GET v3.traincdn.com/main-static/61792ac9/desktop/default/Page.Block-e69ac7e3.js
200 OK 476 B URL GET v3.traincdn.com/main-static/61792ac9/desktop/default/Page.Block-e69ac7e3.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (476), with no line terminators
Hash c87f54df5a69769e626d975089e6f1d4
d63b1d8931e2fd9151032a5f2c0c155f23e4d6d4
b968bc21d59d3bf276ae39c19612ceb1235e221b19f74d6c921043af36157f78
GET /main-static/61792ac9/desktop/default/Page.Block-e69ac7e3.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-87523.bar/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:38 GMT
content-type: text/javascript; charset=utf-8
content-length: 476
traceparent: 00-b4b1e036b138061f61d17af180a7ffad-f1a372fb8a19eb04-01
last-modified: Thu, 19 Jun 2025 12:35:31 GMT
etag: "c87f54df5a69769e626d975089e6f1d4"
x-amz-meta-mtime: 1750336529.987595219
expires: Fri, 20 Jun 2025 13:08:51 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 75046
cache: HIT
x-cached-since: 2025-06-20T13:13:52+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_coupon/en/dictionary_3f24c323430a3ff1fc919f4db9369cc5.json
200 OK 28 kB URL GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_coupon/en/dictionary_3f24c323430a3ff1fc919f4db9369cc5.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash c578747775c4dc4a6102734b5e32266a
df9146d3c755c484a46eb3f58b4acc697df42cfc
6d18cd2a622f522de4f43031f708ff30f53d819af0a6cce6d974f5fd1b032982
GET /genfiles/web-app-v2/dictionary2/v3_coupon/en/dictionary_3f24c323430a3ff1fc919f4db9369cc5.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:39 GMT
content-type: application/json; charset=utf-8
traceparent: 00-535e8c0214eab7669a8260c22df2db39-4da4757a123e9136-01
last-modified: Fri, 20 Jun 2025 20:06:26 GMT
etag: W/"c578747775c4dc4a6102734b5e32266a"
cache-control: max-age=3600
content-encoding: gzip
expires: Fri, 20 Jun 2025 21:38:58 GMT
x-time-ng: 0.001
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 692
cache: HIT
x-cached-since: 2025-06-21T09:53:07+00:00
X-Firefox-Spdy: h2
POST 1xlite-87523.bar/hd-api/external/verify
200 OK 715 B URL POST 1xlite-87523.bar/hd-api/external/verify
IP
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerLet's Encrypt
Subject1xlite-87523.bar
FingerprintFC:01:CF:99:41:B9:66:76:A4:88:7F:BE:E1:BE:BC:A6:ED:9A:01:45
ValidityTue, 03 Jun 2025 08:57:07 GMT - Mon, 01 Sep 2025 08:57:06 GMT
Hash f2f0307b9a7498f9b7145a12d3e6369e
a88f7aa840068b334ea3b8e4bb5f63bc3b207885
09635f97dbb778419c6e952034d35dbf9e153fba9496460bd8709f1096056d85
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /hd-api/external/verify HTTP/1.1
Host: 1xlite-87523.bar
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/en/block
Content-Type: text/plain;charset=UTF-8
Content-Length: 108757
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_22637c_%5B%5DMS%5B%5Dnull%5B%5DSmartCPM%5B%5D4991447_d28985_l18283_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_22637c_%5B%5DMS%5B%5Dnull%5B%5DSmartCPM%5B%5D4991447_d28985_l18283_clickunder; auid=W7rOa2hWg7V2u5ucAwmJAg==; window_width=1280; che_g=1b6522a1-6c79-59fd-5c25-3ba599b90b6c; SESSION=57559800a529986175aab399e91d82e8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:50 GMT
content-type: application/json
content-length: 587
content-encoding: gzip
vary: Accept-Encoding
x-dt: 285
x-request-guid: c0389df8760bfc325ad4002085e91bde
x-time-ng: 0.014
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.005, wf-uht;dur=0.052
X-Firefox-Spdy: h2
GET v3.traincdn.com/version.json
200 OK 11 B URL GET v3.traincdn.com/version.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash 12c4804389852fa8685844f2635a8707
3463a056f3af2afa31c692ce608cd627d5d45300
43c67b7a36b1aec5ba5aed79ec0878b293657c4e14e4b70c10f08e48cb23ef1d
GET /version.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Referer: https://1xlite-87523.bar/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:38 GMT
content-type: application/json
content-length: 11
traceparent: 00-8a935e4156900e4811c38a170a29518a-0ff668322fe09160-01
last-modified: Thu, 19 Jun 2025 12:35:52 GMT
etag: "12c4804389852fa8685844f2635a8707"
x-amz-meta-mtime: 1750336552.15566702
expires: Thu, 19 Jun 2025 12:38:00 GMT
cache-control: max-age=60
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 4
cache: HIT
x-cached-since: 2025-06-21T10:04:34+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_base-app_5c24ba743a.js
200 OK 817 kB URL GET v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_base-app_5c24ba743a.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (22892)
Size 817 kB (816976 bytes)
Hash 4bb8bffafb3327285627b1dae0860967
b8094e5f1f11335457d2fdd02691d4027f1b327d
348838080c75e34f5eb56571c8fdfcc5b4dde47011dd6eaa645de6bfdef4fc01
GET /sys-static/shared-assets/Desktop/__shared_base-app_5c24ba743a.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:39 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-a2679149d322c1221c96fff8a6294899-2a8e6b1db28602fd-01
last-modified: Fri, 20 Jun 2025 13:00:39 GMT
etag: W/"4bb8bffafb3327285627b1dae0860967"
x-amz-meta-mtime: 1750424035.016973526
content-encoding: gzip
expires: Sat, 21 Jun 2025 13:49:44 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 72742
cache: HIT
x-cached-since: 2025-06-20T13:52:17+00:00
X-Firefox-Spdy: h2
GET radar.cedexis.com/1707728419/stub.js
200 OK 390 B URL GET radar.cedexis.com/1707728419/stub.js
IP
ASN #63911 NetActuate, Inc
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerDigiCert Inc
Subjectradar.cedexis.com
FingerprintA2:3E:30:19:D5:41:3A:11:81:58:E3:B1:6F:F4:D2:78:0B:44:6F:D0
ValidityFri, 07 Mar 2025 00:00:00 GMT - Fri, 06 Mar 2026 23:59:59 GMT
File type JavaScript source, ASCII text
Hash 82dec77fd0353c7c71ce053b8601387e
fbbca95419e1d0c042e0a5fdf10f380aca66188c
39f2b7b0fa78d37d0c84d2d6618bd635d86fd683d9bcdd5729850cb2a62522f7
GET /1707728419/stub.js HTTP/1.1
Host: radar.cedexis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 21 Jun 2025 10:04:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 12 Feb 2024 09:51:01 GMT
Vary: Accept-Encoding
ETag: W/"65c9ea05-186"
Expires: Sat, 05 Jul 2025 10:04:51 GMT
Cache-Control: max-age=1209600, public
Content-Encoding: gzip
GET www.google.com/ccm/collect?en=page_view&dl=https%3A%2F%2F1xlite-87523.bar%2Fen%2Fblock&scrsrc=www.googletagmanager.com&frm=0&rnd=991433107.1750500291&dt=1xBet&auid=104521754.1750500291&navt=n&npa=1>m=45He56g1h2v9180563600za200&gcd=13l3l3l2l1l1&dma_cps=syphamo&dma=1&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104791498~104791500&tft=1750500291281&tfd=14218&apve=1&apvf=f&img=1
200 OK 0 B URL GET www.google.com/ccm/collect?en=page_view&dl=https%3A%2F%2F1xlite-87523.bar%2Fen%2Fblock&scrsrc=www.googletagmanager.com&frm=0&rnd=991433107.1750500291&dt=1xBet&auid=104521754.1750500291&navt=n&npa=1>m=45He56g1h2v9180563600za200&gcd=13l3l3l2l1l1&dma_cps=syphamo&dma=1&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104791498~104791500&tft=1750500291281&tfd=14218&apve=1&apvf=f&img=1
IP
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerGoogle Trust Services
Subjectwww.google.com
Fingerprint4F:74:10:0A:01:21:55:4F:03:B9:F9:8B:6A:DE:A2:47:7C:44:89:73
ValidityMon, 02 Jun 2025 08:37:21 GMT - Mon, 25 Aug 2025 08:37:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ccm/collect?en=page_view&dl=https%3A%2F%2F1xlite-87523.bar%2Fen%2Fblock&scrsrc=www.googletagmanager.com&frm=0&rnd=991433107.1750500291&dt=1xBet&auid=104521754.1750500291&navt=n&npa=1>m=45He56g1h2v9180563600za200&gcd=13l3l3l2l1l1&dma_cps=syphamo&dma=1&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104791498~104791500&tft=1750500291281&tfd=14218&apve=1&apvf=f&img=1 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-87523.bar/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/plain
cache-control: no-cache, no-store, must-revalidate
date: Sat, 21 Jun 2025 10:04:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
vary: Origin, X-Origin, Referer
server: scaffolding on HTTPServer2
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET 1xlite-87523.bar/main-static/61792ac9/check-ob.js
200 OK 219 B URL GET 1xlite-87523.bar/main-static/61792ac9/check-ob.js
IP
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerLet's Encrypt
Subject1xlite-87523.bar
FingerprintFC:01:CF:99:41:B9:66:76:A4:88:7F:BE:E1:BE:BC:A6:ED:9A:01:45
ValidityTue, 03 Jun 2025 08:57:07 GMT - Mon, 01 Sep 2025 08:57:06 GMT
File type JavaScript source, ASCII text
Hash c065700c9c8c493403359e1f2baa10d9
4630fe729e70bdf63fa7ba6c84ec277fd1f51030
1e61f0c82ae82ffcf503fcd4b4c8ae27b32c11e19b882d5d13f3c44364c893f4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /main-static/61792ac9/check-ob.js HTTP/1.1
Host: 1xlite-87523.bar
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-87523.bar/en/block
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_22637c_%5B%5DMS%5B%5Dnull%5B%5DSmartCPM%5B%5D4991447_d28985_l18283_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_22637c_%5B%5DMS%5B%5Dnull%5B%5DSmartCPM%5B%5D4991447_d28985_l18283_clickunder; postback_watcher=; auid=W7rOa2hWg7V2u5ucAwmJAg==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:38 GMT
content-type: text/javascript; charset=utf-8
content-length: 219
last-modified: Thu, 19 Jun 2025 12:35:52 GMT
etag: "c065700c9c8c493403359e1f2baa10d9"
x-amz-meta-mtime: 1750336551.243664066
expires: Sun, 22 Jun 2025 09:46:46 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=
accept-ranges: bytes
X-Firefox-Spdy: h2
GET v3.traincdn.com/main-static/61792ac9/desktop/default/runtime-cd8ceb8c.js
200 OK 19 kB URL GET v3.traincdn.com/main-static/61792ac9/desktop/default/runtime-cd8ceb8c.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (18683), with no line terminators
Hash 0c1e265007df3ccc1bfbb4e444f10864
6edfb32039115a1bca7fe2688e05ef5148161b20
2fd8c3b077e2109d70e3ee2ae9c473cb7246bcd8f7a13fa231fda3db7d7a8fb6
GET /main-static/61792ac9/desktop/default/runtime-cd8ceb8c.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-87523.bar/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:38 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-43acc327525f39323418f79728710b22-6958f860b6b382c0-01
last-modified: Thu, 19 Jun 2025 12:35:31 GMT
etag: W/"0c1e265007df3ccc1bfbb4e444f10864"
x-amz-meta-mtime: 1750336530.00359527
content-encoding: gzip
expires: Fri, 20 Jun 2025 13:08:37 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 75231
cache: HIT
x-cached-since: 2025-06-20T13:10:47+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/bfa3e9fd30e7d63c0906602f42c13468.json
200 OK 182 B URL GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/bfa3e9fd30e7d63c0906602f42c13468.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash 0a64a07e9a34e8a5b5e97e80a10888c5
82545cbc39b7dcc031dd10dea841a0b3698243d6
7201497e7e8cdf9d35bf6998e43dcde5feea535f9828ce3ee98785781016126c
GET /genfiles/cms/1-285/desktop/media_asset/bfa3e9fd30e7d63c0906602f42c13468.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:39 GMT
content-type: application/json
content-length: 182
traceparent: 00-acb8ebea205084b42e69b7bedee6bf98-1ff1f6d78d20bbb5-01
last-modified: Thu, 27 Feb 2025 08:55:26 GMT
etag: "0a64a07e9a34e8a5b5e97e80a10888c5"
expires: Thu, 27 Feb 2025 10:17:13 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1170
cache: HIT
x-cached-since: 2025-06-21T09:45:09+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/164e07c960.js
200 OK 147 B URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/164e07c960.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash d7e3795e2ecd0e90332c12c6ffed858e
89071395e5037d8a325dc68427a40925b2472db0
be6700b7e6e5998743921d1abfb511a4bc4023c3bdc5fdb0d7128ab5c1d1cb62
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/164e07c960.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:40 GMT
content-type: text/javascript; charset=utf-8
content-length: 147
traceparent: 00-75f53c37f01c4b18ea576e2c0e83c684-1886a40e2ee54e42-01
last-modified: Wed, 18 Jun 2025 13:47:11 GMT
etag: "d7e3795e2ecd0e90332c12c6ffed858e"
x-amz-meta-mtime: 1750254148.954234725
expires: Thu, 19 Jun 2025 13:50:23 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 72208
cache: HIT
x-cached-since: 2025-06-20T14:01:12+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
POST 1xlite-87523.bar/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json
200 OK 23 B URL POST 1xlite-87523.bar/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json
IP
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerLet's Encrypt
Subject1xlite-87523.bar
FingerprintFC:01:CF:99:41:B9:66:76:A4:88:7F:BE:E1:BE:BC:A6:ED:9A:01:45
ValidityTue, 03 Jun 2025 08:57:07 GMT - Mon, 01 Sep 2025 08:57:06 GMT
Hash e93725ce48086378b45bd956bb9d4233
3e583b3c8ca463c9d1e158a234b83d0eb67fc00e
250fef5a2fb490dc6b7e22e6f8394110ec62181de0354b88e0104c95c6a0becd
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1
Host: 1xlite-87523.bar
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/en/block
Content-Type: application/json
X-Lang: en
X-Uuid: dc339247-a23a-468c-aa74-b76f586dcdc3
Content-Length: 72
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_22637c_%5B%5DMS%5B%5Dnull%5B%5DSmartCPM%5B%5D4991447_d28985_l18283_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_22637c_%5B%5DMS%5B%5Dnull%5B%5DSmartCPM%5B%5D4991447_d28985_l18283_clickunder; postback_watcher=; auid=W7rOa2hWg7V2u5ucAwmJAg==; window_width=1280; che_g=1b6522a1-6c79-59fd-5c25-3ba599b90b6c
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:40 GMT
content-type: application/json
content-length: 23
x-dt: 285
x-time-ng: 0.001
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.005, wf-uht;dur=0.009
