{"report_id":"7f2a7ca3-6081-4932-9c2c-276b8ae7d758","version":6,"status":"done","tags":[],"date":"2025-10-11T17:37:44Z","url":{"schema":"http","addr":"refpa2518.com/L?tag=d_44402m_28715c_[]MS[]null[]null[]general[]28763638_d28986_l42736_clickunder\u0026pb=c4a963618a5742d9870d0059bcae60ae\u0026click_id=3724014758588854419","fqdn":"refpa2518.com","domain":"refpa2518.com","tld":"com"},"ip":{"addr":"91.186.205.207","port":0,"asn":0,"as":"","country":"Iran","country_code":"IR"},"final":{"url":{"schema":"https","addr":"1xlite-93399.world/en/block","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"title":"1xBet"},"submit":{"url":{"schema":"http","addr":"refpa2518.com/L?tag=d_44402m_28715c_[]MS[]null[]null[]general[]28763638_d28986_l42736_clickunder\u0026pb=c4a963618a5742d9870d0059bcae60ae\u0026click_id=3724014758588854419","fqdn":"refpa2518.com","domain":"refpa2518.com","tld":"com"},"ip":{"addr":"91.186.205.207","port":0,"asn":0,"as":"","country":"Iran","country_code":"IR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-15T17:37:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"v3.traincdn.com","ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"domain_registered":"2022-11-10","domain_rank":256434,"first_seen":"2022-11-25T10:00:40Z","last_seen":"2025-10-06T03:23:09.828129Z","alert_count":0,"request_count":64,"received_data":6618945,"sent_data":32306,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.com","ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-10-05T22:12:06.955348Z","alert_count":0,"request_count":2,"received_data":1236,"sent_data":1893,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-05T22:12:07.052692Z","alert_count":0,"request_count":5,"received_data":2058261,"sent_data":2267,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2025-10-05T22:12:07.233388Z","alert_count":0,"request_count":2,"received_data":1704,"sent_data":2186,"comment":"","tags":null,"fingerprints":null},{"fqdn":"refpa2518.com","ip":{"addr":"91.186.205.207","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"domain_registered":"2025-07-08","domain_rank":733980,"first_seen":"2025-08-13T10:15:36.915233Z","last_seen":"2025-10-11T16:02:16.792182Z","alert_count":0,"request_count":1,"received_data":267014,"sent_data":629,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"1xlite-93399.world","ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-06-10","domain_rank":1401746,"first_seen":"2025-07-15T22:07:22.317703Z","last_seen":"2025-10-06T06:22:53.394009Z","alert_count":38,"request_count":19,"received_data":999591,"sent_data":53578,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}]},{"fqdn":"radar.cedexis.com","ip":{"addr":"45.54.49.5","port":443,"asn":63911,"as":"NetActuate, Inc","country":"United States","country_code":"US"},"domain_registered":"2009-01-07","domain_rank":28156,"first_seen":"2013-11-27T02:31:43Z","last_seen":"2025-10-06T06:22:53.39411Z","alert_count":0,"request_count":2,"received_data":1415,"sent_data":852,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2025-10-05T22:12:07.136045Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":985,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_localforage_PJNUBKRP.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"7e7ebd44e3a6550f862e122ab7df6409","sha1":"384ecbc3ab0f65e6b0f88c1e68ba3eb73fad4999","sha256":"138767518a09e63d24f918f6380923893a2ec3aa59a640e51c83517501823076","sha512":"e2766b50e289dc6a69fa30432a49a0b7743f15cd15a54d707959c7623f258057a821a94285c492746216cfbf815089309b6cc09b930ba7977ff9c4ffc352d76e","ssdeep":"768:wDKAOpvMewHFuM96WwZACjzz46zSTKsBE1OvFXfX1UXk:wm8uPW43zEIOvdlUU","tlshash":"a5d2b68c7799f02683bb3070907f580ef237a912594d90a0e591e5f86dbd75c822bfad","size":30277,"data":"","first_seen":"2025-08-22T10:11:14.535778Z","last_seen":"2026-03-04T04:00:43.425133Z","times_seen":3921,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/hd-api/external/assets/hdf.js","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"0009b06af6892358f6c573335f102046","sha1":"cb899ce5fb6756d389a12e5049f2180dec2366ed","sha256":"540a50ce4665aa5a15e6afcdf7a260860e1896e77955c7ed128d1e6489bedac3","sha512":"83e9ce72ca4725bf501fe711538455aaa2fb278095d4d3938615b1907416446b8a8ed1f4f34fb296ea4c9a6d6b6e0fecbe31afa240305e7d23baa4145b2cd1c8","ssdeep":"48:Pen1yuqKi6649JoXznZwhU6fINwld0mPr6eC5/F6ALWBl/NR3vMNNeEcxHb8JiTP:Y1yuqKioolwHgObfENerHbkiTgRx05","tlshash":"d581323660ee2d3153639052d53fe5e9f229a8073968ec4831fc588a0f40f6189b2e3b","size":4203,"data":"","first_seen":"2025-07-24T09:34:40.995531Z","last_seen":"2025-10-16T23:35:31.258248Z","times_seen":2029,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/en/block","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"ade5b1e1834eff692fde5fa327089685","sha1":"9bc8765ef2a2ad646f7fb0f014fe6c0f471bcc53","sha256":"34ebb6908e7bbc5275e72b5340a3deedc2d4775e1339f612cc35a25a7b046b7e","sha512":"723f867139bac3ad7e7a8e427698a108ccf6bd217a395f4a2c8ad849f83fd1a1580ab67376385c826cb41487402d836ba79b5b166f0ae260382af0ef34af5ce6","ssdeep":"3072:gAOuM+8kGBWXGedhNCSIF3GAbCXNgW+UiHafQkAOEaati1QFyygdE:hHMMLk73GAMNf+UixZ5aaKQMG","tlshash":"bb7460724fd1ec14b2d57322ed0a0f96a17f1fa530948c7bf117bae864a854974a2f2c","size":343274,"data":"","first_seen":"2025-10-11T17:37:52.767687Z","last_seen":"2025-10-11T17:38:17.311771Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/en/block","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"580b3e56fc9ab6e8b4655f43ee057cc1","sha1":"5dfce565e446f4a167195de9a1a5dd26163c711c","sha256":"446f07b6e56de61d2c2d5b6ba408cc580b492a6d1ede8fc51cfde4ef75a2b382","sha512":"b2350579a3aaa5843b9b16c31782f3d7a4b850ba211d0074aa05d819c89ba49b482eb59aefcfb33f9fc9b270abb7cf7509e1254def23e9f98c116130c47f0018","ssdeep":"","tlshash":"e99002491d851041c56a1160041e1888442488761a40d8d1c480d9551c51630238e45c","size":47,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-04-20T08:48:48.631291Z","times_seen":13493,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/en/block","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"1f097266e2aa9fd4723dc66dffc39f7c","sha1":"1d76f1901c2ae8ed2147166b618708b83b46bfb4","sha256":"1e860064e34f9de8d47262257ae5fe52f8c690c3224338257ad20811e9147e87","sha512":"9b9cbdcbf21b48bba31dd611d02d6d03587d6ec37ffb32c606d68fdbfeb67739d0bf836a757808b133f2479b74be12e934268375b214a309d6215df5fd622755","ssdeep":"","tlshash":"7231215dfe2cf2370a12b6f9e03f730aeb7318a5692974088454b8996c74e4f6526ccd","size":1736,"data":"","first_seen":"2025-10-09T09:08:10.659272Z","last_seen":"2025-10-13T07:38:20.890062Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/d9d8f03d05.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"5a0558427ba56f41906dd90cc3539065","sha1":"8864963d87f9588b07c0af60d2b0703b6ade8c5f","sha256":"511f681c6ca4bf6276e1f68c31e90ef4efb74455a84ae401b6518966ed4a2fc0","sha512":"d169350995ae9fe797ce89f6230143edba89c0e917a1145e3bec89314320fedde5ca77fb1dcb40008ed8c6f0ee3706be20c95bd3db34b76e6c2d5c6a7c762f12","ssdeep":"","tlshash":"5551c7dd26f534b4390d4e69f91e3172c769284b32ade4f0e6ad5f24033124ce254f82","size":3094,"data":"","first_seen":"2025-10-10T08:20:22.062238Z","last_seen":"2025-10-15T07:13:09.911169Z","times_seen":206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_base-app_5bad253a79.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"432048d46e0d30083d8e1ff3e92a7aef","sha1":"22ec14ac02f6461f6dc92b083bf60bf6c239040d","sha256":"6aaf037e14162dfa74901d6d5cb99834acf36ebc343e7a69961527478b9d2e08","sha512":"5284a707ea8e4989bf82e8ded19fea10293a1e12d863687adbbc371816905b5d5ac7f97df1d66551f7c4110afde255ee5232b0acc78d8768b320e9b3ab56fdbe","ssdeep":"49152:mO3lnVV0Nuzy8hNGr6fKgnBMk2A2mGF5VfYsy:DL8F/Y","tlshash":"19759d65f016bd233ae355dae4270183b65c4a5dd409e890f2fbcde8368e811629fb7c","size":1639159,"data":"","first_seen":"2025-10-10T08:20:22.12581Z","last_seen":"2025-10-15T07:13:10.148138Z","times_seen":283,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"13d62b95fecf794319f40bb9b16e0ab8","sha1":"bab75e99914bb47783627525e4c72fad21ad5b56","sha256":"407a58158e80bc33bd90cdbd307867f5d68cde3d50cda2f1643e0d105a9e8976","sha512":"ab8287ea86f5a9d2fae136ca035acac9dd6939f0550333e38109998edf4193e9ec26371964777793edb09c15cf5b71e7f1a2f5ae9c1a9ea72cd5a433edddbf96","ssdeep":"6144:PBzT/yp2xUtk0uwbWF5JQk+Nju5204Oynh2FdXA/5:5KY2m0KzJW0xe","tlshash":"49b40a9e73d674265296f478502f01cba87b24e2b49cc8aaf1c9cdf02d7469a4127f7c","size":498699,"data":"","first_seen":"2025-10-11T16:32:51.61441Z","last_seen":"2025-10-11T20:39:57.247432Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/main-static/cc07db51/check-ob.js","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"c065700c9c8c493403359e1f2baa10d9","sha1":"4630fe729e70bdf63fa7ba6c84ec277fd1f51030","sha256":"1e61f0c82ae82ffcf503fcd4b4c8ae27b32c11e19b882d5d13f3c44364c893f4","sha512":"b2e1c73cb94f5e3ceb35c3662bf4d72baf800a9a7c64318b1db07d50e9c885dbd94821ef3b3916d1b8b4fabb8f45cb588834b41c6a8a7f4d2c3e9c3866083ee7","ssdeep":"","tlshash":"96d0a79fb900211406939267d12f8668807724973f008182500597e069b8f4c4b37895","size":219,"data":"","first_seen":"2024-07-17T14:33:52Z","last_seen":"2026-01-22T06:40:31.153166Z","times_seen":6298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/cc07db51/desktop/default/Page.Block-7a3b0ef4.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3c6b68106804e28207ab4b5578536d9","sha1":"96b5b77c84e6ffc2e8b0a2cab3ac682574fde12f","sha256":"294a53a9935d7d8ea78242e1d45c6554f71b2fdb7d47bf520c7f2f670da7b0c4","sha512":"b0bb7d84bfd8e04166a25078e721cd4b3c790b2b4bf2c75b788443ce70884722e1695a3e5c47ccad466d7318bda5ac30574df124144274496bc2f85a626d213b","ssdeep":"","tlshash":"42f09e9b5562fc8d95e610d343b6c1f7b4cc797e0649596046a1c8b532b685a4c2124f","size":476,"data":"","first_seen":"2025-10-09T09:08:10.594025Z","last_seen":"2025-10-13T07:38:20.809208Z","times_seen":160,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/cc07db51/desktop/default/runtime-77fc2f39.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"87fa57a0f2f697aad56c83824b607d3f","sha1":"a346bada369639bb18897d987c97a0a23acdfdbd","sha256":"6f167689d45515b80718d151b327787fc2bd118ffcff548937ff5d97d20d0469","sha512":"901bbbe1a2df505bc8ef563966e7c8cfd2c17a71b36a6e5c0b6ab98908e9530fda13f80f09712a2bfedca1f83829389e734ef8b2bb8ebfa121972896ac010a80","ssdeep":"384:WSp+erItnthanINgOEO+erItnthm2oUQh3s4affhQtV:ppBItthanINgOEOBItthBoUy0f+z","tlshash":"8e721f5daf1acd635d22ddc33c217d21581824375c460beceafee2194018ea865afe6f","size":17176,"data":"","first_seen":"2025-10-09T09:08:10.644783Z","last_seen":"2025-10-13T07:38:20.879104Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/cc07db51/desktop/default/commons/app-012ed0e8.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc09628af9cd6f9c4e13a9555fbdb496","sha1":"4c0e9562c39cabd612632626687e226f6d8cff62","sha256":"0c20f3f7317520e5fba671fc3f93dd80826712c04ceb6ffdb801055bd40c8c5c","sha512":"41bb7ae6cd5a83bbc528d39ea042d27c2fa6c86b6b8e2d02c79c03d17e1dc4617bba3f2a6ab536ea3814b14bbc1a106f21c91b9336c972fd7973e34c23a59a1b","ssdeep":"1536:dCrmhLG5YGf7BMr3y6MPC0UiXH2DHJjIAG3wvvjE+gjmZVBg+PWKmVjVtp:8m0YGNMrmXHUp0qXjE+gjmZV0VP","tlshash":"c2d3d5dcf695b03117e721b5407f150bf23a7898680ac0a4f266e8d53db888ea167f7d","size":137774,"data":"","first_seen":"2025-10-09T09:08:10.641588Z","last_seen":"2025-10-15T10:07:00.541492Z","times_seen":240,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/562b34a29b.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"9bf1d1e7c2245b9ade33cb3d35a70691","sha1":"18427db2644eb30f6835333354a9ed1901d46585","sha256":"8d89f7d12936adda89a93eea51a337437f98893cc3234142d8dd4efb7b1f9241","sha512":"90dc324d4de1177b952f1c3bca0508aee6c1e6b36f410cb8d111da510e84afe5c3699819937ff6c0e8224fbba4c49aa84a8592eb24ec19710239fc4beae3ea83","ssdeep":"","tlshash":"a60115653072904865eb49ce7d24107997781a01370b4ce5f7dd86b7405a18255ba886","size":740,"data":"","first_seen":"2025-10-10T08:20:22.09072Z","last_seen":"2025-10-15T07:13:09.94482Z","times_seen":206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/captcha-api/assets/hunt-captcha.js","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc87b27db434ca92aea6e1a1ceb5b78c","sha1":"905e65010d66d0bba5836f44cfb27ad9cda60051","sha256":"b7c2d216440e81574ce9b359404af25382d21f6d06b31162e1d56d97e721f117","sha512":"c93461ca41050b2ed4cf5724b61293de852034eb5cd9856e5af84ca3569584db0df14c267a9350839d3fbc4b536d416a56b8b7b0cc4f67c7770660212dc99912","ssdeep":"768:mfqz/IppUgutFIIfCpFujCbsboXim9ifscjA6NecfjCdjhACLiZhT/rAztF1TP7C:xEIW0BLIS","tlshash":"0693de857de2c08793d35bd6923f4cd8e87504cb66966f488812f91bf9ae86783d4833","size":90808,"data":"","first_seen":"2025-09-24T12:37:05.081519Z","last_seen":"2025-10-24T09:11:09.901149Z","times_seen":1174,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/en/block","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"00beb9884d0391b342eadd30744b539a","sha1":"3124c0bd593822379d22f13d3e08e70a1bf5ea14","sha256":"92394eec5690449a4f6cfc9a7f97497a69e926b2365cb9a9aad3507a844f835c","sha512":"6fa2e21df54ca406f570cb639529d68edac5de27fd4bc3a9daa8fd0465b583ede1c1cabb550237deb75d8bf88f39e80c1a77777d794826ad3272630108e58661","ssdeep":"","tlshash":"539002492940210685661152001e5c58411491b094906c9140429c551d52020125ab5d","size":44,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-04-20T08:48:48.639391Z","times_seen":13499,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=DC-14030178\u0026cx=c\u0026gtm=4e5a80h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a2c646ed32e30b583c70565d5e3ecc6","sha1":"e79e038c5cfddcdc1ff686c6345f7b3b05e2bab4","sha256":"a39c6d64b93d53c060218d96669d6677b61b9ea01a13319de917e7857cc72362","sha512":"4064d7e65447bbacaf3906998a04b1adbf044a5e095c8af5fa1a55ce4adc59da14ae78a5676bb21ff3b3a52122499f1a9c15bc2c01c066cb7aaa06fcec30d098","ssdeep":"3072:ydPpjam+So4ypg106s6VIkDcajIu1yeZGbQ9hJ2RT8PWNjxW55204O/XYAmCRs1a:Oj/ypg4hk0uwbWhJT+Nju5204ObtIiZ","tlshash":"666418cd73d674664393a478503f004bb17b6992f84cc898f186dae52e70aaa4277f7c","size":323823,"data":"","first_seen":"2025-10-11T17:37:52.64901Z","last_seen":"2025-10-11T17:37:52.64901Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/en/block","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"94361ed86ab9b2fbb8d805c2025df46a","sha1":"3f428332f7a1c7196a85c93a373a966d75708c19","sha256":"eee4d228a49a86625f29410cf9a23d145e821a09cbb1f7a4d7557d206872715a","sha512":"c8f4fb7c642357730c6c59e0b49fe3ec16c228d83d4ce402dc62f01e451529b8087240afca37096cebdaaabf47c189dfde5e6e2d780440f663f0e2bc8cf88ff7","ssdeep":"","tlshash":"f6b012df6c8351104a9292e001dec8f0443620303b00cc45544ce7716d2e865de2625e","size":96,"data":"","first_seen":"2023-12-06T14:32:27Z","last_seen":"2026-04-20T00:27:28.186803Z","times_seen":7974,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/cc07db51/desktop/default/Betting.Core-73b4b31e.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"7905e935481c67a930dc184c5c48e6f5","sha1":"a91b59285d4a4a5ce9f1ba3863d2f5a4aebb2cb7","sha256":"71370ebbd4e6c7757e4604725e8134a233eb3bb49a36d398257e2e67ac3a209e","sha512":"b8c7b558e87d476824f751ada6de6a5382d77b1dd9ac83380913fe37f55909d1bdb8dfdb8669e80179f4cf666a274af311b089b4a130648ae2b5ad8824731b79","ssdeep":"","tlshash":"e741e98479d2b804877e40dd80ff55e5f0be2e69394d05f8a603ade47138a8ac0f6e85","size":2071,"data":"","first_seen":"2025-10-09T09:08:10.654759Z","last_seen":"2025-10-13T07:38:20.854298Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/$_$.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"2cdaa92927f02e0b628f1ef4d7dd8caf","sha1":"9104a2e16ed080b80a42588b8aeb52ebec47ab7a","sha256":"ef8101ffea52addcdcfcc3a83f96ff2d4613fb3ae6d1c16bbe4852387b73a9db","sha512":"31da80bc1b17aa708fef74b0211af91fce1b4a5f518f11e5caa80f50e9a7791b6e94924e381f550fc44a02f4c1d785e5b95fa2464e7968b5cab079612d70d839","ssdeep":"","tlshash":"1ba002935a5ef66c209044860696e74733823d6a3477b1d625bc5509e6061474817257","size":69,"data":"","first_seen":"2025-05-14T05:06:37.199299Z","last_seen":"2026-03-18T19:40:26.76398Z","times_seen":5502,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_vue_deps_FCX6UWBT.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"588b298e9096c73f4d84f2961d4378ba","sha1":"568c0ac4c8540c21caf445d8490348a9929143da","sha256":"cc5353d60fc3bbcefb808e19d05925ab3fb0cff09092317813265725e95fa808","sha512":"a093cd11cb064df4b612ee5ee7128b352a1bfd951eaaa68553cf0aba097e9561774ecca5d78f3e0b6dbea18d21bade34a0d18426d66e0b37f9f67a439d7d3051","ssdeep":"768:lwZ1yyQBOuHJ3aUiJJUfns+/C8vsqJlm8qgqYHg7FD0v341KE:lwWBOuHJqUiJJUfns+/0qJlmbgqYHg7H","tlshash":"65e25cd8b779bca2335e908c90370323b37559e7484d9020f7e65e9235a5a0282e7f7e","size":31184,"data":"","first_seen":"2025-10-09T09:08:10.597929Z","last_seen":"2025-10-30T11:27:15.273914Z","times_seen":1015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/4685d7db89.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"0817fe2f18858d77f0eef9ccab224001","sha1":"6519a59086ad990b8e800fa02c06123ea77ad09f","sha256":"275b17f1dd22d96dd4f3c835f0e6e7cdaa1cf28abf00b18326cfef20c55597bc","sha512":"45934208626f47854ca20175174126bae3ffdc9c6b1624212940984475accbb0b5f6351438535f2ab5395872b56a62cd2bd3a5ddc21b450e3d15fd44fc690196","ssdeep":"","tlshash":"a9f002be9d3391606102449a5d1ab422c2c87d7b075e75f4c1ec0653a7130968a06ac7","size":614,"data":"","first_seen":"2025-10-10T08:20:22.00017Z","last_seen":"2025-10-15T07:13:09.908041Z","times_seen":206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/en/block","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"eval","is_inline":false,"md5":"607823a6683f7372ee9267fdf96089e0","sha1":"95942b192da608a5e061609dbf9009528f704fa5","sha256":"8ed053dde688f42463484e4543bd571da37c1e5274a9cc4ef46cfbb4a54eb90b","sha512":"412907880fe47eec3e40079bd131b2b8d2be6f0426d4f0f19ab866c9770195bc668d258400a6090dcaafd2b4621df49da940c54cb12899d21063da3070cc605d","ssdeep":"3072:ZYyHJqtrSonin9pdBtwIXQjicEp32076bXV2YQEiDWfGZQPQb4KI:KVowwR320UXFQEizZUQkKI","tlshash":"957461724bd1ec1572d57b22ec790f96a17f1fa830a8483af047fae8649853474a6f1c","size":356289,"data":"","first_seen":"2025-10-11T17:37:52.677406Z","last_seen":"2025-10-11T17:38:17.280677Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/en/block","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"7bcdb973ab8af8e24ab11cb554a1ba6e","sha1":"24e8a10f240f2b06f81d7c173cd0a90606641fc1","sha256":"916ec4eb9b485eb47f43a17fe212e84e4b72600b45eb6d4588599ad495a57fcd","sha512":"1d890761e2a00081531fda5c0489ebf4df4140a9748bdc6d97bd355023e3e4ab09e19663ab319cf775e28ba71d99ab09f20d5414a561fa10fa3be2cb874484ca","ssdeep":"","tlshash":"e380044710411010cdd351d040573c44001044f114c4dc500040fdd11c53030110545c","size":34,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-04-20T08:48:48.637719Z","times_seen":13508,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/cc07db51/desktop/default/analytics-25f6949f.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"cedc4c6b9d2f678746d1c53775846966","sha1":"329f9c237e65d41d0e7b63a3527566251d0d1234","sha256":"9ae350abf52f1e87be930a8e98726d455fc0e25628cb7bf7d32ff3836a78bfcd","sha512":"25bfc98688703b1cc952f18c7cc7deaeec7e700f9f2a0039aaf3a95fff96f9f77172b2abe55be550a432b40c42719b3fd682cdf91962b9596cfb71116443d939","ssdeep":"192:uvO+jPZxnEW5+vtj33Veo9vshudWa4w7WJ3vQ9OPkPQzVHvOSRxG8km:CjPZxnEW5293VeoFbdWa4w7WFQ96kPi7","tlshash":"3002a68e7dc9e43007ba19b8e67b9a0ae07617172405c451cafad8843d7ea8f1017e8d","size":8842,"data":"","first_seen":"2025-10-09T09:08:10.634388Z","last_seen":"2025-10-13T07:38:20.82927Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript,export const meta = import.meta;","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d772b7d405b447ecee54ab61cdd5108","sha1":"dd65fb9cd5a7cb94a40fe161f4f72303a61eb3b7","sha256":"b90ff694e492935b6036fb7e878d365dab51aafa46f0afb1e33414e7ecc3307b","sha512":"a3947640368602c9fd9dee887bb1a7e463890ff42e2ddd292c377593c5fad246d3e3363e9898cd1e5ecda9c59b5cf7c7cd0acfc2a5a1e5d3acec2cf0d62e20b2","ssdeep":"","tlshash":"1f800003800802380aa0c880028e80b00ab222203f00c08328088b302e3b08aca332a2","size":32,"data":"","first_seen":"2023-12-06T14:32:28Z","last_seen":"2026-04-20T00:27:28.200983Z","times_seen":7973,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/cc07db51/desktop/default/vendors/plugins.vue-notification-64139c55.