{"report_id":"2ffe18cb-73fd-4661-b152-6dcadbf076dc","version":6,"status":"done","tags":[],"date":"2026-04-05T03:37:48Z","url":{"schema":"http","addr":"1xlite-62368.bar/en/slots?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","fqdn":"1xlite-62368.bar","domain":"1xlite-62368.bar","tld":"bar"},"ip":{"addr":"46.32.182.61","port":0,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"final":{"url":{"schema":"https","addr":"1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","fqdn":"1xlite-62368.bar","domain":"1xlite-62368.bar","tld":"bar"},"title":"1xBet","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"1xlite-62368.bar/en/slots?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","fqdn":"1xlite-62368.bar","domain":"1xlite-62368.bar","tld":"bar"},"ip":{"addr":"46.32.182.61","port":0,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-10T03:37:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-29T22:23:59.734728Z","alert_count":0,"request_count":1,"received_data":547108,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"1xlite-62368.bar","ip":{"addr":"46.32.182.61","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"domain_registered":"2025-09-08","domain_rank":0,"first_seen":"2026-04-05T03:37:51.550982Z","last_seen":"2026-04-05T03:37:51.550982Z","alert_count":0,"request_count":12,"received_data":69850,"sent_data":10699,"comment":"","tags":null,"fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"v3.traincdn.com","ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"domain_registered":"2022-11-10","domain_rank":256434,"first_seen":"2022-11-25T10:00:40Z","last_seen":"2026-04-02T01:09:54.173497Z","alert_count":0,"request_count":28,"received_data":3073531,"sent_data":14104,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-03-29T22:38:33.043374Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":668,"comment":"","tags":null,"fingerprints":null},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2026-03-29T22:39:16.612532Z","alert_count":0,"request_count":2,"received_data":1700,"sent_data":2328,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","fqdn":"1xlite-62368.bar","domain":"1xlite-62368.bar","tld":"bar"},"ip":{"addr":"46.32.182.61","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"b40cfdbba2b464c099f560e88e72d28c","sha1":"b359e4c600ffb2e6bcf24c85752aae4a8e3c1411","sha256":"731c6568ad0f1b9b56fdfa2b26af24386ef1c063368b6b3e2cd505ce491e93f3","sha512":"7bd90c4a39ac99392191f97b400def9a7925e402c2c336d2cedb90b736da5d2e9fec4e73dd47ed54c28ba5bebe0345a89af5f88db818817d55ebb21e47df29b9","ssdeep":"","tlshash":"1521842a1b1c8733495890aed162b3d385f2616b3501c46cd47d8c13a92f7c36ecd8d3","size":1237,"data":"","first_seen":"2026-04-02T10:53:01.725819Z","last_seen":"2026-04-06T22:26:10.96745Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","fqdn":"1xlite-62368.bar","domain":"1xlite-62368.bar","tld":"bar"},"ip":{"addr":"46.32.182.61","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"dafb343aac3fe5ca646b209532d36997","sha1":"53e7e61d359e4302e8a8a993ef87941addbdcd3a","sha256":"27054e18281f5b986021cef8efafab9b9fbf6b6dc64a0027cca8bbb3050dc6d4","sha512":"2431a1f17b00f26dd58d329f3c4bcd32aeacc95ece9d1ac6086772ba90aa32700431daabebc5431f41654b2018b3bb9638215e2c0953c16188a17ccc8673c125","ssdeep":"","tlshash":"f6e0cd969519f61b5c33681d896c8b0f95c97e75500d795dc034855c3a53456106723a","size":308,"data":"","first_seen":"2025-12-10T10:19:59.465768Z","last_seen":"2026-05-19T09:54:34.325552Z","times_seen":1816,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","fqdn":"1xlite-62368.bar","domain":"1xlite-62368.bar","tld":"bar"},"ip":{"addr":"46.32.182.61","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"1df90b63cd87136babac18cd4e1e120e","sha1":"b398a881c9c9a0db7a50f76d0d5150ff7166311e","sha256":"affcaa29f182e808194c1614e2c14979f63dcd48ed6ba906a8fd10f1a31b5789","sha512":"3786bb1e1a07a69b4c1eb0b40605ed1c9d8df8bb967c36c144b466408633e2eaae05c455624ca3f2da831e9dfc36743a540c1cd851c39e9262e70f3db16abe34","ssdeep":"","tlshash":"c46000200000002800a0280022222a002288800000000a000080820a28aa0030800080","size":15,"data":"","first_seen":"2026-03-12T22:10:14.591684Z","last_seen":"2026-05-20T16:41:50.789987Z","times_seen":1386,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","fqdn":"1xlite-62368.bar","domain":"1xlite-62368.bar","tld":"bar"},"ip":{"addr":"46.32.182.61","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"59289a7d3c682afeda99d19d08290f44","sha1":"ba1df9803840fbf5dceb730c497093f2072f4771","sha256":"dc710af703fb953c960594df77288b3c8e69ffa43acfb8ea93b9f60e381fa4b9","sha512":"a9a142eedb6ce6b534d4204d5aeac488ed9ae8b5bfab7fcd196dd616a8b5cd2cec67c8da230a2a12df49133803c8f4d7bdf2642eec913757ff581ccbab91eca5","ssdeep":"","tlshash":"0d01701f82551dbf22015d04cb03d618b7cc21a672db6150d1780e69678f7d7bd199e4","size":708,"data":"","first_seen":"2026-04-05T03:37:54.6723Z","last_seen":"2026-05-18T08:36:32.947338Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/$_$.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"0f52fc8c693ecafc1d77320a696ce65b","sha1":"5d5d9a13c7a17a19b0295cdc8bd3594117fe0a29","sha256":"a77313a1c518701af1f3c36dda4ab891bd2fc7c2d32025ae8ac66c7b97a3770a","sha512":"f1ce1fb5b8b1b49a30bb0950422a5c1762d72301befe8a6c51bc8af716e1148c7438bc9c9cd8a76e6ff89281c1e01a4391fc7777d03da8b07b8918d597b50d0a","ssdeep":"","tlshash":"ed900253565df52c30a004050695d64732953d6a2417712221b05109e60154a4417277","size":57,"data":"","first_seen":"2026-03-18T19:53:45.72592Z","last_seen":"2026-05-19T09:54:34.316022Z","times_seen":1235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/1a634a40a0.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f5905c39db622c030a1281d94f6474d","sha1":"c4f79cb6feb26eafb50b47d32189255200d0e2e8","sha256":"a14dfcdd16cebb17e22f1c6a876d48d5064e30a1beefca6e3af9d8407056470a","sha512":"2a94e4bfe231198091906732a31fe18e0e5e352c07e7ee51666b382e1b3f257b933fb90f147f70c5e2edc9263a4c4151a0b53b7a4860b2aeac1f3969f79014e9","ssdeep":"","tlshash":"e371b86f1ef834bc61290f9a6f5358e00da88d23d35cd4b3ea464f38073a055a63a5a6","size":3823,"data":"","first_seen":"2026-04-02T10:53:01.704029Z","last_seen":"2026-04-06T22:26:10.946777Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_base-app_ba7fe38e5c.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"32a164d4bd3124519eead43580a2bad3","sha1":"5106fad542a8fc1aed03b07f33cb3a705baaed0d","sha256":"2916966c2e52a256d057af3c804c376246453d3907e170a06fad90aaa266141c","sha512":"7c873dfea01ec12524d60e5b68649bca3db37f522a183a979bf7964d11427791f9f64f075a60a9dd29725a011707870286941ddb75af86981f50af3aa151f9d6","ssdeep":"49152:TIHHA3ZqBDb1wk8iEj2OBzW2O2/E0mslyymg99g:JF1lO","tlshash":"6c858d95f285bc3b1fdb5ad7a0330005a2ad196cc418f490f5dae9e93ade484916fb3c","size":1749290,"data":"","first_seen":"2026-04-02T10:10:00.225488Z","last_seen":"2026-04-07T01:13:26.825725Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/entry-656814443e.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"a96b662c595da14a4422c3857f88d297","sha1":"91ba2b4755d485d620e5a15c98e7c91004b66ab8","sha256":"b6d5629c687be6e4616df79a314eb2ca263cc6484944a1057c03e56be4d61500","sha512":"b628352aba5f14dfebd23af1baef02dd15faa5552c687bea7cd44f0f95be9a3f1290258a53d1bbea627e17255b4472df346326f730350fd9b5dc42af18148b7d","ssdeep":"384:HMGYISxxQaa0Tsuwm/IuSVr4LcD7Kj7w/A7GZGG/DE0zTAxV5V1LwYVcacBkbZMk:HbVf0TsNm/cVr4LcD7Kj7w/yGQG/D9zC","tlshash":"8da23078219cf0b531cb449537f6bc5266886d1ff98afc8a4097c8cc17da04cc9227ae","size":21797,"data":"","first_seen":"2026-04-02T10:53:01.708656Z","last_seen":"2026-04-06T22:26:10.951406Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/34aa11bd8b.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"cece870d542055a0539d33c52080090f","sha1":"b9555682c4125fcb6b9d99e2968091c22a58d966","sha256":"dfc8a7e09c6934f0ab3006a55cfa36bbf71256947bf5e6e4da9c1012d4793915","sha512":"91d2c63f0f31582a5cdfd717fd22af2151a6c0debc0502bad05657b452da5ba93f06d6b7ac0cb9c20735dbd1e985d050c4efb11279c1f13f1a7b471ab0d4ab86","ssdeep":"","tlshash":"762163be5db4e034a7501aee7d25253243c93d93854a90976acc839503a70285e39fbb","size":1178,"data":"","first_seen":"2026-04-02T10:53:01.721776Z","last_seen":"2026-04-06T22:26:10.942866Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/3f3149b85e.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"1aa4a56ea782d8a4bc9e6ba73be77404","sha1":"fefb2f5a4a22d143631150f8cd218d156e8a12e2","sha256":"0b04da4aa59252194ecf06cba9ccce6bbbf33b7280531b15b474632a538007b0","sha512":"7d27ced3b891b79ae53ced3129e0b980c93c39bae70097074936c710978d18991cbeabec5af4651a2ca96ebf3648ebc482ece5c0fabbed74b8e9c122aba78774","ssdeep":"","tlshash":"537166466c78b5f6bb0781983d1304f0cb0fac2be05449eae6b4cbbc129d5952532f57","size":3677,"data":"","first_seen":"2026-04-02T10:53:01.701642Z","last_seen":"2026-04-06T22:26:10.954486Z","times_seen":94,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/90c3324d97.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"8f3b6ab4c5e9b95b4c2bb06978de155d","sha1":"6583cb92a1d263950e82eb05a6ce0d2a8be50119","sha256":"2ae0de8ad51a1385a6fd12b8a850f45d17fa8d01e23bcce251085c27396ffe5f","sha512":"1a019dd6d0b750ffe39610f1d455eb23b394b5ce6954cf86b0aac80c801343a26526ec62ebfdd351af6a3e374398cc47756c64995be684d3a3b0e78df41a6df4","ssdeep":"192:FhUzBlcd6BMvXcdfSW17leXqOsc8uALOCJexCePmtbJtdytT:HUzBlcduMPcdfSW17leJfpAL9Je5PmtQ","tlshash":"2af11bd439f870b3676383dd7c224071872c5a46a18c58e6f9f84f6c019e68c997bb63","size":7781,"data":"","first_seen":"2026-04-02T10:53:01.724013Z","last_seen":"2026-04-06T22:26:10.957135Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"490c217ac8ec71dfced39781d336484a","sha1":"8eb8531d502929c862f7417ea2b40427c8a4ecab","sha256":"b2d7fc4e414eefba567cd0d6f947c0cadc6c7d356629bef4f432c75180ef57a0","sha512":"7f2cf9c31aa7ae044b18d80709caba42681dee7e5497bb091f35d1cf1f3e2c5b1c71b1cdec029ef47a339178b2976bc597323ae1a02eef6c914e6a3256342e8c","ssdeep":"6144:H/3eqQGznr8DP9EGb/F8x/aGW+/5EiWl6powAL8FftB:tzr8KGbt8U48e","tlshash":"d1c41acfb3d67426529af478943f01cfa97b25e2b49cc8aab099cce01d3454a4167f78","size":546502,"data":"","first_seen":"2026-04-04T22:03:35.123695Z","last_seen":"2026-04-05T05:45:52.127935Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:34.