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/destination?id=DC-14030178&cx=c>m=45He56g1h2v9180563600za200&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104791498~104791500
200 OK 306 kB URL GET www.googletagmanager.com/gtag/destination?id=DC-14030178&cx=c>m=45He56g1h2v9180563600za200&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104791498~104791500
IP
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint79:AA:03:D4:F6:6B:0F:61:E5:C5:AB:19:F4:A5:5D:DC:97:80:AF:DA
ValidityMon, 02 Jun 2025 08:35:30 GMT - Mon, 25 Aug 2025 08:35:29 GMT
File type JavaScript source, ASCII text, with very long lines (5913)
Size 306 kB (305560 bytes)
Hash 8a0d603f75118739fb0616eeee9bc783
a158bd14e8f4430bc0fab64f058406af378b4f08
6e826e394fc53e67682703012eca4851e733aa4cbcd505ced5e17caf32ea1d88
GET /gtag/destination?id=DC-14030178&cx=c>m=45He56g1h2v9180563600za200&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104791498~104791500 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-87523.bar/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 21 Jun 2025 10:04:51 GMT
expires: Sat, 21 Jun 2025 10:04:51 GMT
cache-control: private, max-age=900
last-modified: Sat, 21 Jun 2025 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcysghrgc:42:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcysghrgc:42:0
report-to: {"group":"ascgcysghrgc:42:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcysghrgc:42:0"}],}
server: Google Tag Manager
content-length: 106976
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2
200 OK 64 kB URL GET v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 63748, version 1.0
Hash 6887b6f24414dbc612dbf42ccdc76b70
8068d3abfbc6cbf35b55919da45b1f4d2d136238
fc5c015fc32518f1ed810fa84ca28941eb9d5a3c81acc8df69a4dbbeedef7b0c
GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:38 GMT
content-type: font/woff2
content-length: 63748
traceparent: 00-4d6df9fc6202ac4f3c2f9a06ca198287-dcbfc79a77a5e430-01
last-modified: Wed, 14 Jun 2023 09:49:53 GMT
etag: "6887b6f24414dbc612dbf42ccdc76b70"
expires: Thu, 16 Jan 2025 10:32:14 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 2893
cache: HIT
x-cached-since: 2025-06-21T09:16:25+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7JGWL9SV66&cid=1932549972.1750500291>m=45je56g1h2v897130004za200&aip=1&dma=1&dma_cps=syphamo&gcd=13l3lPl2l1l1&npa=1&frm=0&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684204~104684207~104718208~104766476~104766478~104791498~104791500&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684204~104684207~104718208~104766476~104766478~104791498~104791500&z=350899888
200 OK 42 B URL GET www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7JGWL9SV66&cid=1932549972.1750500291>m=45je56g1h2v897130004za200&aip=1&dma=1&dma_cps=syphamo&gcd=13l3lPl2l1l1&npa=1&frm=0&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684204~104684207~104718208~104766476~104766478~104791498~104791500&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684204~104684207~104718208~104766476~104766478~104791498~104791500&z=350899888
IP
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerGoogle Trust Services
Subject*.google.no
Fingerprint06:9A:0B:8C:DF:AC:70:7A:12:56:3A:16:E7:C4:85:BA:3E:C8:E2:63
ValidityMon, 02 Jun 2025 08:38:19 GMT - Mon, 25 Aug 2025 08:38:18 GMT
File type GIF image data, version 89a, 1 x 1
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7JGWL9SV66&cid=1932549972.1750500291>m=45je56g1h2v897130004za200&aip=1&dma=1&dma_cps=syphamo&gcd=13l3lPl2l1l1&npa=1&frm=0&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684204~104684207~104718208~104766476~104766478~104791498~104791500&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684204~104684207~104718208~104766476~104766478~104791498~104791500&z=350899888 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-87523.bar/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 21 Jun 2025 10:04:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET 1xlite-87523.bar/checker/redirect/stat/run/
200 OK 76 B URL GET 1xlite-87523.bar/checker/redirect/stat/run/
IP
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerLet's Encrypt
Subject1xlite-87523.bar
FingerprintFC:01:CF:99:41:B9:66:76:A4:88:7F:BE:E1:BE:BC:A6:ED:9A:01:45
ValidityTue, 03 Jun 2025 08:57:07 GMT - Mon, 01 Sep 2025 08:57:06 GMT
Hash 27c2416c1b923fecbcfc18d2fe0b93c8
c2bf774eb23aea67e9f24cb3c4aef31dc2575276
235990e7fa35e87bda0de418d7f4f59e238d6bcc4663db671e512f67f0e1a74b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /checker/redirect/stat/run/ HTTP/1.1
Host: 1xlite-87523.bar
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/en/block
content-type: application/json
x-requested-with: XMLHttpRequest
x-app-n: v3-nuxt2
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_22637c_%5B%5DMS%5B%5Dnull%5B%5DSmartCPM%5B%5D4991447_d28985_l18283_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_22637c_%5B%5DMS%5B%5Dnull%5B%5DSmartCPM%5B%5D4991447_d28985_l18283_clickunder; postback_watcher=; auid=W7rOa2hWg7V2u5ucAwmJAg==; window_width=1280; che_g=1b6522a1-6c79-59fd-5c25-3ba599b90b6c
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:40 GMT
content-type: application/json; charset=utf-8
vary: Accept-Encoding
x-time-ng: 0.001
content-encoding: br
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.012
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66
200 OK 476 kB URL GET www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66
IP
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint79:AA:03:D4:F6:6B:0F:61:E5:C5:AB:19:F4:A5:5D:DC:97:80:AF:DA
ValidityMon, 02 Jun 2025 08:35:30 GMT - Mon, 25 Aug 2025 08:35:29 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (12571)
Size 476 kB (475947 bytes)
Hash 1af42cf1b6694b8fa7cd90a54db6051c
3e9a70e6570feef39431187a6677b940985ba0f6
96c79a52b6e9612e8bd290c6a55b31d4d4e16750bd06adb9a608c228e1b3ac50
GET /gtag/js?id=G-7JGWL9SV66 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-87523.bar/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 21 Jun 2025 10:04:50 GMT
expires: Sat, 21 Jun 2025 10:04:50 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0
report-to: {"group":"ascgcycc:1077:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0"}],}
server: Google Tag Manager
content-length: 152109
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
POST region1.analytics.google.com/g/collect?v=2&tid=G-7JGWL9SV66>m=45je56g1h2v897130004za200&_p=1750500290424&gcd=13l3lPl2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684204~104684207~104718208~104766476~104766478~104791498~104791500&cid=1932549972.1750500291&ecid=1399156223&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_eu=AEAAAAQ&_s=2&sid=1750500291&sct=1&seg=0&dl=https%3A%2F%2F1xlite-87523.bar%2Fen%2Fblock&dt=1xBet&_tu=Kg&en=scroll&ep.optimize_id=GTM-5R4MT54&epn.percent_scrolled=90&tfd=19325
204 No Content 0 B URL POST region1.analytics.google.com/g/collect?v=2&tid=G-7JGWL9SV66>m=45je56g1h2v897130004za200&_p=1750500290424&gcd=13l3lPl2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684204~104684207~104718208~104766476~104766478~104791498~104791500&cid=1932549972.1750500291&ecid=1399156223&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_eu=AEAAAAQ&_s=2&sid=1750500291&sct=1&seg=0&dl=https%3A%2F%2F1xlite-87523.bar%2Fen%2Fblock&dt=1xBet&_tu=Kg&en=scroll&ep.optimize_id=GTM-5R4MT54&epn.percent_scrolled=90&tfd=19325
IP
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint79:AA:03:D4:F6:6B:0F:61:E5:C5:AB:19:F4:A5:5D:DC:97:80:AF:DA
ValidityMon, 02 Jun 2025 08:35:30 GMT - Mon, 25 Aug 2025 08:35:29 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-7JGWL9SV66>m=45je56g1h2v897130004za200&_p=1750500290424&gcd=13l3lPl2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684204~104684207~104718208~104766476~104766478~104791498~104791500&cid=1932549972.1750500291&ecid=1399156223&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_eu=AEAAAAQ&_s=2&sid=1750500291&sct=1&seg=0&dl=https%3A%2F%2F1xlite-87523.bar%2Fen%2Fblock&dt=1xBet&_tu=Kg&en=scroll&ep.optimize_id=GTM-5R4MT54&epn.percent_scrolled=90&tfd=19325 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/3 204 No Content
access-control-allow-origin: https://1xlite-87523.bar
date: Sat, 21 Jun 2025 10:04:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:158:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:158:0
report-to: {"group":"ascnsrsggc:158:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:158:0"}],}
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/9d4f48c82e.js
200 OK 2.4 kB URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/9d4f48c82e.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (2401)
Hash 9cc6c128dcc8a510fc6d01ad3e0e035a
c9689aaf76a0e1bd0e142345fd0ee9c8d88a7291
b1ee9fd385cd9ce2fddec3ac6af9e184f0c6ef04ee113da65f0c129dcaff72e0
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/9d4f48c82e.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:40 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-c78c015260d63b97a44886f4ab5172f5-08161b6fcd2fe8ac-01
last-modified: Wed, 18 Jun 2025 13:47:11 GMT
etag: W/"9cc6c128dcc8a510fc6d01ad3e0e035a"
x-amz-meta-mtime: 1750254148.960234924
content-encoding: gzip
expires: Thu, 19 Jun 2025 13:50:23 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 72208
cache: HIT
x-cached-since: 2025-06-20T14:01:12+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/d9842b87b9dabdc4cdc248c062355299.json
200 OK 7.3 kB URL GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/d9842b87b9dabdc4cdc248c062355299.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash 0614058b667e6dfa1cdecc6e0e53131c
4f20f88c436fb5cbd82cf1dcfeaa14e52195a369
be16474b0f19b7536ebdd3d0f8867b151eaa4638411ddb46845f887a5d51a653
GET /genfiles/cms/1-285/desktop/media_asset/d9842b87b9dabdc4cdc248c062355299.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:39 GMT
content-type: application/json
traceparent: 00-8f87522b5891fd0c76e26eb8cfc0c44c-a323230385769d42-01
last-modified: Thu, 23 Jan 2025 13:19:10 GMT
etag: W/"0614058b667e6dfa1cdecc6e0e53131c"
content-encoding: gzip
expires: Thu, 23 Jan 2025 14:50:28 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1170
cache: HIT
x-cached-since: 2025-06-21T09:45:09+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/shared-assets/__shared_fast_deep_equal_XYWIEKOD.js
200 OK 865 B URL GET v3.traincdn.com/sys-static/shared-assets/__shared_fast_deep_equal_XYWIEKOD.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (840)
Hash 0af3fe0c072a5bb3b6c731767187982f
55db5afb57265dc92fd121fe9ae565ffb2f53b2c
655bbe85da91e863401c6f96e24b41f5c2fe51a4245cecc2deb2b8c9600fef30
GET /sys-static/shared-assets/__shared_fast_deep_equal_XYWIEKOD.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:40 GMT
content-type: text/javascript; charset=utf-8
content-length: 865
traceparent: 00-b3bfd0a4a3e09de7b101f9c8b1d05bea-51b0ec1af63f427b-01
last-modified: Fri, 20 Jun 2025 14:13:24 GMT
etag: "0af3fe0c072a5bb3b6c731767187982f"
x-amz-meta-mtime: 1750428765.990144376
expires: Sun, 22 Jun 2025 08:09:05 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 6422
cache: HIT
x-cached-since: 2025-06-21T08:17:38+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/56f58c6d078ff0e8f698576f33bb478d.json
200 OK 3.6 kB URL GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/56f58c6d078ff0e8f698576f33bb478d.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash 4b08975411699bcd7464f49777e866bf
2a9b0a0f3eadf5f3e1ef688bacd9560dd59c73d2
b6208d18413f8988db2e0040ff72516c0cb5e06d3d9692b5b098808ab46fc378
GET /genfiles/cms/1-285/desktop/media_asset/56f58c6d078ff0e8f698576f33bb478d.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:40 GMT
content-type: application/json
traceparent: 00-700dd5a65adbb7257c15e63488ca061f-37f55f0dd579421d-01
last-modified: Thu, 27 Feb 2025 09:06:12 GMT
etag: W/"4b08975411699bcd7464f49777e866bf"
content-encoding: gzip
expires: Thu, 27 Feb 2025 10:17:14 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1165
cache: HIT
x-cached-since: 2025-06-21T09:45:15+00:00
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/destination?id=AW-16664555628&cx=c>m=45He56g1h2v9180563600za200&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104791498~104791500
200 OK 356 kB URL GET www.googletagmanager.com/gtag/destination?id=AW-16664555628&cx=c>m=45He56g1h2v9180563600za200&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104791498~104791500
IP
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint79:AA:03:D4:F6:6B:0F:61:E5:C5:AB:19:F4:A5:5D:DC:97:80:AF:DA
ValidityMon, 02 Jun 2025 08:35:30 GMT - Mon, 25 Aug 2025 08:35:29 GMT
File type JavaScript source, ASCII text, with very long lines (5913)
Size 356 kB (355909 bytes)
Hash 55a7d333f78dfe47ab77339ad548bd9f
1bd2093b7d94200edeb8cb10ec5fb2d8bc559701
162e8ff743731f30b7a2f0cf29337beb8fc045f597b883ac9ce122e38e946e42
GET /gtag/destination?id=AW-16664555628&cx=c>m=45He56g1h2v9180563600za200&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104791498~104791500 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-87523.bar/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 21 Jun 2025 10:04:51 GMT
expires: Sat, 21 Jun 2025 10:04:51 GMT
cache-control: private, max-age=900
last-modified: Sat, 21 Jun 2025 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcysghrgc:42:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcysghrgc:42:0
report-to: {"group":"ascgcysghrgc:42:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcysghrgc:42:0"}],}
server: Google Tag Manager
content-length: 120969
