/check-ob.js HTTP/1.1\r\nHost: 1xlite-14085.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/en/block\r\nCookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder; postback_watcher=%7B%22tag%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22pb%22%3A%22a97213fad9d648e1a13d8fe56a5b07c1%22%2C%22click_id%22%3A%2228981_286039_2_3_s6_2024106%22%7D; auid=uaJaGmh7/TFe7ahABBD5Ag==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 219\r\nlast-modified: Fri, 18 Jul 2025 08:50:14 GMT\r\netag: \"c065700c9c8c493403359e1f2baa10d9\"\r\nx-amz-meta-mtime: 1752828613.573443226\r\nexpires: Sun, 20 Jul 2025 17:49:13 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: wf-uht;dur=\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":219,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"c065700c9c8c493403359e1f2baa10d9","sha1":"4630fe729e70bdf63fa7ba6c84ec277fd1f51030","sha256":"1e61f0c82ae82ffcf503fcd4b4c8ae27b32c11e19b882d5d13f3c44364c893f4","sha512":"b2e1c73cb94f5e3ceb35c3662bf4d72baf800a9a7c64318b1db07d50e9c885dbd94821ef3b3916d1b8b4fabb8f45cb588834b41c6a8a7f4d2c3e9c3866083ee7","ssdeep":"","tlshash":"96d0a79fb900211406939267d12f8668807724973f008182500597e069b8f4c4b37895","first_seen":"2024-07-17T14:33:52Z","last_seen":"2026-01-22T06:40:31.153166Z","times_seen":6298,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-19","alert":"Sinkholed","trigger":"1xlite-14085.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/site-admin/css_vars/29b5cda95fa390c124de39b6aeca6d24.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:51.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/site-admin/css_vars/29b5cda95fa390c124de39b6aeca6d24.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:51 GMT\r\ncontent-type: text/css\r\ncontent-length: 46\r\ntraceparent: 00-67478d5cb790ae16bd6d77175cb86a33-f55aa1d35fe0e7e6-01\r\nlast-modified: Thu, 20 Mar 2025 13:29:31 GMT\r\netag: \"29b5cda95fa390c124de39b6aeca6d24\"\r\ncache-control: max-age=3600\r\nexpires: Sat, 12 Jul 2025 06:36:16 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2238\r\ncache: HIT\r\nx-cached-since: 2025-07-19T19:39:33+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":46,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"29b5cda95fa390c124de39b6aeca6d24","sha1":"46f68f69533c1fdc737eb36e8e7af7672178e610","sha256":"6021ec0aede22eadcb8401fe945d345202320437c7be01b157f0cb282ebe7c88","sha512":"8a62d0b23596f91ed5dbd111fce75e940b4b6fe542716d9fad76d610eb9a90f67bad145f3dcfd977b5a7a6d414d66e94c0abcaf6cabce2310d94af56cdf0e13b","ssdeep":"","tlshash":"54900294a50c22502025c656109c48d0119412566621255851533451b4438405960188","first_seen":"2025-03-20T19:27:14.305804Z","last_seen":"2025-11-18T11:41:52.983768Z","times_seen":4852,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_vue_deps_DYMTJONH.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:52.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_vue_deps_DYMTJONH.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:52 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-f74fefa86132fafda276881ec59333af-30fe570ea2c5adde-01\r\nlast-modified: Sat, 19 Jul 2025 08:13:43 GMT\r\netag: W/\"1580a3cfe81fd30910a49dfe64cc8e7b\"\r\nx-amz-meta-mtime: 1752912694.026402073\r\ncontent-encoding: gzip\r\nexpires: Sun, 20 Jul 2025 14:31:54 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 20698\r\ncache: HIT\r\nx-cached-since: 2025-07-19T14:31:54+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19175,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19034)","md5":"1580a3cfe81fd30910a49dfe64cc8e7b","sha1":"314144dc49595482ba46c0b85b38d5f73ef73a7b","sha256":"8989a021d20f0fc08c43966a287cbd99e43142a5a0ff42eb232756a101de6035","sha512":"65a68a90c0bbac3609abafd1e200227d970f2a35a5158d699972651cdcdcc4c60e08dbe7e3f605621abb04e016e064f71057c9332d2a4e46dd704aad5ee3196b","ssdeep":"384:yo1wZ1yyQBPgmtk3aNPtFvsddbHyrKe/k43RuD6EgUBBmCWEg4bGy7IbEALvzAdw:lwZ1yyQBDk3a1tF+5E/uDRgQBpWEg2mh","tlshash":"de824be47bb9fd93339840dc80671b53f26948a7844cd074e799ae9330a454385b6bbe","first_seen":"2025-05-14T05:06:37.162459Z","last_seen":"2025-08-22T06:38:14.178048Z","times_seen":1811,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66\u0026cx=c\u0026gtm=45He57g1v9180563600za200\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:17:02.