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:36:38 GMT","end":"Mon, 08 Jun 2026 08:36:37 GMT"},"fingerprint":{"sha1":"8B:73:AE:59:60:F4:D1:86:E6:25:8C:8F:1E:F7:92:DD:D3:8C:F0:DA","sha256":"F6:EA:BC:29:37:15:42:CF:41:13:28:BA:F3:C5:86:88:DD:C6:3F:81:75:10:45:14:D6:EC:E6:F0:E6:B6:B1:04"}}},"request":{"raw":"GET /gtag/js?id=G-7JGWL9SV66 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62368.bar/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ndate: Sun, 05 Apr 2026 03:36:34 GMT\r\nexpires: Sun, 05 Apr 2026 03:36:34 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 176552\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":546502,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12571)","md5":"490c217ac8ec71dfced39781d336484a","sha1":"8eb8531d502929c862f7417ea2b40427c8a4ecab","sha256":"b2d7fc4e414eefba567cd0d6f947c0cadc6c7d356629bef4f432c75180ef57a0","sha512":"7f2cf9c31aa7ae044b18d80709caba42681dee7e5497bb091f35d1cf1f3e2c5b1c71b1cdec029ef47a339178b2976bc597323ae1a02eef6c914e6a3256342e8c","ssdeep":"6144:H/3eqQGznr8DP9EGb/F8x/aGW+/5EiWl6powAL8FftB:tzr8KGbt8U48e","tlshash":"d1c41acfb3d67426529af478943f01cfa97b25e2b49cc8aab099cce01d3454a4167f78","first_seen":"2026-04-04T22:03:35.123695Z","last_seen":"2026-04-05T05:45:52.127935Z","times_seen":8,"resource_available":true,"data":null}},"time_used":434,"timings":{"blocked":110,"dns":0,"connect":29,"send":0,"wait":125,"receive":89,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62368.bar/analytics-module-api/v1/analytics?projectId=1014\u0026domain=1xlite-62368.bar","fqdn":"1xlite-62368.bar","domain":"1xlite-62368.bar","tld":"bar"},"ip":{"addr":"46.32.182.61","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:23.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-62368.bar","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 05:20:34 GMT","end":"Sun, 10 May 2026 05:20:33 GMT"},"fingerprint":{"sha1":"9A:39:22:8C:82:87:41:5E:04:0C:96:F8:41:43:C7:34:FD:D6:94:C3","sha256":"AD:69:DC:D4:60:D9:51:19:AB:B9:EA:C2:2D:D9:CC:CF:A9:BA:84:8B:24:E2:D6:1A:9A:2C:59:67:4E:8B:3F:28"}}},"request":{"raw":"GET /analytics-module-api/v1/analytics?projectId=1014\u0026domain=1xlite-62368.bar HTTP/1.1\r\nHost: 1xlite-62368.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nis-srv: false\r\nx-svc-source: __TECHNICAL_PAGES_APP__\r\nx-app-n: __TECHNICAL_PAGES_APP__\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=LiC2PWnR2LazrmlLA4SxAg==; lng=en; cookies_agree_type=3; tzo=3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sun, 05 Apr 2026 03:36:23 GMT\r\ncontent-type: application/json\r\ncontent-length: 108\r\nx-request-id: b2aa40dfa7690eb96147596eb7a95414\r\nx-request-guid: b2aa40dfa7690eb96147596eb7a95414\r\nx-server-name: Analytics\r\ncache-control: public, max-age=300, stale-while-revalidate=60\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: p;dur=0, wf-uht;dur=0.009\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":108,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3d150c60af1fe16e66697c15f244bae5","sha1":"12b093bcf7932e44ad0da4ac77e85824a7f5a594","sha256":"462b28e791a8dfaef9d760c52c712443f8691ddc23a13076b262645fbb65d047","sha512":"67c654c2dfb4b7df1fc1ca1afafa3edcbcd54b2463456a0c531f9f037d3a34bed192f1278051727b28ec735083ee46c605a6b4e039a18db33c1bcb161a02b11f","ssdeep":"","tlshash":"60b0920292426abc9482a6a4a14a6e2a129594364c6251964564a736e1ba8ac5010f6b","first_seen":"2026-04-03T14:36:34.6072Z","last_seen":"2026-05-20T05:38:14.652766Z","times_seen":80,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/34aa11bd8b.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:24.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/34aa11bd8b.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-62368.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 05 Apr 2026 03:36:24 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-ed8ae29ee01a1859fa8b92140e4d661f-1b7d1c7204c77148-01\r\nlast-modified: Thu, 02 Apr 2026 12:16:26 GMT\r\netag: W/\"cece870d542055a0539d33c52080090f\"\r\nx-amz-meta-mtime: 1775132137.894719682\r\ncontent-encoding: gzip\r\nexpires: Sat, 04 Apr 2026 09:52:55 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc20\r\nage: 63542\r\ncache: HIT\r\nx-cached-since: 2026-04-04T09:57:22+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1178,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1177)","md5":"cece870d542055a0539d33c52080090f","sha1":"b9555682c4125fcb6b9d99e2968091c22a58d966","sha256":"dfc8a7e09c6934f0ab3006a55cfa36bbf71256947bf5e6e4da9c1012d4793915","sha512":"91d2c63f0f31582a5cdfd717fd22af2151a6c0debc0502bad05657b452da5ba93f06d6b7ac0cb9c20735dbd1e985d050c4efb11279c1f13f1a7b471ab0d4ab86","ssdeep":"","tlshash":"762163be5db4e034a7501aee7d25253243c93d93854a90976acc839503a70285e39fbb","first_seen":"2026-04-02T10:53:01.721776Z","last_seen":"2026-04-06T22:26:10.942866Z","times_seen":95,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62368.bar/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-62368.bar","domain":"1xlite-62368.bar","tld":"bar"},"ip":{"addr":"46.32.182.61","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:24.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-62368.bar","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 05:20:34 GMT","end":"Sun, 10 May 2026 05:20:33 GMT"},"fingerprint":{"sha1":"9A:39:22:8C:82:87:41:5E:04:0C:96:F8:41:43:C7:34:FD:D6:94:C3","sha256":"AD:69:DC:D4:60:D9:51:19:AB:B9:EA:C2:2D:D9:CC:CF:A9:BA:84:8B:24:E2:D6:1A:9A:2C:59:67:4E:8B:3F:28"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-62368.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nContent-Length: 48\r\nOrigin: https://1xlite-62368.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=LiC2PWnR2LazrmlLA4SxAg==; lng=en; cookies_agree_type=3; tzo=3; is12h=0; window_width=1920; fatman_uuid=070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":48,"data":"{\"w\":55,\"sw\":1280,\"sh\":1024,\"e\":10273,\"sids\":[]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sun, 05 Apr 2026 03:36:24 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\nvary: origin, access-control-request-method, access-control-request-headers\r\nx-dt: 1014\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.008, wf-uht;dur=0.010\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c4c2a4361438e1be4c7eec9f8a1c2625","sha1":"2feab37e5b71af32a071956da3abb72182ab5e14","sha256":"7c69aee19880607082d45ba170323f142861237a7885379300b2a49cb5583612","sha512":"eddf65c50568484c9bcf8878e44bcfbbfdedb44c5340e9695ef3350a4f257913521b4d8cb6129b0f69a16e9dda6365391ddd78dfde6cb2e20564da7d21cc761f","ssdeep":"","tlshash":"937000080200000300000b080a820ac000a8aa028cc0323082a20880200c8e0220e082","first_seen":"2026-04-05T03:37:54.645692Z","last_seen":"2026-04-05T03:37:54.645692Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-7JGWL9SV66\u0026cid=1377176804.1775360195\u0026gtm=45je6411v897130004za200zd897130004\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=0~115938465~115938469~116991817~118328143~118398309\u0026z=103917012","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:35.052Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:41:31 GMT","end":"Mon, 08 Jun 2026 08:41:30 GMT"},"fingerprint":{"sha1":"4E:8A:1C:89:CB:03:F7:36:49:8B:A8:F0:C1:8E:63:7B:C5:A5:B1:BC","sha256":"CC:B7:3C:DE:C7:63:CD:0E:81:CD:4D:B9:94:50:24:F5:34:6B:3F:F4:8E:95:53:E2:21:C7:46:7F:37:B9:37:D7"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-7JGWL9SV66\u0026cid=1377176804.1775360195\u0026gtm=45je6411v897130004za200zd897130004\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=0~115938465~115938469~116991817~118328143~118398309\u0026z=103917012 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62368.bar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 05 Apr 2026 03:36:35 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-05-21T17:23:15.035237Z","times_seen":903530,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":106,"dns":1,"connect":15,"send":0,"wait":36,"receive":0,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62368.bar/bff-api/config/group/get?groups=b.core,d.core\u0026lang=en","fqdn":"1xlite-62368.bar","domain":"1xlite-62368.bar","tld":"bar"},"ip":{"addr":"46.32.182.61","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:23.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-62368.bar","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 05:20:34 GMT","end":"Sun, 10 May 2026 05:20:33 GMT"},"fingerprint":{"sha1":"9A:39:22:8C:82:87:41:5E:04:0C:96:F8:41:43:C7:34:FD:D6:94:C3","sha256":"AD:69:DC:D4:60:D9:51:19:AB:B9:EA:C2:2D:D9:CC:CF:A9:BA:84:8B:24:E2:D6:1A:9A:2C:59:67:4E:8B:3F:28"}}},"request":{"raw":"GET /bff-api/config/group/get?groups=b.core,d.core\u0026lang=en HTTP/1.1\r\nHost: 1xlite-62368.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nis-srv: false\r\nx-svc-source: __TECHNICAL_PAGES_APP__\r\nx-app-n: __TECHNICAL_PAGES_APP__\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=LiC2PWnR2LazrmlLA4SxAg==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sun, 05 Apr 2026 03:36:23 GMT\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ncontent-encoding: br\r\nserver-timing: dt_total;dur=0.123, bff;dur=85.59, wf-uht;dur=0.114\r\nvary: Accept-Encoding\r\nx-dt: 1014\r\nx-pod: R-trgpb\r\nx-time-ng: 0.093\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50568,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8d01e3572c7d1b92382358ea45a9ed76","sha1":"8ae92032b9c0495b86187b9ba302fa1c2035e41d","sha256":"243f91684af0bfcc1f58fccedae0f91faa90e05b618389cb5e27c72f834e58e7","sha512":"0350bed1e3060134a06a6f06e063234bbb9093d65e069fc47e2ca56de3f1fc05a9cd68367aad4c1e955ca87d206e97f93cf09e6ad388eb75676f564251aab460","ssdeep":"1536:6aV/cawIAnzfxA6cJrMCzpR+0ggWH3c76:6aKX5cJ4ARAM76","tlshash":"c233fe4e79d45a36011f1afacc63ed0e52ec0f1b1893e45659e3bd9a28b2a6444f243f","first_seen":"2026-04-05T03:37:54.64746Z","last_seen":"2026-04-05T03:37:54.64746Z","times_seen":1,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62368.bar/favicon.ico","fqdn":"1xlite-62368.bar","domain":"1xlite-62368.bar","tld":"bar"},"ip":{"addr":"46.32.182.61","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:23.