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET v3.traincdn.com/main-static/61792ac9/desktop/default/commons/app-4b82fdd3.js
200 OK 138 kB URL GET v3.traincdn.com/main-static/61792ac9/desktop/default/commons/app-4b82fdd3.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65476)
Size 138 kB (138079 bytes)
Hash 868af65a31d095c2a360f8a5e94425bc
59e94cfde197cb7fbf844717ae7083f35a44e3a4
ab24c1b9022a49c40e590b7fdd6b471a627b1eaf389ab3f5f605ae794fdb8c53
GET /main-static/61792ac9/desktop/default/commons/app-4b82fdd3.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-87523.bar/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:38 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-998a144c03df89e41ef48bf6301dbc58-50c5ea85f42fa4bf-01
last-modified: Thu, 19 Jun 2025 12:35:31 GMT
etag: W/"868af65a31d095c2a360f8a5e94425bc"
x-amz-meta-mtime: 1750336529.991595231
content-encoding: gzip
expires: Fri, 20 Jun 2025 13:08:37 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 75231
cache: HIT
x-cached-since: 2025-06-20T13:10:47+00:00
X-Firefox-Spdy: h2
POST 1xlite-87523.bar/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json
200 OK 23 B URL POST 1xlite-87523.bar/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json
IP
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerLet's Encrypt
Subject1xlite-87523.bar
FingerprintFC:01:CF:99:41:B9:66:76:A4:88:7F:BE:E1:BE:BC:A6:ED:9A:01:45
ValidityTue, 03 Jun 2025 08:57:07 GMT - Mon, 01 Sep 2025 08:57:06 GMT
Hash f534d63a7348d294d1f45800c6f82650
d51b86bfab8e24d4af24e30952b5b766758d15e0
040dc7f9d2e0c8ada4235ae5ea3d6e47b1e598dfda957f32471a791f6e1470e6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1
Host: 1xlite-87523.bar
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/en/block
Content-Type: application/json
X-Lang: en
X-Uuid: dc339247-a23a-468c-aa74-b76f586dcdc3
Content-Length: 88
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_22637c_%5B%5DMS%5B%5Dnull%5B%5DSmartCPM%5B%5D4991447_d28985_l18283_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_22637c_%5B%5DMS%5B%5Dnull%5B%5DSmartCPM%5B%5D4991447_d28985_l18283_clickunder; postback_watcher=; auid=W7rOa2hWg7V2u5ucAwmJAg==; window_width=1280; che_g=1b6522a1-6c79-59fd-5c25-3ba599b90b6c
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:40 GMT
content-type: application/json
content-length: 23
x-dt: 285
x-time-ng: 0.001
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.069, wf-uht;dur=0.013
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/$_$.js
200 OK 69 B URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/$_$.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 2cdaa92927f02e0b628f1ef4d7dd8caf
9104a2e16ed080b80a42588b8aeb52ebec47ab7a
ef8101ffea52addcdcfcc3a83f96ff2d4613fb3ae6d1c16bbe4852387b73a9db
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/$_$.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:39 GMT
content-type: text/javascript; charset=utf-8
content-length: 69
traceparent: 00-41e76a62cb6643f8b7c52ee633b4e1c7-043070e3274baca5-01
last-modified: Wed, 18 Jun 2025 13:47:10 GMT
etag: "2cdaa92927f02e0b628f1ef4d7dd8caf"
x-amz-meta-mtime: 1750254148.951234625
expires: Thu, 19 Jun 2025 18:51:31 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 54493
cache: HIT
x-cached-since: 2025-06-20T18:56:26+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/fd6ab89fd4.js
200 OK 1.2 kB URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/fd6ab89fd4.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (833)
Hash 50906dd89561b1e7e6bf82539677960c
3f22a7d92fe79d7a3cd734159da6681449296ccb
02894d09ead719d04eedd68eaf741e57886145abd86d15e3e704166f8bf4d38a
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/fd6ab89fd4.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:40 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-432cc9c26c4f4dc3dc3ef1be25ff8eb9-75c05a3db468f64e-01
last-modified: Wed, 18 Jun 2025 13:47:11 GMT
etag: W/"50906dd89561b1e7e6bf82539677960c"
x-amz-meta-mtime: 1750254148.967235156
content-encoding: gzip
expires: Thu, 19 Jun 2025 13:50:23 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 72209
cache: HIT
x-cached-since: 2025-06-20T14:01:11+00:00
X-Firefox-Spdy: h2
POST 1xlite-87523.bar/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json
200 OK 2 B URL POST 1xlite-87523.bar/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json
IP
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerLet's Encrypt
Subject1xlite-87523.bar
FingerprintFC:01:CF:99:41:B9:66:76:A4:88:7F:BE:E1:BE:BC:A6:ED:9A:01:45
ValidityTue, 03 Jun 2025 08:57:07 GMT - Mon, 01 Sep 2025 08:57:06 GMT
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json HTTP/1.1
Host: 1xlite-87523.bar
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/en/block
Content-Type: application/json
X-Lang: en
X-Uuid: dc339247-a23a-468c-aa74-b76f586dcdc3
Content-Length: 19
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_22637c_%5B%5DMS%5B%5Dnull%5B%5DSmartCPM%5B%5D4991447_d28985_l18283_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_22637c_%5B%5DMS%5B%5Dnull%5B%5DSmartCPM%5B%5D4991447_d28985_l18283_clickunder; postback_watcher=; auid=W7rOa2hWg7V2u5ucAwmJAg==; window_width=1280; che_g=1b6522a1-6c79-59fd-5c25-3ba599b90b6c
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:40 GMT
content-type: application/json
content-length: 2
x-dt: 285
x-time-ng: 0.001
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.055, wf-uht;dur=0.014
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/d9c2365ca58e0fb54268fd4914d751b9.json
200 OK 14 kB URL GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/d9c2365ca58e0fb54268fd4914d751b9.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash 1a7ec72aad44f9540cb604d7cde5ff38
65e5851d652e0471c213282efb5eeee31ae813db
94d4bf6bc00a09b766ea0ba441e860dc40ee6d398be80e89016dd0ee662869d6
GET /genfiles/cms/1-285/desktop/media_asset/d9c2365ca58e0fb54268fd4914d751b9.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:39 GMT
content-type: application/json
traceparent: 00-8b6b45f5ec4c693287240537b3d3e410-17adce9ca7899128-01
last-modified: Mon, 16 Jun 2025 11:25:45 GMT
etag: W/"1a7ec72aad44f9540cb604d7cde5ff38"
content-encoding: gzip
expires: Mon, 16 Jun 2025 12:42:27 GMT
cache-control: max-age=3600
x-time-ng: 0.001
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1165
cache: HIT
x-cached-since: 2025-06-21T09:45:14+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_forgot_password/en/dictionary_0cd445c245c40f6e6d4f11256ad20db0.json
200 OK 4.2 kB URL GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_forgot_password/en/dictionary_0cd445c245c40f6e6d4f11256ad20db0.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash 077b8fa399ec723c70b9404a9c41f8f2
8d005ff5e0b0b6ddd48dfe5c6bf7571cc50115e9
572ef731ddde9a6225a20d622266144882bb54839255d1b809d1c013aa64cad7
GET /genfiles/web-app-v2/dictionary2/v3_forgot_password/en/dictionary_0cd445c245c40f6e6d4f11256ad20db0.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:39 GMT
content-type: application/json; charset=utf-8
traceparent: 00-d3022dcfd4af7a19c6c2a61ade812a98-affc674bf0455fad-01
last-modified: Mon, 16 Jun 2025 12:06:30 GMT
etag: W/"077b8fa399ec723c70b9404a9c41f8f2"
cache-control: max-age=3600
content-encoding: gzip
expires: Mon, 16 Jun 2025 13:10:33 GMT
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1352
cache: HIT
x-cached-since: 2025-06-21T09:42:07+00:00
X-Firefox-Spdy: h2
GET 1xlite-87523.bar/hd-api/external/assets/hdf.js
200 OK 4.1 kB URL GET 1xlite-87523.bar/hd-api/external/assets/hdf.js
IP
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerLet's Encrypt
Subject1xlite-87523.bar
FingerprintFC:01:CF:99:41:B9:66:76:A4:88:7F:BE:E1:BE:BC:A6:ED:9A:01:45
ValidityTue, 03 Jun 2025 08:57:07 GMT - Mon, 01 Sep 2025 08:57:06 GMT
File type C++ source, ASCII text, with very long lines (874)
Hash 40eaa62ed21bd753172f4c307e2a41d0
f7b03c6b004562311c8ca00466179629738b2a40
60fed8cb321dc09e4e1d910b5822bd8f67d53d0962a41ddc9f5ac33edd4e2213
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /hd-api/external/assets/hdf.js HTTP/1.1
Host: 1xlite-87523.bar
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-87523.bar/en/block
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_22637c_%5B%5DMS%5B%5Dnull%5B%5DSmartCPM%5B%5D4991447_d28985_l18283_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_22637c_%5B%5DMS%5B%5Dnull%5B%5DSmartCPM%5B%5D4991447_d28985_l18283_clickunder; auid=W7rOa2hWg7V2u5ucAwmJAg==; window_width=1280; che_g=1b6522a1-6c79-59fd-5c25-3ba599b90b6c; SESSION=57559800a529986175aab399e91d82e8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:48 GMT
content-type: text/javascript; charset=utf-8
content-length: 1620
cache-control: public, max-age=300
content-encoding: gzip
etag: 40eaa62ed21bd753172f4c307e2a41d0
vary: Accept-Encoding
x-dt: 455
x-request-guid: 376dc84650467dc766474d735cd099a7
x-time-ng: 0.001
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.007, wf-uht;dur=
accept-ranges: bytes
X-Firefox-Spdy: h2
GET 1xlite-87523.bar/en?tag=d_224327m_22637c_[]MS[]null[]SmartCPM[]4991447_d28985_l18283_clickunder
302 Found 274 kB URL User Request GET 1xlite-87523.bar/en?tag=d_224327m_22637c_[]MS[]null[]SmartCPM[]4991447_d28985_l18283_clickunder
IP
Certificate IssuerLet's Encrypt
Subject1xlite-87523.bar
FingerprintFC:01:CF:99:41:B9:66:76:A4:88:7F:BE:E1:BE:BC:A6:ED:9A:01:45
ValidityTue, 03 Jun 2025 08:57:07 GMT - Mon, 01 Sep 2025 08:57:06 GMT
Size 274 kB (273916 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /en?tag=d_224327m_22637c_[]MS[]null[]SmartCPM[]4991447_d28985_l18283_clickunder HTTP/1.1
Host: 1xlite-87523.bar
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Sat, 21 Jun 2025 10:04:37 GMT
location: https://1xlite-87523.bar/en/block
server-timing: dt_total;dur=0.013, total;dur=19;desc="Nuxt Server Time", wf-uht;dur=0.031
set-cookie: platform_type=desktop; Path=/; Expires=Tue, 24 Jun 2025 10:04:37 GMT; Secure; SameSite=None; Partitioned
gw-mm=; Path=/; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Secure; SameSite=None; Partitioned
lng=en; Path=/
cookies_agree_type=3; Path=/
tzo=2; Path=/
is12h=0; Path=/
referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_22637c_%5B%5DMS%5B%5Dnull%5B%5DSmartCPM%5B%5D4991447_d28985_l18283_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; Path=/; Expires=Wed, 20 Aug 2025 10:04:37 GMT
reflinkid=d_224327m_22637c_%5B%5DMS%5B%5Dnull%5B%5DSmartCPM%5B%5D4991447_d28985_l18283_clickunder; Path=/; Expires=Sat, 21 Jun 2025 11:04:37 GMT
postback_watcher=; Path=/; Expires=Sat, 21 Jun 2025 10:04:41 GMT
auid=W7rOa2hWg7V2u5ucAwmJAg==; path=/; secure; httponly; samesite=lax
x-dt: 285
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_block_pages/en/dictionary_bc0570f08a28537dc724f4764ecf77e4.json
200 OK 2.3 kB URL GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_block_pages/en/dictionary_bc0570f08a28537dc724f4764ecf77e4.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash 7c12ae6fc08684f50822b3eb56779e29
036c726b8b7b2d24f987391101f3e8d1a2a183cf
a2eac45353675c82733192916712b8876c6b038b7bdbddc24df464e38b67cbfd
GET /genfiles/web-app-v2/dictionary2/v3_block_pages/en/dictionary_bc0570f08a28537dc724f4764ecf77e4.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:40 GMT
content-type: application/json; charset=utf-8
traceparent: 00-f01c8fa681706bdfa82ec8c849c3e9f2-d0be7a49fbd7af47-01
last-modified: Tue, 22 Apr 2025 08:06:29 GMT
etag: W/"7c12ae6fc08684f50822b3eb56779e29"
cache-control: max-age=3600
content-encoding: gzip
expires: Tue, 22 Apr 2025 09:26:34 GMT
x-time-ng: 0.001
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 81
cache: HIT
x-cached-since: 2025-06-21T10:03:19+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/593f1a6d4223015f3145bf447897f4f2.json
200 OK 241 B URL GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/593f1a6d4223015f3145bf447897f4f2.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash 39257fbb62736206d5245e08925d7b60
4c11e3cb6a16b884772b88acdba30a2ad98e86b8
3a3cf0f5c60899ffb49d9825516aec475fd7b78cea8ae0b5b58dfb4e658f041e
GET /genfiles/cms/1-285/desktop/media_asset/593f1a6d4223015f3145bf447897f4f2.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:40 GMT
content-type: application/json
content-length: 241
traceparent: 00-0771b6f321f0f80c1e804ebcdfdb390a-73cc608f5469bc4b-01
last-modified: Thu, 27 Feb 2025 13:24:25 GMT
etag: "39257fbb62736206d5245e08925d7b60"
expires: Thu, 27 Feb 2025 14:48:35 GMT
cache-control: max-age=3600
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1165
cache: HIT
x-cached-since: 2025-06-21T09:45:15+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
POST www.google.com/gmp/conversion;src=14030178;type=xbet;cat=uniqu0;ord=1;num=2384186584779;npa=1;auiddc=104521754.1750500291;pscdl=noapi;frm=0;_tu=KpA;gtm=45fe56g1h2v9190735530z89180563600za200zb9180563600;gcd=13l3l3l2l1l1;dma_cps=syphamo;dma=1;dc_fmt=4;tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104611821~104684208~104684211~104718208~104766476~104766478~104791498~104791500;epver=2;dc_random=1750500291577;~oref=https%3A%2F%2F1xlite-87523.bar%2Fen%2Fblock?
200 OK 42 B URL POST www.google.com/gmp/conversion;src=14030178;type=xbet;cat=uniqu0;ord=1;num=2384186584779;npa=1;auiddc=104521754.1750500291;pscdl=noapi;frm=0;_tu=KpA;gtm=45fe56g1h2v9190735530z89180563600za200zb9180563600;gcd=13l3l3l2l1l1;dma_cps=syphamo;dma=1;dc_fmt=4;tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104611821~104684208~104684211~104718208~104766476~104766478~104791498~104791500;epver=2;dc_random=1750500291577;~oref=https%3A%2F%2F1xlite-87523.bar%2Fen%2Fblock?