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Jun 2025 08:40:16 GMT","end":"Mon, 15 Sep 2025 08:40:15 GMT"},"fingerprint":{"sha1":"3A:12:37:38:16:E5:9F:51:4E:B7:1D:5F:1F:C0:84:BB:92:EA:9E:20","sha256":"7C:C3:2F:91:ED:C8:F9:0D:09:BC:07:8E:79:FB:C7:5D:07:2F:F1:59:CD:23:2D:49:F9:C7:19:B9:05:9B:BF:6F"}}},"request":{"raw":"GET /gtag/js?id=G-7JGWL9SV66\u0026cx=c\u0026gtm=45He57g1v9180563600za200\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 19 Jul 2025 20:17:02 GMT\r\nexpires: Sat, 19 Jul 2025 20:17:02 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0\r\nreport-to: {\"group\":\"ascgcycc:1077:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 151891\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":476067,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12571)","md5":"a23a14073626c9ef03c0c678dd87c1a0","sha1":"811d096bb21e74003d1d850900c30d9d10c63b31","sha256":"0189acd19d6d6ae19311947ffee33e8f0a7d0f5570fd587b18db7996f77e58e2","sha512":"94f764422f94e244832bb56310e43e5d8ca8bad6e5024e0a2549fb36a6dae1b6da044f6e21fc55d048222de393c9c31af9265d6481d84e395f10da5126d28da0","ssdeep":"3072:xV4wxwwmzrpJnGNqPx370/h5pAWA00BL1fBT0GBRznCrC14Md38nbKymQC5FoAqP:5sr0/h8640bKuqFoAqbSj9KA3qNp+A","tlshash":"3fa4f8de73c6742252d6e478503f02cba97b29a2b49cc8aab1c9ccf02d7455a4177f78","first_seen":"2025-07-19T20:17:18.884808Z","last_seen":"2025-07-19T20:17:18.884808Z","times_seen":1,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-ui/3.3.302/Desktop/Default/merged.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:50.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-ui/3.3.302/Desktop/Default/merged.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:50 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-bf75607e6f5c4b38a7d3b05ea4d9a12f-4ac9e4c24210fe4e-01\r\nlast-modified: Thu, 17 Jul 2025 10:45:26 GMT\r\netag: W/\"d077520a3e77416e777d1948aa25ca5d\"\r\nx-amz-meta-mtime: 1752749078.660686994\r\ncontent-encoding: gzip\r\nexpires: Fri, 18 Jul 2025 10:54:15 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 33654\r\ncache: HIT\r\nx-cached-since: 2025-07-19T10:55:56+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":784809,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d077520a3e77416e777d1948aa25ca5d","sha1":"0acaea18ebb7e63da17b7a5fe2afe09654f7728d","sha256":"9e3808aee469146f536617faf8138b10a5d5122c4e5c4e233adb56fa8e3d8714","sha512":"3adb89e996d2c3118132889371ea43af52176a1fc4aeadaf44f7e8b253944db7ec65dde53da5b980b5fa10d0a180a71ae981ec674c8cfa9fe3ca1a53e513718e","ssdeep":"12288:3xEvoQ30ffnqKvmfpBxJvYyRe2eRtTGxvON7OgM9PCw2p8p687b:3xEvoQ30ffnqKvmfpBxJvYyRe2eRtTGt","tlshash":"f0f4a71cf25c91353e37e62162849ffc6620b7139b221c6ef59a025b0ec39537196dbb","first_seen":"2025-07-15T22:07:27.706826Z","last_seen":"2025-07-21T12:33:40.441027Z","times_seen":157,"resource_available":false,"data":null}},"time_used":596,"timings":{"blocked":280,"dns":9,"connect":5,"send":0,"wait":9,"receive":0,"ssl":289},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/78e1228f56f3d966ed7fcfded728f899.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:51.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/78e1228f56f3d966ed7fcfded728f899.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:51 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-9c7ddd02eab72f8b35be2256268a8697-0fcb0a26c5381be6-01\r\nlast-modified: Tue, 01 Jul 2025 08:15:39 GMT\r\netag: W/\"bc3c79e764880121898f78d58c54ac21\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 17 Jul 2025 11:42:25 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1799\r\ncache: HIT\r\nx-cached-since: 2025-07-19T19:46:52+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23270,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bc3c79e764880121898f78d58c54ac21","sha1":"0e1fb57593fa0c59e51e06040bf3a6b4c868b430","sha256":"8bcfd2c3d6f34658a491941dbffa8478d7c2462340b78e1dd82d4b91c9a3163d","sha512":"63da1c6ef993321d7dd3d938d84eaa3adb4302350929172b0ddab87ae6cc824621b61d6d32da936a3c65b7eca1ae953eb142cfd1de1ed27ec703575c2219ec06","ssdeep":"384:hrLr0fLSwUj+uZbC445IOhT9TYXw1LyaNuRBC1WjTZU:hvkO+ylRBW","tlshash":"a0a24b85faf40c33102f90ae95f3ba0e93d85f879d4a6c14bfac2a4d2b54519016bd7e","first_seen":"2025-07-01T08:49:13.464333Z","last_seen":"2025-08-05T10:20:54.890994Z","times_seen":519,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/8b4e10c31932a559912f415b65fba92c.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:52.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/8b4e10c31932a559912f415b65fba92c.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:52 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-d1123e71e4d5bc11fb0b19d2a5e12104-76a8fdf20b94778e-01\r\nlast-modified: Thu, 27 Feb 2025 08:17:13 GMT\r\netag: W/\"499d57f89b2bf5fed52d984d865fd72c\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 27 Feb 2025 11:06:29 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1551\r\ncache: HIT\r\nx-cached-since: 2025-07-19T19:51:01+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1342,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"499d57f89b2bf5fed52d984d865fd72c","sha1":"f3dd138886f2c1e257d3ac2214b7e3cba57e56b2","sha256":"9467cf5576ce2a97d9e44e53915a9c4ae529c134cc1ea5a3c62ea304eebda0c8","sha512":"38ba45be7e97a3698d488c7e4669bc1b6fa7451b9a1537b5f48088decdcc7a491fab4f8ec3d60525b227fb28b648dbe403ba326d81d0ba883f48753e39c1b527","ssdeep":"","tlshash":"5a215788f7e00c73016b92ad44f7a68d93884f17a85a3d18be5c3e4d1b5891a005fd7e","first_seen":"2025-04-07T23:34:47.992537Z","last_seen":"2025-07-30T04:19:29.45081Z","times_seen":1629,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/hd-api/external/verify","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:17:02.