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c0c8647f5528e52de30bd173aba081bf","sha1":"830d69596f1078378a80d50e602ccd4d41f0730e","sha256":"0e7f1b08e5a38e5948c72ca7d0b9edd58ac015ef043bfbb5dac77c00640f5c55","sha512":"57890dddce9598d9e2ce7a8387f7c0e36157f0fc7c2f6468713eb8dc2c8ded1de34dfff0aae51c36ef898de6d183587b5d758a7d87337b57e11397b10c2f45dc","ssdeep":"192:zU1hQXHv3CbfKpqEVwhSIkrReP+SdHtfGA2D3ow5EE9bJ52bFZLy2mp4ilVj:zn3CmpcDkAP+S/fGAWf5VbWbLy2mmijj","tlshash":"2e4296ceb2c2b4650be760b6402f110af136a96879ab54d4f3b1d4f2adb564c413bf39","size":12563,"data":"","first_seen":"2025-10-09T09:08:10.630187Z","last_seen":"2025-10-13T07:38:20.88464Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/cc07db51/desktop/default/DC-4d1e2556.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fe361b33c23c71ab4f487eff692c593","sha1":"59ae2b2ffee09f5f13f41ecca9a03636ec368371","sha256":"4c601f6012999e4d7322d0b150793fced8afb3a838b3db78292463906ed8d6f1","sha512":"ca41c5a737737802a04fd85e1fbb18759b663e5d8b4101954555ba21242a0bcfb7b38df969be3db9c95ba3d0f40409cb7a9d29d15a8d02d1b2ba0e07968dab3c","ssdeep":"","tlshash":"ce41840930a4fc1193b50cd859bf71051027f076648dc9b4d3a36a8b08b7f66a217916","size":2201,"data":"","first_seen":"2025-10-09T09:08:10.617419Z","last_seen":"2025-10-13T07:38:20.885207Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_chunk_LNU73JEK.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"d96d317966512ab8915a90670ca5a5af","sha1":"a810be1c3e515adb49804e8d976250deb16fd77d","sha256":"f125201d62c452efba070d856821885c7cfd539a31d55846caa6ae3a7522d3cf","sha512":"460b29966e6f5ac4d34ccc714217d29686d7aff42efa92a102729d40aa36dd4fbb87116178b2f9fdece5fdb09cb2bf2024312d3f1b86abb69644f695c76aca2d","ssdeep":"","tlshash":"a521f1e56fbc7ba362be2ae4a02e0041e001d53752f4f1d4f294dfb4a4e949d035b5b6","size":1232,"data":"","first_seen":"2025-08-22T10:11:14.554562Z","last_seen":"2026-03-04T04:00:43.411503Z","times_seen":3921,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/entry-54e6bae020.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ef8b59032a2c8ce8e96d50142ae493f","sha1":"2e7d825f19e671173db5291e78d1131001973315","sha256":"eb00be877d7e9352ef37000e11aa067fbaee61eb52f83491952be1dc1b48e680","sha512":"c930dd560446fd142a28ff3d84d2ceea113ca988d1e932a5100dd96f5b0d1984ba8aef9509a2a237dd000f149f2a40017e55c3b2a508840b92a9679f7304babe","ssdeep":"384:HlORN7ay1ZxtPlaMrVWT3Cj5lWg5KKbeXndKolTxolw893tEeLcl+96VWBHDCid9:HlSV1tP86WT3Cj5lWyPb8dKolTxol5cA","tlshash":"2fb25f743597b0b625da9a582739bc43d3c80e6fac8bfde2508a49e617d308c80527f7","size":23752,"data":"","first_seen":"2025-10-10T08:20:21.911259Z","last_seen":"2025-10-15T07:13:10.046782Z","times_seen":206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/hd-api/external/apps/c5e31d5915661de4393e3f1489b00ebc4497dd48/api.js","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"32053c9c355cf85427a5cc3f07de0b09","sha1":"f3c13d6a657ffa2ca8997f54f4779f0c02f1600a","sha256":"0ec410318f3ecc3a3aef3de68e99190845248bcc12282aa15eb9acc87f8837d3","sha512":"cbb8c7ef0bbed264989bf5b4af7d216cdeacc5684641c37d429e5ceca7dc04e55254e81f319cd856e7b4f447565bf5abf4e9915f5725eb57cfb142f113362078","ssdeep":"","tlshash":"2211756e18ed58291a9275c402b7ccfc642036363219d4c495ede9e1072ff990032f5c","size":1024,"data":"","first_seen":"2025-07-24T09:34:41.13762Z","last_seen":"2026-04-20T00:27:28.160396Z","times_seen":3909,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"radar.cedexis.com/1/23802/radar.js","fqdn":"radar.cedexis.com","domain":"cedexis.com","tld":"com"},"ip":{"addr":"45.54.49.5","port":443,"asn":63911,"as":"NetActuate, Inc","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"82dec77fd0353c7c71ce053b8601387e","sha1":"fbbca95419e1d0c042e0a5fdf10f380aca66188c","sha256":"39f2b7b0fa78d37d0c84d2d6618bd635d86fd683d9bcdd5729850cb2a62522f7","sha512":"6872c895cb44711405e57a436dfbe15d094f9159e11ee2b89983c63b1f18f6acbdfaf0ccbb5e48b2bf24f366f16584c660bca4b6b14c048a134bb77a60f6563e","ssdeep":"","tlshash":"02e068ae9391a318537a2dbacc4e060ba0f6114888e5e4e029f5c2c00461bae072bfb4","size":390,"data":"","first_seen":"2024-02-13T14:23:26Z","last_seen":"2026-01-15T12:01:08.184588Z","times_seen":7496,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66\u0026cx=c\u0026gtm=4e5a80h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"06e37c725adda579deae9f2454bf367d","sha1":"bb1ce8ad719d6dfeb23bd99e50d5e45b8a3bdb8a","sha256":"48274b6a8a74b4534d027cfaa496ce5bf42ce1601a6192782864f1928c5431de","sha512":"b4fd902c56a735ae316266ccbbdb81d86cf6438fcac5a12162b3865ee1682b605c8af34eeef833162c7df9fe5ead719d6b99dc9ba87923c691fe6ef0cc80756e","ssdeep":"6144:PBR6/yp2fUtk0uwbWF5JQk+Nju5204Oynh2FdXA/y:5RYsm0KzJW0xR","tlshash":"94b40a9e73d674265296f478502f01cba87b24e2b49cc8aaf1c9cdf02d7469a4127f7c","size":498715,"data":"","first_seen":"2025-10-11T17:37:52.774314Z","last_seen":"2025-10-11T17:37:52.774314Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/en/block","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"3fd42e787f6a13d15a1c2700a0446289","sha1":"26f0ab1a0dd013cc879a8a002ae66c567e9e066c","sha256":"fb19f365f22870c6810e70a773465ae3c4345687e1c3ca62be59a75c5aa4aefb","sha512":"471ee47633b194208b6f39b6218693fb1b81a9999c1a709f6c69a13ac1042bd1377e541617e989d98ec49948a79977cab6471dfdd25b1fbff94307fd2674dfc5","ssdeep":"96:Dhgx8q0yK9g93QklIelj+5JkcqmQrv/gKrkhZkaoQFuBMOfQtSbNClcx:1gCq0va3New6hDQrv/vkhIQtSbNwcx","tlshash":"d1d1b492e41cfa2fdc23891ef06b2f310e44196879927b10e6bc8b2d34971b5e31764a","size":6262,"data":"","first_seen":"2025-10-10T08:20:22.118654Z","last_seen":"2025-10-13T07:38:20.897083Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/en/block","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"eval","is_inline":false,"md5":"82002607990a1657b5204f2b635bcfda","sha1":"dfe1d4bafb6e9ada2a84b8003d5cfe9ded329527","sha256":"53c2a86a80d975468e22b2be31509d8b95776b9700d195c28157495b32f9ceec","sha512":"2237a297629c3c38ee92abb78a96ef03f513d172791f3c9fdb229e65ec07f79389719866cf127719ead83ccfdfa2be0c83dbaf57ca2138b431006b40d3ba9a41","ssdeep":"","tlshash":"fa514111e03c5a3bdd37052e920b7f125fac55a26a892f5cb61c4b7c26d60ce91136cb","size":2687,"data":"","first_seen":"2025-08-22T10:11:14.627317Z","last_seen":"2025-10-15T07:13:10.145281Z","times_seen":742,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/cc07db51/desktop/default/vendors/plugins.vue-js-modal-286e1a49.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"4214e81acfca08eeb61b346890063089","sha1":"cdf96e78e65fcbd0d63e2de0760073bf192e4c18","sha256":"bbacef6f06001018e9ccdf88c05047fdc8e9e2cd7d7183d957c3c29d280f8d94","sha512":"06fa8feb97f6c80d4b5699701882160e5a64364355bb0e515b2f63e34e4004cca488b058701c08b4bec747f9270de55566a3228a28fac4e00566e61c31936716","ssdeep":"384:lBy0a9vOeCGAZIXfK2rVsAdm00uow4HQEjacGXGQVe6ubq1:MHyIXfPt4wE9GXGQcbq1","tlshash":"9dc2288977d8307442db5573627f2b0ab23e295474269888f772e8e65cb864d206ff3c","size":26667,"data":"","first_seen":"2025-10-09T09:08:10.584638Z","last_seen":"2025-10-13T07:38:20.818899Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/en/block","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"domTimer","is_inline":false,"md5":"01f4b51b4ba7edd00ad9f0a22259f06e","sha1":"00723d0eda4be61a7b1c542b0a08a94a94a60017","sha256":"9fdac1c31a22f55dbb8ca225ee28c3f7e88b41cce82968af0018c9f8b3bd35ba","sha512":"83d180c9960a53f88da3e3ff8616b4e095b7d642182f5855cfa386d48a19b888fedbde6433d1f926d9dd93d0a813a24590591729a6d8393543dfc490efee2070","ssdeep":"","tlshash":"29500000c000c0c0c000c03c0000000000003300c0c00030033000000c3000c0000003","size":10,"data":"","first_seen":"2024-09-21T15:04:59Z","last_seen":"2026-01-22T06:40:31.224966Z","times_seen":5888,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/en/block","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"4a2e9fbb88b4cdcb27da48ca678df5d1","sha1":"245b6d2b321507d0902a1ee318eafc07edbd0098","sha256":"1edad743bff6966d5c0098591707d65b1b9fffb49f16daba04cf0e313acc6c51","sha512":"1b509d6676026f0c5cbb1f5176f424508f1f83ea93921df44c16fe549cdfd392e86016179f3fbc280b07748b1906a477fc33f022f228c73fb8583eced3beba61","ssdeep":"3072:95/FLEsIOqevBJdqMkSu8YXK5ysIONevBJdqMlRJHR/98lD/uc7f5ubKO:f/hFBiZ8HSBLRgD2c7kbKO","tlshash":"c434952fa50c0c3e911f1fb9854f6d4e57bc9e2a20cb6c41dcaeae6914e3694426347f","size":241208,"data":"","first_seen":"2025-10-11T17:37:52.778338Z","last_seen":"2025-10-11T17:37:52.778338Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/cc07db51/desktop/default/vendors/app-fe0bac3e.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"081091d7b9c5390f5ed1f3a3dfc9912c","sha1":"752abbfcdc9d71ee44db17dbbbe7e6a1fde5b8db","sha256":"e0b00ed55705a4119585255201d4011b55b58ae4d8c51b94164fec6daba70ef1","sha512":"0124a60d5ca4486536c1f9fd7201aa7c9d890b61aecd86394a9fa6a931154ffd34f9a01173b8ec240f42948cd70107e7695c8a0cac19894d17560b05ca51773e","ssdeep":"12288:+dQX/yYLg4k5BXYWg1FA4OIaries0zY+r4Uuj0dK:pX/yY04k5BXYWg1FnwOBpk4UE0dK","tlshash":"36254ba9b580f2560aa36ae9d06b0057e33d6f1eac0cd454f2e7cdd5395a804713af2f","size":965291,"data":"","first_seen":"2025-10-09T09:08:10.557501Z","last_seen":"2025-10-13T07:38:20.886767Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/cc07db51/desktop/default/app-1dac4961.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"80b4479c54a04b35e12e64da2750ff81","sha1":"49c273cf36fcf80cca0069b50725a7bc33906e0a","sha256":"60921accbc77b5798bc446a184bb3f1722058cf3232141f577003f31c39e4288","sha512":"65289bdffd47ebd670ae49eca0240038ec84cc1c2ac9b699969da68e407f522e4ef7a7348f99221c6f0e948fbf6e5292892d2657d138ab32c31c6205e245236c","ssdeep":"6144:mhtJ/dA4/HS2Oqfut6g/Xpd4gqZIkLhuinjfG5xdpvzzQ2kvc4DJMv+7uxtgOjHh:C/du2OwZEU2mz8FgF7jcupM/7laZP3DI","tlshash":"afa44c65b5c8f4ca02f34bdae03b0061e33916a9780dd064f779edca359bc05916aa7f","size":482370,"data":"","first_seen":"2025-10-09T09:08:10.602424Z","last_seen":"2025-10-13T07:38:20.846353Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_fast_deep_equal_RNYYWXHZ.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"00e44cad05af09626c2b10aeee7de5a3","sha1":"4461fd05cdd85255f4ab24edd5ac80e7b6dec92e","sha256":"5277a86b8db312b1e34318cb994829e113d8204c3a2e88ab594e5135b2bbfb2a","sha512":"548bf615b1118881d21a0cfd2d530b3f0ce1e14cc93cb6afce662b30ac70877fa152fd71b5d786bb2e43e31a1980e00b83106b1f4b3ae12fbb2ddbedf6c81841","ssdeep":"","tlshash":"901159c232e3a0d183e058cd1001d906f23969e9a4bca0c9c757e6b93cb2a53d87672a","size":865,"data":"","first_seen":"2025-08-22T10:11:14.567955Z","last_seen":"2026-03-04T04:00:43.420123Z","times_seen":3921,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_popper_js_WZJKYEQD.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"bea5b052c307601192270938523fa030","sha1":"937f7094c67f5a92c1032a7bc3f21ee94bec66ef","sha256":"f41290374ba615854ebb4b28a07de775581707f3b6427bcc01c0529c62476f64","sha512":"b9bff7f7d9b518ec76898a732114873c01206378c2a840c62062f05487ef773716ce841d7a5bafe3f0c65fbfdf05509852571a3a6b381661cb6f4984d6bc23a9","ssdeep":"384:ZP7iayBuR9vu3z1JXvykd2+LaqHdC6RjVnTGm/7piCXmH8kCCcvJTCyCu+meAxiZ:piZwO3XvO+NMSJt3XmckXcv4nxJAxiH5","tlshash":"7b92a28c7684b0a287a7a2a7a07f860f71376865650e9004f59cf6ec3c35dba507bc7d","size":21252,"data":"","first_seen":"2025-08-22T10:11:14.555802Z","last_seen":"2026-03-04T04:00:43.408775Z","times_seen":3920,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/52e53a795f.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"de9767672e37d01368307ce25ff74b20","sha1":"b5ad1a7b4595e68bad228c55c70c587c0367dcdf","sha256":"2759316b02e85ca5d60ccea4ee6b6a78bc34161eb71af65fae76becff7511597","sha512":"0b677c71b18d29727c01c914df632d60790d8257ed249063ff4c9fbc8c7cafe2d7ea9dcb083d0ed773d7b8dc3e024e0b048b1b0bd282ff0f167ffcb444c2c721","ssdeep":"","tlshash":"8e41c899b2b131f2e677415dbc0660f1c3083a9d132e10e4d9e9484e220d9c32767b93","size":1973,"data":"","first_seen":"2025-10-10T08:20:22.093204Z","last_seen":"2025-10-15T07:13:09.82704Z","times_seen":206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/1ecdf48086.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc8cd7bf36b06f593e107c2eb6b35d6b","sha1":"551b1e327da31b35a855790e4a7dc32217316441","sha256":"edea30d56718a55248281050d23c6c1a9f35cec230187e0aee336ef74990d42e","sha512":"8fc950e0e1f136b0305e59d1742e6543da5f434ea33b291eb519dd95f7df96c9632bf9f0aef4646402e70ab825bba5ed6e4a47bfc894915c3b0b997acab74041","ssdeep":"","tlshash":"9661b78178b5a0f9791741893d9270b0e34b1c7d534816b1f2f5888823bd2885f2e6db","size":3201,"data":"","first_seen":"2025-10-10T08:20:22.066554Z","last_seen":"2025-10-15T07:13:09.989348Z","times_seen":206,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/cc07db51/desktop/default/vendors/plugins.v-tooltip-a0ae9558.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"81f776939697aeb35b2a09f79184914a","sha1":"b8bb440cec23697c666fe3857f74e312f8892ea2","sha256":"00a1637865b01c6cb3cf40cc3657430eb28e44c26d912083a3055d25fe321514","sha512":"e70ddf1f7d9cabc699a7dd363bb1f54697f405c45bdc1ee62876a909fdb4d35f24156c2fc70a26f7b1d2adeab0d553a1e911a456f6c1e293cc1f98fde306ac49","ssdeep":"768:zV3wtV8NCDYtjEcOFL1WMZI+7tSCUC8Lk7t8R6zk+BaNfSby/Qw/Hcg57bh0PGBW:zut6NsYFE1L1TPRSCv1MHkWdRfm5QQ","tlshash":"0773c78e7390f0b203e7b175413f620fb2776558b40ad414b2b1e6d4ac3da5aa267e3d","size":76824,"data":"","first_seen":"2025-10-09T09:08:10.643379Z","last_seen":"2025-10-13T07:38:20.817996Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_accept_language_parser_LEQ4UAP5.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"83e311eb8e222d229b6177bd007ce9eb","sha1":"96b851ffda0eab794c2bb637255a48ae25770144","sha256":"d0ff62de588e1c47eedbd91a89dcf394e2ec5bd09392ea556b9a34108077e9ad","sha512":"fd2e1bfb6588598e356ddc08724c2e6f602b89626b30eeca2c25b8f60340f25e28a761b8e13b75d1627172530abf7dd0e586e792f53759d08bda626145f65b0d","ssdeep":"","tlshash":"202112debed2b5908394188c4e2ec055f23a2957641ce6fcd765e7827c403a186f3c1d","size":1297,"data":"","first_seen":"2025-08-22T10:11:14.559442Z","last_seen":"2026-03-04T04:00:43.42063Z","times_seen":3921,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/en/block","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"2092af1a5ff714fe557788d0c0cf7e8a","sha1":"5e883902207e4a5f957bb4a98fa3631bc40770d6","sha256":"1d2aee86e0eeb7540fa93fae6c3f47d5c8416f502473044727e2996240f6c430","sha512":"cd0e89dc0858ba642f71fbfd9c8acde14b313704755401750b6a5ad077f7b48228d3129d9a582f283b4210a7fc6b9c6d09fdcc2ef60dc645447a870b576b9f7e","ssdeep":"768:F7If/w9984iH2Hgrm1WDSVVsboBem967sePAGNsQfjCzPhCCLiLhT/rAztF1TP7f:Q6HWmQF4B","tlshash":"db83ed557de38087d3d393c6963f80d8e97504cb2ad66f488852ba27f9ae85783d4833","size":88723,"data":"","first_seen":"2025-09-24T12:37:05.164235Z","last_seen":"2025-10-24T09:11:09.932463Z","times_seen":1173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/en/block","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"bc51ed8c76553717f10d58b2df60fd76","sha1":"e2d03a8fd8d280074b226c288880f9df299c7cb1","sha256":"bee994eaf88453f6343ba57571a069054c12c9b4e42f8cbad4f2ad75c7fb264c","sha512":"3207379b65060d0e80623fa966633b5ea31358b20de9aeb2c9416fa7d29f1972bf30809e39f0b826565e569d856dd2498ee0ec5285271c127f54daa7cf391911","ssdeep":"","tlshash":"489004473441140c47d7175410375c4c0c1500705441df400451dc510d51031114545c","size":39,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-04-20T08:48:48.652385Z","times_seen":13501,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/en/block","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"a01893d8e129ad16c1e0fc5c7537f411","sha1":"0e46d1bf2718f848d9d596fa269eaedb31204772","sha256":"cbe7b89533bcd75b69f3e54807308551d68242ec1761e63bee1a99fc6e560175","sha512":"074e309b533fc11690afbeab9b4dda85851e086c0ede97936860c7a5c4120ed9a16c6ced4fffdad21ca322f6c6e51577bd4966c5264b4a9780495acc451aee65","ssdeep":"","tlshash":"0d9004f515405350c5533d54401f1d5400f105703c40cc71014cdcd10c710f0335d5dd","size":47,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-04-20T08:48:48.638545Z","times_seen":13489,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KFGPRJ2V","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce8a94d9c8a62a8d568b15cb7eb960ef","sha1":"dac3545d3acc7099f9c4cc557eb352f7b6887050","sha256":"af993a8d42c9330e17fd18b94b52f3d090e10e0a5f3231f82174469566608e09","sha512":"ec49a02e23acd0cf9709333268ece2cbde5f56686e61193597b2709ce5fe9a32f22bf0437605b5d440bf8f8254c9518b7e0535fc3644b83f5096b0828d1584cf","ssdeep":"6144:Fx/ypxWhk0uwbWFiJQk+Nju5204ONl1QY5T:u2C0KIJW0vE6","tlshash":"ea7419cdb3d674628393a478503f014bb17b6892f44cc894f186dae52e74aaa4277f7c","size":361040,"data":"","first_seen":"2025-10-11T17:37:52.599563Z","last_seen":"2025-10-11T17:37:52.599563Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16664555628\u0026cx=c\u0026gtm=4e5a80h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f915c3849ca41038b5a3df2b2d8ddeec","sha1":"d0eab33a85e3760dc8a3ad9babacd8cd1391685d","sha256":"6cc5f302d83a02813554ddeb6183cbea51e92c38052a5d85bc661f51a9d1afae","sha512":"cf4b8b1e87cd5d5aa5a6b9f666de0afbcb3c1c59798c0af5897403a747504d0ccd3567e1ed404ce43a56d8b62591ae940bc85c9c85af252b451effb26b3c9867","ssdeep":"3072:wF8kv/pHam+So4ypRB06s6VIkDcajIu1yeZGbQ9FiJ2Rh/8PWNjxW55204O/bAmR:UH/ypRUhk0uwbWFiJQk+Nju5204OMtmT","tlshash":"6e8429cd73d674225393a478503f018bb57b28a2b44cc899f186cee52e74a9a4277f7c","size":372076,"data":"","first_seen":"2025-10-11T17:37:52.60303Z","last_seen":"2025-10-11T17:37:52.60303Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"1xlite-93399.world/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:32.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 25ac04db-8eac-4fe0-b7b3-f2c25e413e55\r\nContent-Length: 109\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder; postback_watcher=%7B%22tag%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22pb%22%3A%22c4a963618a5742d9870d0059bcae60ae%22%2C%22click_id%22%3A%223724014758588854419%22%7D; auid=uaJaGGjqlc9YPwDvA8rBAg==; window_width=1280; che_g=f92bc74a-16b8-48b3-bebb-b1ef175b444c; SESSION=923003ddcebe10aa36e61c6a7e16c5cf; _gcl_au=1.1.643817387.1760204251; _ga_7JGWL9SV66=GS2.1.s1760204251$o1$g0$t1760204251$j60$l0$h1496962849; _ga=GA1.1.339470072.1760204251\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:32 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\nx-dt: 285\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.006, wf-uht;dur=0.002\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a3ac276507a2d293a4d04dfb06230a58","sha1":"4e484ee0b5083cd6eb2215eeb30ac2fc0973576e","sha256":"2c61717a028d978016d5976c43706615e2e9dc440bee9153c3bb76ec6103ff39","sha512":"5822a928548a6cfda0e0d216018363c87868f31e43dd9dba141bddca549fa22174dc8b9cb5c3402b6531ba8886e42347ccb870067fff6f765dd8e88535baa994","ssdeep":"","tlshash":"8f7000a22282008c88820200232008282832c3008000082802ca20828a00ee0080b822","first_seen":"2025-10-11T17:37:52.563325Z","last_seen":"2025-10-11T17:37:52.563325Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/cc07db51/desktop/default/commons/app-012ed0e8.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/cc07db51/desktop/default/commons/app-012ed0e8.