IP
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerGoogle Trust Services
Subjectwww.google.com
Fingerprint4F:74:10:0A:01:21:55:4F:03:B9:F9:8B:6A:DE:A2:47:7C:44:89:73
ValidityMon, 02 Jun 2025 08:37:21 GMT - Mon, 25 Aug 2025 08:37:20 GMT
File type GIF image data, version 89a, 1 x 1
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
POST /gmp/conversion;src=14030178;type=xbet;cat=uniqu0;ord=1;num=2384186584779;npa=1;auiddc=104521754.1750500291;pscdl=noapi;frm=0;_tu=KpA;gtm=45fe56g1h2v9190735530z89180563600za200zb9180563600;gcd=13l3l3l2l1l1;dma_cps=syphamo;dma=1;dc_fmt=4;tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104611821~104684208~104684211~104718208~104766476~104766478~104791498~104791500;epver=2;dc_random=1750500291577;~oref=https%3A%2F%2F1xlite-87523.bar%2Fen%2Fblock? HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 21 Jun 2025 10:04:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
access-control-allow-credentials: true
access-control-allow-origin: https://1xlite-87523.bar
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/a49ddc9ed7b115238ef2263b253f2225.json
200 OK 22 kB URL GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/a49ddc9ed7b115238ef2263b253f2225.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash ff5d81879a491bb1cfe091c5817a89b4
2a1d20f61eb8c513b270b8d123e3a9f66c89f808
538bffce9fa55e37a08e6b7f5148f8e7884c02a82b13e8426553061ff2475f90
GET /genfiles/cms/1-285/desktop/media_asset/a49ddc9ed7b115238ef2263b253f2225.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:39 GMT
content-type: application/json
traceparent: 00-371200c3517623816710cb096a6208bb-5f80f30efba37bd3-01
last-modified: Tue, 20 May 2025 11:01:53 GMT
etag: W/"ff5d81879a491bb1cfe091c5817a89b4"
content-encoding: gzip
expires: Tue, 20 May 2025 12:23:08 GMT
cache-control: max-age=3600
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1170
cache: HIT
x-cached-since: 2025-06-21T09:45:09+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/46fe3f96f4140750e81ded48911f3e30.json
200 OK 747 B URL GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/46fe3f96f4140750e81ded48911f3e30.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash f4e90636ec9cff061c4301b3cefdd0d6
c506efe9c3672c58434ea10021dab0ad81b1ad98
30666f138ccc12735e2f8a6405ddce4a3d8756b9445e3b2732fa2970f14dbcea
GET /genfiles/cms/1-285/desktop/media_asset/46fe3f96f4140750e81ded48911f3e30.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:39 GMT
content-type: application/json
content-length: 747
traceparent: 00-f3951c43f8ed08f3b196c4471e78e6b1-dbffa993ca04a77f-01
last-modified: Thu, 27 Feb 2025 13:26:35 GMT
etag: "f4e90636ec9cff061c4301b3cefdd0d6"
expires: Thu, 27 Feb 2025 15:00:05 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 3
cache: HIT
x-cached-since: 2025-06-21T10:04:36+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2
200 OK 64 kB URL GET v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 63920, version 1.0
Hash a65527fcb58f66a7cfbc0e6b160538b4
45d260e7fa343401b5bb0df982a014f53e2d253b
fb13c3a1cbac60649b76f7d7f85c1645d35ac69b85ce5f4eb0692505ecc2cd45
GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:38 GMT
content-type: font/woff2
content-length: 63920
traceparent: 00-8766db6f56e4b59c5ee8ce5a4d3b982d-2aa81b6688aebcdb-01
last-modified: Wed, 14 Jun 2023 09:49:53 GMT
etag: "a65527fcb58f66a7cfbc0e6b160538b4"
expires: Thu, 16 Jan 2025 10:45:34 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 711
cache: HIT
x-cached-since: 2025-06-21T09:52:47+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/60608cbba85ee2e8946c25b55281a0bc.json
200 OK 328 B URL GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/60608cbba85ee2e8946c25b55281a0bc.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash 4347fc050ebe622e30a7bf78a213b5a0
c05b3b571980b01ff9f07e6adc1c29c58be70bd1
ed1b1193a248bf273141c31b7f74dd1224416b3757e5a71f2e7d579c50d65d57
GET /genfiles/cms/1-285/desktop/media_asset/60608cbba85ee2e8946c25b55281a0bc.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:40 GMT
content-type: application/json
content-length: 328
traceparent: 00-a6eb5ff2a912725f40e218c045566352-ed58fe173e7840e0-01
last-modified: Thu, 27 Feb 2025 10:51:50 GMT
etag: "4347fc050ebe622e30a7bf78a213b5a0"
expires: Thu, 27 Feb 2025 12:17:56 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1165
cache: HIT
x-cached-since: 2025-06-21T09:45:15+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/45f1770114.js
200 OK 1.2 kB URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/45f1770114.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (1165)
Hash bf50b784620ed417a811a29b93c1674b
72cbca9b31debe6d7bda2a2c553edd8e5c5ff44e
2bcf4abc801d0b74d8f38af2b71a8572856fc612af519a57b56f78247367474a
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/45f1770114.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:40 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-6a6dd0af247d1abf3a10e77d2048bfd5-d31d2f3862272b05-01
last-modified: Wed, 18 Jun 2025 13:47:11 GMT
etag: W/"bf50b784620ed417a811a29b93c1674b"
x-amz-meta-mtime: 1750254148.955234758
content-encoding: gzip
expires: Thu, 19 Jun 2025 13:50:23 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 72208
cache: HIT
x-cached-since: 2025-06-20T14:01:12+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_reset_password/en/dictionary_612c6e919ca15d39cc751a619a3952c7.json
200 OK 765 B URL GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_reset_password/en/dictionary_612c6e919ca15d39cc751a619a3952c7.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash 00f980f23f1b4c1ccee99ed49e0a8feb
4cb07094de9bffff1bf81d94446280b91013b660
bb3be3377fbb8e66a4b5a8a3866dfd865a37cb4a96482ab2f439981e03b57cea
GET /genfiles/web-app-v2/dictionary2/v3_reset_password/en/dictionary_612c6e919ca15d39cc751a619a3952c7.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:39 GMT
content-type: application/json; charset=utf-8
content-length: 765
traceparent: 00-77e6df3f53ea85258be76f1062da7785-eeaf685620f5f9cd-01
last-modified: Wed, 11 Oct 2023 12:52:53 GMT
etag: "00f980f23f1b4c1ccee99ed49e0a8feb"
cache-control: max-age=3600
expires: Thu, 16 Jan 2025 10:53:47 GMT
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 602
cache: HIT
x-cached-since: 2025-06-21T09:54:37+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET 1xlite-87523.bar/web-api/session
204 No Content 0 B URL GET 1xlite-87523.bar/web-api/session
IP
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerLet's Encrypt
Subject1xlite-87523.bar
FingerprintFC:01:CF:99:41:B9:66:76:A4:88:7F:BE:E1:BE:BC:A6:ED:9A:01:45
ValidityTue, 03 Jun 2025 08:57:07 GMT - Mon, 01 Sep 2025 08:57:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /web-api/session HTTP/1.1
Host: 1xlite-87523.bar
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/en/block
content-type: application/json
x-requested-with: XMLHttpRequest
x-app-n: v3-nuxt2
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_22637c_%5B%5DMS%5B%5Dnull%5B%5DSmartCPM%5B%5D4991447_d28985_l18283_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_22637c_%5B%5DMS%5B%5Dnull%5B%5DSmartCPM%5B%5D4991447_d28985_l18283_clickunder; auid=W7rOa2hWg7V2u5ucAwmJAg==; window_width=1280; che_g=1b6522a1-6c79-59fd-5c25-3ba599b90b6c
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx
date: Sat, 21 Jun 2025 10:04:47 GMT
cache-control: no-cache, private
server-timing: dt_total;dur=0.007, p;dur=25.158, wf-uht;dur=0.040
set-cookie: ua=deleted; expires=Thu, 01 Jan 1970 00:00:01 GMT; Max-Age=0; path=/
SESSION=57559800a529986175aab399e91d82e8; path=/; secure; httponly; samesite=lax
x-dt: 285
x-time-ng: 0.026, 0.028
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/ad31aef0b1.js
200 OK 864 B URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/ad31aef0b1.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (863)
Hash 9f763cf109976cc240a688471df28e0f
c97a82b72d54e5a4c96cb18df28b475fd7052ec6
ef6f9e80182014cdb24807ec43e59544eef8c3147dd6cf0300f135da0751828d
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/ad31aef0b1.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:40 GMT
content-type: text/javascript; charset=utf-8
content-length: 864
traceparent: 00-d07fb39bd54695446d69b3bb4aa91628-9513cb2065d9c3c4-01
last-modified: Wed, 18 Jun 2025 13:47:11 GMT
etag: "9f763cf109976cc240a688471df28e0f"
x-amz-meta-mtime: 1750254148.96223499
expires: Thu, 19 Jun 2025 13:50:23 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 72208
cache: HIT
x-cached-since: 2025-06-20T14:01:12+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/shared-assets/__shared_chunk_7HDOEZTP.js
200 OK 1.2 kB URL GET v3.traincdn.com/sys-static/shared-assets/__shared_chunk_7HDOEZTP.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (1193)
Hash 7e76c08e7f16815131a5f13a10c1efba
5f800877b78a0713157fe119bc1a2d9a260f72e1
c6f29a0c7c3ed884ccffd7a529fd2fc599e2da1f31af658146f0e36a3f4c00dc
GET /sys-static/shared-assets/__shared_chunk_7HDOEZTP.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:40 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-8b2793e1bd33fea6d1cb63232bb7b863-ccc4090036580b7c-01
last-modified: Fri, 20 Jun 2025 14:13:24 GMT
etag: W/"7e76c08e7f16815131a5f13a10c1efba"
x-amz-meta-mtime: 1750428765.962144752
content-encoding: gzip
expires: Sun, 22 Jun 2025 08:09:04 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 6422
cache: HIT
x-cached-since: 2025-06-21T08:17:38+00:00
X-Firefox-Spdy: h2
GET 1xlite-87523.bar/hd-api/external/apps/c5e31d5915661de4393e3f1489b00ebc4497dd48/api.js
200 OK 760 B URL GET 1xlite-87523.bar/hd-api/external/apps/c5e31d5915661de4393e3f1489b00ebc4497dd48/api.js
IP
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerLet's Encrypt
Subject1xlite-87523.bar
FingerprintFC:01:CF:99:41:B9:66:76:A4:88:7F:BE:E1:BE:BC:A6:ED:9A:01:45
ValidityTue, 03 Jun 2025 08:57:07 GMT - Mon, 01 Sep 2025 08:57:06 GMT
File type JavaScript source, ASCII text, with very long lines (759)
Hash 0b911773e0df627d77f8306c86e228aa
0d584bb1a3294e4fe42df4582dcc8a2c8f77f7bb
01e4926540498a77d866259516007d41fae1213ab9607db826f011d926fd6006
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /hd-api/external/apps/c5e31d5915661de4393e3f1489b00ebc4497dd48/api.js HTTP/1.1
Host: 1xlite-87523.bar
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-87523.bar/en/block
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_22637c_%5B%5DMS%5B%5Dnull%5B%5DSmartCPM%5B%5D4991447_d28985_l18283_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_22637c_%5B%5DMS%5B%5Dnull%5B%5DSmartCPM%5B%5D4991447_d28985_l18283_clickunder; auid=W7rOa2hWg7V2u5ucAwmJAg==; window_width=1280; che_g=1b6522a1-6c79-59fd-5c25-3ba599b90b6c; SESSION=57559800a529986175aab399e91d82e8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:48 GMT
content-type: text/javascript; charset=utf-8
content-length: 492
cache-control: public, max-age=300
content-encoding: gzip
etag: 0b911773e0df627d77f8306c86e228aa
vary: Accept-Encoding
x-dt: 455
x-request-guid: a1bfa0c22bdb7c08245e2b48fd0633cf
x-time-ng: 0.001
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.008, wf-uht;dur=
accept-ranges: bytes
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2
200 OK 64 kB URL GET v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 63920, version 1.0
Hash a65527fcb58f66a7cfbc0e6b160538b4
45d260e7fa343401b5bb0df982a014f53e2d253b
fb13c3a1cbac60649b76f7d7f85c1645d35ac69b85ce5f4eb0692505ecc2cd45
GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:49 GMT
content-type: font/woff2
content-length: 63920
traceparent: 00-11bbe091472ddf3223e01804a3e2a211-29e512e60a7b82ac-01
last-modified: Wed, 14 Jun 2023 09:49:53 GMT
etag: "a65527fcb58f66a7cfbc0e6b160538b4"
expires: Thu, 16 Jan 2025 10:45:34 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 722
cache: HIT
x-cached-since: 2025-06-21T09:52:47+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/site-admin/css_vars/29b5cda95fa390c124de39b6aeca6d24.css
200 OK 46 B URL GET v3.traincdn.com/genfiles/site-admin/css_vars/29b5cda95fa390c124de39b6aeca6d24.css
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 29b5cda95fa390c124de39b6aeca6d24
46f68f69533c1fdc737eb36e8e7af7672178e610
6021ec0aede22eadcb8401fe945d345202320437c7be01b157f0cb282ebe7c88
GET /genfiles/site-admin/css_vars/29b5cda95fa390c124de39b6aeca6d24.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-87523.bar/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:39 GMT
content-type: text/css
content-length: 46
traceparent: 00-7254d841344e0470bc542a19849680a0-70d957adf699764b-01
last-modified: Thu, 20 Mar 2025 13:29:31 GMT
etag: "29b5cda95fa390c124de39b6aeca6d24"
cache-control: max-age=3600
expires: Thu, 20 Mar 2025 14:32:37 GMT
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1428
cache: HIT
x-cached-since: 2025-06-21T09:40:51+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/8b4e10c31932a559912f415b65fba92c.json
200 OK 1.3 kB URL GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/8b4e10c31932a559912f415b65fba92c.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash 499d57f89b2bf5fed52d984d865fd72c
f3dd138886f2c1e257d3ac2214b7e3cba57e56b2
9467cf5576ce2a97d9e44e53915a9c4ae529c134cc1ea5a3c62ea304eebda0c8
GET /genfiles/cms/1-285/desktop/media_asset/8b4e10c31932a559912f415b65fba92c.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:40 GMT
content-type: application/json
traceparent: 00-6b9d6587f45c95186a4acf2a63c3d0a2-9ef92f7f5c1ae1a7-01
last-modified: Thu, 27 Feb 2025 08:17:13 GMT
etag: W/"499d57f89b2bf5fed52d984d865fd72c"
content-encoding: gzip
expires: Thu, 27 Feb 2025 11:06:29 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1165
cache: HIT
x-cached-since: 2025-06-21T09:45:15+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/eee81f490f.js
200 OK 4.1 kB URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/eee81f490f.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (4047)
Hash f7165652388e4db8492b0c5cef873911
bb21320a39643361100fe8e11e4b5446873130be
68aafd61544b4d0566b7ca8faa7281f9887cc0416a8381aff01f27a00dea7c1c
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/eee81f490f.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:40 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-27c04dda54591a54b40aadadc4d98978-009e8d638f60f18d-01
last-modified: Wed, 18 Jun 2025 13:47:11 GMT
etag: W/"f7165652388e4db8492b0c5cef873911"