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-14085.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:31 GMT","end":"Sun, 14 Sep 2025 11:35:30 GMT"},"fingerprint":{"sha1":"16:6B:F5:11:18:6D:50:EE:C3:3B:30:0B:A0:68:68:59:D3:46:70:60","sha256":"3D:14:FF:6F:86:DD:37:D5:64:D5:5E:13:22:DB:7F:18:CC:EF:48:CA:A0:47:E5:2E:B0:A3:60:F5:9C:AD:CA:7B"}}},"request":{"raw":"POST /hd-api/external/verify HTTP/1.1\r\nHost: 1xlite-14085.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/en/block\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 108869\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder; postback_watcher=%7B%22tag%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22pb%22%3A%22a97213fad9d648e1a13d8fe56a5b07c1%22%2C%22click_id%22%3A%2228981_286039_2_3_s6_2024106%22%7D; auid=uaJaGmh7/TFe7ahABBD5Ag==; window_width=1280; che_g=f639fbf7-d01f-f016-5c71-f18071eea5bc; SESSION=dd1fd03e55038357478dc06799866a93\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:17:02 GMT\r\ncontent-type: application/json\r\ncontent-length: 604\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-dt: 285\r\nx-request-guid: 116fdf1d5b674cabe85d1fadb2a98553\r\nx-time-ng: 0.008\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.005, wf-uht;dur=0.030\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":742,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"91103f2bf70fac82599805ec18920798","sha1":"b0a43f5a449959ed6ff51cdd1f58c83af6224292","sha256":"25e21a96cb2df50c88f2ce8c283e46e83f772a53a0c1c9eecbbd1da78c9ccb7e","sha512":"ad73f4b27ff9063e8ce703e1aea2b79d2fc87f095815a17604578c08f43b158daae1240d07572fa1760087c97514a5793b108ae8e3c6062c24baa48f69947be6","ssdeep":"","tlshash":"f101b5498a4a1e3f2d44a2c5494c186e56243ea1664c813fccc1e8829c513a9f152294","first_seen":"2025-07-19T20:17:18.889505Z","last_seen":"2025-07-19T20:17:18.889505Z","times_seen":1,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":28,"wait":112,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-19","alert":"Sinkholed","trigger":"1xlite-14085.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-ui/2.3.273/Desktop/Default/client.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:50.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-ui/2.3.273/Desktop/Default/client.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:50 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-29fdfea709a2276e00d3a0415f1cdc41-59c9609be20f2271-01\r\nlast-modified: Fri, 27 Jun 2025 13:38:05 GMT\r\netag: W/\"a8a44b273c4f19498dfe5dfbe6d66b5f\"\r\nx-amz-meta-mtime: 1751031482.572809748\r\ncontent-encoding: gzip\r\nexpires: Thu, 03 Jul 2025 09:30:19 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 71415\r\ncache: HIT\r\nx-cached-since: 2025-07-19T00:26:35+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":645724,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a8a44b273c4f19498dfe5dfbe6d66b5f","sha1":"6d68353f0344e5f497f983d9843493c5cba4416e","sha256":"3a55dbb30fd14dbf83a9bd142e1a2cdff2008b12994f1e1cea74cd55b2c6792a","sha512":"273e8d7d3b18691b6e08821b482381aeea7042cc9605ef88b5fa92a3621d4cb84d32c5398cf45b18dc99a821634052b907edb6ba2b1f0170c52ecdf65c51c74c","ssdeep":"6144:VeAjJKlbYNYHPKNuive9uW7/vrhoi99ET/qvW7hAnUCF:IDoUKi99ET/qveAnUCF","tlshash":"dbd4932cf59dd1353e3be62153885ffc2a20b6479b221c7af459035b1ec365221a2dbb","first_seen":"2025-07-09T10:12:06.30113Z","last_seen":"2025-08-22T06:38:14.128944Z","times_seen":782,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":110,"dns":7,"connect":1,"send":0,"wait":11,"receive":0,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/a70d3252/desktop/default/vendors/plugins.vue-js-modal-68f6d8af.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:51.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/a70d3252/desktop/default/vendors/plugins.vue-js-modal-68f6d8af.