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-0d7daafb3ea8191eaf0dc15cd707047d-a0489eebc7940f7e-01\r\nlast-modified: Thu, 09 Oct 2025 08:38:03 GMT\r\netag: W/\"cc09628af9cd6f9c4e13a9555fbdb496\"\r\nx-amz-meta-mtime: 1759999082.312199135\r\ncontent-encoding: gzip\r\nexpires: Fri, 10 Oct 2025 08:49:25 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 31090\r\ncache: HIT\r\nx-cached-since: 2025-10-11T08:59:10+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":137774,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65468)","md5":"cc09628af9cd6f9c4e13a9555fbdb496","sha1":"4c0e9562c39cabd612632626687e226f6d8cff62","sha256":"0c20f3f7317520e5fba671fc3f93dd80826712c04ceb6ffdb801055bd40c8c5c","sha512":"41bb7ae6cd5a83bbc528d39ea042d27c2fa6c86b6b8e2d02c79c03d17e1dc4617bba3f2a6ab536ea3814b14bbc1a106f21c91b9336c972fd7973e34c23a59a1b","ssdeep":"1536:dCrmhLG5YGf7BMr3y6MPC0UiXH2DHJjIAG3wvvjE+gjmZVBg+PWKmVjVtp:8m0YGNMrmXHUp0qXjE+gjmZV0VP","tlshash":"c2d3d5dcf695b03117e721b5407f150bf23a7898680ac0a4f266e8d53db888ea167f7d","first_seen":"2025-10-09T09:08:10.641588Z","last_seen":"2025-10-15T10:07:00.541492Z","times_seen":240,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_chunk_LNU73JEK.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:21.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_chunk_LNU73JEK.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:21 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-8594b4122c9d3983fb7a4e31f9dd829d-4380e18a68514d93-01\r\nlast-modified: Sat, 11 Oct 2025 07:54:19 GMT\r\netag: W/\"d96d317966512ab8915a90670ca5a5af\"\r\nx-amz-meta-mtime: 1760169203.657785945\r\ncontent-encoding: gzip\r\nexpires: Sun, 12 Oct 2025 09:30:13 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 28879\r\ncache: HIT\r\nx-cached-since: 2025-10-11T09:36:02+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1232,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1231)","md5":"d96d317966512ab8915a90670ca5a5af","sha1":"a810be1c3e515adb49804e8d976250deb16fd77d","sha256":"f125201d62c452efba070d856821885c7cfd539a31d55846caa6ae3a7522d3cf","sha512":"460b29966e6f5ac4d34ccc714217d29686d7aff42efa92a102729d40aa36dd4fbb87116178b2f9fdece5fdb09cb2bf2024312d3f1b86abb69644f695c76aca2d","ssdeep":"","tlshash":"a521f1e56fbc7ba362be2ae4a02e0041e001d53752f4f1d4f294dfb4a4e949d035b5b6","first_seen":"2025-08-22T10:11:14.554562Z","last_seen":"2026-03-04T04:00:43.411503Z","times_seen":3921,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/abd0b27824599374449ac53dfc5a97e2.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:21.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/abd0b27824599374449ac53dfc5a97e2.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:21 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-657aa27bf11c0f7b40c13eac77c42b9d-af09f48f93fbdba9-01\r\nlast-modified: Fri, 19 Sep 2025 14:21:23 GMT\r\netag: W/\"b5a6dbdf3f12e11d0c5275b2ca6dc739\"\r\ncontent-encoding: gzip\r\nexpires: Fri, 19 Sep 2025 15:28:35 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.043\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1810\r\ncache: HIT\r\nx-cached-since: 2025-10-11T17:07:11+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3091,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b5a6dbdf3f12e11d0c5275b2ca6dc739","sha1":"a8495df42a8f1e18c12dc1723660d062bbc8fb6b","sha256":"8febfd79d9b9b1298af34575340a4288d6d5b01ee4e50c57f5a5509d602412f2","sha512":"813327003eefeef8e9772adc05530b46f52fc044d76f5ed1393854052836ae2f89a0118697367681afbab9084b4e215c3120bf09ea2713553a7e8286ca9afe2d","ssdeep":"","tlshash":"85514b4df6e41c33012f19bdc0f76a6993d84f4f694a7c283a9d6c4d1bd451900aad3e","first_seen":"2025-07-21T03:11:29.13175Z","last_seen":"2026-01-11T03:06:49.449217Z","times_seen":2816,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/562b34a29b.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:21.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/562b34a29b.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:21 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 740\r\ntraceparent: 00-e66dd3401f670596f878e843bdad1dfa-2a625d0857478e4e-01\r\nlast-modified: Fri, 10 Oct 2025 07:53:55 GMT\r\netag: \"9bf1d1e7c2245b9ade33cb3d35a70691\"\r\nx-amz-meta-mtime: 1760082764.194904708\r\nexpires: Sat, 11 Oct 2025 17:24:57 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 724\r\ncache: HIT\r\nx-cached-since: 2025-10-11T17:25:17+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":740,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (737)","md5":"9bf1d1e7c2245b9ade33cb3d35a70691","sha1":"18427db2644eb30f6835333354a9ed1901d46585","sha256":"8d89f7d12936adda89a93eea51a337437f98893cc3234142d8dd4efb7b1f9241","sha512":"90dc324d4de1177b952f1c3bca0508aee6c1e6b36f410cb8d111da510e84afe5c3699819937ff6c0e8224fbba4c49aa84a8592eb24ec19710239fc4beae3ea83","ssdeep":"","tlshash":"a60115653072904865eb49ce7d24107997781a01370b4ce5f7dd86b7405a18255ba886","first_seen":"2025-10-10T08:20:22.09072Z","last_seen":"2025-10-15T07:13:09.94482Z","times_seen":206,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/gmp/conversion;src=14030178;type=xbet;cat=uniqu0;ord=1;num=3014127329462;npa=1;auiddc=643817387.1760204251;pscdl=noapi;frm=0;_tu=KJA;gtm=45fe5a80h1v9190735530z89180563600za200zb9180563600zd9180563600xea;gcd=13l3l3l2l1l1;dma_cps=syphamo;dma=1;dc_fmt=4;tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~115480710~115616985~115834636~115834638~115868792~115868794;epver=2;dc_random=rFrOK0Gv56dvfrZCNYURs_46oYWiwFyRRQ;~oref=https%3A%2F%2F1xlite-93399.world%2Fen%2Fblock?","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:31.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:42:40 GMT","end":"Mon, 15 Dec 2025 08:42:39 GMT"},"fingerprint":{"sha1":"99:C6:4E:8E:B8:5B:D1:99:2A:8E:B6:F5:1D:F0:C9:9F:D1:98:60:99","sha256":"5E:61:10:69:80:4E:43:5E:5C:BC:64:28:29:74:91:F6:DC:3B:42:28:2D:71:3C:A4:FA:4E:A8:88:A1:46:E6:39"}}},"request":{"raw":"POST /gmp/conversion;src=14030178;type=xbet;cat=uniqu0;ord=1;num=3014127329462;npa=1;auiddc=643817387.1760204251;pscdl=noapi;frm=0;_tu=KJA;gtm=45fe5a80h1v9190735530z89180563600za200zb9180563600zd9180563600xea;gcd=13l3l3l2l1l1;dma_cps=syphamo;dma=1;dc_fmt=4;tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~115480710~115616985~115834636~115834638~115868792~115868794;epver=2;dc_random=rFrOK0Gv56dvfrZCNYURs_46oYWiwFyRRQ;~oref=https%3A%2F%2F1xlite-93399.world%2Fen%2Fblock? HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 11 Oct 2025 17:37:31 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://1xlite-93399.world\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-20T13:59:09.532904Z","times_seen":809524,"resource_available":true,"data":null}},"time_used":489,"timings":{"blocked":52,"dns":1,"connect":8,"send":0,"wait":383,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_e9c881b43b.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:19.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_e9c881b43b.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:19 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-5a8c82e16caf2ac7f9e4a41d8008b186-5f088ab84f5e4963-01\r\nlast-modified: Fri, 10 Oct 2025 12:15:02 GMT\r\netag: W/\"a4a18ae51843c635fcbd72697fef91f3\"\r\nx-amz-meta-mtime: 1760098405.815153777\r\ncontent-encoding: gzip\r\nexpires: Sun, 12 Oct 2025 08:57:15 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 31204\r\ncache: HIT\r\nx-cached-since: 2025-10-11T08:57:15+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3676,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3675)","md5":"a4a18ae51843c635fcbd72697fef91f3","sha1":"72ab3b809992b85801884e7e67e846e07d7bafa7","sha256":"6d218c3466eee591e86432b09f3536529b0542129e78c56f17967c33d8924eec","sha512":"2cff3445996c77b95bd2c165774b33cd1af1ab8407f0b582df9dc1a5195e27b977ae1b36094296376c6c181c4ed5249087148f196c7868ba7b2c2a2101cbe715","ssdeep":"","tlshash":"3c71639abcb4c1398933f812128c8e7d0671fdaad9251c8ef6dd872654c3a970190af9","first_seen":"2025-10-09T09:08:10.646635Z","last_seen":"2025-10-30T11:27:15.243146Z","times_seen":1015,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":104,"dns":50,"connect":3,"send":0,"wait":1,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/46be980f5824aea005128aff83bbf018.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/46be980f5824aea005128aff83bbf018.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-3a74d060134c60bc455378b78f7369de-597cb5f0e3360d43-01\r\nlast-modified: Wed, 08 Oct 2025 11:26:27 GMT\r\netag: W/\"49d1cb1bb0770ea9400a21b7ea4b1c59\"\r\ncontent-encoding: gzip\r\nexpires: Wed, 08 Oct 2025 12:50:41 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.043\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2079\r\ncache: HIT\r\nx-cached-since: 2025-10-11T17:02:41+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25974,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"49d1cb1bb0770ea9400a21b7ea4b1c59","sha1":"dd80bcdf524e71001f4ab2d4a965c9ac3917cc54","sha256":"df13612648ed55325cb3ea22354cf8c6c42f4fb5eb120907febcedc2433105ba","sha512":"235026cf11e304894b92fcf7a94e3fb5de452c30cebf1ca0246aba8bcc20e6fc71dd5d46e634a7db838ed3e6f9918d3c9a4b33f8ed8070032dfaed7dfc3829a2","ssdeep":"384:hrLr0fLPwUj+uZbC445IOhT9TYXw1LyaN1C1WjTZ5sogvlQrI:hvkD+yEgvarI","tlshash":"c9c23a85faf40c33202f90ae95f3ba0e93d85f479d0a6c14bfad2a4d2b54519016bd7e","first_seen":"2025-10-08T11:12:05.150382Z","last_seen":"2025-10-13T13:27:08.069071Z","times_seen":184,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:30.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:30 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63748\r\ntraceparent: 00-6567edd156db719bcbca0641c167d094-47f75bf69c7a919e-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"6887b6f24414dbc612dbf42ccdc76b70\"\r\nexpires: Thu, 16 Jan 2025 10:32:14 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2534\r\ncache: HIT\r\nx-cached-since: 2025-10-11T16:55:16+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63748, version 1.0","md5":"6887b6f24414dbc612dbf42ccdc76b70","sha1":"8068d3abfbc6cbf35b55919da45b1f4d2d136238","sha256":"fc5c015fc32518f1ed810fa84ca28941eb9d5a3c81acc8df69a4dbbeedef7b0c","sha512":"00f08f9dd648972c9571547e06172d5505dd13f577fe2e65a497d3856172807ac11c996984e4138d2eb2ac784257fe61864aee15752fe9e9e76f98db931e0c2a","ssdeep":"1536:KtdCG+Dz6RxAx457zL0ASEn091Y0H1mTOzI/OzMFOoTX4u:MMG+yRpzN091Y0VtI/pOoTt","tlshash":"8b5302485551fae2cac3073c0f7a89dbb37a776d519224cd98b69f830d37964bea2070","first_seen":"2023-06-14T19:15:49Z","last_seen":"2026-04-20T11:06:04.783713Z","times_seen":10489,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"radar.cedexis.com/1707728419/stub.js","fqdn":"radar.cedexis.com","domain":"cedexis.com","tld":"com"},"ip":{"addr":"45.54.49.5","port":443,"asn":63911,"as":"NetActuate, Inc","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:31.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"radar.cedexis.com","organization":"Citrix Systems, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A2:3E:30:19:D5:41:3A:11:81:58:E3:B1:6F:F4:D2:78:0B:44:6F:D0","sha256":"BE:70:39:96:BA:51:8F:A7:6A:9D:E1:58:FB:D9:F7:6F:17:5C:DA:A9:6E:54:3F:8F:0B:3D:1E:DF:8C:44:B4:71"}}},"request":{"raw":"GET /1707728419/stub.js HTTP/1.1\r\nHost: radar.cedexis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 11 Oct 2025 17:37:31 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Mon, 12 Feb 2024 09:51:01 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"65c9ea05-186\"\r\nExpires: Sat, 25 Oct 2025 17:37:31 GMT\r\nCache-Control: max-age=1209600, public\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":390,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"82dec77fd0353c7c71ce053b8601387e","sha1":"fbbca95419e1d0c042e0a5fdf10f380aca66188c","sha256":"39f2b7b0fa78d37d0c84d2d6618bd635d86fd683d9bcdd5729850cb2a62522f7","sha512":"6872c895cb44711405e57a436dfbe15d094f9159e11ee2b89983c63b1f18f6acbdfaf0ccbb5e48b2bf24f366f16584c660bca4b6b14c048a134bb77a60f6563e","ssdeep":"","tlshash":"02e068ae9391a318537a2dbacc4e060ba0f6114888e5e4e029f5c2c00461bae072bfb4","first_seen":"2024-02-13T14:23:26Z","last_seen":"2026-01-15T12:01:08.184588Z","times_seen":7496,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63920\r\ntraceparent: 00-1ce014adee2e4c1279c9a9fc7f4e05aa-a57410d728808668-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"a65527fcb58f66a7cfbc0e6b160538b4\"\r\nexpires: Sun, 10 Aug 2025 19:21:26 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 298\r\ncache: HIT\r\nx-cached-since: 2025-10-11T17:32:22+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63920,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63920, version 1.0","md5":"a65527fcb58f66a7cfbc0e6b160538b4","sha1":"45d260e7fa343401b5bb0df982a014f53e2d253b","sha256":"fb13c3a1cbac60649b76f7d7f85c1645d35ac69b85ce5f4eb0692505ecc2cd45","sha512":"8448e96abe326f43285b2d8b0d75beaf0e9c9e051e8754841d907b30eb303ae24c447011306da6a1703b9192d02aeff76a4517bdf94ec6e7dc360ce3538802af","ssdeep":"1536:UIG3hJMkJeK8ic5iZGnJ4URj9vqXOQ6UqYdbuA5RVK1:UL31hcLlRjDQ6Uq4W1","tlshash":"7f5302df8de32a148ff78772668885f4f4927c68898c8e7345526a8907f07d6b96c04f","first_seen":"2023-05-07T18:04:27Z","last_seen":"2026-04-20T11:06:04.829559Z","times_seen":10345,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/cc07db51/desktop/default/vendors/app-fe0bac3e.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/cc07db51/desktop/default/vendors/app-fe0bac3e.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-48db0f0de33a7522e814091ad11e7f91-7f07cf67db7fbfca-01\r\nlast-modified: Thu, 09 Oct 2025 08:38:03 GMT\r\netag: W/\"081091d7b9c5390f5ed1f3a3dfc9912c\"\r\nx-amz-meta-mtime: 1759999082.343199246\r\ncontent-encoding: gzip\r\nexpires: Fri, 10 Oct 2025 08:49:26 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 31090\r\ncache: HIT\r\nx-cached-since: 2025-10-11T08:59:10+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":965291,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64593)","md5":"081091d7b9c5390f5ed1f3a3dfc9912c","sha1":"752abbfcdc9d71ee44db17dbbbe7e6a1fde5b8db","sha256":"e0b00ed55705a4119585255201d4011b55b58ae4d8c51b94164fec6daba70ef1","sha512":"0124a60d5ca4486536c1f9fd7201aa7c9d890b61aecd86394a9fa6a931154ffd34f9a01173b8ec240f42948cd70107e7695c8a0cac19894d17560b05ca51773e","ssdeep":"12288:+dQX/yYLg4k5BXYWg1FA4OIaries0zY+r4Uuj0dK:pX/yY04k5BXYWg1FnwOBpk4UE0dK","tlshash":"36254ba9b580f2560aa36ae9d06b0057e33d6f1eac0cd454f2e7cdd5395a804713af2f","first_seen":"2025-10-09T09:08:10.557501Z","last_seen":"2025-10-13T07:38:20.886767Z","times_seen":164,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/cc07db51/desktop/default/vendors/plugins.v-tooltip-a0ae9558.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/cc07db51/desktop/default/vendors/plugins.v-tooltip-a0ae9558.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-5d904afd4eb11e5618f5c1cdd69b5814-11987a54b621001c-01\r\nlast-modified: Thu, 09 Oct 2025 08:38:03 GMT\r\netag: W/\"81f776939697aeb35b2a09f79184914a\"\r\nx-amz-meta-mtime: 1759999082.345199253\r\ncontent-encoding: gzip\r\nexpires: Fri, 10 Oct 2025 08:49:27 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 30895\r\ncache: HIT\r\nx-cached-since: 2025-10-11T09:02:25+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76824,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65476)","md5":"81f776939697aeb35b2a09f79184914a","sha1":"b8bb440cec23697c666fe3857f74e312f8892ea2","sha256":"00a1637865b01c6cb3cf40cc3657430eb28e44c26d912083a3055d25fe321514","sha512":"e70ddf1f7d9cabc699a7dd363bb1f54697f405c45bdc1ee62876a909fdb4d35f24156c2fc70a26f7b1d2adeab0d553a1e911a456f6c1e293cc1f98fde306ac49","ssdeep":"768:zV3wtV8NCDYtjEcOFL1WMZI+7tSCUC8Lk7t8R6zk+BaNfSby/Qw/Hcg57bh0PGBW:zut6NsYFE1L1TPRSCv1MHkWdRfm5QQ","tlshash":"0773c78e7390f0b203e7b175413f620fb2776558b40ad414b2b1e6d4ac3da5aa267e3d","first_seen":"2025-10-09T09:08:10.643379Z","last_seen":"2025-10-13T07:38:20.817996Z","times_seen":164,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/bfa3e9fd30e7d63c0906602f42c13468.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/bfa3e9fd30e7d63c0906602f42c13468.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: application/json\r\ncontent-length: 182\r\ntraceparent: 00-260082ac1dcea98ff17908a916a05648-efb56235026cff1c-01\r\nlast-modified: Thu, 27 Feb 2025 08:55:26 GMT\r\netag: \"0a64a07e9a34e8a5b5e97e80a10888c5\"\r\nexpires: Thu, 11 Sep 2025 22:52:26 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2079\r\ncache: HIT\r\nx-cached-since: 2025-10-11T17:02:41+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":182,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0a64a07e9a34e8a5b5e97e80a10888c5","sha1":"82545cbc39b7dcc031dd10dea841a0b3698243d6","sha256":"7201497e7e8cdf9d35bf6998e43dcde5feea535f9828ce3ee98785781016126c","sha512":"fd619b94af18c7082a4f18556f1443081c8dc650b263c49c56f2514184d4f62e253ad87a220baa9396d7a06bc9ec3cc8ec75eee829a6c1016c4a3af2c1afa5ae","ssdeep":"","tlshash":"f0c02220e5f88823012b68bc80eaa55417504b2339021c20374c0a884b6162400149b8","first_seen":"2025-02-27T19:55:38.982186Z","last_seen":"2026-03-31T06:06:31.551304Z","times_seen":4136,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_accept_language_parser_LEQ4UAP5.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:21.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_accept_language_parser_LEQ4UAP5.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-5a245985a4b723d493ffaecc25164aa0-09cd73824196ac0d-01\r\nlast-modified: Sat, 11 Oct 2025 07:54:19 GMT\r\netag: W/\"83e311eb8e222d229b6177bd007ce9eb\"\r\nx-amz-meta-mtime: 1760169203.656785869\r\ncontent-encoding: gzip\r\nexpires: Sun, 12 Oct 2025 09:30:13 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 28876\r\ncache: HIT\r\nx-cached-since: 2025-10-11T09:36:04+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1297,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1265)","md5":"83e311eb8e222d229b6177bd007ce9eb","sha1":"96b851ffda0eab794c2bb637255a48ae25770144","sha256":"d0ff62de588e1c47eedbd91a89dcf394e2ec5bd09392ea556b9a34108077e9ad","sha512":"fd2e1bfb6588598e356ddc08724c2e6f602b89626b30eeca2c25b8f60340f25e28a761b8e13b75d1627172530abf7dd0e586e792f53759d08bda626145f65b0d","ssdeep":"","tlshash":"202112debed2b5908394188c4e2ec055f23a2957641ce6fcd765e7827c403a186f3c1d","first_seen":"2025-08-22T10:11:14.559442Z","last_seen":"2026-03-04T04:00:43.42063Z","times_seen":3921,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/4685d7db89.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:21.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/4685d7db89.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:21 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 614\r\ntraceparent: 00-65ebfd0194b1de8481b7990993eb91c9-713d84b6ba6f1726-01\r\nlast-modified: Fri, 10 Oct 2025 07:53:55 GMT\r\netag: \"0817fe2f18858d77f0eef9ccab224001\"\r\nx-amz-meta-mtime: 1760082764.194904708\r\nexpires: Sat, 11 Oct 2025 07:58:05 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 34394\r\ncache: HIT\r\nx-cached-since: 2025-10-11T08:04:07+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":614,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (613)","md5":"0817fe2f18858d77f0eef9ccab224001","sha1":"6519a59086ad990b8e800fa02c06123ea77ad09f","sha256":"275b17f1dd22d96dd4f3c835f0e6e7cdaa1cf28abf00b18326cfef20c55597bc","sha512":"45934208626f47854ca20175174126bae3ffdc9c6b1624212940984475accbb0b5f6351438535f2ab5395872b56a62cd2bd3a5ddc21b450e3d15fd44fc690196","ssdeep":"","tlshash":"a9f002be9d3391606102449a5d1ab422c2c87d7b075e75f4c1ec0653a7130968a06ac7","first_seen":"2025-10-10T08:20:22.00017Z","last_seen":"2025-10-15T07:13:09.908041Z","times_seen":206,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/captcha-api/assets/hunt-captcha.js","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:28.