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-62368.bar","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 05:20:34 GMT","end":"Sun, 10 May 2026 05:20:33 GMT"},"fingerprint":{"sha1":"9A:39:22:8C:82:87:41:5E:04:0C:96:F8:41:43:C7:34:FD:D6:94:C3","sha256":"AD:69:DC:D4:60:D9:51:19:AB:B9:EA:C2:2D:D9:CC:CF:A9:BA:84:8B:24:E2:D6:1A:9A:2C:59:67:4E:8B:3F:28"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 1xlite-62368.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=LiC2PWnR2LazrmlLA4SxAg==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Sun, 05 Apr 2026 03:36:23 GMT\r\ncontent-length: 0\r\nlocation: /en/block\r\nset-cookie: gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; Path=/; Expires=Wed, 08 Apr 2026 03:36:23 GMT; Secure\r\nx-dt: 1014\r\nx-gw-blk-redirect-reason: block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.006, wf-uht;dur=0.009\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":2837,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-21T17:23:37.112312Z","times_seen":15507115,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62368.bar/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json","fqdn":"1xlite-62368.bar","domain":"1xlite-62368.bar","tld":"bar"},"ip":{"addr":"46.32.182.61","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:24.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-62368.bar","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 05:20:34 GMT","end":"Sun, 10 May 2026 05:20:33 GMT"},"fingerprint":{"sha1":"9A:39:22:8C:82:87:41:5E:04:0C:96:F8:41:43:C7:34:FD:D6:94:C3","sha256":"AD:69:DC:D4:60:D9:51:19:AB:B9:EA:C2:2D:D9:CC:CF:A9:BA:84:8B:24:E2:D6:1A:9A:2C:59:67:4E:8B:3F:28"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json HTTP/1.1\r\nHost: 1xlite-62368.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nContent-Length: 19\r\nOrigin: https://1xlite-62368.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=LiC2PWnR2LazrmlLA4SxAg==; lng=en; cookies_agree_type=3; tzo=3; is12h=0; window_width=1920; fatman_uuid=070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":19,"data":"{\"w\":55,\"state\":[]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sun, 05 Apr 2026 03:36:24 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nx-dt: 1014\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.111, wf-uht;dur=0.010\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-05-21T16:28:39.476757Z","times_seen":278253,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/b32e769ac643e36c5b8e0a591fa9ca66.png","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:24.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/b32e769ac643e36c5b8e0a591fa9ca66.png HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62368.bar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 05 Apr 2026 03:36:24 GMT\r\ncontent-type: image/png\r\ncontent-length: 1639\r\ntraceparent: 00-130a1e125865cea5a342fe7e5682ada1-cb6d2fa8c7f6dc16-01\r\nlast-modified: Fri, 03 Apr 2026 12:45:46 GMT\r\netag: \"59c932e37c7f74f387fdbc66d9156cab\"\r\nexpires: Fri, 03 Apr 2026 13:49:00 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc16\r\nage: 2680\r\ncache: HIT\r\nx-cached-since: 2026-04-05T02:51:44+00:00\r\naccept-ranges: bytes\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1639,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"59c932e37c7f74f387fdbc66d9156cab","sha1":"7c647b9e10d3a3e66f3d33751d6dc1991a804dd4","sha256":"b7fbed6348eacea673ea7891f11f00614ae380623f44d62c5fedc54371cacb87","sha512":"999cc553ea445e76c1d82271551b1b250e8e00482008e3b053570cbcc2eb2a5fa9fe65ee43c4649a5648ad418c3a810eefadbb33c6cdd3d119781fb90ad212b1","ssdeep":"","tlshash":"f631ea47f69dbe1d8cb1f922c55c1a06ecf9844c4141e1937ab541bdd7409426ce3661","first_seen":"2026-04-03T13:20:04.571941Z","last_seen":"2026-04-06T05:49:01.311115Z","times_seen":79,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-ui/3.3.649/Desktop/Default/client.l.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:23.897Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-ui/3.3.649/Desktop/Default/client.l.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62368.bar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 05 Apr 2026 03:36:23 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-1a044b921c283553a68ee4a5f183ae5b-ce6c51dd8433141a-01\r\nlast-modified: Thu, 26 Mar 2026 09:26:38 GMT\r\netag: W/\"8ab7d26758f09010fd37cc8e066c0878\"\r\nx-amz-meta-mtime: 1774517195.828887086\r\ncontent-encoding: gzip\r\nexpires: Fri, 03 Apr 2026 09:48:16 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc21\r\nage: 64017\r\ncache: HIT\r\nx-cached-since: 2026-04-04T09:49:26+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":600963,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (26001)","md5":"8ab7d26758f09010fd37cc8e066c0878","sha1":"5a4abf56c95c002ddf9e17db9399f31fa7613850","sha256":"f5ff22fac0bb8d4f1e28edc9e1e7761288e05db8aa39d01226a76f5d9627d7c4","sha512":"0ee73d68e203eb6c241f620bef23d4f6e3670e48d4fe7df61070947e9b24ab68f50cd41a0628365d7326375ad20c25695b9edf65e2a807e72fd6a0f25eb7a2f5","ssdeep":"12288:/Mq4dAD0AvVSPjnZuSLzeHDptQ3L9KrGcwqxB:+dAD0A8PjgFxB","tlshash":"86d4941df59dd1393e37e92142989efc2630b347df22195ff05902890ec369361a6eab","first_seen":"2026-04-02T10:10:00.219862Z","last_seen":"2026-04-19T13:42:33.494311Z","times_seen":182,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62368.bar/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/fc","fqdn":"1xlite-62368.bar","domain":"1xlite-62368.bar","tld":"bar"},"ip":{"addr":"46.32.182.61","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:24.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-62368.bar","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 05:20:34 GMT","end":"Sun, 10 May 2026 05:20:33 GMT"},"fingerprint":{"sha1":"9A:39:22:8C:82:87:41:5E:04:0C:96:F8:41:43:C7:34:FD:D6:94:C3","sha256":"AD:69:DC:D4:60:D9:51:19:AB:B9:EA:C2:2D:D9:CC:CF:A9:BA:84:8B:24:E2:D6:1A:9A:2C:59:67:4E:8B:3F:28"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/fc HTTP/1.1\r\nHost: 1xlite-62368.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots\r\nX-Fc: bf5383e14dd845a2502d668a43c9fa310c8ebd46e38c7a767b68fb7db0ff7e28\r\nOrigin: https://1xlite-62368.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=LiC2PWnR2LazrmlLA4SxAg==; lng=en; cookies_agree_type=3; tzo=3; is12h=0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: Angie\r\ndate: Sun, 05 Apr 2026 03:36:24 GMT\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\nvary: origin, access-control-request-method, access-control-request-headers\r\nx-dt: 1014\r\nx-time-ng: 0.000\r\nx-uuid: 070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.052, wf-uht;dur=0.008\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-21T17:23:37.112312Z","times_seen":15507115,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62368.bar/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-62368.bar","domain":"1xlite-62368.bar","tld":"bar"},"ip":{"addr":"46.32.182.61","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:24.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-62368.bar","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 05:20:34 GMT","end":"Sun, 10 May 2026 05:20:33 GMT"},"fingerprint":{"sha1":"9A:39:22:8C:82:87:41:5E:04:0C:96:F8:41:43:C7:34:FD:D6:94:C3","sha256":"AD:69:DC:D4:60:D9:51:19:AB:B9:EA:C2:2D:D9:CC:CF:A9:BA:84:8B:24:E2:D6:1A:9A:2C:59:67:4E:8B:3F:28"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-62368.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nContent-Length: 98\r\nOrigin: https://1xlite-62368.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=LiC2PWnR2LazrmlLA4SxAg==; lng=en; cookies_agree_type=3; tzo=3; is12h=0; window_width=1920; fatman_uuid=070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":98,"data":"{\"w\":55,\"sw\":1280,\"sh\":1024,\"e\":11054,\"m\":{\"s1\":\"4d4b06fc-a5ea-435a-ba57-dd4486451e5a\"},\"sids\":[]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sun, 05 Apr 2026 03:36:24 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\nvary: origin, access-control-request-method, access-control-request-headers\r\nx-dt: 1014\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.033, wf-uht;dur=0.012\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c9d769d762fadc108e3cd9ccfa3312c8","sha1":"0eb94e509e30128207ee0db6714d8f02736a6a6d","sha256":"ef783368ea14a68e6de5689e4b42504680def574179663bfec9123e53efd75ee","sha512":"e19a49a19015b607a9a6d95c24dfada8ad56f2d7b0931b4a0031f31212c0d92681b9bfdf46d4a083a62aecbe268e6c13bd9f383aa70810443c6e2e4bd183b206","ssdeep":"","tlshash":"4e70000802000203800003200a820ac000a880028cc0323082a0088220088e2200a882","first_seen":"2026-04-05T03:37:54.650497Z","last_seen":"2026-04-05T03:37:54.650497Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_block_pages/en/dictionary_477074dc3fbf0dc8f1da6cbeb6009729.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:24.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_block_pages/en/dictionary_477074dc3fbf0dc8f1da6cbeb6009729.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62368.bar/\r\nOrigin: https://1xlite-62368.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 05 Apr 2026 03:36:24 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-b396e52e68206cc72ca945b8c3ea4f7c-008f9fb9f4b2b97f-01\r\nlast-modified: Tue, 31 Mar 2026 16:08:24 GMT\r\netag: W/\"163c55769ef8e9a1271f5920f0c7b7d3\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Tue, 31 Mar 2026 17:16:29 GMT\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc19\r\nage: 2930\r\ncache: HIT\r\nx-cached-since: 2026-04-05T02:47:34+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":4830,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"163c55769ef8e9a1271f5920f0c7b7d3","sha1":"111afd4c5633b90f27775aaccc0a1a06454d7410","sha256":"77362f4e16f6b1ad8f4488d02e7d5f2f6c8ee6f22a905ca56f64a61a3a1cf0d7","sha512":"7d76bd8c3266b37d3ab11b7a22031f6882ac68831ec432bf5e858612cdb1f85b2c3ccc4841e922f194f87a0f9c86fd6f8a6254f906ca155bc1db21ae827ec080","ssdeep":"48:YDXkR16tcWpROgwcyU/VcyRRyD4HxSixS0t2ltM/L9J9bpcyLlpcy5xp7EqzCe4x:lYcbOo00aL9xJiXMWhP/jHxL81L5m","tlshash":"42a15f0f733c15e53a2941803d0e6e6e7b1201683e626295fa8dd8ad377e5dae13711f","first_seen":"2026-03-31T17:12:20.748849Z","last_seen":"2026-04-09T13:38:06.813099Z","times_seen":139,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-icons/1.0.993/285/country.svg","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:24.