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-cf2dc34e0e948fb8a5d1e7cafee15d98-b4a1034572467825-01\r\nlast-modified: Fri, 18 Jul 2025 08:46:39 GMT\r\netag: W/\"6e3c1d147cd7b7419642af6c4f889a6d\"\r\nx-amz-meta-mtime: 1752828399.076364039\r\ncontent-encoding: gzip\r\nexpires: Sat, 19 Jul 2025 09:10:08 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 39784\r\ncache: HIT\r\nx-cached-since: 2025-07-19T09:13:47+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26667,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (26667), with no line terminators","md5":"6e3c1d147cd7b7419642af6c4f889a6d","sha1":"51c940a81be7013202d5b7745959201fbc108e74","sha256":"0d55cc88b766f0e5deceb32c8391e4167fd5668f3862a264d38aacf0c0542d85","sha512":"1ccaba9a80289690a906601dc56d21a0fbb61c36331922af1035cee0c3aeeede1738d0100eb0c06ae08ed777550640f6730a360fd5bc44642817c16d60607fe5","ssdeep":"384:HBy0a9vOeCGAZIXfK2rVsAdm00uow4HQEjacGXGQVe6ubq3:qHyIXfPt4wE9GXGQcbq3","tlshash":"9cc2298977d8307442db5573627f2b0ab23e295474269888f772e8e65cb864d206ff3c","first_seen":"2025-07-16T07:17:14.68788Z","last_seen":"2025-07-24T09:34:41.021866Z","times_seen":154,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:51.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-14085.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:31 GMT","end":"Sun, 14 Sep 2025 11:35:30 GMT"},"fingerprint":{"sha1":"16:6B:F5:11:18:6D:50:EE:C3:3B:30:0B:A0:68:68:59:D3:46:70:60","sha256":"3D:14:FF:6F:86:DD:37:D5:64:D5:5E:13:22:DB:7F:18:CC:EF:48:CA:A0:47:E5:2E:B0:A3:60:F5:9C:AD:CA:7B"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-14085.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 51645942-8645-45c4-a80c-6f76830eb962\r\nContent-Length: 48\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder; postback_watcher=%7B%22tag%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22pb%22%3A%22a97213fad9d648e1a13d8fe56a5b07c1%22%2C%22click_id%22%3A%2228981_286039_2_3_s6_2024106%22%7D; auid=uaJaGmh7/TFe7ahABBD5Ag==; window_width=1920\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:51 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\nx-dt: 285\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.004, wf-uht;dur=0.008\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c6343e24990277e94d3c580aa6f02c69","sha1":"4d98982bfcdf0bb20eab1b59fb22d7fb72d3d043","sha256":"a9ce437a442dff5f6320ec3e9164ca731bbab7d1b13ffa861f74bd7d52b88a96","sha512":"5b9f3101646a6f2214f76307133056e0321c659f83c28e80d31ea4133c94acfd96afe8b5376b804eab5f68e344a0ba8796e176aca79dce09c6208450e6a0ea4c","ssdeep":"","tlshash":"bf7000a03280cec008002002820808380320e80280c00820208a8a22a082fb3080a002","first_seen":"2025-07-19T20:17:18.891495Z","last_seen":"2025-07-19T20:17:18.891495Z","times_seen":1,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-19","alert":"Sinkholed","trigger":"1xlite-14085.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/b5cd9a5e87d930de856c92da15aa121e.png","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:50.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/b5cd9a5e87d930de856c92da15aa121e.png HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 653\r\ntraceparent: 00-59b103c7138604669f4044482c27e877-640af93df47afb44-01\r\nlast-modified: Wed, 26 Jun 2024 08:18:02 GMT\r\netag: \"e6f0766cbd95db33da44e7a9140648f2\"\r\nexpires: Thu, 16 Jan 2025 10:46:36 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 305\r\ncache: HIT\r\nx-cached-since: 2025-07-19T20:11:45+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":653,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"e6f0766cbd95db33da44e7a9140648f2","sha1":"5f196b1bfe8c3f92bd2ebcd67124e72e81ae6aaf","sha256":"c0399d478788d5d483f104a2e8cb7c32f41cb40e9df0c22e831b2bfa2db63ec0","sha512":"249da39baba03408de98c7fa9a9342ef120436037ab6245b3b4a5f1a206291caaf67481c6ed67064544576697d41ab82499abffec998d837812292a050bf826a","ssdeep":"","tlshash":"90f083e032254a855c02ac7fc33414448fb226cc3682bb09e012887119d24a79dd1368","first_seen":"2023-04-05T22:56:35Z","last_seen":"2026-04-03T12:07:45.643999Z","times_seen":6597,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_chunk_7HDOEZTP.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:51.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_chunk_7HDOEZTP.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-723606f18a22473c3377db81dd4cf142-81edff1a2e580a20-01\r\nlast-modified: Fri, 18 Jul 2025 15:38:16 GMT\r\netag: W/\"7e76c08e7f16815131a5f13a10c1efba\"\r\nx-amz-meta-mtime: 1752852886.320220553\r\ncontent-encoding: gzip\r\nexpires: Sun, 20 Jul 2025 08:22:49 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 42842\r\ncache: HIT\r\nx-cached-since: 2025-07-19T08:22:49+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1194,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1193)","md5":"7e76c08e7f16815131a5f13a10c1efba","sha1":"5f800877b78a0713157fe119bc1a2d9a260f72e1","sha256":"c6f29a0c7c3ed884ccffd7a529fd2fc599e2da1f31af658146f0e36a3f4c00dc","sha512":"564dd139cad65e99fb210caf791d0582fa6312fb19e5c8395296361bd1904c2019d246132d42545f47f43a589bf3900e0468ed262251056c22d8172c55017e7b","ssdeep":"","tlshash":"b421f1e55fb87ba3627e26e4a02e0041e001d53752b4f1d4e294dfb464e945c035b4b6","first_seen":"2025-05-14T05:06:37.154171Z","last_seen":"2025-08-22T06:38:14.169571Z","times_seen":1811,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/8192228305b202797f207eeb6842287c.png","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:51.