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"GET /captcha-api/assets/hunt-captcha.js HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/en/block\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder; postback_watcher=%7B%22tag%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22pb%22%3A%22c4a963618a5742d9870d0059bcae60ae%22%2C%22click_id%22%3A%223724014758588854419%22%7D; auid=uaJaGGjqlc9YPwDvA8rBAg==; window_width=1280; che_g=f92bc74a-16b8-48b3-bebb-b1ef175b444c; SESSION=923003ddcebe10aa36e61c6a7e16c5cf\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:28 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 23566\r\ncache-control: public, max-age=300\r\ncontent-encoding: gzip\r\netag: cc87b27db434ca92aea6e1a1ceb5b78c\r\nvary: Accept-Encoding\r\nx-dt: 455\r\nx-request-id: 8b82dc10331cdf3e49a1fbbd7ab4033e\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.009, wf-uht;dur=\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":90808,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cc87b27db434ca92aea6e1a1ceb5b78c","sha1":"905e65010d66d0bba5836f44cfb27ad9cda60051","sha256":"b7c2d216440e81574ce9b359404af25382d21f6d06b31162e1d56d97e721f117","sha512":"c93461ca41050b2ed4cf5724b61293de852034eb5cd9856e5af84ca3569584db0df14c267a9350839d3fbc4b536d416a56b8b7b0cc4f67c7770660212dc99912","ssdeep":"768:mfqz/IppUgutFIIfCpFujCbsboXim9ifscjA6NecfjCdjhACLiZhT/rAztF1TP7C:xEIW0BLIS","tlshash":"0693de857de2c08793d35bd6923f4cd8e87504cb66966f488812f91bf9ae86783d4833","first_seen":"2025-09-24T12:37:05.081519Z","last_seen":"2025-10-24T09:11:09.901149Z","times_seen":1174,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:30.150Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:30 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63920\r\ntraceparent: 00-70606f3a26d787bfd9690d8dc8deaddd-58b343f4f3df3cf6-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"a65527fcb58f66a7cfbc0e6b160538b4\"\r\nexpires: Sun, 10 Aug 2025 19:21:26 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 308\r\ncache: HIT\r\nx-cached-since: 2025-10-11T17:32:22+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63920,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63920, version 1.0","md5":"a65527fcb58f66a7cfbc0e6b160538b4","sha1":"45d260e7fa343401b5bb0df982a014f53e2d253b","sha256":"fb13c3a1cbac60649b76f7d7f85c1645d35ac69b85ce5f4eb0692505ecc2cd45","sha512":"8448e96abe326f43285b2d8b0d75beaf0e9c9e051e8754841d907b30eb303ae24c447011306da6a1703b9192d02aeff76a4517bdf94ec6e7dc360ce3538802af","ssdeep":"1536:UIG3hJMkJeK8ic5iZGnJ4URj9vqXOQ6UqYdbuA5RVK1:UL31hcLlRjDQ6Uq4W1","tlshash":"7f5302df8de32a148ff78772668885f4f4927c68898c8e7345526a8907f07d6b96c04f","first_seen":"2023-05-07T18:04:27Z","last_seen":"2026-04-20T11:06:04.829559Z","times_seen":10345,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/main-static/cc07db51/check-ob.js","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:19.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"GET /main-static/cc07db51/check-ob.js HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/en/block\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder; postback_watcher=%7B%22tag%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22pb%22%3A%22c4a963618a5742d9870d0059bcae60ae%22%2C%22click_id%22%3A%223724014758588854419%22%7D; auid=uaJaGGjqlc9YPwDvA8rBAg==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:19 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 219\r\nlast-modified: Thu, 09 Oct 2025 08:40:12 GMT\r\netag: \"c065700c9c8c493403359e1f2baa10d9\"\r\nx-amz-meta-mtime: 1759999212.277667413\r\nexpires: Sun, 12 Oct 2025 08:50:23 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: wf-uht;dur=\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":219,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"c065700c9c8c493403359e1f2baa10d9","sha1":"4630fe729e70bdf63fa7ba6c84ec277fd1f51030","sha256":"1e61f0c82ae82ffcf503fcd4b4c8ae27b32c11e19b882d5d13f3c44364c893f4","sha512":"b2e1c73cb94f5e3ceb35c3662bf4d72baf800a9a7c64318b1db07d50e9c885dbd94821ef3b3916d1b8b4fabb8f45cb588834b41c6a8a7f4d2c3e9c3866083ee7","ssdeep":"","tlshash":"96d0a79fb900211406939267d12f8668807724973f008182500597e069b8f4c4b37895","first_seen":"2024-07-17T14:33:52Z","last_seen":"2026-01-22T06:40:31.153166Z","times_seen":6298,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-ui/2.3.427/Desktop/Default/client.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:19.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-ui/2.3.427/Desktop/Default/client.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:19 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-17c48826a86e6628e44a845b8ba01488-ebbd4645af060e44-01\r\nlast-modified: Wed, 01 Oct 2025 08:56:47 GMT\r\netag: W/\"8c5d3cf8e2e731e0e58f900034a15805\"\r\nx-amz-meta-mtime: 1759309004.920422926\r\ncontent-encoding: gzip\r\nexpires: Sat, 11 Oct 2025 14:51:40 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 9921\r\ncache: HIT\r\nx-cached-since: 2025-10-11T14:51:58+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":615832,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8c5d3cf8e2e731e0e58f900034a15805","sha1":"07f8ce5237eb05ced24c044746af35f4d00d46e8","sha256":"363081e4b7ee3429baeb0e07515a08fb30355290e7611b3ae09546c0da901657","sha512":"8e078f6add650f184426cc06d52e9d76b7fa2d33d5754613f9cf526adb4395e75b77e629431d3906304128602739ba09aa4e6ad4ff98a91b88792ef2560ce493","ssdeep":"6144:wTlctlWv52h8YdEbhi4rHXwlKxUDg13pLgrfHiVXer/Km16AjdVg:NlWNeKmDo3pLgrfHiVG/Km16kVg","tlshash":"2bd4a72cf19d92353e37ea2562944ffc2620b7179b221c7ef85a015a0ec39437196dbb","first_seen":"2025-10-09T09:08:10.606451Z","last_seen":"2025-10-15T10:07:00.721947Z","times_seen":317,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":106,"dns":52,"connect":2,"send":0,"wait":2,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/version.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:19.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /version.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:19 GMT\r\ncontent-type: application/json\r\ncontent-length: 11\r\ntraceparent: 00-174a3bdb2ba9a0295d6b8f28ed90b5c6-cf155d7bd88b03a6-01\r\nlast-modified: Thu, 09 Oct 2025 12:12:47 GMT\r\netag: \"af06be28156b57b33eb537abe5ed8b4f\"\r\nx-amz-meta-mtime: 1760011967.848122498\r\nexpires: Thu, 09 Oct 2025 12:16:05 GMT\r\ncache-control: max-age=60\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 36\r\ncache: HIT\r\nx-cached-since: 2025-10-11T17:36:43+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text","md5":"af06be28156b57b33eb537abe5ed8b4f","sha1":"9f556710faff1f473bd3b8124af4771ce28531ac","sha256":"75b4e62cfb86d69dcd8b3e42b9f771be5bac9e291bdc945a0beb826b0cc9c7ff","sha512":"ef0c0f6d3120e7251b7b7300c1b52150cc2ce5894a7b7b907f72b5ff55036e586c75a2352668e5872e6b79f347dd89267ede9c0500297110a6233c17af730097","ssdeep":"","tlshash":"be5000300000030033003000000000300cc0000000300c0000000003c000330303300c","first_seen":"2025-10-09T12:12:11.995333Z","last_seen":"2025-10-13T05:37:52.028386Z","times_seen":204,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":38,"connect":2,"send":0,"wait":1,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_coupon/en/dictionary_ae861f5f20233158a270b9bf1f124dba.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_coupon/en/dictionary_ae861f5f20233158a270b9bf1f124dba.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-e92234d4ab205ee70290f7de0f7436ef-78be44e71615b204-01\r\nlast-modified: Mon, 25 Aug 2025 18:06:58 GMT\r\netag: W/\"0093e9f87ceceddf08223faa66e803cf\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Thu, 09 Oct 2025 04:32:29 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2686\r\ncache: HIT\r\nx-cached-since: 2025-10-11T16:52:34+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28327,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0093e9f87ceceddf08223faa66e803cf","sha1":"5290778a9922cc6d08c985f290b39916d0865c2c","sha256":"ebc90f649e7f412597bb67732393a4ee5c42fc0e253dac74a8f75ecf56540c9b","sha512":"0225ccbe4659084c28e725c37ad1139444a86f424ac7b32d965eb54a190ea9fbdb1d04b4eccfff661c655358da4b5ea2e5ffc325dcb786b5c2597fe77c593471","ssdeep":"384:1lq4j/8i+GZCH6CqyXLbhU8QnBehe6pjfsE6oCNhWxB5gVInt5DQHirGqT:nq4HKeSjIodhg4t5DQ+zT","tlshash":"25d2723eb403fcbbf58600c4ae6abda361b40098d3a9ce5b88df481e21e71de5157847","first_seen":"2025-08-25T18:36:05.084487Z","last_seen":"2025-10-15T12:55:10.63877Z","times_seen":1233,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_forgot_password/en/dictionary_776c0b6a6ae43ea4503f983fa859981a.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_forgot_password/en/dictionary_776c0b6a6ae43ea4503f983fa859981a.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-08c6959ac29261432355595f4b390d5d-a6cb0d7a9cb27d41-01\r\nlast-modified: Thu, 26 Jun 2025 16:06:49 GMT\r\netag: W/\"9e075dc2a068d12162e260d49c92f233\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Thu, 26 Jun 2025 17:12:47 GMT\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 3469\r\ncache: HIT\r\nx-cached-since: 2025-10-11T16:39:31+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4086,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9e075dc2a068d12162e260d49c92f233","sha1":"9c748240ee9aeeb922f9998005c557517763a979","sha256":"81b3796da635e227e36b1a44c3224d8e0ccda902293beb08f84d870ed3bcee99","sha512":"6572c0bd8d55d4edc9ff8f263ef021d454593330e2f09759a2a26153870083e1d2cc308575d01196919d60a86170bd6b24436163427692b99eed38d0643eac9e","ssdeep":"","tlshash":"13819e0959831ef21abf8e90705e88663be5d06bde1764140fb5c30f3377e93668284a","first_seen":"2025-06-26T22:02:08.124583Z","last_seen":"2025-12-10T17:51:01.422955Z","times_seen":3966,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_base-app_5bad253a79.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_base-app_5bad253a79.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-af00178d85cc4aab24b276379bb816f4-44aed670943b62b1-01\r\nlast-modified: Fri, 10 Oct 2025 12:15:02 GMT\r\netag: W/\"432048d46e0d30083d8e1ff3e92a7aef\"\r\nx-amz-meta-mtime: 1760098405.812153514\r\ncontent-encoding: gzip\r\nexpires: Sun, 12 Oct 2025 07:47:32 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 35304\r\ncache: HIT\r\nx-cached-since: 2025-10-11T07:48:56+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1639159,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (23471)","md5":"a9cb6a0933704153af6db589681abe58","sha1":"5ea58485dd0cb6fc27818b4e4c2de816843f6018","sha256":"86ea111ceb32147e902380dd1e95ea93204dc68e9c1ac1cce2d4ffa7052a64b1","sha512":"3941d273998aa2fffa4d0a05ddcb4af9c43c9b0000e2b4f835ceab21f2c5a67b904e3768a61dcf21b692d2b3247c2db1141773be7eaaa3040fa36c7474099f4a","ssdeep":"24576:HGO3lnVV0Nuzy8ZWiNGr6fKgnBMk2A2mGF5UiQR6:mO3lnVV0Nuzy8hNGr6fKgnBMk2A2mGFr","tlshash":"0c259e69f1127a1339e35ad5a4671183765c5a5d980cec80f2fbcde83ace51022eeb7c","first_seen":"2025-10-10T08:20:22.086144Z","last_seen":"2025-10-15T07:13:09.979384Z","times_seen":283,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/d9d8f03d05.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:21.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/d9d8f03d05.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:21 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-c16f928212078e931e8990284505b514-309f68fc8f13767f-01\r\nlast-modified: Fri, 10 Oct 2025 07:53:55 GMT\r\netag: W/\"5a0558427ba56f41906dd90cc3539065\"\r\nx-amz-meta-mtime: 1760082764.19590479\r\ncontent-encoding: gzip\r\nexpires: Sat, 11 Oct 2025 07:58:05 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 34393\r\ncache: HIT\r\nx-cached-since: 2025-10-11T08:04:08+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3094,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2774)","md5":"5a0558427ba56f41906dd90cc3539065","sha1":"8864963d87f9588b07c0af60d2b0703b6ade8c5f","sha256":"511f681c6ca4bf6276e1f68c31e90ef4efb74455a84ae401b6518966ed4a2fc0","sha512":"d169350995ae9fe797ce89f6230143edba89c0e917a1145e3bec89314320fedde5ca77fb1dcb40008ed8c6f0ee3706be20c95bd3db34b76e6c2d5c6a7c762f12","ssdeep":"","tlshash":"5551c7dd26f534b4390d4e69f91e3172c769284b32ade4f0e6ad5f24033124ce254f82","first_seen":"2025-10-10T08:20:22.062238Z","last_seen":"2025-10-15T07:13:09.911169Z","times_seen":206,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/52e53a795f.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:21.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/52e53a795f.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:21 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-aee8b5a0bd188fe806ff78180dd8caf9-279878000bef2c71-01\r\nlast-modified: Fri, 10 Oct 2025 07:53:55 GMT\r\netag: W/\"de9767672e37d01368307ce25ff74b20\"\r\nx-amz-meta-mtime: 1760082764.196904871\r\ncontent-encoding: gzip\r\nexpires: Sat, 11 Oct 2025 07:58:06 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 34393\r\ncache: HIT\r\nx-cached-since: 2025-10-11T08:04:08+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1973,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1972)","md5":"de9767672e37d01368307ce25ff74b20","sha1":"b5ad1a7b4595e68bad228c55c70c587c0367dcdf","sha256":"2759316b02e85ca5d60ccea4ee6b6a78bc34161eb71af65fae76becff7511597","sha512":"0b677c71b18d29727c01c914df632d60790d8257ed249063ff4c9fbc8c7cafe2d7ea9dcb083d0ed773d7b8dc3e024e0b048b1b0bd282ff0f167ffcb444c2c721","ssdeep":"","tlshash":"8e41c899b2b131f2e677415dbc0660f1c3083a9d132e10e4d9e9484e220d9c32767b93","first_seen":"2025-10-10T08:20:22.093204Z","last_seen":"2025-10-15T07:13:09.82704Z","times_seen":206,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/cc07db51/desktop/default/css/13382faf.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:19.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/cc07db51/desktop/default/css/13382faf.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:19 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-8ac1117da5470f4429d8987a7d329d43-4fbfd898a9634567-01\r\nlast-modified: Thu, 09 Oct 2025 08:38:03 GMT\r\netag: W/\"522bed13bfb021f11f9100e2f5a2fa88\"\r\nx-amz-meta-mtime: 1759999082.314199142\r\ncontent-encoding: gzip\r\nexpires: Fri, 10 Oct 2025 08:49:24 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 31089\r\ncache: HIT\r\nx-cached-since: 2025-10-11T08:59:10+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15193,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (15193), with no line terminators","md5":"522bed13bfb021f11f9100e2f5a2fa88","sha1":"e35753a7f9434702331a022a65fea710096f73ed","sha256":"0c09117600e3f9a9377db07f0a4e5f78ff1a2f8ab3cef75d04640ce229032d22","sha512":"dbc706017a1281f67cd28689755365d1ec1e52a9efd00bf367b97892c71f8c96eeceb078a274b0c5dfa5acb405c4d12e5c3594022c1b126e0195329dd0fb3b00","ssdeep":"192:HOIOH7nvxxxY4lctZLJh6N0dtu8yvrs9lvhvuvoQwltoQrNTC4cjWnk3LbBQ:HCJxxY4MJJqJQr9C4GWk3PBQ","tlshash":"1362b61fd53692b21d238c52728ebf383539722628a65735f44e26488ddbb9703d0fb8","first_seen":"2025-09-30T10:36:50.754445Z","last_seen":"2025-12-02T07:51:56.02009Z","times_seen":2313,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":86,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/cc07db51/desktop/default/css/7fe5f71b.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/cc07db51/desktop/default/css/7fe5f71b.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-8f707f1f274b8fb8b63a2e56f884f878-15504abfbdc6d7a0-01\r\nlast-modified: Thu, 09 Oct 2025 08:38:03 GMT\r\netag: W/\"c610b8710368de3bf2f1c5bb581b6a3a\"\r\nx-amz-meta-mtime: 1759999082.316199149\r\ncontent-encoding: gzip\r\nexpires: Fri, 10 Oct 2025 08:49:27 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 30894\r\ncache: HIT\r\nx-cached-since: 2025-10-11T09:02:26+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3313,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3313), with no line terminators","md5":"c610b8710368de3bf2f1c5bb581b6a3a","sha1":"f67bc86785d434adb2e81a356a7926b8818ac567","sha256":"fad7111846310042401990719146401178f22e2618abf2b058e641b6495e8eba","sha512":"2dfecbd28b59bcf4b361736ce304f33792631b766506b80767f23033cbd37c1a83371af59b833032390f647b69824e9eeeb1f99530e18047f74cd30ffda0e5b1","ssdeep":"","tlshash":"0161c13e9cbc24359e7f472b7053ce84e199a39092030f8afdbb755a4c8b21d3895176","first_seen":"2024-05-14T21:30:49Z","last_seen":"2026-01-22T06:40:31.190981Z","times_seen":5786,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/ac02f639a86763a884adc5615fe65e72.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/ac02f639a86763a884adc5615fe65e72.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-66a52a4602d83dbd1de02eb51b450e6a-4d5c531c8ef33302-01\r\nlast-modified: Thu, 27 Feb 2025 09:04:01 GMT\r\netag: W/\"811ce3b7877d19901e45430cb6523d62\"\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Aug 2025 21:17:18 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 205\r\ncache: HIT\r\nx-cached-since: 2025-10-11T17:33:55+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14232,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"811ce3b7877d19901e45430cb6523d62","sha1":"16a905115a678fdef3923f91c6f76cbab613e84d","sha256":"10fbb74dbac63abfe9c4f5a77abc03757ef3527a479d4ae70dc977b515eec8cb","sha512":"21a43d793bd4200ff9972a793442fe492b6a1699f20053c4f01695f69f918685bf30f03f778346c2f61bac40d2e51bb25360d0ffc15448200c666ab4edf38e65","ssdeep":"96:BDkGHVTSY15XWGsQfGJo/JamRKkmP9kDeD3LzwCyi8TunZh:bVTS1KXR9RKkekDGoCyXOD","tlshash":"59523d65f6f40c33113b98ae65f76a8953948f07aa6d7c293b9c2b4c1f1462e0076d3e","first_seen":"2025-02-27T19:55:39.119779Z","last_seen":"2026-01-05T12:50:32.841809Z","times_seen":4543,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_vue_deps_FCX6UWBT.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_vue_deps_FCX6UWBT.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-a7c0aa61e9ab5507391fa317701fa328-17b863a729b786b4-01\r\nlast-modified: Fri, 10 Oct 2025 12:14:59 GMT\r\netag: W/\"588b298e9096c73f4d84f2961d4378ba\"\r\nx-amz-meta-mtime: 1760098401.368764455\r\ncontent-encoding: gzip\r\nexpires: Sun, 12 Oct 2025 08:28:36 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 32707\r\ncache: HIT\r\nx-cached-since: 2025-10-11T08:32:13+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31184,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31044)","md5":"588b298e9096c73f4d84f2961d4378ba","sha1":"568c0ac4c8540c21caf445d8490348a9929143da","sha256":"cc5353d60fc3bbcefb808e19d05925ab3fb0cff09092317813265725e95fa808","sha512":"a093cd11cb064df4b612ee5ee7128b352a1bfd951eaaa68553cf0aba097e9561774ecca5d78f3e0b6dbea18d21bade34a0d18426d66e0b37f9f67a439d7d3051","ssdeep":"768:lwZ1yyQBOuHJ3aUiJJUfns+/C8vsqJlm8qgqYHg7FD0v341KE:lwWBOuHJqUiJJUfns+/0qJlmbgqYHg7H","tlshash":"65e25cd8b779bca2335e908c90370323b37559e7484d9020f7e65e9235a5a0282e7f7e","first_seen":"2025-10-09T09:08:10.597929Z","last_seen":"2025-10-30T11:27:15.273914Z","times_seen":1015,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_localforage_PJNUBKRP.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_localforage_PJNUBKRP.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-85fb0042325b95a469b593e8d59ff734-78e9cf5dd23ff63d-01\r\nlast-modified: Sat, 11 Oct 2025 07:54:19 GMT\r\netag: W/\"7e7ebd44e3a6550f862e122ab7df6409\"\r\nx-amz-meta-mtime: 1760169203.657785945\r\ncontent-encoding: gzip\r\nexpires: Sun, 12 Oct 2025 09:38:00 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 28760\r\ncache: HIT\r\nx-cached-since: 2025-10-11T09:38:00+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30277,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (30255)","md5":"7e7ebd44e3a6550f862e122ab7df6409","sha1":"384ecbc3ab0f65e6b0f88c1e68ba3eb73fad4999","sha256":"138767518a09e63d24f918f6380923893a2ec3aa59a640e51c83517501823076","sha512":"e2766b50e289dc6a69fa30432a49a0b7743f15cd15a54d707959c7623f258057a821a94285c492746216cfbf815089309b6cc09b930ba7977ff9c4ffc352d76e","ssdeep":"768:wDKAOpvMewHFuM96WwZACjzz46zSTKsBE1OvFXfX1UXk:wm8uPW43zEIOvdlUU","tlshash":"a5d2b68c7799f02683bb3070907f580ef237a912594d90a0e591e5f86dbd75c822bfad","first_seen":"2025-08-22T10:11:14.535778Z","last_seen":"2026-03-04T04:00:43.425133Z","times_seen":3921,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_popper_js_WZJKYEQD.