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-icons/1.0.993/285/country.svg HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-62368.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62368.bar/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 05 Apr 2026 03:36:24 GMT\r\ncontent-type: image/svg+xml\r\ntraceparent: 00-1ce2b6ea6f9dd340e062eb5265c63805-f5e6d089087d5266-01\r\nlast-modified: Fri, 03 Apr 2026 14:36:39 GMT\r\netag: W/\"e755054847ccc09de8ac9bdf2c4326d6\"\r\nx-amz-meta-mtime: 1775226984.74562839\r\ncontent-encoding: gzip\r\nexpires: Sat, 04 Apr 2026 14:46:20 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc21\r\nage: 46043\r\ncache: HIT\r\nx-cached-since: 2026-04-04T14:49:01+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":217418,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e755054847ccc09de8ac9bdf2c4326d6","sha1":"1461e05caf5c7bfda69a9a45127a8f78dc37a9ec","sha256":"d03bc4c7e0d2d128ba647df7ef393f9e856ff0b98b09d6d2849bdaaaded8e7b9","sha512":"2a6e1617fe4b5f4039431564fdb2d90f8a4a930ea555e10133b9d07809ebe56f64cfc9000de709289b2cb9143664bb8e334cabf2d49c7c20dac9ba8ed0eee9ce","ssdeep":"3072:hgvO+igz5Wy8EjUskAnA3ZJ9QeVCLpE74OWuhgwlKqjk71xhbXVjGYLGS/suV1SM:uqCLpPOWuq5vaSueoO7","tlshash":"08245554b099b14c2a8363e8c7afa5e1133e61db71da419938e993d8520e3dffe83950","first_seen":"2025-08-28T01:30:48.467208Z","last_seen":"2026-05-07T11:42:09.284783Z","times_seen":1871,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62368.bar/en/slots?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","fqdn":"1xlite-62368.bar","domain":"1xlite-62368.bar","tld":"bar"},"ip":{"addr":"46.32.182.61","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-05T03:36:22.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-62368.bar","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 05:20:34 GMT","end":"Sun, 10 May 2026 05:20:33 GMT"},"fingerprint":{"sha1":"9A:39:22:8C:82:87:41:5E:04:0C:96:F8:41:43:C7:34:FD:D6:94:C3","sha256":"AD:69:DC:D4:60:D9:51:19:AB:B9:EA:C2:2D:D9:CC:CF:A9:BA:84:8B:24:E2:D6:1A:9A:2C:59:67:4E:8B:3F:28"}}},"request":{"raw":"GET /en/slots?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots HTTP/1.1\r\nHost: 1xlite-62368.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Sun, 05 Apr 2026 03:36:22 GMT\r\ncontent-length: 0\r\nlocation: /en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots\r\nset-cookie: platform_type=desktop; Path=/; Expires=Wed, 08 Apr 2026 03:36:22 GMT; Secure; SameSite=None; Partitioned\ngw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; Path=/; Expires=Wed, 08 Apr 2026 03:36:22 GMT; Secure\nauid=LiC2PWnR2LazrmlLA4SxAg==; path=/; secure; httponly; samesite=lax\r\nx-dt: 1014\r\nx-gw-blk-redirect-reason: block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.016, wf-uht;dur=0.013\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2837,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-21T17:23:37.112312Z","times_seen":15507115,"resource_available":true,"data":null}},"time_used":410,"timings":{"blocked":183,"dns":90,"connect":29,"send":0,"wait":43,"receive":1,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","fqdn":"1xlite-62368.bar","domain":"1xlite-62368.bar","tld":"bar"},"ip":{"addr":"46.32.182.61","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-05T03:36:22.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-62368.bar","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 05:20:34 GMT","end":"Sun, 10 May 2026 05:20:33 GMT"},"fingerprint":{"sha1":"9A:39:22:8C:82:87:41:5E:04:0C:96:F8:41:43:C7:34:FD:D6:94:C3","sha256":"AD:69:DC:D4:60:D9:51:19:AB:B9:EA:C2:2D:D9:CC:CF:A9:BA:84:8B:24:E2:D6:1A:9A:2C:59:67:4E:8B:3F:28"}}},"request":{"raw":"GET /en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots HTTP/1.1\r\nHost: 1xlite-62368.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=LiC2PWnR2LazrmlLA4SxAg==\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 203 Non Authoritative\r\nserver: Angie\r\ndate: Sun, 05 Apr 2026 03:36:22 GMT\r\ncontent-type: text/html;charset=utf-8\r\ncontent-length: 2837\r\ncache-control: no-store, no-cache, must-revalidate\r\nserver-timing: dt_total;dur=0.141, dt_total;dur=0.005, total;dur=2;desc=\"MF\"\r\nset-cookie: gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; Path=/; Expires=Wed, 08 Apr 2026 03:36:22 GMT; Secure\r\nvary: Accept-Encoding\r\nx-dt: 1014, 1014\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"203","status_text":"Non Authoritative","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2837,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1306)","md5":"c93e8ea9e46c7d460034fe80a53e9212","sha1":"8461de9a9a622a45d1ab43b464cd1f408d88422b","sha256":"02c0a212086c297232253faa6b0f6a4ea8a1f6f515793c156b4f2dd415193274","sha512":"9d0dddd3394b765c83b8066c0982f920201c4b00b05c40bf2cbfe4521ec76fb4b9b30a39d60d57ffef70a570bda4fb743a6e0b599157c5578da73ba7e9831a6d","ssdeep":"","tlshash":"8c51a62b5a18ce3f05205458d623e35ae6cd31bb714ba458c0b84d196b8f7c3ac4f8e5","first_seen":"2026-04-05T03:37:54.65269Z","last_seen":"2026-04-06T22:05:09.986113Z","times_seen":2,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/$_$.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:23.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/$_$.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-62368.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 05 Apr 2026 03:36:23 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 57\r\ntraceparent: 00-7a3dd8de41c97e366b5f8b7486664c4d-11bf34a80d38beaf-01\r\nlast-modified: Thu, 02 Apr 2026 12:16:26 GMT\r\netag: \"0f52fc8c693ecafc1d77320a696ce65b\"\r\nx-amz-meta-mtime: 1775132137.890719335\r\nexpires: Fri, 03 Apr 2026 14:38:52 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc14\r\nage: 46581\r\ncache: HIT\r\nx-cached-since: 2026-04-04T14:40:02+00:00\r\naccept-ranges: bytes\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":57,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with no line terminators","md5":"0f52fc8c693ecafc1d77320a696ce65b","sha1":"5d5d9a13c7a17a19b0295cdc8bd3594117fe0a29","sha256":"a77313a1c518701af1f3c36dda4ab891bd2fc7c2d32025ae8ac66c7b97a3770a","sha512":"f1ce1fb5b8b1b49a30bb0950422a5c1762d72301befe8a6c51bc8af716e1148c7438bc9c9cd8a76e6ff89281c1e01a4391fc7777d03da8b07b8918d597b50d0a","ssdeep":"","tlshash":"ed900253565df52c30a004050695d64732953d6a2417712221b05109e60154a4417277","first_seen":"2026-03-18T19:53:45.72592Z","last_seen":"2026-05-19T09:54:34.316022Z","times_seen":1235,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/entry-656814443e.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:23.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/entry-656814443e.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-62368.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62368.bar/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 05 Apr 2026 03:36:23 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-f989e20c104e8bc1f5228bf3fe939498-2961f8ef59199813-01\r\nlast-modified: Thu, 02 Apr 2026 12:16:26 GMT\r\netag: W/\"a96b662c595da14a4422c3857f88d297\"\r\nx-amz-meta-mtime: 1775132137.900720203\r\ncontent-encoding: gzip\r\nexpires: Sat, 04 Apr 2026 09:52:34 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.003\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc16\r\nage: 63544\r\ncache: HIT\r\nx-cached-since: 2026-04-04T09:57:19+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":21797,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (21297)","md5":"a96b662c595da14a4422c3857f88d297","sha1":"91ba2b4755d485d620e5a15c98e7c91004b66ab8","sha256":"b6d5629c687be6e4616df79a314eb2ca263cc6484944a1057c03e56be4d61500","sha512":"b628352aba5f14dfebd23af1baef02dd15faa5552c687bea7cd44f0f95be9a3f1290258a53d1bbea627e17255b4472df346326f730350fd9b5dc42af18148b7d","ssdeep":"384:HMGYISxxQaa0Tsuwm/IuSVr4LcD7Kj7w/A7GZGG/DE0zTAxV5V1LwYVcacBkbZMk:HbVf0TsNm/cVr4LcD7Kj7w/yGQG/D9zC","tlshash":"8da23078219cf0b531cb449537f6bc5266886d1ff98afc8a4097c8cc17da04cc9227ae","first_seen":"2026-04-02T10:53:01.708656Z","last_seen":"2026-04-06T22:26:10.951406Z","times_seen":95,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62368.bar/en/block","fqdn":"1xlite-62368.bar","domain":"1xlite-62368.bar","tld":"bar"},"ip":{"addr":"46.32.182.61","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:23.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-62368.bar","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 05:20:34 GMT","end":"Sun, 10 May 2026 05:20:33 GMT"},"fingerprint":{"sha1":"9A:39:22:8C:82:87:41:5E:04:0C:96:F8:41:43:C7:34:FD:D6:94:C3","sha256":"AD:69:DC:D4:60:D9:51:19:AB:B9:EA:C2:2D:D9:CC:CF:A9:BA:84:8B:24:E2:D6:1A:9A:2C:59:67:4E:8B:3F:28"}}},"request":{"raw":"GET /en/block HTTP/1.1\r\nHost: 1xlite-62368.