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/8192228305b202797f207eeb6842287c.png HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:51 GMT\r\ncontent-type: image/png\r\ncontent-length: 5202\r\ntraceparent: 00-cf5450ab255ea5e5b408b726bb3e1857-a7b881491263ed95-01\r\nlast-modified: Wed, 26 Jun 2024 08:22:59 GMT\r\netag: \"b9a636eef54b2844b571fe7de49184a7\"\r\nexpires: Thu, 17 Jul 2025 21:02:44 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1180\r\ncache: HIT\r\nx-cached-since: 2025-07-19T19:57:11+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5202,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 514 x 514, 8-bit colormap, non-interlaced","md5":"b9a636eef54b2844b571fe7de49184a7","sha1":"bf653690790ced40eb3189da075a275d951d1607","sha256":"001bfcdd52b658d46543a1aec889d35b73b3909b47097cc011b95e96fc9e3743","sha512":"7b288a27a69c91697042ebb6f80f48cf25e0c6260620ee8f4b0e7afa75430b95c394c3f284445e0628b347341b89480e2e7098510bc07f4db43ecc46d893c38f","ssdeep":"96:561aQaPXOi0Ui/+kgrJtv72TgGuDG9JAsXgQrjQ:470T0PEnv7Sgc9vPQ","tlshash":"56b19e22d46fe4a53230c81b67c1820a1df839c6e72c29d0e8ed4db5e2c8b7f84883c4","first_seen":"2023-11-17T17:46:27Z","last_seen":"2026-01-13T06:38:33.673472Z","times_seen":5260,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_reset_password/en/dictionary_612c6e919ca15d39cc751a619a3952c7.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:51.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_reset_password/en/dictionary_612c6e919ca15d39cc751a619a3952c7.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 765\r\ntraceparent: 00-5e6d89760045a6d78e8bf98948b1caef-65cec63a1d009f5a-01\r\nlast-modified: Wed, 11 Oct 2023 12:52:53 GMT\r\netag: \"00f980f23f1b4c1ccee99ed49e0a8feb\"\r\ncache-control: max-age=3600\r\nexpires: Thu, 16 Jan 2025 10:53:47 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2598\r\ncache: HIT\r\nx-cached-since: 2025-07-19T19:33:33+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":765,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"00f980f23f1b4c1ccee99ed49e0a8feb","sha1":"4cb07094de9bffff1bf81d94446280b91013b660","sha256":"bb3be3377fbb8e66a4b5a8a3866dfd865a37cb4a96482ab2f439981e03b57cea","sha512":"45587feec47804731eb344682dd7465959a50f2f47e114e332e875097a9e2009d6fe41e8ff684fb287d935fd9c4d12a5b83e1fe310f3ceca6061d569502ac1de","ssdeep":"","tlshash":"80015701129f0ef21b4bc65a940b1c71b2a0c043936b8c8757baeb8f73bbd8b009584f","first_seen":"2023-09-28T10:29:17Z","last_seen":"2026-04-04T22:05:16.602633Z","times_seen":5047,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/a70d3252/desktop/default/vendors/app-2a057bc4.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:50.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/a70d3252/desktop/default/vendors/app-2a057bc4.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-bb69163717862f2984107506462f53ed-2896cc2df031a888-01\r\nlast-modified: Fri, 18 Jul 2025 08:46:39 GMT\r\netag: W/\"893ce42b3a34ec31c93484a50e958c04\"\r\nx-amz-meta-mtime: 1752828399.076364039\r\ncontent-encoding: gzip\r\nexpires: Sat, 19 Jul 2025 09:43:42 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 37818\r\ncache: HIT\r\nx-cached-since: 2025-07-19T09:46:32+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":941435,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64133)","md5":"893ce42b3a34ec31c93484a50e958c04","sha1":"c06e848bb3d5e383dd91e0a68f2676eb801d58ab","sha256":"116e6d9852ce9d909fa47c1af2f2cc2c6b193be03fc61cb4ca1a14fddd9bf6aa","sha512":"ce7cb3a033704f2002a8089c807d6421dc8dd08fd230cd40fc6a3c9cf5f969521c5ae6018cad2ecf08deb32c3270a05aec65bf7696a3b6b4d46a93ed1047ce3f","ssdeep":"12288:ixnLX0yfGFmtCxiqY7g12zyp5LIaKY3JeQdWZKEm3WwV0:WX0yfGFmtCxiqY7g1Vp5ZXJehZCGwV0","tlshash":"00154b99b981f2560aa32ae9c06b1017e32d6e5ebc0cd444f6e7cdd936998047136f2f","first_seen":"2025-07-17T12:41:26.499143Z","last_seen":"2025-07-22T07:49:32.012197Z","times_seen":92,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_game/en/dictionary_48d6e4a8c0d06548e82d2443bd994e03.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:51.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_game/en/dictionary_48d6e4a8c0d06548e82d2443bd994e03.