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:21.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_popper_js_WZJKYEQD.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-853ca0d5d0d6e075fc599172dc1a43ce-0d30c9405ecd7f0d-01\r\nlast-modified: Sat, 11 Oct 2025 07:54:19 GMT\r\netag: W/\"bea5b052c307601192270938523fa030\"\r\nx-amz-meta-mtime: 1760169203.657785945\r\ncontent-encoding: gzip\r\nexpires: Sun, 12 Oct 2025 11:15:37 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 22903\r\ncache: HIT\r\nx-cached-since: 2025-10-11T11:15:37+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21252,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21232)","md5":"bea5b052c307601192270938523fa030","sha1":"937f7094c67f5a92c1032a7bc3f21ee94bec66ef","sha256":"f41290374ba615854ebb4b28a07de775581707f3b6427bcc01c0529c62476f64","sha512":"b9bff7f7d9b518ec76898a732114873c01206378c2a840c62062f05487ef773716ce841d7a5bafe3f0c65fbfdf05509852571a3a6b381661cb6f4984d6bc23a9","ssdeep":"384:ZP7iayBuR9vu3z1JXvykd2+LaqHdC6RjVnTGm/7piCXmH8kCCcvJTCyCu+meAxiZ:piZwO3XvO+NMSJt3XmckXcv4nxJAxiH5","tlshash":"7b92a28c7684b0a287a7a2a7a07f860f71376865650e9004f59cf6ec3c35dba507bc7d","first_seen":"2025-08-22T10:11:14.555802Z","last_seen":"2026-03-04T04:00:43.408775Z","times_seen":3920,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KFGPRJ2V","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:30.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"GET /gtm.js?id=GTM-KFGPRJ2V HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 11 Oct 2025 17:37:30 GMT\r\nexpires: Sat, 11 Oct 2025 17:37:30 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 11 Oct 2025 15:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 125498\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":361040,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4828)","md5":"ce8a94d9c8a62a8d568b15cb7eb960ef","sha1":"dac3545d3acc7099f9c4cc557eb352f7b6887050","sha256":"af993a8d42c9330e17fd18b94b52f3d090e10e0a5f3231f82174469566608e09","sha512":"ec49a02e23acd0cf9709333268ece2cbde5f56686e61193597b2709ce5fe9a32f22bf0437605b5d440bf8f8254c9518b7e0535fc3644b83f5096b0828d1584cf","ssdeep":"6144:Fx/ypxWhk0uwbWFiJQk+Nju5204ONl1QY5T:u2C0KIJW0vE6","tlshash":"ea7419cdb3d674628393a478503f014bb17b6892f44cc894f186dae52e74aaa4277f7c","first_seen":"2025-10-11T17:37:52.599563Z","last_seen":"2025-10-11T17:37:52.599563Z","times_seen":1,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":84,"dns":7,"connect":21,"send":0,"wait":48,"receive":51,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16664555628\u0026cx=c\u0026gtm=4e5a80h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:31.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"GET /gtag/destination?id=AW-16664555628\u0026cx=c\u0026gtm=4e5a80h1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 11 Oct 2025 17:37:31 GMT\r\nexpires: Sat, 11 Oct 2025 17:37:31 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 11 Oct 2025 15:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:72:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:72:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:72:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:72:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 127279\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":372076,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"f915c3849ca41038b5a3df2b2d8ddeec","sha1":"d0eab33a85e3760dc8a3ad9babacd8cd1391685d","sha256":"6cc5f302d83a02813554ddeb6183cbea51e92c38052a5d85bc661f51a9d1afae","sha512":"cf4b8b1e87cd5d5aa5a6b9f666de0afbcb3c1c59798c0af5897403a747504d0ccd3567e1ed404ce43a56d8b62591ae940bc85c9c85af252b451effb26b3c9867","ssdeep":"3072:wF8kv/pHam+So4ypRB06s6VIkDcajIu1yeZGbQ9FiJ2Rh/8PWNjxW55204O/bAmR:UH/ypRUhk0uwbWFiJQk+Nju5204OMtmT","tlshash":"6e8429cd73d674225393a478503f018bb57b28a2b44cc899f186cee52e74a9a4277f7c","first_seen":"2025-10-11T17:37:52.60303Z","last_seen":"2025-10-11T17:37:52.60303Z","times_seen":1,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":65,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/$_$.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/$_$.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 69\r\ntraceparent: 00-dab656060f5a3b4ce410c50d0f0f3746-7b2d6089a047b983-01\r\nlast-modified: Fri, 10 Oct 2025 07:53:56 GMT\r\netag: \"2cdaa92927f02e0b628f1ef4d7dd8caf\"\r\nx-amz-meta-mtime: 1760082764.193904627\r\nexpires: Sat, 11 Oct 2025 22:21:34 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 69346\r\ncache: HIT\r\nx-cached-since: 2025-10-10T22:21:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"2cdaa92927f02e0b628f1ef4d7dd8caf","sha1":"9104a2e16ed080b80a42588b8aeb52ebec47ab7a","sha256":"ef8101ffea52addcdcfcc3a83f96ff2d4613fb3ae6d1c16bbe4852387b73a9db","sha512":"31da80bc1b17aa708fef74b0211af91fce1b4a5f518f11e5caa80f50e9a7791b6e94924e381f550fc44a02f4c1d785e5b95fa2464e7968b5cab079612d70d839","ssdeep":"","tlshash":"1ba002935a5ef66c209044860696e74733823d6a3477b1d625bc5509e6061474817257","first_seen":"2025-05-14T05:06:37.199299Z","last_seen":"2026-03-18T19:40:26.76398Z","times_seen":5502,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/f3f09a899e.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:19.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/f3f09a899e.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:19 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 691\r\ntraceparent: 00-1c5d89dbe27dd1aa3afe0719ed0a6cb5-825c86d2fc13070f-01\r\nlast-modified: Fri, 10 Oct 2025 07:53:56 GMT\r\netag: \"66d9547b2e8b21b9cc566ffd2da94221\"\r\nx-amz-meta-mtime: 1760082764.19590479\r\nexpires: Sat, 11 Oct 2025 20:42:33 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 75286\r\ncache: HIT\r\nx-cached-since: 2025-10-10T20:42:33+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":691,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (690)","md5":"66d9547b2e8b21b9cc566ffd2da94221","sha1":"2334880db1e87c5f5c541abe181c930c76fb7246","sha256":"4a0efa233ab948edbc63842d56fd883bbe937e6ee81c75f87451de265e16abce","sha512":"ebf4510bf5bd211ec43e2ba7ee1bcc4cf43454d57a183afb90981ef94db20ccdfa077553219fc37b845ee2791a00f76f80b485d1514e80a947aab06623ae2e30","ssdeep":"","tlshash":"1101d81d3d2d51984977c3c02e984b850023f23b828a30e8b9fbc2187d8a6035a961bf","first_seen":"2025-08-22T10:11:14.566856Z","last_seen":"2025-10-30T09:36:52.111968Z","times_seen":2058,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":91,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/cc07db51/desktop/default/runtime-77fc2f39.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/cc07db51/desktop/default/runtime-77fc2f39.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-eac562de0b4353311e8664753c758ec6-efea85e44cc62cc3-01\r\nlast-modified: Thu, 09 Oct 2025 08:38:03 GMT\r\netag: W/\"87fa57a0f2f697aad56c83824b607d3f\"\r\nx-amz-meta-mtime: 1759999082.338199228\r\ncontent-encoding: gzip\r\nexpires: Fri, 10 Oct 2025 08:49:26 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 31090\r\ncache: HIT\r\nx-cached-since: 2025-10-11T08:59:10+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17176,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (17176), with no line terminators","md5":"87fa57a0f2f697aad56c83824b607d3f","sha1":"a346bada369639bb18897d987c97a0a23acdfdbd","sha256":"6f167689d45515b80718d151b327787fc2bd118ffcff548937ff5d97d20d0469","sha512":"901bbbe1a2df505bc8ef563966e7c8cfd2c17a71b36a6e5c0b6ab98908e9530fda13f80f09712a2bfedca1f83829389e734ef8b2bb8ebfa121972896ac010a80","ssdeep":"384:WSp+erItnthanINgOEO+erItnthm2oUQh3s4affhQtV:ppBItthanINgOEOBItthBoUy0f+z","tlshash":"8e721f5daf1acd635d22ddc33c217d21581824375c460beceafee2194018ea865afe6f","first_seen":"2025-10-09T09:08:10.644783Z","last_seen":"2025-10-13T07:38:20.879104Z","times_seen":164,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/cc07db51/desktop/default/app-1dac4961.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/cc07db51/desktop/default/app-1dac4961.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-3591cc195f520147d5111304d743fbbf-4bb5b113d56216aa-01\r\nlast-modified: Thu, 09 Oct 2025 08:38:02 GMT\r\netag: W/\"80b4479c54a04b35e12e64da2750ff81\"\r\nx-amz-meta-mtime: 1759999082.312199135\r\ncontent-encoding: gzip\r\nexpires: Fri, 10 Oct 2025 15:19:18 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 8166\r\ncache: HIT\r\nx-cached-since: 2025-10-11T15:21:14+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":482370,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"80b4479c54a04b35e12e64da2750ff81","sha1":"49c273cf36fcf80cca0069b50725a7bc33906e0a","sha256":"60921accbc77b5798bc446a184bb3f1722058cf3232141f577003f31c39e4288","sha512":"65289bdffd47ebd670ae49eca0240038ec84cc1c2ac9b699969da68e407f522e4ef7a7348f99221c6f0e948fbf6e5292892d2657d138ab32c31c6205e245236c","ssdeep":"6144:mhtJ/dA4/HS2Oqfut6g/Xpd4gqZIkLhuinjfG5xdpvzzQ2kvc4DJMv+7uxtgOjHh:C/du2OwZEU2mz8FgF7jcupM/7laZP3DI","tlshash":"afa44c65b5c8f4ca02f34bdae03b0061e33916a9780dd064f779edca359bc05916aa7f","first_seen":"2025-10-09T09:08:10.602424Z","last_seen":"2025-10-13T07:38:20.846353Z","times_seen":164,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/cc07db51/desktop/default/vendors/plugins.vue-js-modal-286e1a49.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/cc07db51/desktop/default/vendors/plugins.vue-js-modal-286e1a49.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-1ae505aec1489ffc73a87a5c0b4c5428-914907f5fe418658-01\r\nlast-modified: Thu, 09 Oct 2025 08:38:03 GMT\r\netag: W/\"4214e81acfca08eeb61b346890063089\"\r\nx-amz-meta-mtime: 1759999082.345199253\r\ncontent-encoding: gzip\r\nexpires: Fri, 10 Oct 2025 08:49:27 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 30894\r\ncache: HIT\r\nx-cached-since: 2025-10-11T09:02:26+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26667,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (26667), with no line terminators","md5":"4214e81acfca08eeb61b346890063089","sha1":"cdf96e78e65fcbd0d63e2de0760073bf192e4c18","sha256":"bbacef6f06001018e9ccdf88c05047fdc8e9e2cd7d7183d957c3c29d280f8d94","sha512":"06fa8feb97f6c80d4b5699701882160e5a64364355bb0e515b2f63e34e4004cca488b058701c08b4bec747f9270de55566a3228a28fac4e00566e61c31936716","ssdeep":"384:lBy0a9vOeCGAZIXfK2rVsAdm00uow4HQEjacGXGQVe6ubq1:MHyIXfPt4wE9GXGQcbq1","tlshash":"9dc2288977d8307442db5573627f2b0ab23e295474269888f772e8e65cb864d206ff3c","first_seen":"2025-10-09T09:08:10.584638Z","last_seen":"2025-10-13T07:38:20.818899Z","times_seen":164,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_registration/en/dictionary_43817aeb1f02d38f64d5345bd86c464b.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_registration/en/dictionary_43817aeb1f02d38f64d5345bd86c464b.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-f7eee53a4cdc6505f508b3d6689c5fb0-d7690a02cd39fcd4-01\r\nlast-modified: Fri, 10 Oct 2025 14:08:23 GMT\r\netag: W/\"18551b5a6d1527ba4ca4838c6a369528\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Fri, 10 Oct 2025 15:17:49 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 791\r\ncache: HIT\r\nx-cached-since: 2025-10-11T17:24:09+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26634,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"373cd0f472a9eeb665749fbea5c40488","sha1":"fbf12d3aa44a7c38f8995c11a25fe95cf194b549","sha256":"b75049ff5b0e445d8f882ab171f0a5df2e5a31127884f4746a5aa5d6f6d0aaaf","sha512":"8a48be18faf3c5a53315a96a670d14d3f60ccfbbf1a061a182fc0d6b5159ae1d94a1a0a031fbf74ecc8415f93707c64ff34bc25cca2560bd694a85fe2c75951e","ssdeep":"384:JSUsZ6LlTYvzH5W8qD8bqBSxkhx+/Y5egwBS10N8adwcWyP/3pHyTqC:HqLHuDDsxkP++3GS10N8RgwTqC","tlshash":"13c2d68f9f748c730783451b7d8b2b9a26fe0168769208558bfe867d1374b91a33349e","first_seen":"2025-10-10T14:33:06.404552Z","last_seen":"2025-10-13T08:33:40.865464Z","times_seen":151,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_block_pages/en/dictionary_9b848ba427b59305d3df2cf0bc5dd080.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:21.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_block_pages/en/dictionary_9b848ba427b59305d3df2cf0bc5dd080.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:21 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-3ad29bbf59157d341e2aca0a2ee653ac-b9fd32c3fb82eb41-01\r\nlast-modified: Fri, 18 Jul 2025 16:06:55 GMT\r\netag: W/\"c557f8f9061794bef4f6b3a5f96cbbb5\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Fri, 18 Jul 2025 17:34:19 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 279\r\ncache: HIT\r\nx-cached-since: 2025-10-11T17:32:42+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2352,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c557f8f9061794bef4f6b3a5f96cbbb5","sha1":"11add862eba30ce83a5f5c71ba4c53b305fd1774","sha256":"bf6a49d0686075ed43f0babe55f6b983cd8a2db79da3f31cc36c9f4d192130d5","sha512":"fe4bcb92b635b15ad1dfe2fed7b19c5bc14523a435815bb2cd572b20cf4b27150293acdee78753bcefa52eb6505124e20a4b46465fa161f0ad7841716909cc9e","ssdeep":"","tlshash":"b941745b733c55e5392841403d0d6d6a7b520168be9161c8fa8cdc9d332f8cae23b62f","first_seen":"2025-07-18T16:37:04.820544Z","last_seen":"2025-10-30T11:47:43.214083Z","times_seen":2348,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:30.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:30 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63920\r\ntraceparent: 00-9034f6168082c5171e93c75fb19e3f3c-a7671d67a5bb18a6-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"a65527fcb58f66a7cfbc0e6b160538b4\"\r\nexpires: Sun, 10 Aug 2025 19:21:26 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 308\r\ncache: HIT\r\nx-cached-since: 2025-10-11T17:32:22+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63920,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63920, version 1.0","md5":"a65527fcb58f66a7cfbc0e6b160538b4","sha1":"45d260e7fa343401b5bb0df982a014f53e2d253b","sha256":"fb13c3a1cbac60649b76f7d7f85c1645d35ac69b85ce5f4eb0692505ecc2cd45","sha512":"8448e96abe326f43285b2d8b0d75beaf0e9c9e051e8754841d907b30eb303ae24c447011306da6a1703b9192d02aeff76a4517bdf94ec6e7dc360ce3538802af","ssdeep":"1536:UIG3hJMkJeK8ic5iZGnJ4URj9vqXOQ6UqYdbuA5RVK1:UL31hcLlRjDQ6Uq4W1","tlshash":"7f5302df8de32a148ff78772668885f4f4927c68898c8e7345526a8907f07d6b96c04f","first_seen":"2023-05-07T18:04:27Z","last_seen":"2026-04-20T11:06:04.829559Z","times_seen":10345,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/cc07db51/desktop/default/Page.Block-7a3b0ef4.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/cc07db51/desktop/default/Page.Block-7a3b0ef4.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 476\r\ntraceparent: 00-4c22202197d6d4623ade7e96e72645bd-6a1dc79c6ff3a4dc-01\r\nlast-modified: Thu, 09 Oct 2025 08:38:02 GMT\r\netag: \"e3c6b68106804e28207ab4b5578536d9\"\r\nx-amz-meta-mtime: 1759999082.309199124\r\nexpires: Fri, 10 Oct 2025 08:49:33 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 31015\r\ncache: HIT\r\nx-cached-since: 2025-10-11T09:00:25+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":476,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (476), with no line terminators","md5":"e3c6b68106804e28207ab4b5578536d9","sha1":"96b5b77c84e6ffc2e8b0a2cab3ac682574fde12f","sha256":"294a53a9935d7d8ea78242e1d45c6554f71b2fdb7d47bf520c7f2f670da7b0c4","sha512":"b0bb7d84bfd8e04166a25078e721cd4b3c790b2b4bf2c75b788443ce70884722e1695a3e5c47ccad466d7318bda5ac30574df124144274496bc2f85a626d213b","ssdeep":"","tlshash":"42f09e9b5562fc8d95e610d343b6c1f7b4cc797e0649596046a1c8b532b685a4c2124f","first_seen":"2025-10-09T09:08:10.594025Z","last_seen":"2025-10-13T07:38:20.809208Z","times_seen":160,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/b5cd9a5e87d930de856c92da15aa121e.png","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/b5cd9a5e87d930de856c92da15aa121e.png HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 653\r\ntraceparent: 00-5f722fbc15aa40e84815d3f95e542f85-d36e9abce1821b28-01\r\nlast-modified: Wed, 26 Jun 2024 08:18:02 GMT\r\netag: \"e6f0766cbd95db33da44e7a9140648f2\"\r\nexpires: Thu, 16 Jan 2025 10:46:36 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2303\r\ncache: HIT\r\nx-cached-since: 2025-10-11T16:58:57+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":653,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"e6f0766cbd95db33da44e7a9140648f2","sha1":"5f196b1bfe8c3f92bd2ebcd67124e72e81ae6aaf","sha256":"c0399d478788d5d483f104a2e8cb7c32f41cb40e9df0c22e831b2bfa2db63ec0","sha512":"249da39baba03408de98c7fa9a9342ef120436037ab6245b3b4a5f1a206291caaf67481c6ed67064544576697d41ab82499abffec998d837812292a050bf826a","ssdeep":"","tlshash":"90f083e032254a855c02ac7fc33414448fb226cc3682bb09e012887119d24a79dd1368","first_seen":"2023-04-05T22:56:35Z","last_seen":"2026-04-03T12:07:45.643999Z","times_seen":6597,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/metadata.json","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"GET /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/metadata.json HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 25ac04db-8eac-4fe0-b7b3-f2c25e413e55\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJkYXRhIjp7ImlkIjoyMjk0LCJkaXNwbGF5VHlwZUlkIjoxLCJ0ZW1wbGF0ZVR5cGVJZCI6MSwidGVtcGxhdGVJZCI6MX0sImJyZWFkY3J1bWJzIjpbMSwxMiwxNCwxNSw4ODUsMjMyMiwxNiw0OTUsODEyLDk4NSw4MTMsMTcsMTgsMjE4NiwyMzY4LDIzMDAsMjM3Niw4NDYsMjI2NywyMjkxLDIzMDMsMjM3NSw4MTAsOTQ0LDIyMTEsMjQwOSwyNDk1LDEwOTAsMTA5MywyMTkxLDI1MDAsMTAwMiwyMjQyLDIzMDEsMjQ2MSwyNDY0LDI0NjUsMjQ2MiwyNDY2LDIyNTYsMjI1MSwyMjg3LDI0MzIsMjQ3OCwyMzQ1LDQ4NCwzOTUsMjMyOCwyNDAyLDIzMzIsNDc0LDQ3NiwxMDA2LDI0OTMsMjM5NCwyMzY2LDI0MDMsMjMxMSw4MDksOTEyLDgwNiw3ODYsNzY4LDc3NSw3NjcsNzY2LDc1MSwyNDI0LDEwMzksMjMyNywyNDIyLDI0NjgsOTA3LDk4NCwxMTA2LDI0MDgsMjMwNywyMTU1LDIzNzIsMTExOSwyMjk2LDIzNTQsMjM0MCw5NjgsMjIyOSwyMzkyLDI0MzEsMjQxMywyNDM0LDEwOTYsMjM1MSw3NTksMjIyOCwyMjE0LDg0Myw4NDIsMjM1Miw3NTYsNzQ3LDc0OCw1NDgsMjM1MywyNDI1LDI0MjYsMjQ3MywyNDkyLDc4NywyNDQ2LDIxNjMsODM5LDc4MywyNDc3LDUyNSwyNDgwLDI0MzksMjQ0MCwyNTA3LDUyNCwxMDc1LDI0MTYsMTA3NCw1NDksOTQzLDUxMiwxMTE3LDExMDEsMTA3MywyMzEwLDIzOTcsMjQ2MywyNDUyLDIzNzgsMjM4OCwyMzg5LDIzOTYsMjQwNywyNDEwLDI0MTIsMjQxOCwyNDIwLDI0NzUsMjQyOCwyNDM1LDI0NjcsMjQ1MSwyNDIzLDIzNjksMTA3OCwyNDM3LDExMDAsMjQzNiwyNDI5LDEwMTksNTE1LDUyMiw3NjksNDc1LDU0NSw4MTUsODE3LDI0NTYsMjUwMSw0NzcsNDk4LDk0MiwyMzIwLDIyODksMjI4MCwxMDg2LDk3OCwxMDg0LDk4NiwyMTk3LDk5Myw5NzcsNTMwLDIyNDMsOTgxLDk4NywyMTgyLDIyOTUsMjE1NiwyMTU3LDEwOTIsODA0LDIyMzksMjIyMSw5OTQsOTk5LDk5OCw5OTUsMTAwNywxMDA4LDEwMTAsMTAwNSwxMTAyLDIxOTksMjE5OCwxMDEyLDEwMjMsMTA5OCwyMjAxLDEwMjIsMTA0MCwyNDcxLDI0ODgsMjE1OSwxMDg5LDIxNzksMTEyMiwxMDg3LDEwNDIsMTA0MywxMDc2LDEwNzcsMjMyMSwyMzYyLDI0OTcsMjE3MSwyNDg5LDIxNzcsMjE3NiwyNDkxLDEwODMsNTMxLDk5Miw5OTAsMjM0NywxMDQxLDIzOTgsMjIwMiwxMDE4LDI0NDQsMjQ3MiwxMDk5LDEwODIsNzg0LDU1Nyw3NzgsNzgyLDE5LDY1NiwyMjIwLDIyOTRdfQ==; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder; postback_watcher=%7B%22tag%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22pb%22%3A%22c4a963618a5742d9870d0059bcae60ae%22%2C%22click_id%22%3A%223724014758588854419%22%7D; auid=uaJaGGjqlc9YPwDvA8rBAg==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\nx-dt: 285\r\nx-time-ng: 0.010\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.101, wf-uht;dur=0.013\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c4486f11b54190f6c3e4c36e992b15b0","sha1":"f1562fe788cb6964594cecb894ccaf0cf9b21b2f","sha256":"05946779bb7cf2867d2566592de38f853e44f961757a966f747bdbe3bd3310b2","sha512":"26a1bf552e141109ae97d1ba3d0a2b36a3d81f5dc62daea0e51213ff7b67062973c6d6cfb0e097bda60b0798e0f13f9e65a01342cb4d3bf841d23a8ca1eb5525","ssdeep":"","tlshash":"9a9004c45055003d54411011410d1d440d3d571111d45c0451d435401351cd5d515003","first_seen":"2025-10-11T17:37:52.637025Z","last_seen":"2025-10-11T17:37:52.637025Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/hd-api/external/verify","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:30.