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=LiC2PWnR2LazrmlLA4SxAg==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 203 Non Authoritative\r\nserver: Angie\r\ndate: Sun, 05 Apr 2026 03:36:23 GMT\r\ncontent-type: text/html;charset=utf-8\r\ncontent-length: 2837\r\ncache-control: no-store, no-cache, must-revalidate\r\nserver-timing: dt_total;dur=0.059, dt_total;dur=0.004, total;dur=2;desc=\"MF\"\r\nset-cookie: gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; Path=/; Expires=Wed, 08 Apr 2026 03:36:23 GMT; Secure\r\nvary: Accept-Encoding\r\nx-dt: 1014, 1014\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"203","status_text":"Non Authoritative","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":2837,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1306)","md5":"c93e8ea9e46c7d460034fe80a53e9212","sha1":"8461de9a9a622a45d1ab43b464cd1f408d88422b","sha256":"02c0a212086c297232253faa6b0f6a4ea8a1f6f515793c156b4f2dd415193274","sha512":"9d0dddd3394b765c83b8066c0982f920201c4b00b05c40bf2cbfe4521ec76fb4b9b30a39d60d57ffef70a570bda4fb743a6e0b599157c5578da73ba7e9831a6d","ssdeep":"","tlshash":"8c51a62b5a18ce3f05205458d623e35ae6cd31bb714ba458c0b84d196b8f7c3ac4f8e5","first_seen":"2026-04-05T03:37:54.65269Z","last_seen":"2026-04-06T22:05:09.986113Z","times_seen":2,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_3219f175c5919c49ca0c1badc6ac93a3.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:24.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_3219f175c5919c49ca0c1badc6ac93a3.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62368.bar/\r\nOrigin: https://1xlite-62368.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 05 Apr 2026 03:36:24 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-0d89cbebaaa6e8cb8ad5d97a394ad13d-47281076f719bfc9-01\r\nlast-modified: Fri, 03 Apr 2026 16:08:55 GMT\r\netag: W/\"5e053818755647f75fb5106d4cc7daa1\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Fri, 03 Apr 2026 17:15:52 GMT\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc16\r\nage: 999\r\ncache: HIT\r\nx-cached-since: 2026-04-05T03:19:45+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":154287,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5e053818755647f75fb5106d4cc7daa1","sha1":"c16b0e2b20e869c693f36783caaede9069692c74","sha256":"3b656e1234688058f1368f85b766d4da6f87917b25f803196cf8ba19120e6a0f","sha512":"b299f64121d48b14fce74cad0b45ab22606a17b0fed8e3387b2348a6e9a3b1fd8442a2320b253769d04030cb86d1d7c1836e461c689b6e95e29bc77c2d8c6a8f","ssdeep":"3072:I/+H5K8iZcIkZPePfxxlRrP6VdI3LuaMc6WrD9RMf7JmcpcZZ:I4QXlRrP6VdIuaZjMf7JmcGf","tlshash":"6fe3e80a194c6e7b0bda12edf98fdf4962b00045aab2c822d8eec51e7157fd2917714f","first_seen":"2026-04-03T18:20:42.006798Z","last_seen":"2026-04-06T05:49:01.30915Z","times_seen":90,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-1014/desktop/media_asset/8f27b3d2116513e83ef2e2d8f236d07b.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:24.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/1-1014/desktop/media_asset/8f27b3d2116513e83ef2e2d8f236d07b.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62368.bar/\r\nOrigin: https://1xlite-62368.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 05 Apr 2026 03:36:24 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-5a14b1d71dd4364b7916e0b4d5c1e545-2db46902c4fa2f13-01\r\nlast-modified: Sun, 11 Jan 2026 03:47:15 GMT\r\netag: W/\"677a4ece3382ef2d011629b8df407544\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 31 Mar 2026 09:22:03 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.046\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc21\r\nage: 563\r\ncache: HIT\r\nx-cached-since: 2026-04-05T03:27:01+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2268,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"677a4ece3382ef2d011629b8df407544","sha1":"db65fa524058f62f4dd41f81549dc3e7009ed70f","sha256":"f5d023b35116dc2ff09da730c56f2d41b18e77a9ae63d69816c06d7ac0452b7b","sha512":"592a894ab168c6872c47c6bc8c15781d74ddc17eff909e29fe30c8ba0ca4204279d8ab8d33630405fd5193c1da2506437d1b37263e0f17578544612659e6ab51","ssdeep":"","tlshash":"3741389ef3e41cb3000b29bcd0f7aa2993d40f5f689aac383a9d7c0e2bd4511409697d","first_seen":"2026-03-31T08:36:21.232936Z","last_seen":"2026-05-20T16:41:50.761495Z","times_seen":738,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/2c7849b127.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:24.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/2c7849b127.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-62368.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62368.bar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 05 Apr 2026 03:36:24 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-bd4573b34df2536b0ce59315232f56a6-7dc60d9cbc5de5e9-01\r\nlast-modified: Thu, 02 Apr 2026 12:16:26 GMT\r\netag: W/\"9f0da2ab69bb7551878c5a9b9d121aa1\"\r\nx-amz-meta-mtime: 1775132137.892719509\r\ncontent-encoding: gzip\r\nexpires: Fri, 03 Apr 2026 15:35:14 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc19\r\nage: 43242\r\ncache: HIT\r\nx-cached-since: 2026-04-04T15:35:42+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":4952,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (4951)","md5":"9f0da2ab69bb7551878c5a9b9d121aa1","sha1":"cc113a894c8b5d9e47bda5d51e2e0c4a177355ff","sha256":"ac54fc20e9714de541ccd2370751f85a3acc391a18439dbdd38b91baae3ae9c6","sha512":"f97b8effcabbaf794462b814d46d0fef05e2d1251c55fd1a3f7f0db4e62ac39e79c333cf64851fa6055bdcded9a1ae4f5f9911b5759cbc48712dbb83441779b3","ssdeep":"48:ThGng3RxXmgUDFNbM0mLVrvDgD0mpHMwrRdRDpSH6whq2hRuXpRBJfXhXnkXK2Jm:KDFNbMnDgD7rRYLe5RItDR0","tlshash":"2ea1ebeebc7c94315937e131b6596e780a71f217d2300f85e899a3680cc36c76da2dac","first_seen":"2026-03-04T15:12:03.386854Z","last_seen":"2026-04-09T09:06:39.446789Z","times_seen":451,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:23.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-62368.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 05 Apr 2026 03:36:23 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63748\r\ntraceparent: 00-d7e83b4d727020e4f7dc3e0c36af721c-9265d0684c83fe0f-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"6887b6f24414dbc612dbf42ccdc76b70\"\r\nexpires: Fri, 17 Jan 2025 10:48:52 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc21\r\nage: 414\r\ncache: HIT\r\nx-cached-since: 2026-04-05T03:29:29+00:00\r\naccept-ranges: bytes\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63748, version 1.0","md5":"6887b6f24414dbc612dbf42ccdc76b70","sha1":"8068d3abfbc6cbf35b55919da45b1f4d2d136238","sha256":"fc5c015fc32518f1ed810fa84ca28941eb9d5a3c81acc8df69a4dbbeedef7b0c","sha512":"00f08f9dd648972c9571547e06172d5505dd13f577fe2e65a497d3856172807ac11c996984e4138d2eb2ac784257fe61864aee15752fe9e9e76f98db931e0c2a","ssdeep":"1536:KtdCG+Dz6RxAx457zL0ASEn091Y0H1mTOzI/OzMFOoTX4u:MMG+yRpzN091Y0VtI/pOoTt","tlshash":"8b5302485551fae2cac3073c0f7a89dbb37a776d519224cd98b69f830d37964bea2070","first_seen":"2023-06-14T19:15:49Z","last_seen":"2026-05-20T09:29:06.94328Z","times_seen":10606,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-1014/desktop/media_asset/f481d3a3d9d0072decf42f9e1d0aa0c8.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:24.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/1-1014/desktop/media_asset/f481d3a3d9d0072decf42f9e1d0aa0c8.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62368.bar/\r\nOrigin: https://1xlite-62368.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 05 Apr 2026 03:36:24 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-3f5535a58ce4562c8bfe697dcd094173-c55857aa87dd0d2b-01\r\nlast-modified: Fri, 03 Apr 2026 13:13:42 GMT\r\netag: W/\"ac74d6b604c83f0f68197ea01e14d3f2\"\r\ncontent-encoding: gzip\r\nexpires: Fri, 03 Apr 2026 14:22:57 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.046\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc18\r\nage: 564\r\ncache: HIT\r\nx-cached-since: 2026-04-05T03:27:00+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11217,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ac74d6b604c83f0f68197ea01e14d3f2","sha1":"7b1deb7ce548ebf03ea34440bcb9a49f7463d0f8","sha256":"a3752e7756653951e234fa88e0abbc32f0a88a8275f9a056b0900bd4fe6c0c27","sha512":"0122aa6513904b20f2a8e9c26ecfbec5bbd58697be68cb50c78c804495ec2f1c658ca95d7f7dddaee3826c826e464d0c9fb219f43ed27cd8b38e32423fe10890","ssdeep":"96:7IKtJa1X7cqSojJ4B8pyBtJJBsCSMRyfiNWIz0ubdx:V21+XCUyfiNWIzrj","tlshash":"a732d5d9baf95c73020630bce5fbfa1be3d81f978d49a8647a5c7c0c1f6011114aaa79","first_seen":"2026-04-05T03:37:54.65741Z","last_seen":"2026-04-05T03:37:54.65741Z","times_seen":1,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-1014/desktop/media_asset/585835f6a182908bbba7a276995fa378.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:24.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/1-1014/desktop/media_asset/585835f6a182908bbba7a276995fa378.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62368.bar/\r\nOrigin: https://1xlite-62368.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 05 Apr 2026 03:36:24 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-cf402a3fbaa6a1e00628ee375cb2ae5d-7b6e712c37df0f68-01\r\nlast-modified: Mon, 23 Mar 2026 07:41:52 GMT\r\netag: W/\"43d92c36cae8c86676eb50dd25a0ce92\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 31 Mar 2026 09:22:03 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.048\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc22\r\nage: 563\r\ncache: HIT\r\nx-cached-since: 2026-04-05T03:27:01+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6040,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"43d92c36cae8c86676eb50dd25a0ce92","sha1":"5da00b728d59980fe7b2c6a7201483bbffa73e39","sha256":"0068977272037ef7e6c707b5ed02b46f6409e20b61598c63eb2ef8b2261c19c1","sha512":"e14854c26f5a86d458cba0246af46aee9394b9312e32c270a73a60c297b5e7d48181801653a4b7016b53b579287ea67da89642752e396fd3e213ba6a21a64c0e","ssdeep":"48:TzABItkABwgABCNU8ABAHAB0EABzzuFABIIv4ABBxS/sABYEwABOt73ABBidABJD:9t4ljvL33lxyiBL9aA","tlshash":"72c12c88fff09c63041f94b8d8f7ba4aa7c40f0ba85a59287fdd35091f545014466ebe","first_seen":"2026-03-31T08:36:21.238917Z","last_seen":"2026-04-08T05:47:05.360489Z","times_seen":116,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/site-admin/colors/e7bf6f5853492ee600f09fd1dee51cf5.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:24.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/site-admin/colors/e7bf6f5853492ee600f09fd1dee51cf5.