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-e11fc2f6bd9d1b58a4e4dbf19dc109b4-6ee4b73f037fb08f-01\r\nlast-modified: Thu, 17 Jul 2025 16:07:48 GMT\r\netag: W/\"0697fb6f120bbaa2e77b2d367bbdada4\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Thu, 17 Jul 2025 17:34:09 GMT\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1352\r\ncache: HIT\r\nx-cached-since: 2025-07-19T19:54:19+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22865,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fb6988e5794098b8c4c12064ba2c4a39","sha1":"1f67751147dc5ee5e6280cdae2527b8b6e28d35a","sha256":"60a6fa3ffec4fd1056a6ed61345a8181d57692ff9591dd8cea8b04abed0e142c","sha512":"719e2ba3ff074de446359b939478723caabdcb03a8167d742a48894599f91f5ae971cdfbb3ea9ca28674fc30c2a326f07674f6f6fe57c3357d54d269ddedd4e0","ssdeep":"384:i/B1lixEMt6tI0EEfqQ0O4cN86WwTCu9o9V38cdZ8XiG+/jtx:Ylint6tI0EEfW6WwTCV/iXiGsjtx","tlshash":"f7a2fa0828aedca6c3fa42b874e93bd673f4889f1b916256fd4ca52d2d447d5601f40f","first_seen":"2025-07-17T16:40:32.067288Z","last_seen":"2025-08-01T12:50:58.499557Z","times_seen":208,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_auth/en/dictionary_6532f52674837885437d0c36e7f2e9fa.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:51.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_auth/en/dictionary_6532f52674837885437d0c36e7f2e9fa.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-e099f6772e9f1789f2a7881cc76e0351-6845e0c51b72666a-01\r\nlast-modified: Fri, 18 Jul 2025 12:07:12 GMT\r\netag: W/\"ff494c258f5860173099ad3e5239fc34\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Fri, 18 Jul 2025 13:34:07 GMT\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2032\r\ncache: HIT\r\nx-cached-since: 2025-07-19T19:42:59+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9639,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ff494c258f5860173099ad3e5239fc34","sha1":"a9e8142f1fb22d54008215268bd107f33880ab68","sha256":"1be6ea961911a3d68be1c53da90c5d29a372252eef7be68178d35c43fba20ce1","sha512":"2c95793e5722e411c0e0e68949eded3263d3e4f78b5d22a37afaafa33f1b51f87566216af1102a89824ef3f3af9a836b105909a0b7d308102bb255dddee0fb22","ssdeep":"192:HvhX8mmq4spyU7SKi5mz8jrUoIOFJM1YABslAByZhqV+2p+QvM9pKTp:HvhX8mmqdsU7ziUmJM1YABsOByZh4nMM","tlshash":"4112f11a817a0c57cfdbca827c495b5ce3a409b446b94c6d8cf9c23e03a2765d7af354","first_seen":"2025-07-18T14:10:38.030956Z","last_seen":"2025-08-22T14:22:43.540938Z","times_seen":540,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_c29ed659a5.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:51.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_c29ed659a5.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-f25585f6ba5b160e1c366979a2ae5293-0194ab81812878bd-01\r\nlast-modified: Sat, 19 Jul 2025 08:13:45 GMT\r\netag: W/\"b95f2867a4f69c6f87508d4376778ab8\"\r\nx-amz-meta-mtime: 1752912694.00340032\r\ncontent-encoding: gzip\r\nexpires: Sun, 20 Jul 2025 12:57:38 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 26119\r\ncache: HIT\r\nx-cached-since: 2025-07-19T13:01:32+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16157,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (16156)","md5":"b95f2867a4f69c6f87508d4376778ab8","sha1":"34b733244053bb0634826b593e14e88782e81680","sha256":"f318dcd075506078ef1811c0a12962c5fed8811ee39cc3c77691a81063e05340","sha512":"dd8d736d26cad47776c4e4706beed168dedd02d25dfa0570a7f4874fcb260ff78951ac7cb94d91d225837db6a33eebf5b236932fe7b2e2014a1c9f9d309b0c61","ssdeep":"384:6tP2qT4YEUXGPYsH3M95B59IBMNUiLPqnIJdlh3uY3V47Czazgjdk:SP2qT4pUX/sH3M95B5qB6UEPME1uY3nk","tlshash":"9972a7a6726c3a2683d648f240355603e72b0cb979104499fb7c6edb7c198cd42ffa78","first_seen":"2025-07-01T14:08:29.773148Z","last_seen":"2025-12-23T22:34:35.075094Z","times_seen":1892,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/bff-api/config/group/get?groups=d.technical\u0026lang=en","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:52.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-14085.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:31 GMT","end":"Sun, 14 Sep 2025 11:35:30 GMT"},"fingerprint":{"sha1":"16:6B:F5:11:18:6D:50:EE:C3:3B:30:0B:A0:68:68:59:D3:46:70:60","sha256":"3D:14:FF:6F:86:DD:37:D5:64:D5:5E:13:22:DB:7F:18:CC:EF:48:CA:A0:47:E5:2E:B0:A3:60:F5:9C:AD:CA:7B"}}},"request":{"raw":"GET /bff-api/config/group/get?groups=d.technical\u0026lang=en HTTP/1.1\r\nHost: 1xlite-14085.