x-amz-meta-mtime: 1750254148.966235123
content-encoding: gzip
expires: Thu, 19 Jun 2025 13:50:23 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 72208
cache: HIT
x-cached-since: 2025-06-20T14:01:12+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/e3dd2d416ede1d7659584842878349f6.json
200 OK 1.1 kB URL GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/e3dd2d416ede1d7659584842878349f6.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash 338264fc869e8f0b86b0d6c9d92102b0
83b4d35816df0e1486b766251e74d23f28b77824
015355a44429f40dd63b566dd1e9b1b76af3dfa28dcd25a43e82820ba0847b8d
GET /genfiles/cms/1-285/desktop/media_asset/e3dd2d416ede1d7659584842878349f6.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:40 GMT
content-type: application/json
traceparent: 00-e5afdcbc2db6a5fdcbca1a2fa04306b1-ffc2f1fbeb45ff79-01
last-modified: Thu, 16 May 2024 19:05:13 GMT
etag: W/"338264fc869e8f0b86b0d6c9d92102b0"
content-encoding: gzip
expires: Thu, 16 Jan 2025 11:19:55 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1165
cache: HIT
x-cached-since: 2025-06-21T09:45:15+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/site-admin/colors/11fcf67d96d7d317c64c54b46d5ec44f.css
200 OK 40 kB URL GET v3.traincdn.com/genfiles/site-admin/colors/11fcf67d96d7d317c64c54b46d5ec44f.css
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type ASCII text, with very long lines (39742), with no line terminators
Hash 11fcf67d96d7d317c64c54b46d5ec44f
abf4e85e9e932ed64412f46ff590b39a87e26cb9
96ec24e0f388bf29d22bc262d0ed8aecf4582efa4d2031a06566442663f68658
GET /genfiles/site-admin/colors/11fcf67d96d7d317c64c54b46d5ec44f.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-87523.bar/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:39 GMT
content-type: text/css
traceparent: 00-f2721da3553e3a346466cdd5776d973e-de6e156768797884-01
last-modified: Fri, 20 Jun 2025 09:37:08 GMT
etag: W/"11fcf67d96d7d317c64c54b46d5ec44f"
cache-control: max-age=3600
content-encoding: gzip
expires: Fri, 20 Jun 2025 11:58:57 GMT
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 2064
cache: HIT
x-cached-since: 2025-06-21T09:30:15+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/fc03516ae4c718991727836d377493ff.json
200 OK 13 kB URL GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/fc03516ae4c718991727836d377493ff.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash 2b474bcc2f009b70e64e2b5a95dd50a4
1fd5ee2d54da7dfbf61e67efd938a89c548fc866
f86d880575f3f65ddaaf9e8a0e3746bbbefcefe7e6c0c4441e9e20ceffdca237
GET /genfiles/cms/1-285/desktop/media_asset/fc03516ae4c718991727836d377493ff.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:40 GMT
content-type: application/json
traceparent: 00-bf53d3732fa061e7c522d44f5b67bd32-8af24dec3a0a098c-01
last-modified: Wed, 12 Mar 2025 09:35:22 GMT
etag: W/"2b474bcc2f009b70e64e2b5a95dd50a4"
content-encoding: gzip
expires: Wed, 12 Mar 2025 11:03:31 GMT
cache-control: max-age=3600
x-time-ng: 0.001
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1165
cache: HIT
x-cached-since: 2025-06-21T09:45:15+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/1c0cd0740fccd19a9816be06e69f0a1b.json
200 OK 473 B URL GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/1c0cd0740fccd19a9816be06e69f0a1b.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash e67aa19ef00fd2285c7b4ecbb6018306
5b01d4786d6fbfbd5de7901eb4359a55466f434a
135c1042c31e3674d8a1b3b9e7179f4f36868048ca6058ea458ff291b8880b5e
GET /genfiles/cms/1-285/desktop/media_asset/1c0cd0740fccd19a9816be06e69f0a1b.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:40 GMT
content-type: application/json
content-length: 473
traceparent: 00-9f74b79436a9f26d24e3c972d03de183-fb3cc46361597e68-01
last-modified: Thu, 16 May 2024 20:41:30 GMT
etag: "e67aa19ef00fd2285c7b4ecbb6018306"
expires: Fri, 16 May 2025 19:56:49 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1165
cache: HIT
x-cached-since: 2025-06-21T09:45:15+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET v3.traincdn.com/main-static/61792ac9/desktop/default/analytics-b12a340a.js
200 OK 7.1 kB URL GET v3.traincdn.com/main-static/61792ac9/desktop/default/analytics-b12a340a.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (7104), with no line terminators
Hash 0476efbe1451fd71519c7f60c568fe4d
ab2d3cce3bb806dfa188907ddd87c91417ca49ec
eb81418418bec2a1509e56bf173bcbcc232ecc653c19229a6917d97ce63a2cda
GET /main-static/61792ac9/desktop/default/analytics-b12a340a.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-87523.bar/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:50 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-cec3bd429d34d735c931ba3007d520d0-009c2e33be829d71-01
last-modified: Thu, 19 Jun 2025 12:35:31 GMT
etag: W/"0476efbe1451fd71519c7f60c568fe4d"
x-amz-meta-mtime: 1750336529.991595231
content-encoding: gzip
expires: Fri, 20 Jun 2025 13:08:45 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 75231
cache: HIT
x-cached-since: 2025-06-20T13:10:59+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/main-static/61792ac9/desktop/default/css/7fe5f71b.css
200 OK 3.3 kB URL GET v3.traincdn.com/main-static/61792ac9/desktop/default/css/7fe5f71b.css
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type ASCII text, with very long lines (3313), with no line terminators
Hash c610b8710368de3bf2f1c5bb581b6a3a
f67bc86785d434adb2e81a356a7926b8818ac567
fad7111846310042401990719146401178f22e2618abf2b058e641b6495e8eba
GET /main-static/61792ac9/desktop/default/css/7fe5f71b.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-87523.bar/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:39 GMT
content-type: text/css; charset=utf-8
traceparent: 00-14c20fa3001159ea442c408355ee213c-85bcfaad35986551-01
last-modified: Thu, 19 Jun 2025 12:35:31 GMT
etag: W/"c610b8710368de3bf2f1c5bb581b6a3a"
x-amz-meta-mtime: 1750336529.991595231
content-encoding: gzip
expires: Fri, 20 Jun 2025 13:08:38 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 75232
cache: HIT
x-cached-since: 2025-06-20T13:10:47+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/ac02f639a86763a884adc5615fe65e72.json
200 OK 14 kB URL GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/ac02f639a86763a884adc5615fe65e72.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash 811ce3b7877d19901e45430cb6523d62
16a905115a678fdef3923f91c6f76cbab613e84d
10fbb74dbac63abfe9c4f5a77abc03757ef3527a479d4ae70dc977b515eec8cb
GET /genfiles/cms/1-285/desktop/media_asset/ac02f639a86763a884adc5615fe65e72.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:39 GMT
content-type: application/json
traceparent: 00-1a61bb29ab397fd4af07079931ad3e33-b192c5ea83ea1f9e-01
last-modified: Thu, 27 Feb 2025 09:04:01 GMT
etag: W/"811ce3b7877d19901e45430cb6523d62"
content-encoding: gzip
expires: Thu, 27 Feb 2025 10:17:13 GMT
cache-control: max-age=3600
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1170
cache: HIT
x-cached-since: 2025-06-21T09:45:09+00:00
X-Firefox-Spdy: h2
POST 1xlite-87523.bar/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json
200 OK 23 B URL POST 1xlite-87523.bar/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json
IP
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerLet's Encrypt
Subject1xlite-87523.bar
FingerprintFC:01:CF:99:41:B9:66:76:A4:88:7F:BE:E1:BE:BC:A6:ED:9A:01:45
ValidityTue, 03 Jun 2025 08:57:07 GMT - Mon, 01 Sep 2025 08:57:06 GMT
Hash 87e84501b67aa5d583830021dcd6d7fc
cdb23b6a7516b402f0b5506fbce54e7afbee08a6
ce0f26e52159b0480c6c0e3b2af7b6347953db7f7a2f38d07f8ba1f6a458a5d6
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1
Host: 1xlite-87523.bar
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/en/block
Content-Type: application/json
X-Lang: en
X-Uuid: dc339247-a23a-468c-aa74-b76f586dcdc3
Content-Length: 98
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_22637c_%5B%5DMS%5B%5Dnull%5B%5DSmartCPM%5B%5D4991447_d28985_l18283_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_22637c_%5B%5DMS%5B%5Dnull%5B%5DSmartCPM%5B%5D4991447_d28985_l18283_clickunder; postback_watcher=; auid=W7rOa2hWg7V2u5ucAwmJAg==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:39 GMT
content-type: application/json
content-length: 23
x-dt: 285
x-time-ng: 0.000
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.041, wf-uht;dur=0.012
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/entry-f161b37ed6.js
200 OK 21 kB URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/entry-f161b37ed6.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (20628)
Hash f5cdb4f31f025ebc20061834b1c8c497
d411ed0e68449a002f48537732336b8bb7624438
9d0a4a8960a6379b5dee32f6111d95ab742fd031a0edcc069f5b7b19d3195c9e
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/entry-f161b37ed6.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Referer: https://1xlite-87523.bar/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:39 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-25a3ef48da40b24dff86a1b1052fe386-8f1439a80efba2b5-01
last-modified: Wed, 18 Jun 2025 13:47:11 GMT
etag: W/"f5cdb4f31f025ebc20061834b1c8c497"
x-amz-meta-mtime: 1750254148.965235089
content-encoding: gzip
expires: Thu, 19 Jun 2025 13:50:14 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 72208
cache: HIT
x-cached-since: 2025-06-20T14:01:11+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/568bd9aa90.js
200 OK 2.0 kB URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/568bd9aa90.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (1967)
Hash 9f379aa49c0fb5d6828f564408b9fa57
e6859ec87a16384f10f182d45fbcb2d952889e93
98d109da6adb8de563bc66a66306a3c9e9a8fb7acbc88e210165da8e6f47300f
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/568bd9aa90.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:40 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-b0125268754924314e231ce1ffb3ebff-3f9d687f5205effa-01
last-modified: Wed, 18 Jun 2025 13:47:11 GMT
etag: W/"9f379aa49c0fb5d6828f564408b9fa57"
x-amz-meta-mtime: 1750254148.956234791
content-encoding: gzip
expires: Thu, 19 Jun 2025 13:50:23 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 72208
cache: HIT
x-cached-since: 2025-06-20T14:01:12+00:00
X-Firefox-Spdy: h2
GET 1xlite-87523.bar/hd-api/external/019791f2-a658-755a-a7f3-a092b59a474a.js
200 OK 310 kB URL GET 1xlite-87523.bar/hd-api/external/019791f2-a658-755a-a7f3-a092b59a474a.js
IP
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerLet's Encrypt
Subject1xlite-87523.bar
FingerprintFC:01:CF:99:41:B9:66:76:A4:88:7F:BE:E1:BE:BC:A6:ED:9A:01:45
ValidityTue, 03 Jun 2025 08:57:07 GMT - Mon, 01 Sep 2025 08:57:06 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 310 kB (309535 bytes)
Hash 110e681d03288d1ee400e5ca5834a655
efb6a69d9b446d919343edbf5e4b01992ca3d0d4
a85f6f629edf9b52b24244fcf27c1c429397a1d676886ad0772abc41cfcca2a1
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /hd-api/external/019791f2-a658-755a-a7f3-a092b59a474a.js HTTP/1.1
Host: 1xlite-87523.bar
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/en/block
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_22637c_%5B%5DMS%5B%5Dnull%5B%5DSmartCPM%5B%5D4991447_d28985_l18283_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_22637c_%5B%5DMS%5B%5Dnull%5B%5DSmartCPM%5B%5D4991447_d28985_l18283_clickunder; auid=W7rOa2hWg7V2u5ucAwmJAg==; window_width=1280; che_g=1b6522a1-6c79-59fd-5c25-3ba599b90b6c; SESSION=57559800a529986175aab399e91d82e8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:48 GMT
content-type: text/javascript; charset=utf-8
cache-control: private, max-age=0, must-revalidate
content-encoding: gzip
vary: Accept-Encoding
x-dt: 285
x-hd-trace-id: fe1c8283-bb0d-44d6-b0be-06952e8ece7a
x-request-guid: c1ac05ae0f5e814743772b7a576e4b33
x-time-ng: 0.002
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.047, wf-uht;dur=0.030
X-Firefox-Spdy: h2
POST 1xlite-87523.bar/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json
200 OK 2 B URL POST 1xlite-87523.bar/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json
IP
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerLet's Encrypt
Subject1xlite-87523.bar
FingerprintFC:01:CF:99:41:B9:66:76:A4:88:7F:BE:E1:BE:BC:A6:ED:9A:01:45
ValidityTue, 03 Jun 2025 08:57:07 GMT - Mon, 01 Sep 2025 08:57:06 GMT
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json HTTP/1.1
Host: 1xlite-87523.bar
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/en/block
Content-Type: application/json
X-Lang: en
X-Uuid: dc339247-a23a-468c-aa74-b76f586dcdc3
Content-Length: 19
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_22637c_%5B%5DMS%5B%5Dnull%5B%5DSmartCPM%5B%5D4991447_d28985_l18283_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_22637c_%5B%5DMS%5B%5Dnull%5B%5DSmartCPM%5B%5D4991447_d28985_l18283_clickunder; postback_watcher=; auid=W7rOa2hWg7V2u5ucAwmJAg==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:39 GMT
content-type: application/json
content-length: 2
x-dt: 285
x-time-ng: 0.001
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.095, wf-uht;dur=0.010
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/42e926c49f.js
200 OK 27 kB URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/42e926c49f.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (27023)
Hash 504f2defe47d7dcd76a50fb013383a5b
c7e28c0b6b38045fe591196ffba3a7160b616e4c
399185c4fc4c505a4ca99d6db0a5b8e8bd65e6023c717a41140cdcb2e08b07ab
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/42e926c49f.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:40 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-4e85434c40eee7c24e7b88187833991d-b29a5fa5108f3236-01
last-modified: Wed, 18 Jun 2025 13:47:11 GMT
etag: W/"504f2defe47d7dcd76a50fb013383a5b"
x-amz-meta-mtime: 1750254148.954234725
content-encoding: gzip
expires: Thu, 19 Jun 2025 13:50:23 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 72208
cache: HIT
x-cached-since: 2025-06-20T14:01:12+00:00
X-Firefox-Spdy: h2
GET 1xlite-87523.bar/captcha-api/assets/hunt-captcha.js
200 OK 86 kB URL GET 1xlite-87523.bar/captcha-api/assets/hunt-captcha.js
IP
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerLet's Encrypt
Subject1xlite-87523.bar
FingerprintFC:01:CF:99:41:B9:66:76:A4:88:7F:BE:E1:BE:BC:A6:ED:9A:01:45
ValidityTue, 03 Jun 2025 08:57:07 GMT - Mon, 01 Sep 2025 08:57:06 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash 7c8fa1a657a274f5569fac4989528cc9