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62368.bar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 05 Apr 2026 03:36:24 GMT\r\ncontent-type: text/css\r\ntraceparent: 00-29676b11d6cbd240785362f8d8314dce-752612f384426e37-01\r\nlast-modified: Fri, 27 Mar 2026 13:40:51 GMT\r\netag: W/\"e7bf6f5853492ee600f09fd1dee51cf5\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Fri, 27 Mar 2026 14:46:02 GMT\r\nx-time-ng: 0.004\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc14\r\nage: 2697\r\ncache: HIT\r\nx-cached-since: 2026-04-05T02:51:27+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45272,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (45272), with no line terminators","md5":"e7bf6f5853492ee600f09fd1dee51cf5","sha1":"22f10024618e2b96aa3076032cfe658df7d043af","sha256":"1cbd584d07a713f01fab99e27a1837dc1cb06fb273a11ecaa46e3987c6fdb137","sha512":"8d54e3967b64713aa55bf59ca6cea499548ae790221ed3910783d5e8867237b5f60161338ade731ea9352e41d643651ecb4878b3853552fd2ee572ab57fbdc36","ssdeep":"768:+EO1mFS775xWt5JkyunibZhpNeInQ+ACA:+EO1mFI75xWt5JkyunibZhyInQ+AB","tlshash":"f3139d3dee91c1752a591931912c6b7b3d36e9deaa240f8fd02c23e530c5a011be5e7e","first_seen":"2026-03-27T16:38:23.079287Z","last_seen":"2026-04-27T02:35:57.075071Z","times_seen":449,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/site-admin/css_vars/06c9b68c4f5819c83cc220a9024bbee1.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:24.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/site-admin/css_vars/06c9b68c4f5819c83cc220a9024bbee1.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62368.bar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 05 Apr 2026 03:36:24 GMT\r\ncontent-type: text/css\r\ncontent-length: 54\r\ntraceparent: 00-e248a885da446f6ef53e9af1f197944f-9e78d79f6e28c6e4-01\r\nlast-modified: Thu, 26 Mar 2026 13:23:36 GMT\r\netag: \"06c9b68c4f5819c83cc220a9024bbee1\"\r\ncache-control: max-age=3600\r\nexpires: Thu, 26 Mar 2026 15:16:20 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc10\r\nage: 131\r\ncache: HIT\r\nx-cached-since: 2026-04-05T03:34:13+00:00\r\naccept-ranges: bytes\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":54,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"06c9b68c4f5819c83cc220a9024bbee1","sha1":"72061d9a7ff428838a3ffbeea37f5b239685d24d","sha256":"b78dcd52b6ad0b04c4e35350f6bfc45cdf407c55b71f49ac5e201bb403213450","sha512":"f75445453afaa7b628853122e9ca4dd668545de13331ee0d3b10d1f59429293f7a324464bfbae5eb4bc31a25968d4c0142fad5f42dd0d1053e27f5762e72629a","ssdeep":"","tlshash":"76900299a50822502669c666519d48d12184125b4511369ce5527911f446c819950689","first_seen":"2026-03-26T08:31:53.670846Z","last_seen":"2026-05-20T16:41:50.762168Z","times_seen":1367,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/desktop/media_asset/e6baed4eecf4ba7f9a5c2fcf97aad110.webp","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:24.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/desktop/media_asset/e6baed4eecf4ba7f9a5c2fcf97aad110.webp HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62368.bar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 05 Apr 2026 03:36:24 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6642\r\ntraceparent: 00-f885e98a1509800c28d77d69d51567d7-2a8dc34cb1416472-01\r\nlast-modified: Tue, 28 Oct 2025 08:17:54 GMT\r\netag: \"f2a90faef41c53fb4af747c8cbf25485\"\r\nexpires: Thu, 13 Nov 2025 16:22:44 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc22\r\ncache: REVALIDATED\r\naccept-ranges: bytes\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6642,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 960x278, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f2a90faef41c53fb4af747c8cbf25485","sha1":"54855a9fb307c4ecc9afea135838328cf439162e","sha256":"993540582d4cab4dc40ba13392f7460f30f0b656ff1e413abe9c20387000cc92","sha512":"c6f5e9a6238a864affd37952ba241b4e5a01dbfad9a18e22b53ea00e6f3acbbf114a5752f0b5faecd89efa6d24990df365113d7321543d0d44cfab1987f123a8","ssdeep":"96:MdOd7t6i+bJODeMN38LbY5gZQpRDH/ij1TgpEV6iuRjxNY4wos4RWNFCjMzlAm92:MduSOXsv6DfiR8fisNk9X3qUhpg","tlshash":"d7d1b074a2c81a958a299e763e763dab6e81039c31bcb6d674b5d5c8c50843fede7030","first_seen":"2025-11-13T15:27:51.525317Z","last_seen":"2026-05-20T16:41:50.755381Z","times_seen":1824,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je6411v897130004za200zd897130004\u0026_p=1775360194399\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026cid=1377176804.1775360195\u0026ecid=1309360158\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026ae=a\u0026pscdl=noapi\u0026_eu=AEAAAGQ\u0026_s=1\u0026tag_exp=0~115938465~115938469~116991817~118328143~118398309\u0026sid=1775360194\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-62368.bar%2Fen%2Fblock%3Ftag%3Dd_131637m_14189c_%5B%5DMS%5B%5Dnull%5B%5DPB_slots%5B%5Dslots%5B%5D104402730_d27082_l220463_clickunder%26pb%3Dca7c0b52e4d34f819b39b4863c3bf0c0%26click_id%3D711da9fcce55f6105d27059d04cf4508%26r%3Dslots\u0026dt=1xBet\u0026en=scroll\u0026ep.optimize_id=GTM-5R4MT54\u0026epn.percent_scrolled=90\u0026upn.ref_id=1\u0026tfd=12548","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:35.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:36:32 GMT","end":"Mon, 08 Jun 2026 08:36:31 GMT"},"fingerprint":{"sha1":"F1:EC:3B:52:4B:66:50:1D:0B:50:65:93:DD:B9:FD:40:BF:2D:6E:7B","sha256":"46:A7:13:4E:73:FB:45:6B:0B:73:AF:6C:C5:72:C7:83:79:46:1B:0D:3F:B2:A1:0C:AD:70:4A:EA:1E:4A:D1:2B"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je6411v897130004za200zd897130004\u0026_p=1775360194399\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026cid=1377176804.1775360195\u0026ecid=1309360158\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026ae=a\u0026pscdl=noapi\u0026_eu=AEAAAGQ\u0026_s=1\u0026tag_exp=0~115938465~115938469~116991817~118328143~118398309\u0026sid=1775360194\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-62368.bar%2Fen%2Fblock%3Ftag%3Dd_131637m_14189c_%5B%5DMS%5B%5Dnull%5B%5DPB_slots%5B%5Dslots%5B%5D104402730_d27082_l220463_clickunder%26pb%3Dca7c0b52e4d34f819b39b4863c3bf0c0%26click_id%3D711da9fcce55f6105d27059d04cf4508%26r%3Dslots\u0026dt=1xBet\u0026en=scroll\u0026ep.optimize_id=GTM-5R4MT54\u0026epn.percent_scrolled=90\u0026upn.ref_id=1\u0026tfd=12548 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62368.bar/\r\nOrigin: https://1xlite-62368.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://1xlite-62368.bar\r\ndate: Sun, 05 Apr 2026 03:36:35 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:178:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:178:0\r\nreport-to: {\"group\":\"ascnsrsggc:178:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:178:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-21T17:23:37.112312Z","times_seen":15507115,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":50,"dns":0,"connect":8,"send":0,"wait":20,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je6411v897130004za200zd897130004\u0026_p=1775360194399\u0026em=tv.1~em.TDlTG3rOYKC4Hrtvfq8b8Y84fbOEW8zYUgr81y0PsMk\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026cid=1377176804.1775360195\u0026ecid=1309360158\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026ec_mode=a\u0026_eu=AAAAAGA\u0026_s=2\u0026tag_exp=0~115938465~115938469~116991817~118328143~118398309\u0026sid=1775360194\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-62368.bar%2Fen%2Fblock%3Ftag%3Dd_131637m_14189c_%5B%5DMS%5B%5Dnull%5B%5DPB_slots%5B%5Dslots%5B%5D104402730_d27082_l220463_clickunder%26pb%3Dca7c0b52e4d34f819b39b4863c3bf0c0%26click_id%3D711da9fcce55f6105d27059d04cf4508%26r%3Dslots\u0026dt=1xBet\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026ep.optimize_id=GTM-5R4MT54\u0026tfd=12549","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:35.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:36:32 GMT","end":"Mon, 08 Jun 2026 08:36:31 GMT"},"fingerprint":{"sha1":"F1:EC:3B:52:4B:66:50:1D:0B:50:65:93:DD:B9:FD:40:BF:2D:6E:7B","sha256":"46:A7:13:4E:73:FB:45:6B:0B:73:AF:6C:C5:72:C7:83:79:46:1B:0D:3F:B2:A1:0C:AD:70:4A:EA:1E:4A:D1:2B"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je6411v897130004za200zd897130004\u0026_p=1775360194399\u0026em=tv.1~em.TDlTG3rOYKC4Hrtvfq8b8Y84fbOEW8zYUgr81y0PsMk\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026cid=1377176804.1775360195\u0026ecid=1309360158\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026ec_mode=a\u0026_eu=AAAAAGA\u0026_s=2\u0026tag_exp=0~115938465~115938469~116991817~118328143~118398309\u0026sid=1775360194\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-62368.bar%2Fen%2Fblock%3Ftag%3Dd_131637m_14189c_%5B%5DMS%5B%5Dnull%5B%5DPB_slots%5B%5Dslots%5B%5D104402730_d27082_l220463_clickunder%26pb%3Dca7c0b52e4d34f819b39b4863c3bf0c0%26click_id%3D711da9fcce55f6105d27059d04cf4508%26r%3Dslots\u0026dt=1xBet\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026ep.optimize_id=GTM-5R4MT54\u0026tfd=12549 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62368.bar/\r\nOrigin: https://1xlite-62368.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://1xlite-62368.bar\r\ndate: Sun, 05 Apr 2026 03:36:35 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:178:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:178:0\r\nreport-to: {\"group\":\"ascnsrsggc:178:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:178:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-21T17:23:37.112312Z","times_seen":15507115,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":56,"dns":0,"connect":20,"send":0,"wait":27,"receive":1,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_css_ae6935.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:23.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_css_ae6935.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-62368.