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/en/block\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nis-srv: false\r\nx-svc-source: __TECHNICAL_PAGES_APP__\r\nx-app-n: __TECHNICAL_PAGES_APP__\r\nx-geoip2-country-code: ru\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder; postback_watcher=%7B%22tag%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22pb%22%3A%22a97213fad9d648e1a13d8fe56a5b07c1%22%2C%22click_id%22%3A%2228981_286039_2_3_s6_2024106%22%7D; auid=uaJaGmh7/TFe7ahABBD5Ag==; window_width=1920; che_g=f639fbf7-d01f-f016-5c71-f18071eea5bc\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:52 GMT\r\ncontent-type: application/json\r\ncontent-length: 742\r\ncache-control: no-cache, private\r\nserver-timing: dt_total;dur=0.005, bff;dur=1.03, wf-uht;dur=0.012\r\nx-cache-expire: 299\r\nx-cache-hit: 1\r\nx-dt: 285\r\nx-pod: R-zdptf\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":742,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4eb311659e468207be5833d01806a6bc","sha1":"5470741fa048379479314630596a5491a24baa52","sha256":"614a8b74dbb5809ee856b8f0d67ef11d72c7b5d7180d3a9929915e02f5254c76","sha512":"95bbe62d24bbf459cf43f18c530ac8ad75d53fa70c368d05efbca987c19d2f6a0e0b7f5bf74e91800a90617a01e5bda9642b5da3841f47842b87aefe26a9df52","ssdeep":"","tlshash":"c501845e00a5ca3d706c063adb865e109eed502b3284b851fe0cacac60d6ddef95680f","first_seen":"2025-07-18T16:37:04.833261Z","last_seen":"2025-11-06T09:03:00.039673Z","times_seen":977,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-19","alert":"Sinkholed","trigger":"1xlite-14085.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/fc03516ae4c718991727836d377493ff.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:52.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/fc03516ae4c718991727836d377493ff.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-14085.world/\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:52 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-4ab0b80c1fc65cc03766d3159b1c8e4c-006604edcec70ba3-01\r\nlast-modified: Wed, 12 Mar 2025 09:35:22 GMT\r\netag: W/\"2b474bcc2f009b70e64e2b5a95dd50a4\"\r\ncontent-encoding: gzip\r\nexpires: Wed, 12 Mar 2025 11:03:31 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1551\r\ncache: HIT\r\nx-cached-since: 2025-07-19T19:51:01+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":13278,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2b474bcc2f009b70e64e2b5a95dd50a4","sha1":"1fd5ee2d54da7dfbf61e67efd938a89c548fc866","sha256":"f86d880575f3f65ddaaf9e8a0e3746bbbefcefe7e6c0c4441e9e20ceffdca237","sha512":"44e69e9c7b95c1c4d34d20ba2d409c4ec197c7cba57f9ba277bf17c4ae062e325198bb4bd18705fc4b1748b771f0f09664dee44f028fd122090d54db43b5871e","ssdeep":"96:xzuCaZt3rgNz6Ag/q/1mymUnfMVsCHJSwDw9TkTCKx5JJu5:xzDztLmymUnwHcw2Kx5JJm","tlshash":"0d52eb85fbe02d33103f50ad85b2b60da3881f576c4b7815bead2b8d2b94619046ed7e","first_seen":"2025-03-13T18:19:01.423219Z","last_seen":"2025-07-30T04:19:29.491306Z","times_seen":1803,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-14085.world/hd-api/external/apps/c5e31d5915661de4393e3f1489b00ebc4497dd48/api.js","fqdn":"1xlite-14085.world","domain":"1xlite-14085.world","tld":"world"},"ip":{"addr":"185.162.90.26","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:59.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-14085.world","organization":""},"issuer":{"commonName":"E6","organization":"Let's Encrypt"},"validity":{"start":"Mon, 16 Jun 2025 11:35:31 GMT","end":"Sun, 14 Sep 2025 11:35:30 GMT"},"fingerprint":{"sha1":"16:6B:F5:11:18:6D:50:EE:C3:3B:30:0B:A0:68:68:59:D3:46:70:60","sha256":"3D:14:FF:6F:86:DD:37:D5:64:D5:5E:13:22:DB:7F:18:CC:EF:48:CA:A0:47:E5:2E:B0:A3:60:F5:9C:AD:CA:7B"}}},"request":{"raw":"GET /hd-api/external/apps/c5e31d5915661de4393e3f1489b00ebc4497dd48/api.js HTTP/1.1\r\nHost: 1xlite-14085.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/en/block\r\nCookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder; postback_watcher=%7B%22tag%22%3A%22d_1558737m_3028c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dtoto%5B%5D19220_30993_d70971_l138315_clickunder%22%2C%22pb%22%3A%22a97213fad9d648e1a13d8fe56a5b07c1%22%2C%22click_id%22%3A%2228981_286039_2_3_s6_2024106%22%7D; auid=uaJaGmh7/TFe7ahABBD5Ag==; window_width=1280; che_g=f639fbf7-d01f-f016-5c71-f18071eea5bc; SESSION=dd1fd03e55038357478dc06799866a93\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:59 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 492\r\ncache-control: public, max-age=300\r\ncontent-encoding: gzip\r\netag: 0b911773e0df627d77f8306c86e228aa\r\nvary: Accept-Encoding\r\nx-dt: 455\r\nx-request-guid: f1cd4be7ab265f91afd8c23ceda67a1f\r\nx-time-ng: 0.006\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.008, wf-uht;dur=\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":760,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (759)","md5":"0b911773e0df627d77f8306c86e228aa","sha1":"0d584bb1a3294e4fe42df4582dcc8a2c8f77f7bb","sha256":"01e4926540498a77d866259516007d41fae1213ab9607db826f011d926fd6006","sha512":"e5b12e33421d07dc3bc364791ff891cee79355ada607fd61a1575065232ea04ba3c5a69983537039b01028ecb3490df5d1da6e10e6a9eede5bab0724af8b88af","ssdeep":"","tlshash":"1201d05d2d8960262bb434d2007bd9fcb3202535ba19d8c5d2ded9d22b5fe89083af9c","first_seen":"2025-05-21T09:35:48.363906Z","last_seen":"2025-07-24T07:52:37.971597Z","times_seen":1326,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-07-19","alert":"Sinkholed","trigger":"1xlite-14085.world","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/a70d3252/desktop/default/app-77a4ae26.