43509c7a4e32e8075147e66ee58afdc5efa58ef9
4777207c1a8f6c4a33f5c41d15f9ca068c54193af6c76f586dbc292cf04cea50
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /captcha-api/assets/hunt-captcha.js HTTP/1.1
Host: 1xlite-87523.bar
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-87523.bar/en/block
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_22637c_%5B%5DMS%5B%5Dnull%5B%5DSmartCPM%5B%5D4991447_d28985_l18283_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_22637c_%5B%5DMS%5B%5Dnull%5B%5DSmartCPM%5B%5D4991447_d28985_l18283_clickunder; auid=W7rOa2hWg7V2u5ucAwmJAg==; window_width=1280; che_g=1b6522a1-6c79-59fd-5c25-3ba599b90b6c; SESSION=57559800a529986175aab399e91d82e8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:48 GMT
content-type: text/javascript; charset=utf-8
cache-control: public, max-age=300
content-encoding: br
vary: Accept-Encoding
x-dt: 455
x-request-id: 5ce916097fe34670bd2f975900114368
x-time-ng: 0.001
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.006, wf-uht;dur=
X-Firefox-Spdy: h2
POST 1xlite-87523.bar/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json
200 OK 23 B URL POST 1xlite-87523.bar/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json
IP
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerLet's Encrypt
Subject1xlite-87523.bar
FingerprintFC:01:CF:99:41:B9:66:76:A4:88:7F:BE:E1:BE:BC:A6:ED:9A:01:45
ValidityTue, 03 Jun 2025 08:57:07 GMT - Mon, 01 Sep 2025 08:57:06 GMT
Hash 5abd65e93550a6c025f06de5ffaf0dbc
e9d2b406f2a5acf67d67cdd22bab8d7f96154092
07d0c8944adb101434fcabc3c35c0ba6af476946cca0018c591e4143485952df
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1
Host: 1xlite-87523.bar
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/en/block
Content-Type: application/json
X-Lang: en
X-Uuid: dc339247-a23a-468c-aa74-b76f586dcdc3
Content-Length: 109
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_22637c_%5B%5DMS%5B%5Dnull%5B%5DSmartCPM%5B%5D4991447_d28985_l18283_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_22637c_%5B%5DMS%5B%5Dnull%5B%5DSmartCPM%5B%5D4991447_d28985_l18283_clickunder; auid=W7rOa2hWg7V2u5ucAwmJAg==; window_width=1280; che_g=1b6522a1-6c79-59fd-5c25-3ba599b90b6c; SESSION=57559800a529986175aab399e91d82e8; _ga_7JGWL9SV66=GS2.1.s1750500291$o1$g0$t1750500291$j60$l0$h1399156223; _ga=GA1.1.1932549972.1750500291; _gcl_au=1.1.104521754.1750500291
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:51 GMT
content-type: application/json
content-length: 23
x-dt: 285
x-time-ng: 0.001
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.093, wf-uht;dur=0.011
X-Firefox-Spdy: h2
GET 1xlite-87523.bar/bff-api/config/group/get?groups=d.technical&lang=en
200 OK 730 B URL GET 1xlite-87523.bar/bff-api/config/group/get?groups=d.technical&lang=en
IP
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerLet's Encrypt
Subject1xlite-87523.bar
FingerprintFC:01:CF:99:41:B9:66:76:A4:88:7F:BE:E1:BE:BC:A6:ED:9A:01:45
ValidityTue, 03 Jun 2025 08:57:07 GMT - Mon, 01 Sep 2025 08:57:06 GMT
Hash 87ec2701f4efb3b20790e1a967af79be
8c7a33e8de1fadc580287953380b136d261c27f5
add58098a30e646183c0c004afd7cdb345b576ed641263c6b19ab40c18d75395
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /bff-api/config/group/get?groups=d.technical&lang=en HTTP/1.1
Host: 1xlite-87523.bar
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/en/block
content-type: application/json
x-requested-with: XMLHttpRequest
is-srv: false
x-svc-source: __TECHNICAL_PAGES_APP__
x-app-n: __TECHNICAL_PAGES_APP__
x-geoip2-country-code: ru
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_22637c_%5B%5DMS%5B%5Dnull%5B%5DSmartCPM%5B%5D4991447_d28985_l18283_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_22637c_%5B%5DMS%5B%5Dnull%5B%5DSmartCPM%5B%5D4991447_d28985_l18283_clickunder; postback_watcher=; auid=W7rOa2hWg7V2u5ucAwmJAg==; window_width=1920; che_g=1b6522a1-6c79-59fd-5c25-3ba599b90b6c
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:40 GMT
content-type: application/json
content-length: 730
cache-control: no-cache, private
server-timing: dt_total;dur=0.078, bff;dur=1.48, wf-uht;dur=0.011
x-cache-expire: 898
x-cache-hit: 1
x-dt: 285
x-pod: R-84n92
x-time-ng: 0.003
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_registration/en/dictionary_cbc701880c9e30a345ede88e3a056e92.json
200 OK 22 kB URL GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_registration/en/dictionary_cbc701880c9e30a345ede88e3a056e92.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash 9c91c07d8ec9edd108f247bb5cdf63b8
71f4de7c742ef9c262d94e0a2aa01a2092bc0488
079f9adfbce8307eae396c2924c5647020790e8e1b178397e34af1d6405262ab
GET /genfiles/web-app-v2/dictionary2/v3_registration/en/dictionary_cbc701880c9e30a345ede88e3a056e92.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:39 GMT
content-type: application/json; charset=utf-8
traceparent: 00-a71821d09d406ddcf6f643aca9a30393-ee02040d0b23b1f3-01
last-modified: Wed, 18 Jun 2025 16:06:42 GMT
etag: W/"f576eaccdc74370d45abf7945a3a8174"
cache-control: max-age=3600
content-encoding: gzip
expires: Wed, 18 Jun 2025 17:26:26 GMT
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 3307
cache: HIT
x-cached-since: 2025-06-21T09:09:32+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/main-static/61792ac9/desktop/default/DC-10710285.js
200 OK 2.7 kB URL GET v3.traincdn.com/main-static/61792ac9/desktop/default/DC-10710285.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (2653), with no line terminators
Hash 8456a4c93bdea57b5386e8925733e535
306f451ed2b4fe561c3288766ae845436fd33284
26f97be768fee91730f47a7194021fa49b113dc81d060a2a470581e215fcbeab
GET /main-static/61792ac9/desktop/default/DC-10710285.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-87523.bar/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:39 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-cced109aed58a709c70e1922fd07f72b-ec48512b187d188f-01
last-modified: Thu, 19 Jun 2025 12:35:31 GMT
etag: W/"8456a4c93bdea57b5386e8925733e535"
x-amz-meta-mtime: 1750336529.983595205
content-encoding: gzip
expires: Fri, 20 Jun 2025 13:08:39 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 75231
cache: HIT
x-cached-since: 2025-06-20T13:10:48+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/main-static/61792ac9/desktop/default/vendors/plugins.vue-js-modal-b80265ab.js
200 OK 27 kB URL GET v3.traincdn.com/main-static/61792ac9/desktop/default/vendors/plugins.vue-js-modal-b80265ab.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (26667), with no line terminators
Hash da8dc1b4d54f9f5b1506c35e1d00139a
5ac224f85c17f285fba374f44928919105abfafd
0d86bef88dc869371df25bc4fb4d9e51586a935b9124d95e089fbaedafec4a7c
GET /main-static/61792ac9/desktop/default/vendors/plugins.vue-js-modal-b80265ab.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-87523.bar/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:39 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-d27b8304982024dbfd6b383286a3d2a2-c9d64bb982dd9e03-01
last-modified: Thu, 19 Jun 2025 12:35:31 GMT
etag: W/"da8dc1b4d54f9f5b1506c35e1d00139a"
x-amz-meta-mtime: 1750336530.007595283
content-encoding: gzip
expires: Fri, 20 Jun 2025 13:08:38 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 75231
cache: HIT
x-cached-since: 2025-06-20T13:10:48+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_css_16e298.css
200 OK 4.2 kB URL GET v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_css_16e298.css
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type ASCII text, with very long lines (3743)
Hash a77127dbfb4d9c95e68cf08165c7c30e
229907578c9c65f8049a3221dfda4790568dd77f
16e298fb30fe85f67917c8783ccaecec2fa9729b9593f2998e5d619f91ace6f1
GET /sys-static/shared-assets/Desktop/__shared_css_16e298.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-87523.bar/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:38 GMT
content-type: text/css; charset=utf-8
traceparent: 00-019335e2730a09ede262d8b719256757-98afb5e282165d2b-01
last-modified: Fri, 20 Jun 2025 12:02:14 GMT
etag: W/"a77127dbfb4d9c95e68cf08165c7c30e"
x-amz-meta-mtime: 1750420855.541573811
content-encoding: gzip
expires: Sat, 21 Jun 2025 12:53:34 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 75922
cache: HIT
x-cached-since: 2025-06-20T12:59:16+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/main-static/61792ac9/desktop/default/vendors/plugins.vue-notification-575f3ba7.js
200 OK 13 kB URL GET v3.traincdn.com/main-static/61792ac9/desktop/default/vendors/plugins.vue-notification-575f3ba7.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (12563), with no line terminators
Hash cd9839620a2ba08dedf86ba42ab5a0ae
33979ec3abb619aeb258d50931e5319e41ca3fc8
11a8211423bdc49f5ba7982a50224bb69d82c8d459d69eff9f69b10e5c5618dc
GET /main-static/61792ac9/desktop/default/vendors/plugins.vue-notification-575f3ba7.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-87523.bar/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:39 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-ba3ba44d0223d4f9e4311107d09dfbc6-0c41a38e2ccd3404-01
last-modified: Thu, 19 Jun 2025 12:35:31 GMT
etag: W/"cd9839620a2ba08dedf86ba42ab5a0ae"
x-amz-meta-mtime: 1750336530.007595283
content-encoding: gzip
expires: Fri, 20 Jun 2025 13:08:38 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 75232
cache: HIT
x-cached-since: 2025-06-20T13:10:47+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-ui/2.3.253/Desktop/Default/client.css
200 OK 643 kB URL GET v3.traincdn.com/sys-ui/2.3.253/Desktop/Default/client.css
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 643 kB (642806 bytes)
Hash 51ed7bc142a0d38b5e128fc507d2425d
72307245c00ff99ee4ec428917b29d8cd80ca2a3
7ad4a2f8c8db8564be108f52b97502089eca6264a874dd2428335414614377e5
GET /sys-ui/2.3.253/Desktop/Default/client.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-87523.bar/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:38 GMT
content-type: text/css; charset=utf-8
traceparent: 00-d0983c6a350f1d1bfcf6ab24d1973c8a-cda264f469df9328-01
last-modified: Wed, 18 Jun 2025 12:17:43 GMT
etag: W/"51ed7bc142a0d38b5e128fc507d2425d"
x-amz-meta-mtime: 1750249060.487555463
content-encoding: gzip
expires: Thu, 19 Jun 2025 15:47:31 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 65698
cache: HIT
x-cached-since: 2025-06-20T15:49:40+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/8192228305b202797f207eeb6842287c.png
200 OK 5.2 kB URL GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/8192228305b202797f207eeb6842287c.png
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type PNG image data, 514 x 514, 8-bit colormap, non-interlaced
Hash b9a636eef54b2844b571fe7de49184a7
bf653690790ced40eb3189da075a275d951d1607
001bfcdd52b658d46543a1aec889d35b73b3909b47097cc011b95e96fc9e3743
GET /genfiles/cms/1-285/desktop/media_asset/8192228305b202797f207eeb6842287c.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-87523.bar/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:40 GMT
content-type: image/png
content-length: 5202
traceparent: 00-e9c333b9103cea1edc423560f26a8bb5-e2ee0383094e64e5-01
last-modified: Wed, 26 Jun 2024 08:22:59 GMT
etag: "b9a636eef54b2844b571fe7de49184a7"
expires: Thu, 16 Jan 2025 11:18:57 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 184
cache: HIT
x-cached-since: 2025-06-21T10:01:36+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/e51c24c8ac.js
200 OK 3.9 kB URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/e51c24c8ac.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (3873)
Hash bb033fb223aa7b54248f6272392312dd
f7d5bd65a89f494cafc91ead618b32ac124e4764
cea19f93dd8cb316d74d251619e24ccee56002bc87cf5fb6fb452cb62133dbfe
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/e51c24c8ac.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:40 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-db5f5a0d3ea850e86420c9163f593c2a-28f23eadbc4a613d-01
last-modified: Wed, 18 Jun 2025 13:47:11 GMT
etag: W/"bb033fb223aa7b54248f6272392312dd"
x-amz-meta-mtime: 1750254148.964235056
content-encoding: gzip
expires: Thu, 19 Jun 2025 13:50:23 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 72208
cache: HIT
x-cached-since: 2025-06-20T14:01:12+00:00
X-Firefox-Spdy: h2
POST www.google.com/ccm/collect?en=page_view&dl=https%3A%2F%2F1xlite-87523.bar%2Fen%2Fblock&scrsrc=www.googletagmanager.com&frm=0&rnd=991433107.1750500291&dt=1xBet&auid=104521754.1750500291&navt=n&npa=1>m=45He56g1h2v9180563600za200&gcd=13l3l3l2l1l1&dma_cps=syphamo&dma=1&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104791498~104791500&tft=1750500291281&tfd=14218&apve=1&apvf=f
200 OK 0 B URL POST www.google.com/ccm/collect?en=page_view&dl=https%3A%2F%2F1xlite-87523.bar%2Fen%2Fblock&scrsrc=www.googletagmanager.com&frm=0&rnd=991433107.1750500291&dt=1xBet&auid=104521754.1750500291&navt=n&npa=1>m=45He56g1h2v9180563600za200&gcd=13l3l3l2l1l1&dma_cps=syphamo&dma=1&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104791498~104791500&tft=1750500291281&tfd=14218&apve=1&apvf=f
IP
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerGoogle Trust Services
Subjectwww.google.com
Fingerprint4F:74:10:0A:01:21:55:4F:03:B9:F9:8B:6A:DE:A2:47:7C:44:89:73
ValidityMon, 02 Jun 2025 08:37:21 GMT - Mon, 25 Aug 2025 08:37:20 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /ccm/collect?en=page_view&dl=https%3A%2F%2F1xlite-87523.bar%2Fen%2Fblock&scrsrc=www.googletagmanager.com&frm=0&rnd=991433107.1750500291&dt=1xBet&auid=104521754.1750500291&navt=n&npa=1>m=45He56g1h2v9180563600za200&gcd=13l3l3l2l1l1&dma_cps=syphamo&dma=1&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104791498~104791500&tft=1750500291281&tfd=14218&apve=1&apvf=f HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
date: Sat, 21 Jun 2025 10:04:51 GMT
pragma: no-cache
content-type: text/plain
expires: Fri, 01 Jan 1990 00:00:00 GMT
vary: Origin, X-Origin, Referer
server: scaffolding on HTTPServer2
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://1xlite-87523.bar
access-control-expose-headers: date,vary,vary,vary,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/shared-assets/__shared_libphonenumber_js_Q6RMKWT6.js
200 OK 159 kB URL GET v3.traincdn.com/sys-static/shared-assets/__shared_libphonenumber_js_Q6RMKWT6.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type ASCII text, with very long lines (65509)