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62368.bar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 05 Apr 2026 03:36:23 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-1eb25d1eadae5444e25d2deaaf8669e2-95bb7a0875f10720-01\r\nlast-modified: Fri, 03 Apr 2026 14:42:15 GMT\r\netag: W/\"4f36c919803ec9a9508985db07c5abad\"\r\nx-amz-meta-mtime: 1775227242.658011205\r\ncontent-encoding: gzip\r\nexpires: Sun, 05 Apr 2026 11:12:51 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc17\r\nage: 58908\r\ncache: HIT\r\nx-cached-since: 2026-04-04T11:14:35+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":26865,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (11024)","md5":"4f36c919803ec9a9508985db07c5abad","sha1":"3e59c3fd53446b4d4387684055956d600430f1bc","sha256":"ae69359f9574d026851992f363210a71c8043f45ded3d86576184d6050e0fa1a","sha512":"ed128ded88b9a6f923064f169ce0a32352dba33be3bad0c65b0a95881b04aaaf5d297d9bfdae2e6f13406db48fe25c30b4a5d4d63a7a901cfcc384a87349eada","ssdeep":"384:iBEY441ctPRVuiaIjkwLVg7ff49BKAXOLisDUqE/Y8RbxUuwBLDCqOt24v:8qVg7fGBHf","tlshash":"a0c2339decd491331e27e521a288be7c01f4f52aed324e59fd2e826015c3f9a15e0e79","first_seen":"2026-03-04T14:29:19.135959Z","last_seen":"2026-04-19T13:42:33.560856Z","times_seen":506,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":108,"dns":40,"connect":7,"send":0,"wait":12,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_base-app_ba7fe38e5c.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:23.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_base-app_ba7fe38e5c.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-62368.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 05 Apr 2026 03:36:23 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-70cf7f5d3ee0462050fce34603a2b020-bed7a37d45b7071a-01\r\nlast-modified: Fri, 03 Apr 2026 14:42:15 GMT\r\netag: W/\"32a164d4bd3124519eead43580a2bad3\"\r\nx-amz-meta-mtime: 1775227242.656011047\r\ncontent-encoding: gzip\r\nexpires: Sun, 05 Apr 2026 09:48:26 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc18\r\nage: 64015\r\ncache: HIT\r\nx-cached-since: 2026-04-04T09:49:28+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1749290,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (24159)","md5":"ea836b4ae6552cda8ce5e60eacd3aaf4","sha1":"96c10e8a2d3c71ed1bc7bb21f53adc6214ac8260","sha256":"bae482a3bde467096988328ed3507bc346f14378399e344b8211ac1975ba972c","sha512":"d626caf6ad7c1f424a0b4d7c45e2e92c3abe4f3b864df4ac1fa3f79f7721d92b4c687257412fa2bb0994cadfa209f31f9e24cdfe69479a08018f792be84b0302","ssdeep":"24576:TIHHA3qeqBDu81wSFb8iEj2OBzW2O2/E0mslc:TIHHA3ZqBDb1wk8iEj2OBzW2O2/E0msW","tlshash":"83259ea1f281b92f2beb6bd790230046a2ad1d6cc414f490f5d7ddf93ace454916eb2c","first_seen":"2026-04-02T10:10:00.209147Z","last_seen":"2026-04-07T01:13:26.758171Z","times_seen":143,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62368.bar/bff-api/config/group/get?groups=d.technical,d.global\u0026lang=en","fqdn":"1xlite-62368.bar","domain":"1xlite-62368.bar","tld":"bar"},"ip":{"addr":"46.32.182.61","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:24.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-62368.bar","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 05:20:34 GMT","end":"Sun, 10 May 2026 05:20:33 GMT"},"fingerprint":{"sha1":"9A:39:22:8C:82:87:41:5E:04:0C:96:F8:41:43:C7:34:FD:D6:94:C3","sha256":"AD:69:DC:D4:60:D9:51:19:AB:B9:EA:C2:2D:D9:CC:CF:A9:BA:84:8B:24:E2:D6:1A:9A:2C:59:67:4E:8B:3F:28"}}},"request":{"raw":"GET /bff-api/config/group/get?groups=d.technical,d.global\u0026lang=en HTTP/1.1\r\nHost: 1xlite-62368.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nis-srv: false\r\nx-svc-source: __TECHNICAL_PAGES_APP__\r\nx-app-n: __TECHNICAL_PAGES_APP__\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=LiC2PWnR2LazrmlLA4SxAg==; lng=en; cookies_agree_type=3; tzo=3; is12h=0; window_width=1920\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sun, 05 Apr 2026 03:36:24 GMT\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ncontent-encoding: br\r\nserver-timing: dt_total;dur=0.040, bff;dur=10.69, wf-uht;dur=0.025\r\nvary: Accept-Encoding\r\nx-dt: 1014\r\nx-pod: R-2nm9q\r\nx-time-ng: 0.015\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":1476,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b4cf8a16563ed64b5a68833e305efc13","sha1":"30b07af5e41ff05b0d116b98ebcbbbf6ccbc1e36","sha256":"dc35637ae509994e86a2c480b58c3bc127b0e2d957893187fbb79b1bc65cc75c","sha512":"cff480d038ce0185bf252541e9e9354a278ec65047940868e08e8491b9bcb7f335170227faa75aea11dcb38bacfa4737410323743f4beb68909ba64afc49d9dd","ssdeep":"","tlshash":"6431995d60b1893c60680676db81ae449ffd405f35847681fe0c999cb1e3ceef92250b","first_seen":"2026-04-05T03:37:54.662249Z","last_seen":"2026-04-16T07:37:51.608851Z","times_seen":10,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-1014/desktop/media_asset/d6b740b3a176a5522f84aa226faae892.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:24.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/1-1014/desktop/media_asset/d6b740b3a176a5522f84aa226faae892.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62368.bar/\r\nOrigin: https://1xlite-62368.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 05 Apr 2026 03:36:24 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-82b585641fe3e337bb68ee3cb154ffaf-09f6f143112024eb-01\r\nlast-modified: Thu, 19 Mar 2026 13:55:55 GMT\r\netag: W/\"f0d0d45b0722fdcf0f9c860ab1146448\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 31 Mar 2026 09:22:03 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.003\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc19\r\nage: 563\r\ncache: HIT\r\nx-cached-since: 2026-04-05T03:27:01+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":2125,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f0d0d45b0722fdcf0f9c860ab1146448","sha1":"76bffcd574e7043cf73ac663de939a8813ee7e59","sha256":"e6c255539cc2ce6e23132d1f3e5d84cc8095e2c1414fb44c06799ba783a5b6be","sha512":"51a05b3bc8dc387a3274d18b48a6a2389151b074eef86015edcf783382df7c1a5459f967daab6b299996303c3a1997e625899c3d7306af5cf1820e3058962563","ssdeep":"","tlshash":"cd41a998f7f02df3301f90b899b7a64997c80f1ba895ada4ba9d745c2f1441a0037d7e","first_seen":"2026-03-31T08:36:21.22196Z","last_seen":"2026-05-20T16:41:50.743165Z","times_seen":772,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/8a035d5582.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:24.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/8a035d5582.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-62368.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62368.bar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 05 Apr 2026 03:36:24 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-bc3e1e56b26c35a872718240d3af8c39-811ac27cf080527e-01\r\nlast-modified: Thu, 02 Apr 2026 12:16:26 GMT\r\netag: W/\"67fea789a4284aa2e10bfb9f812e1f99\"\r\nx-amz-meta-mtime: 1775132137.896719856\r\ncontent-encoding: gzip\r\nexpires: Fri, 03 Apr 2026 15:35:14 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc14\r\nage: 43242\r\ncache: HIT\r\nx-cached-since: 2026-04-04T15:35:42+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3969,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3968)","md5":"67fea789a4284aa2e10bfb9f812e1f99","sha1":"215b83db90b7ed7f4ffeb79d95b3b5aab5f1952e","sha256":"159e2945fa9d9458e0b4d2dd19b86ca664db530a4db09142ce1b4b1e7ee2a12b","sha512":"ee13c822610c2cabdf39b5a130dac4a4a4e5b9d5d32ed95b16fd66d58c2afbcaf791763f33c5c2623363bb85673567c01b3fe3acc210a1b47a793b88091f8f53","ssdeep":"","tlshash":"8681685e742a40ae4437dd254bd14f18235fb30ed91613a8f842d62839cbaa736ed47f","first_seen":"2026-03-04T15:42:43.924947Z","last_seen":"2026-04-09T09:06:39.453139Z","times_seen":307,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/90c3324d97.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:24.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/90c3324d97.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-62368.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 05 Apr 2026 03:36:24 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-001a04231777a5a1565b539ed7a20ca8-06047a5256c1ed53-01\r\nlast-modified: Thu, 02 Apr 2026 12:16:26 GMT\r\netag: W/\"8f3b6ab4c5e9b95b4c2bb06978de155d\"\r\nx-amz-meta-mtime: 1775132137.896719856\r\ncontent-encoding: gzip\r\nexpires: Sat, 04 Apr 2026 09:52:35 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc10\r\nage: 63430\r\ncache: HIT\r\nx-cached-since: 2026-04-04T09:59:14+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7781,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7588)","md5":"8f3b6ab4c5e9b95b4c2bb06978de155d","sha1":"6583cb92a1d263950e82eb05a6ce0d2a8be50119","sha256":"2ae0de8ad51a1385a6fd12b8a850f45d17fa8d01e23bcce251085c27396ffe5f","sha512":"1a019dd6d0b750ffe39610f1d455eb23b394b5ce6954cf86b0aac80c801343a26526ec62ebfdd351af6a3e374398cc47756c64995be684d3a3b0e78df41a6df4","ssdeep":"192:FhUzBlcd6BMvXcdfSW17leXqOsc8uALOCJexCePmtbJtdytT:HUzBlcduMPcdfSW17leJfpAL9Je5PmtQ","tlshash":"2af11bd439f870b3676383dd7c224071872c5a46a18c58e6f9f84f6c019e68c997bb63","first_seen":"2026-04-02T10:53:01.724013Z","last_seen":"2026-04-06T22:26:10.957135Z","times_seen":95,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/non-embedded.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:23.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/non-embedded.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62368.bar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 05 Apr 2026 03:36:23 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-297e485d63d29e99f308ee52942ef502-ec8d9b129b85004b-01\r\nlast-modified: Thu, 02 Apr 2026 12:16:26 GMT\r\netag: W/\"7e6f0cdd15c8ac3e958dca87a6298dba\"\r\nx-amz-meta-mtime: 1775132137.900720203\r\ncontent-encoding: gzip\r\nexpires: Fri, 03 Apr 2026 17:24:47 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc18\r\nage: 36557\r\ncache: HIT\r\nx-cached-since: 2026-04-04T17:27:06+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50137,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (50136)","md5":"7e6f0cdd15c8ac3e958dca87a6298dba","sha1":"5fe702ff8b2e33c26ef2c630ab0db60b9a9e8ac6","sha256":"54f740b95c9911c5c832ede06858873d0c244e685655f6eefbc061d87337e188","sha512":"5e4e6fb63a9f22babf7cdbc8435220d230500c1cc989c30712c78ffeb8063c7fe28fe9767195d43c9cf3e2082716779de7b21c459e9715438f69d1146c8dd5f9","ssdeep":"384:FdHpVLkq1Tk9wE1rx1ixddVbVBZYYBJ+JuqQr9C4GWkHjBMlc:XcQvZYY4Qr/silc","tlshash":"cf33750acd801257be7b893a3584fb0865e4e54bed730e2df459d0448fe7e9f26a03a5","first_seen":"2026-03-04T15:42:43.919168Z","last_seen":"2026-04-10T00:46:08.765068Z","times_seen":489,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":104,"dns":39,"connect":10,"send":0,"wait":10,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/version.