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:50.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/a70d3252/desktop/default/app-77a4ae26.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-213de5fdf3cdd74b90ccf9f08f09e818-b1ff0971f0297182-01\r\nlast-modified: Fri, 18 Jul 2025 08:46:39 GMT\r\netag: W/\"54ef8bb52135174eaeddab00f5967620\"\r\nx-amz-meta-mtime: 1752828399.068363966\r\ncontent-encoding: gzip\r\nexpires: Sat, 19 Jul 2025 09:10:07 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 39786\r\ncache: HIT\r\nx-cached-since: 2025-07-19T09:13:44+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":504573,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"54ef8bb52135174eaeddab00f5967620","sha1":"2d88379626215a456ae436198cb99818f3ddde36","sha256":"5252c878a4ab72c53973ec074562e0126cf77050fd97ca7d670b69a72d58e7ee","sha512":"ed20d39e1ae42dd5e7a75eb14ed36ef717ab70b4136c61c63b4831b74548599201d34bfb7f05fc7a5d702447ee6518216f1141fe33069ac4aa34207148c9b5ff","ssdeep":"6144:MQhuhG0Fo8owWmGQk6TvR7LggC7jcupMA7Z9ncdr5yPHmwpxi3RGM7ZpJYamVGvm:AhGZgC7jcupMA7HH8ZXCSccPoahlDkX","tlshash":"feb46c65b5c8f48602f34bd9e03a0061e33916bd380ed064f7bdedda359bc09916a67b","first_seen":"2025-07-18T10:11:01.001227Z","last_seen":"2025-07-21T06:34:34.977275Z","times_seen":75,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/a70d3252/desktop/default/analytics-b7a3986a.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:17:01.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/a70d3252/desktop/default/analytics-b7a3986a.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-14085.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:17:01 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-df29b01c630af62f8403dda55e77cc23-05e34e802782ff1d-01\r\nlast-modified: Fri, 18 Jul 2025 08:46:39 GMT\r\netag: W/\"c9e8dfbeb71861e1be64e13c3885d35e\"\r\nx-amz-meta-mtime: 1752828399.064363929\r\ncontent-encoding: gzip\r\nexpires: Sat, 19 Jul 2025 09:10:19 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 39537\r\ncache: HIT\r\nx-cached-since: 2025-07-19T09:18:04+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7104,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7104), with no line terminators","md5":"c9e8dfbeb71861e1be64e13c3885d35e","sha1":"99bacc35ff8c99aceae982440f90d562f6aab961","sha256":"b0e2d167084522273a17c8ff2a2adc88736deabf9f4a5bc254a656ebcdbe435a","sha512":"d71b500bb56d91a9bee8826f8ef97ab59f82079240010fe9f1609a7a6c5d8ba29bd1c32f08bf2817c69765bbf30117184c70105391a0b68075dbbe2959122053","ssdeep":"192:Fj33VeA9wshuQWacwnWJ3vQF+88PQzmqvO6Rx+pkm:F3VeAWbQWacwnWFQFD8PimSx+pkm","tlshash":"7ae19589bc89b47117bb14b8f77f9a0aa076171b24058081cae9d8d43c7eacf511be8d","first_seen":"2025-07-09T10:12:06.378199Z","last_seen":"2025-07-24T09:34:41.031233Z","times_seen":267,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/fb29ee326f.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"","requested_by":"https://1xlite-14085.world/en/block","date":"2025-07-19T20:16:52.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/fb29ee326f.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-14085.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 19 Jul 2025 20:16:52 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-3dd3956831526050e9b0c6cfe8d7f23b-e5ff14f915c6d8b3-01\r\nlast-modified: Wed, 16 Jul 2025 08:21:14 GMT\r\netag: W/\"2c915794d5c9c71a400bcc0ee7066210\"\r\nx-amz-meta-mtime: 1752653611.100586201\r\ncontent-encoding: gzip\r\nexpires: Sat, 19 Jul 2025 16:20:31 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 14109\r\ncache: HIT\r\nx-cached-since: 2025-07-19T16:21:43+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3275,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3274)","md5":"2c915794d5c9c71a400bcc0ee7066210","sha1":"b4ad48f088a5fbca0aff387b9cd36e5e7d40a045","sha256":"cc6b7bc3317bef57e9d08534eaa77b799ece10076a4520bc69b10dcd83794c8e","sha512":"f8f1f542e1e3a12a21e062b9f5f6268da10b52184aa866c166fa771b5e663271fdc88708b3ea3b886da47a8870072cabbaa0d71ca776c295efcb9d68e1f619e5","ssdeep":"","tlshash":"9861a766f4b9d0fb761780856c62b070e32b0dbc579c2461e1e8089c26dd540ab6fbd7","first_seen":"2025-07-16T08:51:00.515728Z","last_seen":"2025-07-23T11:17:13.077267Z","times_seen":141,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}