Size 159 kB (158815 bytes)
Hash 1da464d70e78b04b9b808e82e4ad9487
0c79e65516d1525ecb43d13cfb4ccb0631095a28
b4c72b8036ca6767ab61490178f901538646f2aa1001cb042caa134174a41595
GET /sys-static/shared-assets/__shared_libphonenumber_js_Q6RMKWT6.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:40 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-f9d953ce62fbabea3d4cd934c121e150-bdd334265e9a99de-01
last-modified: Fri, 20 Jun 2025 14:13:24 GMT
etag: W/"1da464d70e78b04b9b808e82e4ad9487"
x-amz-meta-mtime: 1750428765.962144752
content-encoding: gzip
expires: Sun, 22 Jun 2025 08:09:02 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 6422
cache: HIT
x-cached-since: 2025-06-21T08:17:38+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/c0e02032d1.css
200 OK 11 kB URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/c0e02032d1.css
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type ASCII text, with very long lines (11072)
Hash 3d3e04f603cc58802ff96240abbdc3aa
e7e6a5d59c97236922354b40d288736f034a1ce3
611f7a963cd4aa278f1ba51f2401247df8c658929b76bfdce45bec08be83d7bd
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/c0e02032d1.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-87523.bar/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:38 GMT
content-type: text/css; charset=utf-8
traceparent: 00-cb5df4e5f4076c4347be49eb9025aade-5c131f5ebf1d3c43-01
last-modified: Wed, 18 Jun 2025 13:47:11 GMT
etag: W/"3d3e04f603cc58802ff96240abbdc3aa"
x-amz-meta-mtime: 1750254148.963235023
content-encoding: gzip
expires: Thu, 19 Jun 2025 16:10:36 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 64294
cache: HIT
x-cached-since: 2025-06-20T16:13:04+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_game/en/dictionary_c475e7b28b6b22307751b2c2c28273a7.json
200 OK 23 kB URL GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_game/en/dictionary_c475e7b28b6b22307751b2c2c28273a7.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash 7889ae7db096d748d942dbf58bd893b6
e9fc563f031d510363a597702fd9c4ca070aa870
a5145ccfed8e62882a5e36ab1bacad3c6fd36f203bf8b37e0ec20298fe7df20c
GET /genfiles/web-app-v2/dictionary2/v3_game/en/dictionary_c475e7b28b6b22307751b2c2c28273a7.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:39 GMT
content-type: application/json; charset=utf-8
traceparent: 00-c145d38a3f03b6e83ca7a8b15eed723a-e59f3bb5f6711553-01
last-modified: Tue, 03 Jun 2025 08:06:56 GMT
etag: W/"c08ec4640f6ba3d9b8a7363620465d67"
cache-control: max-age=3600
content-encoding: gzip
expires: Tue, 03 Jun 2025 09:40:13 GMT
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 864
cache: HIT
x-cached-since: 2025-06-21T09:50:15+00:00
X-Firefox-Spdy: h2
GET 1xlite-87523.bar/en/block
203 Non Authoritative 274 kB URL User Request GET 1xlite-87523.bar/en/block
IP
Certificate IssuerLet's Encrypt
Subject1xlite-87523.bar
FingerprintFC:01:CF:99:41:B9:66:76:A4:88:7F:BE:E1:BE:BC:A6:ED:9A:01:45
ValidityTue, 03 Jun 2025 08:57:07 GMT - Mon, 01 Sep 2025 08:57:06 GMT
File type HTML document, ASCII text, with very long lines (53869)
Size 274 kB (273916 bytes)
Hash 14626b3078b3403056a486f0f5c7e806
ff71340dbfd584f266aad90a3b522a5d63dbec31
5a5d49b3019a327f9b3530aa4d566fb5a4bd9f087b200098934f4b02bd108486
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /en/block HTTP/1.1
Host: 1xlite-87523.bar
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_22637c_%5B%5DMS%5B%5Dnull%5B%5DSmartCPM%5B%5D4991447_d28985_l18283_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_22637c_%5B%5DMS%5B%5Dnull%5B%5DSmartCPM%5B%5D4991447_d28985_l18283_clickunder; postback_watcher=; auid=W7rOa2hWg7V2u5ucAwmJAg==
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 203 Non Authoritative
server: nginx
date: Sat, 21 Jun 2025 10:04:37 GMT
content-type: text/html; charset=utf-8
content-length: 273916
accept-ranges: none
server-timing: dt_total;dur=0.003, total;dur=50;desc="Nuxt Server Time"
set-cookie: gw-mm=; Path=/; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Secure; SameSite=None; Partitioned
lng=en; Path=/
cookies_agree_type=3; Path=/
tzo=2; Path=/
is12h=0; Path=/
x-dt: 285
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_auth/en/dictionary_754eea55999d6fbc19f9a50e3d531192.json
200 OK 9.7 kB URL GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_auth/en/dictionary_754eea55999d6fbc19f9a50e3d531192.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash 0c26423c06dea45c278028334fbcf196
944405943af6d96d5550537bfc260cdc45b20d7a
fd6980f7c65c950c088ac6bcd1267645453be42eb2d24205b80adafbc29e6bd5
GET /genfiles/web-app-v2/dictionary2/v3_auth/en/dictionary_754eea55999d6fbc19f9a50e3d531192.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:39 GMT
content-type: application/json; charset=utf-8
traceparent: 00-1d874c23690f2f20c64577381573605f-2b1539ed3baffb23-01
last-modified: Thu, 19 Jun 2025 10:06:35 GMT
etag: W/"0c26423c06dea45c278028334fbcf196"
cache-control: max-age=3600
content-encoding: gzip
expires: Thu, 19 Jun 2025 11:38:59 GMT
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 442
cache: HIT
x-cached-since: 2025-06-21T09:57:17+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_69cc83dd1dd5aa09b7e969656389c84a.json
200 OK 137 kB URL GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_69cc83dd1dd5aa09b7e969656389c84a.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Size 137 kB (137443 bytes)
Hash f6771970e0e2f97c0ff4c08c9c563e23
e21c097962c4f2f9fa71b67fd72883c382c055e7
8b1d00467b7d4a097a747ec89b6568dc608857b17f8f63d54c855bbab6935e23
GET /genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_69cc83dd1dd5aa09b7e969656389c84a.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:39 GMT
content-type: application/json; charset=utf-8
traceparent: 00-a05fea921e110eef2b173d32ad956067-eb6bea941bcd7a43-01
last-modified: Tue, 17 Jun 2025 16:07:05 GMT
etag: W/"f6771970e0e2f97c0ff4c08c9c563e23"
cache-control: max-age=3600
content-encoding: gzip
expires: Tue, 17 Jun 2025 17:40:37 GMT
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1979
cache: HIT
x-cached-since: 2025-06-21T09:31:40+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2
200 OK 64 kB URL GET v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 63748, version 1.0
Hash 6887b6f24414dbc612dbf42ccdc76b70
8068d3abfbc6cbf35b55919da45b1f4d2d136238
fc5c015fc32518f1ed810fa84ca28941eb9d5a3c81acc8df69a4dbbeedef7b0c
GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:49 GMT
content-type: font/woff2
content-length: 63748
traceparent: 00-8d94f5c5be05a4244bfee05d594f157c-100c1448ade3e26f-01
last-modified: Wed, 14 Jun 2023 09:49:53 GMT
etag: "6887b6f24414dbc612dbf42ccdc76b70"
expires: Thu, 16 Jan 2025 10:32:14 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 2904
cache: HIT
x-cached-since: 2025-06-21T09:16:25+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtm.js?id=GTM-KFGPRJ2V
200 OK 343 kB URL GET www.googletagmanager.com/gtm.js?id=GTM-KFGPRJ2V
IP
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint79:AA:03:D4:F6:6B:0F:61:E5:C5:AB:19:F4:A5:5D:DC:97:80:AF:DA
ValidityMon, 02 Jun 2025 08:35:30 GMT - Mon, 25 Aug 2025 08:35:29 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (4828)
Size 343 kB (342644 bytes)
Hash d5d613d31b6d08de858d6446933b6b15
a763f1ab567dde8bdcfbf6118c9ad6f5ca5a7de1
de69e08d1d4e59308ff29a07e1f2deed93eb34b764900426e42da8ef676b9af5
GET /gtm.js?id=GTM-KFGPRJ2V HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-87523.bar/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 21 Jun 2025 10:04:50 GMT
expires: Sat, 21 Jun 2025 10:04:50 GMT
cache-control: private, max-age=900
last-modified: Sat, 21 Jun 2025 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1319:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1319:0
report-to: {"group":"ascgcycc:1319:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1319:0"}],}
server: Google Tag Manager
content-length: 119219
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET v3.traincdn.com/main-static/61792ac9/desktop/default/css/d3210503.css
200 OK 55 kB URL GET v3.traincdn.com/main-static/61792ac9/desktop/default/css/d3210503.css
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type ASCII text, with very long lines (55385), with no line terminators
Hash d81bf189b0a4a3890e996eace092254a
5fdbcfd7ac870bbdcb2ea397737d6c59b76f508d
03ea73cc169073d2b907b1d22d3a6bb653a689b1350e5ce245140ab9d2337238
GET /main-static/61792ac9/desktop/default/css/d3210503.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-87523.bar/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:38 GMT
content-type: text/css; charset=utf-8
traceparent: 00-ee56d444081ae2371d621e29880487a4-24f3685524717888-01
last-modified: Thu, 19 Jun 2025 12:35:31 GMT
etag: W/"d81bf189b0a4a3890e996eace092254a"
x-amz-meta-mtime: 1750336529.995595244
content-encoding: gzip
expires: Fri, 20 Jun 2025 13:08:35 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 75232
cache: HIT
x-cached-since: 2025-06-20T13:10:46+00:00
X-Firefox-Spdy: h2
POST 1xlite-87523.bar/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json
200 OK 23 B URL POST 1xlite-87523.bar/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json
IP
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerLet's Encrypt
Subject1xlite-87523.bar
FingerprintFC:01:CF:99:41:B9:66:76:A4:88:7F:BE:E1:BE:BC:A6:ED:9A:01:45
ValidityTue, 03 Jun 2025 08:57:07 GMT - Mon, 01 Sep 2025 08:57:06 GMT
Hash 3f22f9dcf28d2a91cd7c0a145548df90
e102cb9eed74188aeb34a3a3c047d7af5d4792a5
d93721d612916d654d068d3092f6531728ea964aa8d3c77bb9d1db70a67e9e7e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1
Host: 1xlite-87523.bar
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/en/block
Content-Type: application/json
X-Lang: en
X-Uuid: dc339247-a23a-468c-aa74-b76f586dcdc3
Content-Length: 48
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_22637c_%5B%5DMS%5B%5Dnull%5B%5DSmartCPM%5B%5D4991447_d28985_l18283_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_22637c_%5B%5DMS%5B%5Dnull%5B%5DSmartCPM%5B%5D4991447_d28985_l18283_clickunder; postback_watcher=; auid=W7rOa2hWg7V2u5ucAwmJAg==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:39 GMT
content-type: application/json
content-length: 23
x-dt: 285
x-time-ng: 0.001
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.077, wf-uht;dur=0.011
X-Firefox-Spdy: h2
GET v3.traincdn.com/main-static/61792ac9/desktop/default/Betting.Core-27e1268d.js
200 OK 2.0 kB URL GET v3.traincdn.com/main-static/61792ac9/desktop/default/Betting.Core-27e1268d.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (1978), with no line terminators
Hash 05df4d064aa615aa90a8c03804b1a8d4
243b47dad517a68ca94212b6fc25170f2326c8d3
e1e56dada08aacab84b50ed15c2cb9fda4b31101143780738e26a762357f470a
GET /main-static/61792ac9/desktop/default/Betting.Core-27e1268d.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-87523.bar/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:39 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-759bbd37fd2e91ddf9e33077c5a6352b-9fb57e96bb5de3c5-01
last-modified: Thu, 19 Jun 2025 12:35:31 GMT
etag: W/"05df4d064aa615aa90a8c03804b1a8d4"
x-amz-meta-mtime: 1750336529.983595205
content-encoding: gzip
expires: Fri, 20 Jun 2025 13:08:41 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 75231
cache: HIT
x-cached-since: 2025-06-20T13:10:48+00:00
X-Firefox-Spdy: h2
POST region1.analytics.google.com/g/collect?v=2&tid=G-7JGWL9SV66>m=45je56g1h2v897130004za200&_p=1750500290424&em=tv.1~em.ODS1igyfeIhzOTHENqwIfH1sb8t0oxg8FT6iY2YCmeo&_gaz=1&gcd=13l3lPl2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684204~104684207~104718208~104766476~104766478~104791498~104791500&cid=1932549972.1750500291&ecid=1399156223&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&ec_mode=a&_s=1&sid=1750500291&sct=1&seg=0&dl=https%3A%2F%2F1xlite-87523.bar%2Fen%2Fblock&dt=1xBet&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.optimize_id=GTM-5R4MT54&upn.ref_id=1&tfd=14245
204 No Content 0 B URL POST region1.analytics.google.com/g/collect?v=2&tid=G-7JGWL9SV66>m=45je56g1h2v897130004za200&_p=1750500290424&em=tv.1~em.ODS1igyfeIhzOTHENqwIfH1sb8t0oxg8FT6iY2YCmeo&_gaz=1&gcd=13l3lPl2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684204~104684207~104718208~104766476~104766478~104791498~104791500&cid=1932549972.1750500291&ecid=1399156223&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&ec_mode=a&_s=1&sid=1750500291&sct=1&seg=0&dl=https%3A%2F%2F1xlite-87523.bar%2Fen%2Fblock&dt=1xBet&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.optimize_id=GTM-5R4MT54&upn.ref_id=1&tfd=14245
IP
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint79:AA:03:D4:F6:6B:0F:61:E5:C5:AB:19:F4:A5:5D:DC:97:80:AF:DA
ValidityMon, 02 Jun 2025 08:35:30 GMT - Mon, 25 Aug 2025 08:35:29 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-7JGWL9SV66>m=45je56g1h2v897130004za200&_p=1750500290424&em=tv.1~em.ODS1igyfeIhzOTHENqwIfH1sb8t0oxg8FT6iY2YCmeo&_gaz=1&gcd=13l3lPl2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684204~104684207~104718208~104766476~104766478~104791498~104791500&cid=1932549972.1750500291&ecid=1399156223&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&ec_mode=a&_s=1&sid=1750500291&sct=1&seg=0&dl=https%3A%2F%2F1xlite-87523.bar%2Fen%2Fblock&dt=1xBet&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.optimize_id=GTM-5R4MT54&upn.ref_id=1&tfd=14245 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://1xlite-87523.bar
date: Sat, 21 Jun 2025 10:04:51 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:158:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:158:0
report-to: {"group":"ascnsrsggc:158:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:158:0"}],}
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_express_day/en/dictionary_9f79b57ae29734bf23bfd9d6d7833952.json
200 OK 1.2 kB URL GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_express_day/en/dictionary_9f79b57ae29734bf23bfd9d6d7833952.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash b1bc31ea28772d905bbd48fae35ed54d
4bd24ecf3af97fd3b8602c03fcd2c6cace295dad
96fe079aa8c9739c0b63ee0544b39ead14352757d2545735acc85d7017414f0f
GET /genfiles/web-app-v2/dictionary2/v3_express_day/en/dictionary_9f79b57ae29734bf23bfd9d6d7833952.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:39 GMT
content-type: application/json; charset=utf-8