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"POST /hd-api/external/verify HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/en/block\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 191549\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder; postback_watcher=%7B%22tag%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22pb%22%3A%22c4a963618a5742d9870d0059bcae60ae%22%2C%22click_id%22%3A%223724014758588854419%22%7D; auid=uaJaGGjqlc9YPwDvA8rBAg==; window_width=1280; che_g=f92bc74a-16b8-48b3-bebb-b1ef175b444c; SESSION=923003ddcebe10aa36e61c6a7e16c5cf\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:30 GMT\r\ncontent-type: application/json\r\ncontent-length: 815\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-dt: 285\r\nx-request-guid: 57eb6ffa1f1bba4a74bcc7cd68f15629\r\nx-time-ng: 0.004\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.122, wf-uht;dur=0.008\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1035,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"13a7c8cfe735761f1dc185ce39889d42","sha1":"429a8a4d762d6b42564c6a53001be5c145a63113","sha256":"c83deed19ff3561cd6c2939ccade55328873b030113e4d91fa61790a98edf820","sha512":"79aba2e2aa4771f1b449a2cd0531e2447784c531c9539fc56c916b2c41b6210303490edde366717c2e926b42e7ae7f0b37aeb833d681e8e21cb9f645b5455743","ssdeep":"","tlshash":"9511a5168cf11d3f7ac3e0461fd50f0696f98c98c926118e22467363ecbf8709a43ba1","first_seen":"2025-10-11T17:37:52.639886Z","last_seen":"2025-10-11T17:37:52.639886Z","times_seen":1,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":32,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/cc07db51/desktop/default/analytics-25f6949f.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:30.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/cc07db51/desktop/default/analytics-25f6949f.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:30 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-a7ff3a5b4238f63f2f724c9a43712c88-d3c901827ecb226e-01\r\nlast-modified: Thu, 09 Oct 2025 08:38:02 GMT\r\netag: W/\"cedc4c6b9d2f678746d1c53775846966\"\r\nx-amz-meta-mtime: 1759999082.311199131\r\ncontent-encoding: gzip\r\nexpires: Fri, 10 Oct 2025 16:32:34 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 3743\r\ncache: HIT\r\nx-cached-since: 2025-10-11T16:35:07+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8842,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8842), with no line terminators","md5":"cedc4c6b9d2f678746d1c53775846966","sha1":"329f9c237e65d41d0e7b63a3527566251d0d1234","sha256":"9ae350abf52f1e87be930a8e98726d455fc0e25628cb7bf7d32ff3836a78bfcd","sha512":"25bfc98688703b1cc952f18c7cc7deaeec7e700f9f2a0039aaf3a95fff96f9f77172b2abe55be550a432b40c42719b3fd682cdf91962b9596cfb71116443d939","ssdeep":"192:uvO+jPZxnEW5+vtj33Veo9vshudWa4w7WJ3vQ9OPkPQzVHvOSRxG8km:CjPZxnEW5293VeoFbdWa4w7WFQ96kPi7","tlshash":"3002a68e7dc9e43007ba19b8e67b9a0ae07617172405c451cafad8843d7ea8f1017e8d","first_seen":"2025-10-09T09:08:10.634388Z","last_seen":"2025-10-13T07:38:20.82927Z","times_seen":142,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-7JGWL9SV66\u0026cid=339470072.1760204251\u0026gtm=45je5a80v897130004za200zb9180563600zd9180563600\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~102015666~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~105322304~115480710~115616986~115834636~115834638~115868792~115868794\u0026tag_exp=101509157~102015666~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~105322304~115480710~115616986~115834636~115834638~115868792~115868794\u0026z=1329760416","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:31.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:43:39 GMT","end":"Mon, 15 Dec 2025 08:43:38 GMT"},"fingerprint":{"sha1":"93:02:01:E1:1E:86:9B:02:8A:40:9F:27:1A:D9:36:38:5E:9E:87:57","sha256":"CE:D6:C2:25:00:76:0A:D4:69:E2:16:52:98:EC:03:C2:63:60:0D:EF:82:CF:04:30:23:40:53:A4:8A:0F:B1:05"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-7JGWL9SV66\u0026cid=339470072.1760204251\u0026gtm=45je5a80v897130004za200zb9180563600zd9180563600\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~102015666~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~105322304~115480710~115616986~115834636~115834638~115868792~115868794\u0026tag_exp=101509157~102015666~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~105322304~115480710~115616986~115834636~115834638~115868792~115868794\u0026z=1329760416 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 11 Oct 2025 17:37:31 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-20T13:59:09.532904Z","times_seen":809524,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":127,"dns":1,"connect":21,"send":0,"wait":35,"receive":0,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/seo-module-api/api/public/v1/analytics-counters?project[id]=285\u0026domain[host]=1xlite-93399.world","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"GET /seo-module-api/api/public/v1/analytics-counters?project[id]=285\u0026domain[host]=1xlite-93399.world HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/en/block\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nx-app-n: v3-nuxt2\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder; postback_watcher=%7B%22tag%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22pb%22%3A%22c4a963618a5742d9870d0059bcae60ae%22%2C%22click_id%22%3A%223724014758588854419%22%7D; auid=uaJaGGjqlc9YPwDvA8rBAg==; window_width=1920\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: application/json\r\ncontent-length: 107\r\ncontent-encoding: br\r\ncache-control: max-age=1200, must-revalidate, public, s-maxage=1800, stale-if-error=86400, stale-while-revalidate=300\r\nx-content-digest: en6d0e5d6e0146a49c358c0eaad1d2ef38\r\nage: 1194\r\nx-request-id: 57d38c0f7a82748696de37e1c6a0184c\r\nx-request-guid: 57d38c0f7a82748696de37e1c6a0184c\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: p;dur=0.76103210449219, wf-uht;dur=\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":105,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6abfe5f6641fddde82c2ca29cf5c6a7a","sha1":"958379bc84073d266358a27b3cf86b15484f5f6d","sha256":"ede01772dfd8da2cc82f245e454ce360b2ceb13b7d1c330bbc1d68fe41255c19","sha512":"ecbaa34447669af053d49cc9b252812fc653923247f4b9e3629a55ba0cd919810e81b0f8be8f11a74401e0ed9c889bc7e6b02587b289c3b41142505b6a8fb42a","ssdeep":"","tlshash":"1db092219588ecb825036880409e1813d47870658ea616404d10c772806c1143421b7f","first_seen":"2024-05-18T12:55:24Z","last_seen":"2026-03-30T04:38:43.789364Z","times_seen":2956,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/hd-api/external/apps/c5e31d5915661de4393e3f1489b00ebc4497dd48/api.js","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:28.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"GET /hd-api/external/apps/c5e31d5915661de4393e3f1489b00ebc4497dd48/api.js HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/en/block\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder; postback_watcher=%7B%22tag%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22pb%22%3A%22c4a963618a5742d9870d0059bcae60ae%22%2C%22click_id%22%3A%223724014758588854419%22%7D; auid=uaJaGGjqlc9YPwDvA8rBAg==; window_width=1280; che_g=f92bc74a-16b8-48b3-bebb-b1ef175b444c; SESSION=923003ddcebe10aa36e61c6a7e16c5cf\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:28 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 615\r\ncache-control: public, max-age=300\r\ncontent-encoding: gzip\r\netag: 32053c9c355cf85427a5cc3f07de0b09\r\nvary: Accept-Encoding\r\nx-dt: 455\r\nx-request-guid: e89489f66edd8458bcc8ed1456a67ad7\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.009, wf-uht;dur=\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1024,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1023)","md5":"32053c9c355cf85427a5cc3f07de0b09","sha1":"f3c13d6a657ffa2ca8997f54f4779f0c02f1600a","sha256":"0ec410318f3ecc3a3aef3de68e99190845248bcc12282aa15eb9acc87f8837d3","sha512":"cbb8c7ef0bbed264989bf5b4af7d216cdeacc5684641c37d429e5ceca7dc04e55254e81f319cd856e7b4f447565bf5abf4e9915f5725eb57cfb142f113362078","ssdeep":"","tlshash":"2211756e18ed58291a9275c402b7ccfc642036363219d4c495ede9e1072ff990032f5c","first_seen":"2025-07-24T09:34:41.13762Z","last_seen":"2026-04-20T00:27:28.160396Z","times_seen":3909,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:30.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"GET /gtag/js?id=G-7JGWL9SV66 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 11 Oct 2025 17:37:30 GMT\r\nexpires: Sat, 11 Oct 2025 17:37:30 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 159016\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":498699,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12571)","md5":"13d62b95fecf794319f40bb9b16e0ab8","sha1":"bab75e99914bb47783627525e4c72fad21ad5b56","sha256":"407a58158e80bc33bd90cdbd307867f5d68cde3d50cda2f1643e0d105a9e8976","sha512":"ab8287ea86f5a9d2fae136ca035acac9dd6939f0550333e38109998edf4193e9ec26371964777793edb09c15cf5b71e7f1a2f5ae9c1a9ea72cd5a433edddbf96","ssdeep":"6144:PBzT/yp2xUtk0uwbWF5JQk+Nju5204Oynh2FdXA/5:5KY2m0KzJW0xe","tlshash":"49b40a9e73d674265296f478502f01cba87b24e2b49cc8aaf1c9cdf02d7469a4127f7c","first_seen":"2025-10-11T16:32:51.61441Z","last_seen":"2025-10-11T20:39:57.247432Z","times_seen":3,"resource_available":true,"data":null}},"time_used":302,"timings":{"blocked":85,"dns":1,"connect":21,"send":0,"wait":46,"receive":78,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=DC-14030178\u0026cx=c\u0026gtm=4e5a80h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:31.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"GET /gtag/destination?id=DC-14030178\u0026cx=c\u0026gtm=4e5a80h1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 11 Oct 2025 17:37:31 GMT\r\nexpires: Sat, 11 Oct 2025 17:37:31 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 11 Oct 2025 15:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:72:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:72:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:72:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:72:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 113771\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":323823,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"0a2c646ed32e30b583c70565d5e3ecc6","sha1":"e79e038c5cfddcdc1ff686c6345f7b3b05e2bab4","sha256":"a39c6d64b93d53c060218d96669d6677b61b9ea01a13319de917e7857cc72362","sha512":"4064d7e65447bbacaf3906998a04b1adbf044a5e095c8af5fa1a55ce4adc59da14ae78a5676bb21ff3b3a52122499f1a9c15bc2c01c066cb7aaa06fcec30d098","ssdeep":"3072:ydPpjam+So4ypg106s6VIkDcajIu1yeZGbQ9hJ2RT8PWNjxW55204O/XYAmCRs1a:Oj/ypg4hk0uwbWhJT+Nju5204ObtIiZ","tlshash":"666418cd73d674664393a478503f004bb17b6992f84cc898f186dae52e70aaa4277f7c","first_seen":"2025-10-11T17:37:52.64901Z","last_seen":"2025-10-11T17:37:52.64901Z","times_seen":1,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?en=page_view\u0026dl=https%3A%2F%2F1xlite-93399.world%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=895837873.1760204251\u0026dt=1xBet\u0026auid=643817387.1760204251\u0026navt=n\u0026npa=1\u0026gtm=45He5a80h1v9180563600za200zd9180563600xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~105322303~115480710~115616985~115834636~115834638~115868792~115868794~115995680~115995682\u0026tft=1760204251028\u0026tfd=12290\u0026apve=1\u0026apvf=sb","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.207.196","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:31.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:42:40 GMT","end":"Mon, 15 Dec 2025 08:42:39 GMT"},"fingerprint":{"sha1":"99:C6:4E:8E:B8:5B:D1:99:2A:8E:B6:F5:1D:F0:C9:9F:D1:98:60:99","sha256":"5E:61:10:69:80:4E:43:5E:5C:BC:64:28:29:74:91:F6:DC:3B:42:28:2D:71:3C:A4:FA:4E:A8:88:A1:46:E6:39"}}},"request":{"raw":"POST /ccm/collect?en=page_view\u0026dl=https%3A%2F%2F1xlite-93399.world%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=895837873.1760204251\u0026dt=1xBet\u0026auid=643817387.1760204251\u0026navt=n\u0026npa=1\u0026gtm=45He5a80h1v9180563600za200zd9180563600xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~105322303~115480710~115616985~115834636~115834638~115868792~115868794~115995680~115995682\u0026tft=1760204251028\u0026tfd=12290\u0026apve=1\u0026apvf=sb HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 11 Oct 2025 17:37:31 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://1xlite-93399.world\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_css_542ed6.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:19.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_css_542ed6.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:19 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-6b96d495a24e193d70d445a59f6e58d5-f3de9f1a14c3b894-01\r\nlast-modified: Fri, 10 Oct 2025 12:15:02 GMT\r\netag: W/\"7eb4f3d4c97ec66a32269ae3b07d7653\"\r\nx-amz-meta-mtime: 1760098405.81415369\r\ncontent-encoding: gzip\r\nexpires: Sun, 12 Oct 2025 08:12:36 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 33883\r\ncache: HIT\r\nx-cached-since: 2025-10-11T08:12:36+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11025,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (11024)","md5":"7eb4f3d4c97ec66a32269ae3b07d7653","sha1":"e31f7fc270a78d455c90a57d8c365bccf6ebdfb0","sha256":"542ed6b44d2771468d5e5d4c77dfddaab1f7d4169bf692a087c56f024d9813dc","sha512":"02195935d732af0ae4dceecb4677bcb4ad90d284dfbd27a707ee927fc587fb3a9bacc8bd8cf315ee025b67d1a53b33fb0e9ced17d24ea019deb2a0be9765ec37","ssdeep":"192:mLhA5ZO73iyDDW7qE/eVgnmnh8RbxJEU4PuiPBvDDQ7qOtIZ4Io:QAXOLisDUqE/Y8RbxUuwBLDCqOt24v","tlshash":"cc3226adc9e495231d26b5216388be7c85f0f06aee314e55f80ec6104ad3f9f15e0e79","first_seen":"2025-08-13T23:36:01.800779Z","last_seen":"2026-03-04T04:00:43.402045Z","times_seen":3922,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":101,"dns":51,"connect":3,"send":0,"wait":2,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_a251d8ff02a2a292a29e46c5c0141b5b.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_a251d8ff02a2a292a29e46c5c0141b5b.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-6f2290bd4c714760cf7b3f6c8ff7a595-96c5abd4f3a154b6-01\r\nlast-modified: Wed, 08 Oct 2025 16:07:57 GMT\r\netag: W/\"546e2c781bfc7d554ff1beda40415524\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Fri, 10 Oct 2025 15:18:31 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2468\r\ncache: HIT\r\nx-cached-since: 2025-10-11T16:56:12+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":142467,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"546e2c781bfc7d554ff1beda40415524","sha1":"ac47b839de3f711ceb7080a5e4894ff1397b3664","sha256":"e5819b228a6a05644f4cec10ab791c7de5da233f3a415c72676add90ad2eb552","sha512":"341e2a474008a58ce0ecdd03ccb58a95a0ecd7a03b687e797d02384f26a744697b80087b3424beb7aa5c5fb8f991431fdb701b189ddce547799639ff61f2e563","ssdeep":"3072:vs4MI9Z0rkk7etAfRxxlRXPGj9AgLAnSc6WrsTfuJm9p1Zg:vgIsoJ2fVlRXPGj9/AnkTfuJm972","tlshash":"bad3f70a194c6e7f0fda22ddf94edf4962b40055aab2c822d8eec11e7197fd2817714b","first_seen":"2025-10-08T16:35:03.277985Z","last_seen":"2025-10-13T14:05:09.183207Z","times_seen":206,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/67921119830732f2181733ba7e9bf02f.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/67921119830732f2181733ba7e9bf02f.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-94df73100074921e98670702d9b88f7d-cab0151740989d1a-01\r\nlast-modified: Fri, 01 Aug 2025 06:34:40 GMT\r\netag: W/\"b255cc6c6ca667c6f42f2d9ab151b21e\"\r\ncontent-encoding: gzip\r\nexpires: Fri, 01 Aug 2025 08:07:27 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2079\r\ncache: HIT\r\nx-cached-since: 2025-10-11T17:02:41+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7481,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b255cc6c6ca667c6f42f2d9ab151b21e","sha1":"a0c241d3c2fa56d392cc204f2d386046a5273a9b","sha256":"9c347db4287a13bf6e86c34baa07bf255437a85566ba14a77199a753b73a400b","sha512":"62bb36631dfa4cd6790efcf39ff920a0b11741cd1b5ecd936ecce083090c0336cb216eb28f838e05e27fff2509a6b8724d0f6c61349da57506e6eca112c8a294","ssdeep":"48:TzABBABGkABjABFygABCN/ABCNYN8ABWHABaEABzzEFABIIX4ABBxSHsABYiwABp:lFbClXCL3cblP+XyLO5GIM","tlshash":"e7f11784fff04c33112f94ad98b37a89a7884f07a95a7d1c7f9d294c1f1451a04aadbe","first_seen":"2025-08-01T12:24:56.656253Z","last_seen":"2025-11-07T10:46:34.805118Z","times_seen":2150,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/hd-api/external/0199d459-56ac-7bb1-9a3c-b4a62a83d1bc.js","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:28.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"GET /hd-api/external/0199d459-56ac-7bb1-9a3c-b4a62a83d1bc.js HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/en/block\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder; postback_watcher=%7B%22tag%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22pb%22%3A%22c4a963618a5742d9870d0059bcae60ae%22%2C%22click_id%22%3A%223724014758588854419%22%7D; auid=uaJaGGjqlc9YPwDvA8rBAg==; window_width=1280; che_g=f92bc74a-16b8-48b3-bebb-b1ef175b444c; SESSION=923003ddcebe10aa36e61c6a7e16c5cf\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:28 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 103268\r\ncache-control: private, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-dt: 285\r\nx-hd-trace-id: CZlmMghuE+eguELaOCvIbLZ8vBY9FQfkyYVKB7NCvOeKBIjHwl6CfJuFHUx4tKyf6+SEXzL11UoLNL5NBtm0DdZsiw++3vsOiUK2+ShpTmg2qOv8+prjoY2JeFzSvqequ2RSXWMeqC6RwXEN+dsUPfaj+3y0SKfoVPzAHCSVwiylheCt5oQ6gSMe6t/A4OMzrto=\r\nx-request-guid: bbc4b06cffcc009eecefae56b6499871\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.087, wf-uht;dur=0.005\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":356289,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"607823a6683f7372ee9267fdf96089e0","sha1":"95942b192da608a5e061609dbf9009528f704fa5","sha256":"8ed053dde688f42463484e4543bd571da37c1e5274a9cc4ef46cfbb4a54eb90b","sha512":"412907880fe47eec3e40079bd131b2b8d2be6f0426d4f0f19ab866c9770195bc668d258400a6090dcaafd2b4621df49da940c54cb12899d21063da3070cc605d","ssdeep":"3072:ZYyHJqtrSonin9pdBtwIXQjicEp32076bXV2YQEiDWfGZQPQb4KI:KVowwR320UXFQEizZUQkKI","tlshash":"957461724bd1ec1572d57b22ec790f96a17f1fa830a8483af047fae8649853474a6f1c","first_seen":"2025-10-11T17:37:52.677406Z","last_seen":"2025-10-11T17:38:17.280677Z","times_seen":2,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je5a80v897130004za200zb9180563600zd9180563600\u0026_p=1760204250656\u0026em=tv.1~em.ODS1igyfeIhzOTHENqwIfH1sb8t0oxg8FT6iY2YCmeo\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=339470072.1760204251\u0026ecid=1496962849\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026ec_mode=a\u0026_s=2\u0026tag_exp=101509157~102015666~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~105322304~115480710~115616986~115834636~115834638~115868792~115868794\u0026sid=1760204251\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-93399.world%2Fen%2Fblock\u0026dt=1xBet\u0026_tu=KA\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026ep.optimize_id=GTM-5R4MT54\u0026tfd=12456","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:31.