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:23.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /version.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62368.bar/\r\nOrigin: https://1xlite-62368.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 05 Apr 2026 03:36:23 GMT\r\ncontent-type: application/json\r\ncontent-length: 11\r\ntraceparent: 00-ca6de2ec4da5441b301bbb863fc4a246-f131eea3b3e8f096-01\r\nlast-modified: Fri, 03 Apr 2026 11:21:55 GMT\r\netag: \"ab34908b1d79d387aac283295dac110a\"\r\nx-amz-meta-mtime: 1775215255.662285066\r\nexpires: Fri, 03 Apr 2026 11:24:06 GMT\r\ncache-control: max-age=60\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc21\r\nage: 12\r\ncache: HIT\r\nx-cached-since: 2026-04-05T03:36:11+00:00\r\naccept-ranges: bytes\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text","md5":"ab34908b1d79d387aac283295dac110a","sha1":"52b81d3086150ecdc019fc76ca81ad528af6d7ac","sha256":"5eace19047fd9eadc721c4e818de56a07891e0bf14142b3a7bd465b573db990c","sha512":"b6069c395ba0657419f243f2dfe2448cc7184a79525e1426c6d7c6e07e6a12e1ce3741de82cfbf98a5642133754b8b6db4c0dcc90b88a142aee0d402fa1d1afe","ssdeep":"","tlshash":"ab5000000cc000000300c0300c0c0000c00c00f00c0000000c0c000f00c00000000300","first_seen":"2026-03-18T06:25:42.866074Z","last_seen":"2026-05-20T16:41:50.77946Z","times_seen":1396,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":96,"dns":0,"connect":11,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/1a634a40a0.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:23.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/1a634a40a0.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-62368.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 05 Apr 2026 03:36:23 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-59ec349bf23debc310d02293e5aa4997-0e28434ee21aff7c-01\r\nlast-modified: Thu, 02 Apr 2026 12:16:26 GMT\r\netag: W/\"8f5905c39db622c030a1281d94f6474d\"\r\nx-amz-meta-mtime: 1775132137.900720203\r\ncontent-encoding: gzip\r\nexpires: Sat, 04 Apr 2026 09:52:42 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.003\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc15\r\nage: 63443\r\ncache: HIT\r\nx-cached-since: 2026-04-04T09:59:00+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3823,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3354)","md5":"8f5905c39db622c030a1281d94f6474d","sha1":"c4f79cb6feb26eafb50b47d32189255200d0e2e8","sha256":"a14dfcdd16cebb17e22f1c6a876d48d5064e30a1beefca6e3af9d8407056470a","sha512":"2a94e4bfe231198091906732a31fe18e0e5e352c07e7ee51666b382e1b3f257b933fb90f147f70c5e2edc9263a4c4151a0b53b7a4860b2aeac1f3969f79014e9","ssdeep":"","tlshash":"e371b86f1ef834bc61290f9a6f5358e00da88d23d35cd4b3ea464f38073a055a63a5a6","first_seen":"2026-04-02T10:53:01.704029Z","last_seen":"2026-04-06T22:26:10.946777Z","times_seen":95,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62368.bar/bff-api/config/group/get?groups=d.customize\u0026lang=en","fqdn":"1xlite-62368.bar","domain":"1xlite-62368.bar","tld":"bar"},"ip":{"addr":"46.32.182.61","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:23.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-62368.bar","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 09 Feb 2026 05:20:34 GMT","end":"Sun, 10 May 2026 05:20:33 GMT"},"fingerprint":{"sha1":"9A:39:22:8C:82:87:41:5E:04:0C:96:F8:41:43:C7:34:FD:D6:94:C3","sha256":"AD:69:DC:D4:60:D9:51:19:AB:B9:EA:C2:2D:D9:CC:CF:A9:BA:84:8B:24:E2:D6:1A:9A:2C:59:67:4E:8B:3F:28"}}},"request":{"raw":"GET /bff-api/config/group/get?groups=d.customize\u0026lang=en HTTP/1.1\r\nHost: 1xlite-62368.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nis-srv: false\r\nx-svc-source: __TECHNICAL_PAGES_APP__\r\nx-app-n: __TECHNICAL_PAGES_APP__\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=LiC2PWnR2LazrmlLA4SxAg==; lng=en; cookies_agree_type=3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sun, 05 Apr 2026 03:36:24 GMT\r\ncontent-type: application/json\r\ncontent-length: 866\r\ncache-control: no-cache, private\r\nserver-timing: dt_total;dur=0.102, bff;dur=70.10, wf-uht;dur=0.147\r\nx-dt: 1014\r\nx-pod: R-f6ftc\r\nx-time-ng: 0.139\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":866,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"821f5495f78d3b32f62fbf0cba41aa6c","sha1":"26fe32117b6eb0f959fab220fe5e5a25c1f8cf70","sha256":"bd3d972519a7635f5a70f5d0b2bc9ca811b3a9cc5f360a789d9a219739eee161","sha512":"9010b77a09264d8758ec37d2fecefbad7a4cc6a68a25d4f3449b16a048ec743c66e49bffc856d2772946b10211d12e5b54f5393724f5c8c2195aba3cccbdf6d6","ssdeep":"","tlshash":"9111d40d91a0623cd6604bdad8823f145ff9c0a738497a05d8189dcb33e36e7d1b1303","first_seen":"2026-03-26T22:04:33.651533Z","last_seen":"2026-04-16T07:37:51.64143Z","times_seen":14,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":178,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/3f3149b85e.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:24.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/3f3149b85e.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-62368.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 05 Apr 2026 03:36:24 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-66938f5f6466751451e86b1cf2e21fcc-ce757d90ade181cc-01\r\nlast-modified: Thu, 02 Apr 2026 12:16:26 GMT\r\netag: W/\"1aa4a56ea782d8a4bc9e6ba73be77404\"\r\nx-amz-meta-mtime: 1775132137.895719769\r\ncontent-encoding: gzip\r\nexpires: Sat, 04 Apr 2026 09:52:55 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.003\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc20\r\nage: 63541\r\ncache: HIT\r\nx-cached-since: 2026-04-04T09:57:23+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3677,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3676)","md5":"1aa4a56ea782d8a4bc9e6ba73be77404","sha1":"fefb2f5a4a22d143631150f8cd218d156e8a12e2","sha256":"0b04da4aa59252194ecf06cba9ccce6bbbf33b7280531b15b474632a538007b0","sha512":"7d27ced3b891b79ae53ced3129e0b980c93c39bae70097074936c710978d18991cbeabec5af4651a2ca96ebf3648ebc482ece5c0fabbed74b8e9c122aba78774","ssdeep":"","tlshash":"537166466c78b5f6bb0781983d1304f0cb0fac2be05449eae6b4cbbc129d5952532f57","first_seen":"2026-04-02T10:53:01.701642Z","last_seen":"2026-04-06T22:26:10.954486Z","times_seen":94,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/3083a20a3f73c30fce38710d7ada9cbb.svg","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:24.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/3083a20a3f73c30fce38710d7ada9cbb.svg HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62368.bar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 05 Apr 2026 03:36:24 GMT\r\ncontent-type: image/svg+xml\r\ntraceparent: 00-135fa50febfb290cfdc605e7db390040-9113c209d06350c1-01\r\nlast-modified: Wed, 19 Apr 2023 11:51:30 GMT\r\netag: W/\"3ae81b002dca46d3b732ce3e03ae35c6\"\r\ncontent-encoding: gzip\r\nexpires: Fri, 09 May 2025 15:00:24 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc21\r\nage: 3340\r\ncache: HIT\r\nx-cached-since: 2026-04-05T02:40:44+00:00\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1228,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3ae81b002dca46d3b732ce3e03ae35c6","sha1":"388d37b5f714937677de74330a8daab0a0d1196b","sha256":"1c76b93f07c6a861c4ad9529059ea99ae69f2451788da7cab1f17fa94d54382e","sha512":"48887848044da3a9a54b72a1f15a39ac0b30ea8ad7ddc3d4c69e51bb0479f39631d4b9098d289eecdaa9648db4118ddfa38cf76ef1a58718c67d70efc80a67a8","ssdeep":"","tlshash":"e72124be434d5bfb60025fd8967802513abaf0c2f29926ed55d674227903cf4d074955","first_seen":"2023-04-05T22:56:35Z","last_seen":"2026-05-20T16:41:50.729147Z","times_seen":2117,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/desktop/media_asset/2109bdcab2eeeb5f8b317407c150d526.png","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:24.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/desktop/media_asset/2109bdcab2eeeb5f8b317407c150d526.png HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62368.bar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-21T17:23:37.112312Z","times_seen":15507115,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-62368.bar/en/block?tag=d_131637m_14189c_[]MS[]null[]PB_slots[]slots[]104402730_d27082_l220463_clickunder\u0026pb=ca7c0b52e4d34f819b39b4863c3bf0c0\u0026click_id=711da9fcce55f6105d27059d04cf4508\u0026r=slots","date":"2026-04-05T03:36:24.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-62368.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 05 Apr 2026 03:36:24 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63920\r\ntraceparent: 00-0d0df4214d4d265c157807c49dbcfbca-2448ed7e4b66b509-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"a65527fcb58f66a7cfbc0e6b160538b4\"\r\nexpires: Fri, 19 Dec 2025 20:08:09 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc17\r\nage: 2210\r\ncache: HIT\r\nx-cached-since: 2026-04-05T02:59:34+00:00\r\naccept-ranges: bytes\r\nx-shard: sto5-shard0-default_443\r\nx-id-fe: sto5-hw-edge-gc17.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63920,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63920, version 1.0","md5":"a65527fcb58f66a7cfbc0e6b160538b4","sha1":"45d260e7fa343401b5bb0df982a014f53e2d253b","sha256":"fb13c3a1cbac60649b76f7d7f85c1645d35ac69b85ce5f4eb0692505ecc2cd45","sha512":"8448e96abe326f43285b2d8b0d75beaf0e9c9e051e8754841d907b30eb303ae24c447011306da6a1703b9192d02aeff76a4517bdf94ec6e7dc360ce3538802af","ssdeep":"1536:UIG3hJMkJeK8ic5iZGnJ4URj9vqXOQ6UqYdbuA5RVK1:UL31hcLlRjDQ6Uq4W1","tlshash":"7f5302df8de32a148ff78772668885f4f4927c68898c8e7345526a8907f07d6b96c04f","first_seen":"2023-05-07T18:04:27Z","last_seen":"2026-05-20T06:20:01.978819Z","times_seen":10461,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}