traceparent: 00-b7d0d55026b2a9cfbabb3ee39b8f6f6d-ec08b4da80d6da53-01
last-modified: Wed, 18 Jun 2025 08:06:44 GMT
etag: W/"b1bc31ea28772d905bbd48fae35ed54d"
cache-control: max-age=3600
content-encoding: gzip
expires: Wed, 18 Jun 2025 09:20:44 GMT
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1165
cache: HIT
x-cached-since: 2025-06-21T09:45:14+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/shared-assets/__shared_popper_js_E2H7ZPXQ.js
200 OK 21 kB URL GET v3.traincdn.com/sys-static/shared-assets/__shared_popper_js_E2H7ZPXQ.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (21232)
Hash 3cf0cae38afae9add22f7884e5061231
2a41037501375a439385a76a047876619683418f
322482e3beae5a985d069beea981614510fda90a5df7295b776a324d461fc43d
GET /sys-static/shared-assets/__shared_popper_js_E2H7ZPXQ.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:40 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-113eea758c27959430501e56162ec75b-89e337a0e1267162-01
last-modified: Fri, 20 Jun 2025 14:13:24 GMT
etag: W/"3cf0cae38afae9add22f7884e5061231"
x-amz-meta-mtime: 1750428765.978144538
content-encoding: gzip
expires: Sun, 22 Jun 2025 09:08:26 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 3374
cache: HIT
x-cached-since: 2025-06-21T09:08:26+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/a1c3d1930127b405102a4616863435b5.json
200 OK 2.9 kB URL GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/a1c3d1930127b405102a4616863435b5.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash f9867cd5bf362d5d518027321410c262
c8152b1f17123f07b027c8ab359062dc5f7c1456
baa9a4f415e8e8b95c2269ac32d20c6850852d9973e47937440e2761a6d8ee65
GET /genfiles/cms/1-285/desktop/media_asset/a1c3d1930127b405102a4616863435b5.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-87523.bar/
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:40 GMT
content-type: application/json
traceparent: 00-004e24aabf7b4a3fa1cac5a090c6ad48-01e8f74cb07845e8-01
last-modified: Thu, 05 Jun 2025 12:29:20 GMT
etag: W/"f9867cd5bf362d5d518027321410c262"
content-encoding: gzip
expires: Thu, 05 Jun 2025 13:42:00 GMT
cache-control: max-age=3600
x-time-ng: 0.001
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 2
cache: HIT
x-cached-since: 2025-06-21T10:04:38+00:00
X-Firefox-Spdy: h2
GET radar.cedexis.com/1/23802/radar.js
302 Moved Temporarily 390 B URL GET radar.cedexis.com/1/23802/radar.js
IP
ASN #63911 NetActuate, Inc
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerDigiCert Inc
Subjectradar.cedexis.com
FingerprintA2:3E:30:19:D5:41:3A:11:81:58:E3:B1:6F:F4:D2:78:0B:44:6F:D0
ValidityFri, 07 Mar 2025 00:00:00 GMT - Fri, 06 Mar 2026 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/23802/radar.js HTTP/1.1
Host: radar.cedexis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-87523.bar/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Sat, 21 Jun 2025 10:04:50 GMT
Content-Type: text/html
Content-Length: 138
Connection: keep-alive
Location: /1707728419/stub.js
Expires: Sat, 21 Jun 2025 10:14:50 GMT
Cache-Control: max-age=600
Vary: User-Agent,DNT
GET v3.traincdn.com/sys-static/shared-assets/__shared_localforage_FJKG5M2E.js
200 OK 30 kB URL GET v3.traincdn.com/sys-static/shared-assets/__shared_localforage_FJKG5M2E.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (30255)
Hash 02cf95f00794b77df34632e34a59c5be
b64889fb6cbe78a141688ea761a627997ef8a8af
bf78b7b3dd6ecbdea04c575edfb6022ed1b2e98c7a9cb9f02ab851ca638f1b83
GET /sys-static/shared-assets/__shared_localforage_FJKG5M2E.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:40 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-56b1c8cda207d28119c4e7ebe0b2f53a-f6355ec2116bac7a-01
last-modified: Fri, 20 Jun 2025 14:13:24 GMT
etag: W/"02cf95f00794b77df34632e34a59c5be"
x-amz-meta-mtime: 1750428765.978144538
content-encoding: gzip
expires: Sun, 22 Jun 2025 08:09:04 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 6444
cache: HIT
x-cached-since: 2025-06-21T08:17:16+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/b5cd9a5e87d930de856c92da15aa121e.png
200 OK 653 B URL GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/b5cd9a5e87d930de856c92da15aa121e.png
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Hash e6f0766cbd95db33da44e7a9140648f2
5f196b1bfe8c3f92bd2ebcd67124e72e81ae6aaf
c0399d478788d5d483f104a2e8cb7c32f41cb40e9df0c22e831b2bfa2db63ec0
GET /genfiles/cms/1-285/desktop/media_asset/b5cd9a5e87d930de856c92da15aa121e.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-87523.bar/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:38 GMT
content-type: image/png
content-length: 653
traceparent: 00-2eaf2d0935323a4398562ff8b2d2d3a1-83fae6878d51f22f-01
last-modified: Wed, 26 Jun 2024 08:18:02 GMT
etag: "e6f0766cbd95db33da44e7a9140648f2"
expires: Thu, 16 Jan 2025 10:46:36 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1695
cache: HIT
x-cached-since: 2025-06-21T09:36:23+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/shared-assets/__shared_accept_language_parser_B6TW5FDZ.js
200 OK 1.3 kB URL GET v3.traincdn.com/sys-static/shared-assets/__shared_accept_language_parser_B6TW5FDZ.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (1265)
Hash e3f1c4089db6b910890e85d97a2e2066
85828920da3c3fd7856acde184e835ac314295cd
6c28afe5a52e0f9b1138fe498b254c8671058a058b555651ccae8e91e7534614
GET /sys-static/shared-assets/__shared_accept_language_parser_B6TW5FDZ.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:40 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-e51fcbe2364390b52cb51134c3cb3dff-0ab2dc0533e43cd0-01
last-modified: Fri, 20 Jun 2025 14:13:24 GMT
etag: W/"e3f1c4089db6b910890e85d97a2e2066"
x-amz-meta-mtime: 1750428765.962144752
content-encoding: gzip
expires: Sat, 21 Jun 2025 17:53:38 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 58262
cache: HIT
x-cached-since: 2025-06-20T17:53:38+00:00
X-Firefox-Spdy: h2
GET refpagertsf.top/L?tag=d_224327m_22637c_[]MS[]null[]SmartCPM[]4991447_d28985_l18283_clickunder&site=224327&ad=22637
303 See Other 274 kB URL User Request GET refpagertsf.top/L?tag=d_224327m_22637c_[]MS[]null[]SmartCPM[]4991447_d28985_l18283_clickunder&site=224327&ad=22637
IP
ASN #202492 Silverhill Group Holding Ltd
Certificate IssuerLet's Encrypt
Subjectrefpagertsf.top
FingerprintC3:E3:9E:EA:4B:F3:18:1A:41:39:2A:93:94:40:0B:5C:16:38:E9:5B
ValidityMon, 14 Apr 2025 05:23:15 GMT - Sun, 13 Jul 2025 05:23:14 GMT
Size 274 kB (273916 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /L?tag=d_224327m_22637c_[]MS[]null[]SmartCPM[]4991447_d28985_l18283_clickunder&site=224327&ad=22637 HTTP/1.1
Host: refpagertsf.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 303 See Other
server: nginx
date: Sat, 21 Jun 2025 10:04:37 GMT
location: https://1xlite-87523.bar:443/en?tag=d_224327m_22637c_[]MS[]null[]SmartCPM[]4991447_d28985_l18283_clickunder
set-cookie: A_22637_v=0; expires=Sun, 22 Jun 2025 10:04:37 GMT; path=/; secure
A_22637_c=1; expires=Sun, 22 Jun 2025 10:04:37 GMT; path=/; secure
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.010
X-Firefox-Spdy: h2
GET v3.traincdn.com/main-static/61792ac9/desktop/default/app-cd8079b5.js
200 OK 505 kB URL GET v3.traincdn.com/main-static/61792ac9/desktop/default/app-cd8079b5.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Size 505 kB (504916 bytes)
Hash 876917bb52b2a485ba55cbefb6ad83ac
b31f0410ae524edfcfddd7804885f29990857245
712de7eb9b77c503da829227b99bf078234473d2f214bf4302878f3830fd72b9
GET /main-static/61792ac9/desktop/default/app-cd8079b5.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-87523.bar/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:38 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-4df24ce789d3c5e324c636550515429b-c49f20017b3eea6c-01
last-modified: Thu, 19 Jun 2025 12:35:31 GMT
etag: W/"876917bb52b2a485ba55cbefb6ad83ac"
x-amz-meta-mtime: 1750336529.991595231
content-encoding: gzip
expires: Fri, 20 Jun 2025 13:08:37 GMT
cache-control: max-age=86400
x-time-ng: 0.003
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 75231
cache: HIT
x-cached-since: 2025-06-20T13:10:47+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/main-static/61792ac9/desktop/default/css/684d7545.css
200 OK 14 kB URL GET v3.traincdn.com/main-static/61792ac9/desktop/default/css/684d7545.css
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type ASCII text, with very long lines (14391), with no line terminators
Hash a552d5db890b7f16e370b33cc587e807
a9dc47737b3e1d8ef6fcbb48c7c0b026c6fda545
0d7e00204297499711ae1da574d4635b31d8238ab4a663b382c44d850d24f3ec
GET /main-static/61792ac9/desktop/default/css/684d7545.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-87523.bar/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:38 GMT
content-type: text/css; charset=utf-8
traceparent: 00-1d486ae049efb10e52dfbe1b4bbdd462-18ca78d8c906b2f2-01
last-modified: Thu, 19 Jun 2025 12:35:31 GMT
etag: W/"a552d5db890b7f16e370b33cc587e807"
x-amz-meta-mtime: 1750336529.991595231
content-encoding: gzip
expires: Fri, 20 Jun 2025 13:08:35 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 75232
cache: HIT
x-cached-since: 2025-06-20T13:10:46+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/6293f1a8ca.css
200 OK 650 B URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/6293f1a8ca.css
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type ASCII text, with very long lines (649)
Hash 5d70ac7829c3ae41ce5c0971c798fbcf
9996ce3a09f56d3e37d67fbe7e1efb301ea2f261
0e76b1cd191bd618caea37cb7fb6673d12c7cdff7ea47e939758eda5764a140b
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/6293f1a8ca.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-87523.bar/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:38 GMT
content-type: text/css; charset=utf-8
content-length: 650
traceparent: 00-51bf3964da28493a9e89bd5212f9ef47-38e90a4c64359d41-01
last-modified: Wed, 18 Jun 2025 13:47:10 GMT
etag: "5d70ac7829c3ae41ce5c0971c798fbcf"
x-amz-meta-mtime: 1750254148.956234791
expires: Fri, 20 Jun 2025 09:44:36 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 842
cache: HIT
x-cached-since: 2025-06-21T09:50:36+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET v3.traincdn.com/main-static/61792ac9/desktop/default/vendors/app-b161080e.js
200 OK 1.4 MB URL GET v3.traincdn.com/main-static/61792ac9/desktop/default/vendors/app-b161080e.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (64056)
Size 1.4 MB (1405611 bytes)
Hash 59800506d8ed60811509c8061d8c8583
5e3d13ec4764ffab0ec0f7a7f7ff1590e6158455
10c5554c33de58fc57b64609c0846dc3b73fd2b68f228fd9ad0b1f5d63a346da
GET /main-static/61792ac9/desktop/default/vendors/app-b161080e.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-87523.bar/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:38 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-bc57e99a8961ece8040ddac30d5d3042-b04707a736ea5e2e-01
last-modified: Thu, 19 Jun 2025 12:35:31 GMT
etag: W/"59800506d8ed60811509c8061d8c8583"
x-amz-meta-mtime: 1750336530.00359527
content-encoding: gzip
expires: Fri, 20 Jun 2025 13:08:37 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 75231
cache: HIT
x-cached-since: 2025-06-20T13:10:47+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-ui/3.3.258/Desktop/Default/merged.css
200 OK 926 kB URL GET v3.traincdn.com/sys-ui/3.3.258/Desktop/Default/merged.css
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 926 kB (926140 bytes)
Hash 071a333ba6c66187587416c578292b0f
d60a98f6affa7910df2dd867985d7d0659f548f9
5d9c85dc8f9473cb1f291b0e238cc0d7ae41ba688d5dcc3eddb8bda2ae4cafc4
GET /sys-ui/3.3.258/Desktop/Default/merged.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-87523.bar/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:38 GMT
content-type: text/css; charset=utf-8
traceparent: 00-5d7435582fa99c587781938d5e856457-cfdd711233bfa716-01
last-modified: Fri, 20 Jun 2025 13:53:43 GMT
etag: W/"071a333ba6c66187587416c578292b0f"
x-amz-meta-mtime: 1750427582.737916907
content-encoding: gzip
expires: Sat, 21 Jun 2025 13:59:00 GMT
cache-control: max-age=86400
x-time-ng: 0.003
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 72331
cache: HIT
x-cached-since: 2025-06-20T13:59:07+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/shared-assets/__shared_vue_deps_DYMTJONH.js
200 OK 19 kB URL GET v3.traincdn.com/sys-static/shared-assets/__shared_vue_deps_DYMTJONH.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (19034)
Hash 1580a3cfe81fd30910a49dfe64cc8e7b
314144dc49595482ba46c0b85b38d5f73ef73a7b
8989a021d20f0fc08c43966a287cbd99e43142a5a0ff42eb232756a101de6035
GET /sys-static/shared-assets/__shared_vue_deps_DYMTJONH.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-87523.bar
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:40 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-b7b4149dce0a4e37a16ac9ffe1ec2c99-84e4c5cb036b7238-01
last-modified: Fri, 20 Jun 2025 14:13:24 GMT
etag: W/"1580a3cfe81fd30910a49dfe64cc8e7b"
x-amz-meta-mtime: 1750428765.978144538
content-encoding: gzip
expires: Sat, 21 Jun 2025 19:04:31 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 54009
cache: HIT
x-cached-since: 2025-06-20T19:04:31+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/main-static/61792ac9/desktop/default/vendors/plugins.v-tooltip-19a74e7d.js
200 OK 77 kB URL GET v3.traincdn.com/main-static/61792ac9/desktop/default/vendors/plugins.v-tooltip-19a74e7d.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-87523.bar/en/block
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65476)
Hash fa1e03b13da82d855a5e808376231ce2
0ee034839962803578266cbec3009100a0ebec46
4777d3418e37ffbaee26e5371e815755110def6987a7d178e4cc79df42922c59
GET /main-static/61792ac9/desktop/default/vendors/plugins.v-tooltip-19a74e7d.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-87523.bar/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 21 Jun 2025 10:04:39 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-c590baf503f6c117cac74c06fba893de-320da2eb73dd0292-01
last-modified: Thu, 19 Jun 2025 12:35:31 GMT
etag: W/"fa1e03b13da82d855a5e808376231ce2"
x-amz-meta-mtime: 1750336530.007595283
content-encoding: gzip
expires: Fri, 20 Jun 2025 13:08:38 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 75232
cache: HIT
x-cached-since: 2025-06-20T13:10:47+00:00
X-Firefox-Spdy: h2
83.147.204.179
216.239.32.36
185.244.209.62
0.0.0.0