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je5a80v897130004za200zb9180563600zd9180563600\u0026_p=1760204250656\u0026em=tv.1~em.ODS1igyfeIhzOTHENqwIfH1sb8t0oxg8FT6iY2YCmeo\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=339470072.1760204251\u0026ecid=1496962849\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026ec_mode=a\u0026_s=2\u0026tag_exp=101509157~102015666~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~105322304~115480710~115616986~115834636~115834638~115868792~115868794\u0026sid=1760204251\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-93399.world%2Fen%2Fblock\u0026dt=1xBet\u0026_tu=KA\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026ep.optimize_id=GTM-5R4MT54\u0026tfd=12456 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://1xlite-93399.world\r\ndate: Sat, 11 Oct 2025 17:37:31 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:158:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:158:0\r\nreport-to: {\"group\":\"ascnsrsggc:158:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:158:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":60,"dns":0,"connect":21,"send":0,"wait":16,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 25ac04db-8eac-4fe0-b7b3-f2c25e413e55\r\nContent-Length: 19\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder; postback_watcher=%7B%22tag%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22pb%22%3A%22c4a963618a5742d9870d0059bcae60ae%22%2C%22click_id%22%3A%223724014758588854419%22%7D; auid=uaJaGGjqlc9YPwDvA8rBAg==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nx-dt: 285\r\nx-time-ng: 0.011\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.094, wf-uht;dur=0.022\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-04-20T14:02:33.701181Z","times_seen":243583,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/d9c2365ca58e0fb54268fd4914d751b9.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/d9c2365ca58e0fb54268fd4914d751b9.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-4c19e069a1a17b39ae1d2d96a698550e-969889a90e667972-01\r\nlast-modified: Mon, 16 Jun 2025 11:25:45 GMT\r\netag: W/\"1a7ec72aad44f9540cb604d7cde5ff38\"\r\ncontent-encoding: gzip\r\nexpires: Fri, 03 Oct 2025 20:15:34 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2079\r\ncache: HIT\r\nx-cached-since: 2025-10-11T17:02:41+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14466,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1a7ec72aad44f9540cb604d7cde5ff38","sha1":"65e5851d652e0471c213282efb5eeee31ae813db","sha256":"94d4bf6bc00a09b766ea0ba441e860dc40ee6d398be80e89016dd0ee662869d6","sha512":"05c4574c3785992daed7bb3616a938d1d04dc9679132ee8997147a21c32d2dab5537e51060ecce9969c4e2ea5c4ba97299c5f2622a3f6fb097c066e189d37f79","ssdeep":"96:75b7Ba79eu4QWGAdryCiQFpzLJLJeHZVZYpH3UGHSTSSbbGiJinHs:u7kJ2VK3UsyinHs","tlshash":"935246d9bae41c33112b60bdd5f7f91aa3dc1f439d4aa8287eac6d4c1b6050500aed7e","first_seen":"2025-06-17T07:58:23.417687Z","last_seen":"2025-11-14T10:22:49.434452Z","times_seen":2557,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/cc07db51/desktop/default/DC-4d1e2556.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/cc07db51/desktop/default/DC-4d1e2556.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-1f6346222524320132bebeaa4a903194-95814d8704e535ed-01\r\nlast-modified: Thu, 09 Oct 2025 08:38:02 GMT\r\netag: W/\"2fe361b33c23c71ab4f487eff692c593\"\r\nx-amz-meta-mtime: 1759999082.30819912\r\ncontent-encoding: gzip\r\nexpires: Fri, 10 Oct 2025 08:49:27 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 30894\r\ncache: HIT\r\nx-cached-since: 2025-10-11T09:02:26+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2201,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2201), with no line terminators","md5":"2fe361b33c23c71ab4f487eff692c593","sha1":"59ae2b2ffee09f5f13f41ecca9a03636ec368371","sha256":"4c601f6012999e4d7322d0b150793fced8afb3a838b3db78292463906ed8d6f1","sha512":"ca41c5a737737802a04fd85e1fbb18759b663e5d8b4101954555ba21242a0bcfb7b38df969be3db9c95ba3d0f40409cb7a9d29d15a8d02d1b2ba0e07968dab3c","ssdeep":"","tlshash":"ce41840930a4fc1193b50cd859bf71051027f076648dc9b4d3a36a8b08b7f66a217916","first_seen":"2025-10-09T09:08:10.617419Z","last_seen":"2025-10-13T07:38:20.885207Z","times_seen":164,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:29.298Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:29 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63748\r\ntraceparent: 00-75d41422d7854bebfee56b42d1b216fe-6c852843ab0b01ff-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"6887b6f24414dbc612dbf42ccdc76b70\"\r\nexpires: Thu, 16 Jan 2025 10:32:14 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2533\r\ncache: HIT\r\nx-cached-since: 2025-10-11T16:55:16+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63748, version 1.0","md5":"6887b6f24414dbc612dbf42ccdc76b70","sha1":"8068d3abfbc6cbf35b55919da45b1f4d2d136238","sha256":"fc5c015fc32518f1ed810fa84ca28941eb9d5a3c81acc8df69a4dbbeedef7b0c","sha512":"00f08f9dd648972c9571547e06172d5505dd13f577fe2e65a497d3856172807ac11c996984e4138d2eb2ac784257fe61864aee15752fe9e9e76f98db931e0c2a","ssdeep":"1536:KtdCG+Dz6RxAx457zL0ASEn091Y0H1mTOzI/OzMFOoTX4u:MMG+yRpzN091Y0VtI/pOoTt","tlshash":"8b5302485551fae2cac3073c0f7a89dbb37a776d519224cd98b69f830d37964bea2070","first_seen":"2023-06-14T19:15:49Z","last_seen":"2026-04-20T11:06:04.783713Z","times_seen":10489,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/bff-api/config/group/get?groups=d.technical\u0026lang=en","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:21.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"GET /bff-api/config/group/get?groups=d.technical\u0026lang=en HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/en/block\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nis-srv: false\r\nx-svc-source: __TECHNICAL_PAGES_APP__\r\nx-app-n: __TECHNICAL_PAGES_APP__\r\nx-geoip2-country-code: ru\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder; postback_watcher=%7B%22tag%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22pb%22%3A%22c4a963618a5742d9870d0059bcae60ae%22%2C%22click_id%22%3A%223724014758588854419%22%7D; auid=uaJaGGjqlc9YPwDvA8rBAg==; window_width=1920; che_g=f92bc74a-16b8-48b3-bebb-b1ef175b444c\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:21 GMT\r\ncontent-type: application/json\r\ncontent-length: 742\r\ncache-control: no-cache, private\r\nserver-timing: dt_total;dur=0.078, bff;dur=7.44, wf-uht;dur=0.014\r\nx-dt: 285\r\nx-pod: R-cqf7x\r\nx-time-ng: 0.010\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":742,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ee08503a5b3b4dc5cb2293d083d15abf","sha1":"85c8a2887e5fb5a0872d5799ecd74cc30a8e3c69","sha256":"3585e55f7aead716071347ad24865940e0dd48653cdc28070eae96892d2cd934","sha512":"4485bee49a6f1604da56b73157ad91d3e23ad387654b8779124713dcda2268fe14689a482b754deae200d4b12586062c5c5c94921742f9e8184f3bad0bb804e2","ssdeep":"","tlshash":"7a01845e00a5ca3d706c063adb865e109eed502b3284b951fe0cacac60d6ddef95680f","first_seen":"2025-07-21T12:33:40.469152Z","last_seen":"2025-11-06T13:12:59.556967Z","times_seen":869,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/web-api/session","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:28.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"GET /web-api/session HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/en/block\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nx-app-n: v3-nuxt2\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJkYXRhIjp7ImlkIjoyMjk0LCJkaXNwbGF5VHlwZUlkIjoxLCJ0ZW1wbGF0ZVR5cGVJZCI6MSwidGVtcGxhdGVJZCI6MX0sImJyZWFkY3J1bWJzIjpbMSwxMiwxNCwxNSw4ODUsMjMyMiwxNiw0OTUsODEyLDk4NSw4MTMsMTcsMTgsMjE4NiwyMzY4LDIzMDAsMjM3Niw4NDYsMjI2NywyMjkxLDIzMDMsMjM3NSw4MTAsOTQ0LDIyMTEsMjQwOSwyNDk1LDEwOTAsMTA5MywyMTkxLDI1MDAsMTAwMiwyMjQyLDIzMDEsMjQ2MSwyNDY0LDI0NjUsMjQ2MiwyNDY2LDIyNTYsMjI1MSwyMjg3LDI0MzIsMjQ3OCwyMzQ1LDQ4NCwzOTUsMjMyOCwyNDAyLDIzMzIsNDc0LDQ3NiwxMDA2LDI0OTMsMjM5NCwyMzY2LDI0MDMsMjMxMSw4MDksOTEyLDgwNiw3ODYsNzY4LDc3NSw3NjcsNzY2LDc1MSwyNDI0LDEwMzksMjMyNywyNDIyLDI0NjgsOTA3LDk4NCwxMTA2LDI0MDgsMjMwNywyMTU1LDIzNzIsMTExOSwyMjk2LDIzNTQsMjM0MCw5NjgsMjIyOSwyMzkyLDI0MzEsMjQxMywyNDM0LDEwOTYsMjM1MSw3NTksMjIyOCwyMjE0LDg0Myw4NDIsMjM1Miw3NTYsNzQ3LDc0OCw1NDgsMjM1MywyNDI1LDI0MjYsMjQ3MywyNDkyLDc4NywyNDQ2LDIxNjMsODM5LDc4MywyNDc3LDUyNSwyNDgwLDI0MzksMjQ0MCwyNTA3LDUyNCwxMDc1LDI0MTYsMTA3NCw1NDksOTQzLDUxMiwxMTE3LDExMDEsMTA3MywyMzEwLDIzOTcsMjQ2MywyNDUyLDIzNzgsMjM4OCwyMzg5LDIzOTYsMjQwNywyNDEwLDI0MTIsMjQxOCwyNDIwLDI0NzUsMjQyOCwyNDM1LDI0NjcsMjQ1MSwyNDIzLDIzNjksMTA3OCwyNDM3LDExMDAsMjQzNiwyNDI5LDEwMTksNTE1LDUyMiw3NjksNDc1LDU0NSw4MTUsODE3LDI0NTYsMjUwMSw0NzcsNDk4LDk0MiwyMzIwLDIyODksMjI4MCwxMDg2LDk3OCwxMDg0LDk4NiwyMTk3LDk5Myw5NzcsNTMwLDIyNDMsOTgxLDk4NywyMTgyLDIyOTUsMjE1NiwyMTU3LDEwOTIsODA0LDIyMzksMjIyMSw5OTQsOTk5LDk5OCw5OTUsMTAwNywxMDA4LDEwMTAsMTAwNSwxMTAyLDIxOTksMjE5OCwxMDEyLDEwMjMsMTA5OCwyMjAxLDEwMjIsMTA0MCwyNDcxLDI0ODgsMjE1OSwxMDg5LDIxNzksMTEyMiwxMDg3LDEwNDIsMTA0MywxMDc2LDEwNzcsMjMyMSwyMzYyLDI0OTcsMjE3MSwyNDg5LDIxNzcsMjE3NiwyNDkxLDEwODMsNTMxLDk5Miw5OTAsMjM0NywxMDQxLDIzOTgsMjIwMiwxMDE4LDI0NDQsMjQ3MiwxMDk5LDEwODIsNzg0LDU1Nyw3NzgsNzgyLDE5LDY1NiwyMjIwLDIyOTRdfQ==; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder; postback_watcher=%7B%22tag%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22pb%22%3A%22c4a963618a5742d9870d0059bcae60ae%22%2C%22click_id%22%3A%223724014758588854419%22%7D; auid=uaJaGGjqlc9YPwDvA8rBAg==; window_width=1280; che_g=f92bc74a-16b8-48b3-bebb-b1ef175b444c\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:28 GMT\r\ncache-control: no-cache, private\r\nserver-timing: dt_total;dur=0.078, p;dur=9.283, wf-uht;dur=0.019\r\nset-cookie: ua=deleted; expires=Thu, 01 Jan 1970 00:00:01 GMT; Max-Age=0; path=/\nSESSION=923003ddcebe10aa36e61c6a7e16c5cf; path=/; secure; httponly; samesite=lax\r\nx-dt: 285\r\nx-time-ng: 0.011, 0.012\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/hd-api/external/assets/hdf.js","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:28.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"GET /hd-api/external/assets/hdf.js HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/en/block\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder; postback_watcher=%7B%22tag%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22pb%22%3A%22c4a963618a5742d9870d0059bcae60ae%22%2C%22click_id%22%3A%223724014758588854419%22%7D; auid=uaJaGGjqlc9YPwDvA8rBAg==; window_width=1280; che_g=f92bc74a-16b8-48b3-bebb-b1ef175b444c; SESSION=923003ddcebe10aa36e61c6a7e16c5cf\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:28 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 1687\r\ncache-control: public, max-age=300\r\ncontent-encoding: gzip\r\netag: 0009b06af6892358f6c573335f102046\r\nvary: Accept-Encoding\r\nx-dt: 455\r\nx-request-guid: a2c885967f19213b62dc83fc4e8eaa0c\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.008, wf-uht;dur=\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4203,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"C++ source, ASCII text, with very long lines (874)","md5":"0009b06af6892358f6c573335f102046","sha1":"cb899ce5fb6756d389a12e5049f2180dec2366ed","sha256":"540a50ce4665aa5a15e6afcdf7a260860e1896e77955c7ed128d1e6489bedac3","sha512":"83e9ce72ca4725bf501fe711538455aaa2fb278095d4d3938615b1907416446b8a8ed1f4f34fb296ea4c9a6d6b6e0fecbe31afa240305e7d23baa4145b2cd1c8","ssdeep":"48:Pen1yuqKi6649JoXznZwhU6fINwld0mPr6eC5/F6ALWBl/NR3vMNNeEcxHb8JiTP:Y1yuqKioolwHgObfENerHbkiTgRx05","tlshash":"d581323660ee2d3153639052d53fe5e9f229a8073968ec4831fc588a0f40f6189b2e3b","first_seen":"2025-07-24T09:34:40.995531Z","last_seen":"2025-10-16T23:35:31.258248Z","times_seen":2029,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"radar.cedexis.com/1/23802/radar.js","fqdn":"radar.cedexis.com","domain":"cedexis.com","tld":"com"},"ip":{"addr":"45.54.49.5","port":443,"asn":63911,"as":"NetActuate, Inc","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:30.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"radar.cedexis.com","organization":"Citrix Systems, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A2:3E:30:19:D5:41:3A:11:81:58:E3:B1:6F:F4:D2:78:0B:44:6F:D0","sha256":"BE:70:39:96:BA:51:8F:A7:6A:9D:E1:58:FB:D9:F7:6F:17:5C:DA:A9:6E:54:3F:8F:0B:3D:1E:DF:8C:44:B4:71"}}},"request":{"raw":"GET /1/23802/radar.js HTTP/1.1\r\nHost: radar.cedexis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 11 Oct 2025 17:37:31 GMT\r\nContent-Type: text/html\r\nContent-Length: 138\r\nConnection: keep-alive\r\nLocation: /1707728419/stub.js\r\nExpires: Sat, 11 Oct 2025 17:47:31 GMT\r\nCache-Control: max-age=600\r\nVary: User-Agent,DNT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":390,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":43,"dns":0,"connect":19,"send":0,"wait":56,"receive":1,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66\u0026cx=c\u0026gtm=4e5a80h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:31.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"GET /gtag/js?id=G-7JGWL9SV66\u0026cx=c\u0026gtm=4e5a80h1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 11 Oct 2025 17:37:31 GMT\r\nexpires: Sat, 11 Oct 2025 17:37:31 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 159032\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":498715,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7811), with LF, NEL line terminators","md5":"c0ce2d780fb0217b4394c4432c8ba972","sha1":"8de8c9ee03e05d65025cab86716397781e551eb7","sha256":"729eb913d374d18d2e5994219375c3ffa7d34dd35b1c2a44fc66a7140cee2c15","sha512":"888818f3f6611e95c980ae36428ce4695ddd8cd8c6a67ea5e5b22fb63749a56c90457ca93452b5800019e9a1adfe293d4f6f4d38da784b15d780f5c09c5f4ec4","ssdeep":"6144:bBR6/yp2fUtk0uwbWF5JQk+Nju5204Oynh2FdXA/y:9RYsm0KzJW0xR","tlshash":"9cb40a9f73d67426529af478502f01cba87b24e2b45cc8aab1c9cdf02d7469a4127f7c","first_seen":"2025-10-11T17:37:52.714523Z","last_seen":"2025-10-11T17:37:52.714523Z","times_seen":1,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 25ac04db-8eac-4fe0-b7b3-f2c25e413e55\r\nContent-Length: 98\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder; postback_watcher=%7B%22tag%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22pb%22%3A%22c4a963618a5742d9870d0059bcae60ae%22%2C%22click_id%22%3A%223724014758588854419%22%7D; auid=uaJaGGjqlc9YPwDvA8rBAg==; window_width=1920\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\nx-dt: 285\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.071, wf-uht;dur=0.002\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"04cee004e544682e961261d9bc59e939","sha1":"c39601169d9e2319c6d17df1b243559482ecf1cf","sha256":"dd035790ee0497011c862cc5417409b2cfbbbc4ba70d99ea8e4020ea9df05713","sha512":"96c8b5608c7576b28b096f71c1e01796f44ce62578953c92c8c3dffe515eb313adbe1427fb173ee85ebf647ed21283ce9ce3d882e406cc8e6687fd06330c023d","ssdeep":"","tlshash":"f57000a0a082080f2028020002008802083fcba0800808200ae020000000ea0080a002","first_seen":"2025-10-11T17:37:52.725627Z","last_seen":"2025-10-11T17:37:52.725627Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_fast_deep_equal_RNYYWXHZ.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_fast_deep_equal_RNYYWXHZ.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 865\r\ntraceparent: 00-563b6d1e521f7f1995be1d585e79abb1-241b4ddc62b024bf-01\r\nlast-modified: Fri, 10 Oct 2025 12:14:59 GMT\r\netag: \"00e44cad05af09626c2b10aeee7de5a3\"\r\nx-amz-meta-mtime: 1760098402.507864193\r\nexpires: Sun, 12 Oct 2025 05:31:10 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 43570\r\ncache: HIT\r\nx-cached-since: 2025-10-11T05:31:10+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":865,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (840)","md5":"00e44cad05af09626c2b10aeee7de5a3","sha1":"4461fd05cdd85255f4ab24edd5ac80e7b6dec92e","sha256":"5277a86b8db312b1e34318cb994829e113d8204c3a2e88ab594e5135b2bbfb2a","sha512":"548bf615b1118881d21a0cfd2d530b3f0ce1e14cc93cb6afce662b30ac70877fa152fd71b5d786bb2e43e31a1980e00b83106b1f4b3ae12fbb2ddbedf6c81841","ssdeep":"","tlshash":"901159c232e3a0d183e058cd1001d906f23969e9a4bca0c9c757e6b93cb2a53d87672a","first_seen":"2025-08-22T10:11:14.567955Z","last_seen":"2026-03-04T04:00:43.420123Z","times_seen":3921,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:30.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:30 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63748\r\ntraceparent: 00-aeaa016af67b3bc963dc70c8ae8a73ef-3730e38363308d88-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"6887b6f24414dbc612dbf42ccdc76b70\"\r\nexpires: Thu, 16 Jan 2025 10:32:14 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2534\r\ncache: HIT\r\nx-cached-since: 2025-10-11T16:55:16+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63748, version 1.0","md5":"6887b6f24414dbc612dbf42ccdc76b70","sha1":"8068d3abfbc6cbf35b55919da45b1f4d2d136238","sha256":"fc5c015fc32518f1ed810fa84ca28941eb9d5a3c81acc8df69a4dbbeedef7b0c","sha512":"00f08f9dd648972c9571547e06172d5505dd13f577fe2e65a497d3856172807ac11c996984e4138d2eb2ac784257fe61864aee15752fe9e9e76f98db931e0c2a","ssdeep":"1536:KtdCG+Dz6RxAx457zL0ASEn091Y0H1mTOzI/OzMFOoTX4u:MMG+yRpzN091Y0VtI/pOoTt","tlshash":"8b5302485551fae2cac3073c0f7a89dbb37a776d519224cd98b69f830d37964bea2070","first_seen":"2023-06-14T19:15:49Z","last_seen":"2026-04-20T11:06:04.783713Z","times_seen":10489,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/en?tag=d_44402m_28715c_[]MS[]null[]null[]general[]28763638_d28986_l42736_clickunder\u0026pb=c4a963618a5742d9870d0059bcae60ae\u0026click_id=3724014758588854419","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-11T17:37:18.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"GET /en?tag=d_44402m_28715c_[]MS[]null[]null[]general[]28763638_d28986_l42736_clickunder\u0026pb=c4a963618a5742d9870d0059bcae60ae\u0026click_id=3724014758588854419 HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:19 GMT\r\nlocation: https://1xlite-93399.world/en/block\r\nserver-timing: dt_total;dur=0.015, total;dur=16;desc=\"Nuxt Server Time\", wf-uht;dur=0.018\r\nset-cookie: platform_type=desktop; Path=/; Expires=Tue, 14 Oct 2025 17:37:19 GMT; Secure; SameSite=None; Partitioned\ngw-mm=; Path=/; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Secure; SameSite=None; Partitioned\ngw-blk=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; Path=/; HttpOnly\nlng=en; Path=/\ncookies_agree_type=3; Path=/\ntzo=2; Path=/\nis12h=0; Path=/\nreferral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; Path=/; Expires=Wed, 10 Dec 2025 17:37:19 GMT\nreflinkid=d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder; Path=/; Expires=Sat, 11 Oct 2025 18:37:19 GMT\npostback_watcher=%7B%22tag%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22pb%22%3A%22c4a963618a5742d9870d0059bcae60ae%22%2C%22click_id%22%3A%223724014758588854419%22%7D; Path=/; Expires=Mon, 10 Nov 2025 17:37:19 GMT\nauid=uaJaGGjqlc9YPwDvA8rBAg==; path=/; secure; httponly; samesite=lax\r\nx-dt: 285\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":266474,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":553,"timings":{"blocked":251,"dns":150,"connect":32,"send":0,"wait":51,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-ui/3.3.452/Desktop/Default/merged.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:19.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-ui/3.3.452/Desktop/Default/merged.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:19 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-ca872bc167a4698592576cc83880bd63-fa950913a9aa7da2-01\r\nlast-modified: Sat, 11 Oct 2025 08:42:53 GMT\r\netag: W/\"96dc49bf330784e12161061fb19ea35a\"\r\nx-amz-meta-mtime: 1760172128.423182744\r\ncontent-encoding: gzip\r\nexpires: Sun, 12 Oct 2025 08:47:53 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.003\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 31610\r\ncache: HIT\r\nx-cached-since: 2025-10-11T08:50:29+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1530620,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0af5f47d897c77107ab74e19695633e5","sha1":"5924a55ad24e09ac00f7b9743f2ba48494bb3d60","sha256":"058a2193710a081e6ad9f04e3b247f28aea93142bc1643751ece72ecff1a1262","sha512":"5ce11496e9c35df2a8c29003bc1b1ab0ddc08c8638424a9a858ef77be778a98713fea7c44d4b37fa60ce5c4f045c468dea2c43e1f9b1bbeb92417f1f78335129","ssdeep":"6144:q12WZGVX4t4ePBJmjgoovhZN3uOiv+q77TU94PRSd7YFwF9e20ZlPgFC4r6enhWE:OfN0XJ4r6enhWLOEUJvn","tlshash":"ab25a528f25ea1383e37d62462949ffc662077039a13187ef8a6015e0fd3553b196dbb","first_seen":"2025-10-09T14:32:06.499149Z","last_seen":"2025-10-13T07:38:20.867575Z","times_seen":207,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":94,"dns":51,"connect":3,"send":0,"wait":2,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_reset_password/en/dictionary_612c6e919ca15d39cc751a619a3952c7.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_reset_password/en/dictionary_612c6e919ca15d39cc751a619a3952c7.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 765\r\ntraceparent: 00-cbc86706b3efd22f789542442f3627cf-3e88ccff1fad6d8b-01\r\nlast-modified: Wed, 11 Oct 2023 12:52:53 GMT\r\netag: \"00f980f23f1b4c1ccee99ed49e0a8feb\"\r\ncache-control: max-age=3600\r\nexpires: Thu, 16 Jan 2025 10:53:47 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 3038\r\ncache: HIT\r\nx-cached-since: 2025-10-11T16:46:42+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":765,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"00f980f23f1b4c1ccee99ed49e0a8feb","sha1":"4cb07094de9bffff1bf81d94446280b91013b660","sha256":"bb3be3377fbb8e66a4b5a8a3866dfd865a37cb4a96482ab2f439981e03b57cea","sha512":"45587feec47804731eb344682dd7465959a50f2f47e114e332e875097a9e2009d6fe41e8ff684fb287d935fd9c4d12a5b83e1fe310f3ceca6061d569502ac1de","ssdeep":"","tlshash":"80015701129f0ef21b4bc65a940b1c71b2a0c043936b8c8757baeb8f73bbd8b009584f","first_seen":"2023-09-28T10:29:17Z","last_seen":"2026-04-20T00:27:27.983099Z","times_seen":5096,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/entry-54e6bae020.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/entry-54e6bae020.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-832b7cc822669b59db19f3ae9b6e4940-5eaf2b42bde76b86-01\r\nlast-modified: Fri, 10 Oct 2025 07:53:55 GMT\r\netag: W/\"8ef8b59032a2c8ce8e96d50142ae493f\"\r\nx-amz-meta-mtime: 1760082764.19590479\r\ncontent-encoding: gzip\r\nexpires: Sat, 11 Oct 2025 07:58:02 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 34394\r\ncache: HIT\r\nx-cached-since: 2025-10-11T08:04:06+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23752,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23207)","md5":"8ef8b59032a2c8ce8e96d50142ae493f","sha1":"2e7d825f19e671173db5291e78d1131001973315","sha256":"eb00be877d7e9352ef37000e11aa067fbaee61eb52f83491952be1dc1b48e680","sha512":"c930dd560446fd142a28ff3d84d2ceea113ca988d1e932a5100dd96f5b0d1984ba8aef9509a2a237dd000f149f2a40017e55c3b2a508840b92a9679f7304babe","ssdeep":"384:HlORN7ay1ZxtPlaMrVWT3Cj5lWg5KKbeXndKolTxolw893tEeLcl+96VWBHDCid9:HlSV1tP86WT3Cj5lWyPb8dKolTxol5cA","tlshash":"2fb25f743597b0b625da9a582739bc43d3c80e6fac8bfde2508a49e617d308c80527f7","first_seen":"2025-10-10T08:20:21.911259Z","last_seen":"2025-10-15T07:13:10.046782Z","times_seen":206,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:21.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 25ac04db-8eac-4fe0-b7b3-f2c25e413e55\r\nContent-Length: 72\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder; postback_watcher=%7B%22tag%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22pb%22%3A%22c4a963618a5742d9870d0059bcae60ae%22%2C%22click_id%22%3A%223724014758588854419%22%7D; auid=uaJaGGjqlc9YPwDvA8rBAg==; window_width=1280; che_g=f92bc74a-16b8-48b3-bebb-b1ef175b444c\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:21 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\nx-dt: 285\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.166, wf-uht;dur=0.003\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a8cb1dd9c40eaf22f0c01f2d1a880f55","sha1":"40c8d2c220fb0514500c040af03695af742ecdc6","sha256":"c16ff5d58ab28f38a49b79efa8b6a2fc0b9d8551bcbc2ac5d1a75d3ab05af89a","sha512":"a691aaa234162ca57ddb921ecb33a958bb9aa1d33e02d981fb0a20c83517ae7396fff7e437d2ab3966720d0cb232bd6c67d1fe56381d9b62d908b2f5332974bf","ssdeep":"","tlshash":"c77000802082000e02020c00830c0a028a3ace022008082002c822000002cb00a0e002","first_seen":"2025-10-11T17:37:52.741375Z","last_seen":"2025-10-11T17:37:52.741375Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 25ac04db-8eac-4fe0-b7b3-f2c25e413e55\r\nContent-Length: 89\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder; postback_watcher=%7B%22tag%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22pb%22%3A%22c4a963618a5742d9870d0059bcae60ae%22%2C%22click_id%22%3A%223724014758588854419%22%7D; auid=uaJaGGjqlc9YPwDvA8rBAg==; window_width=1280; che_g=f92bc74a-16b8-48b3-bebb-b1ef175b444c\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\nx-dt: 285\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.049, wf-uht;dur=0.002\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b988c748cffcca4f5b2686642f371527","sha1":"f5fcfa566d7025d66549ff169b087ee38eb6da58","sha256":"91db7467031b44075dae003b2510bfbefd12dad808f9b4852005b7dcd08440a2","sha512":"003eefbb781a48c6bb3133fd15319dfb8f3b5566b67ab14bcbf88f3c44358d76f4352a7b501087811b4d59b2b5df3cd0a22421e74b1a1302d35debfcb26dee45","ssdeep":"","tlshash":"f7700080228a000e02808c88020008000c3acb00200a082002e0332008a0ca2880a022","first_seen":"2025-10-11T17:37:52.74393Z","last_seen":"2025-10-11T17:37:52.74393Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/8192228305b202797f207eeb6842287c.png","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/8192228305b202797f207eeb6842287c.png HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 5202\r\ntraceparent: 00-f048c488b6c8c7abc95c39db5c93d58e-8cf3650aed234646-01\r\nlast-modified: Wed, 26 Jun 2024 08:22:59 GMT\r\netag: \"b9a636eef54b2844b571fe7de49184a7\"\r\nexpires: Tue, 07 Oct 2025 21:12:04 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1813\r\ncache: HIT\r\nx-cached-since: 2025-10-11T17:07:07+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5202,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 514 x 514, 8-bit colormap, non-interlaced","md5":"b9a636eef54b2844b571fe7de49184a7","sha1":"bf653690790ced40eb3189da075a275d951d1607","sha256":"001bfcdd52b658d46543a1aec889d35b73b3909b47097cc011b95e96fc9e3743","sha512":"7b288a27a69c91697042ebb6f80f48cf25e0c6260620ee8f4b0e7afa75430b95c394c3f284445e0628b347341b89480e2e7098510bc07f4db43ecc46d893c38f","ssdeep":"96:561aQaPXOi0Ui/+kgrJtv72TgGuDG9JAsXgQrjQ:470T0PEnv7Sgc9vPQ","tlshash":"56b19e22d46fe4a53230c81b67c1820a1df839c6e72c29d0e8ed4db5e2c8b7f84883c4","first_seen":"2023-11-17T17:46:27Z","last_seen":"2026-01-13T06:38:33.673472Z","times_seen":5260,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/site-admin/colors/07cf27f4829a85fa0f8f250f95003b0f.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:19.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/site-admin/colors/07cf27f4829a85fa0f8f250f95003b0f.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:19 GMT\r\ncontent-type: text/css\r\ntraceparent: 00-94f8c345727a4f869e56e566c379be76-c2f88e9526594b98-01\r\nlast-modified: Fri, 10 Oct 2025 10:29:35 GMT\r\netag: W/\"07cf27f4829a85fa0f8f250f95003b0f\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Fri, 10 Oct 2025 12:08:08 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 3103\r\ncache: HIT\r\nx-cached-since: 2025-10-11T16:45:36+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40978,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (40978), with no line terminators","md5":"07cf27f4829a85fa0f8f250f95003b0f","sha1":"2dea057c3bafcf85a0ea75b5e3289517d5d66d6c","sha256":"dc072e5636eb8c2897cf992d3e688c57856517393f38e9f0df5e913f64a53a4b","sha512":"3dd26f5e84f416ea229cb9a8d4933280581056dbd91fd0e71d0510a8647d0633b5d29a49262af7ab3de7ea82a8461a24784c2b9f350cffb1a3bfe85545b30ce9","ssdeep":"384:+EO1mFSK75xWt5JkyunibMhS4EeIIc+7rpeN:+EO1mFSK75xWt5JkyunibMhS4pIypeN","tlshash":"88037b7ded91c1712a591931911c677b3d36e9ceae240f8fd02c63e670c1b022be5a7a","first_seen":"2025-10-01T08:34:29.157739Z","last_seen":"2025-10-30T12:45:26.171228Z","times_seen":1005,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":109,"dns":54,"connect":1,"send":0,"wait":2,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_game/en/dictionary_93855f2d53fc019242443f6d410a450d.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_game/en/dictionary_93855f2d53fc019242443f6d410a450d.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-4ed15b1edd217dd20d3f21422f379b9e-7717d6f2c18b63ab-01\r\nlast-modified: Wed, 01 Oct 2025 16:08:03 GMT\r\netag: W/\"13ca50ce37f849de1b02facfcbc0b235\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Wed, 01 Oct 2025 17:34:41 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 359\r\ncache: HIT\r\nx-cached-since: 2025-10-11T17:31:21+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25872,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b83e19a4bdf23d17d041a169e2dcb59b","sha1":"328f96aed426a209c6d34425c98f51e9728bbe06","sha256":"b935b5f0de7590df3d4f036e51c3ee68333da4c1bc3d40cd66fd48d9115e3cc6","sha512":"8e4451602adc389e48c391113a5295a484c8dff9b65ff318b53e4c03702adc9ca044bda15fb0e3467153a4604abe47e54a59ff5bcd3fe65fb7676e4ae057a357","ssdeep":"384:i/B1lizv0Ioy4CEMt6tI0EEfqQ4O4cN86WwTCu9o9V38cdZeXiG+/jtx:Ylivt6tI0EEf66WwTCV/QXiGsjtx","tlshash":"fac2fc05285eeca6c3fb86b474e93bd672f089af5b626186fc48742e2c957c5610f40f","first_seen":"2025-10-01T20:08:28.071573Z","last_seen":"2025-11-21T12:37:41.202009Z","times_seen":1679,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/cc07db51/desktop/default/Betting.Core-73b4b31e.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.589Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/cc07db51/desktop/default/Betting.Core-73b4b31e.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-44945a6d82343f19a3ed6b61ef031bb8-912dccf465009a1f-01\r\nlast-modified: Thu, 09 Oct 2025 08:38:02 GMT\r\netag: W/\"7905e935481c67a930dc184c5c48e6f5\"\r\nx-amz-meta-mtime: 1759999082.30819912\r\ncontent-encoding: gzip\r\nexpires: Fri, 10 Oct 2025 08:49:27 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 30894\r\ncache: HIT\r\nx-cached-since: 2025-10-11T09:02:26+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2071,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2071), with no line terminators","md5":"7905e935481c67a930dc184c5c48e6f5","sha1":"a91b59285d4a4a5ce9f1ba3863d2f5a4aebb2cb7","sha256":"71370ebbd4e6c7757e4604725e8134a233eb3bb49a36d398257e2e67ac3a209e","sha512":"b8c7b558e87d476824f751ada6de6a5382d77b1dd9ac83380913fe37f55909d1bdb8dfdb8669e80179f4cf666a274af311b089b4a130648ae2b5ad8824731b79","ssdeep":"","tlshash":"e741e98479d2b804877e40dd80ff55e5f0be2e69394d05f8a603ade47138a8ac0f6e85","first_seen":"2025-10-09T09:08:10.654759Z","last_seen":"2025-10-13T07:38:20.854298Z","times_seen":164,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/1ecdf48086.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:21.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/1ecdf48086.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:21 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-26b46d4eaae96a8739d394abbe199df4-e50ab8f7fc3e6a0c-01\r\nlast-modified: Fri, 10 Oct 2025 07:53:55 GMT\r\netag: W/\"cc8cd7bf36b06f593e107c2eb6b35d6b\"\r\nx-amz-meta-mtime: 1760082764.190904382\r\ncontent-encoding: gzip\r\nexpires: Sat, 11 Oct 2025 07:58:06 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 34393\r\ncache: HIT\r\nx-cached-since: 2025-10-11T08:04:08+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3201,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3200)","md5":"cc8cd7bf36b06f593e107c2eb6b35d6b","sha1":"551b1e327da31b35a855790e4a7dc32217316441","sha256":"edea30d56718a55248281050d23c6c1a9f35cec230187e0aee336ef74990d42e","sha512":"8fc950e0e1f136b0305e59d1742e6543da5f434ea33b291eb519dd95f7df96c9632bf9f0aef4646402e70ab825bba5ed6e4a47bfc894915c3b0b997acab74041","ssdeep":"","tlshash":"9661b78178b5a0f9791741893d9270b0e34b1c7d534816b1f2f5888823bd2885f2e6db","first_seen":"2025-10-10T08:20:22.066554Z","last_seen":"2025-10-15T07:13:09.989348Z","times_seen":206,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je5a80v897130004za200zb9180563600zd9180563600\u0026_p=1760204250656\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=339470072.1760204251\u0026ecid=1496962849\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AEAAAAQ\u0026_s=1\u0026tag_exp=101509157~102015666~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~105322304~115480710~115616986~115834636~115834638~115868792~115868794\u0026sid=1760204251\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-93399.world%2Fen%2Fblock\u0026dt=1xBet\u0026en=scroll\u0026ep.optimize_id=GTM-5R4MT54\u0026epn.percent_scrolled=90\u0026upn.ref_id=1\u0026tfd=12455","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:31.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je5a80v897130004za200zb9180563600zd9180563600\u0026_p=1760204250656\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=339470072.1760204251\u0026ecid=1496962849\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AEAAAAQ\u0026_s=1\u0026tag_exp=101509157~102015666~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~105322304~115480710~115616986~115834636~115834638~115868792~115868794\u0026sid=1760204251\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-93399.world%2Fen%2Fblock\u0026dt=1xBet\u0026en=scroll\u0026ep.optimize_id=GTM-5R4MT54\u0026epn.percent_scrolled=90\u0026upn.ref_id=1\u0026tfd=12455 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://1xlite-93399.world\r\ndate: Sat, 11 Oct 2025 17:37:31 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:158:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:158:0\r\nreport-to: {\"group\":\"ascnsrsggc:158:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:158:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":31,"dns":0,"connect":8,"send":0,"wait":21,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refpa2518.com/L?tag=d_44402m_28715c_[]MS[]null[]null[]general[]28763638_d28986_l42736_clickunder\u0026pb=c4a963618a5742d9870d0059bcae60ae\u0026click_id=3724014758588854419","fqdn":"refpa2518.com","domain":"refpa2518.com","tld":"com"},"ip":{"addr":"91.186.205.207","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-11T17:37:18.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refpa2518.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 05:20:07 GMT","end":"Tue, 23 Dec 2025 05:20:06 GMT"},"fingerprint":{"sha1":"FC:9E:5F:3B:CA:33:DE:EC:2C:F1:DE:03:CC:03:FB:72:DA:84:C0:73","sha256":"F1:A9:A9:AA:98:EC:47:9B:5F:D1:96:A1:B6:15:79:02:97:D0:E4:E4:2F:CC:5D:67:B3:1D:5F:98:EC:3E:41:CF"}}},"request":{"raw":"GET /L?tag=d_44402m_28715c_[]MS[]null[]null[]general[]28763638_d28986_l42736_clickunder\u0026pb=c4a963618a5742d9870d0059bcae60ae\u0026click_id=3724014758588854419 HTTP/1.1\r\nHost: refpa2518.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 303 See Other\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:18 GMT\r\nlocation: https://1xlite-93399.world:443/en?tag=d_44402m_28715c_[]MS[]null[]null[]general[]28763638_d28986_l42736_clickunder\u0026pb=c4a963618a5742d9870d0059bcae60ae\u0026click_id=3724014758588854419\r\nset-cookie: A_28715_v=0; expires=Sun, 12 Oct 2025 17:37:18 GMT; path=/; secure\nA_28715_c=1; expires=Sun, 12 Oct 2025 17:37:18 GMT; path=/; secure\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: wf-uht;dur=0.001\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"303","status_text":"See Other","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":266474,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-20T13:59:59.325235Z","times_seen":13977692,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":105,"dns":1,"connect":33,"send":0,"wait":34,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/en/block","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-11T17:37:19.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"GET /en/block HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder; postback_watcher=%7B%22tag%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22pb%22%3A%22c4a963618a5742d9870d0059bcae60ae%22%2C%22click_id%22%3A%223724014758588854419%22%7D; auid=uaJaGGjqlc9YPwDvA8rBAg==\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 203 Non Authoritative\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:19 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 266474\r\naccept-ranges: none\r\nserver-timing: dt_total;dur=0.006, total;dur=134;desc=\"Nuxt Server Time\"\r\nset-cookie: gw-mm=; Path=/; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Secure; SameSite=None; Partitioned\ngw-blk=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; Path=/; HttpOnly\nlng=en; Path=/\ncookies_agree_type=3; Path=/\ntzo=2; Path=/\nis12h=0; Path=/\r\nx-dt: 285\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"203","status_text":"Non Authoritative","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}],"data":{"size":266474,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (40304)","md5":"9b3212909aeffb037f4405feab4b0bad","sha1":"1cfba128da810f6cf805a022bd0348e3ef85db2b","sha256":"5241e89d2b95839198066d25bf72128dab7a23153178ff814b1cb5fc86bdde21","sha512":"927796b1c285359fbe22d3a0f0b3112383a7e7dece62f70252751fd1086fa1facb3139cc2467e1dfd796311a7f7ab550254ed714625fac81dc481c3ac3311ce5","ssdeep":"3072:/A15/FLEsIOqevBJdqMkSu8YXK5ysIONevBJdqMlRJHR/98lD/uc7f5ubK/:U/hFBiZ8HSBLRgD2c7kbK/","tlshash":"0144b62fb50c1c3e911f1ba9c54f7d4e57bc9a2a20cb6c41dcaeae6914e3694426343f","first_seen":"2025-10-11T17:37:52.751283Z","last_seen":"2025-10-11T17:37:52.751283Z","times_seen":1,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":185,"receive":156,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/cc07db51/desktop/default/css/2d76eae9.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:19.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/cc07db51/desktop/default/css/2d76eae9.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:19 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-eeebe73175b76aa7c133aac03e5949bc-4d22da96a83075fc-01\r\nlast-modified: Thu, 09 Oct 2025 08:38:03 GMT\r\netag: W/\"40af82ca580825454562f67f044d5edf\"\r\nx-amz-meta-mtime: 1759999082.314199142\r\ncontent-encoding: gzip\r\nexpires: Fri, 10 Oct 2025 08:49:24 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 31089\r\ncache: HIT\r\nx-cached-since: 2025-10-11T08:59:10+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40644,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (40644), with no line terminators","md5":"40af82ca580825454562f67f044d5edf","sha1":"0dd9b985cb5fa06f624137ec02279af4fa56704c","sha256":"d65770e2df58fa720bc94230f25f48eb16d74f78242d495d38b0717e7d42db0c","sha512":"35e1618ce4ac45f09d202151a6039e670d329782c7009386c924b4f63fac421943fd0640e91f61164411722a2839be28062152bef29a56f0230101067d5b65be","ssdeep":"768:SnraFC/9ApQze5i/aWVXuNVuvLh0TEAhZMsPnQzX8:erYC/9ApQzOi/aWo","tlshash":"41030f5dfca8d5760d27f521a288ae3c01b0f42bde314d96f90e57a508c3f9b15e0ea9","first_seen":"2025-10-09T09:08:10.649283Z","last_seen":"2025-10-22T09:09:00.933601Z","times_seen":468,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":91,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63748\r\ntraceparent: 00-d8df3368c6ba8f28ec4261691f72c20a-29481da6814dfa77-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"6887b6f24414dbc612dbf42ccdc76b70\"\r\nexpires: Thu, 16 Jan 2025 10:32:14 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2524\r\ncache: HIT\r\nx-cached-since: 2025-10-11T16:55:16+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63748, version 1.0","md5":"6887b6f24414dbc612dbf42ccdc76b70","sha1":"8068d3abfbc6cbf35b55919da45b1f4d2d136238","sha256":"fc5c015fc32518f1ed810fa84ca28941eb9d5a3c81acc8df69a4dbbeedef7b0c","sha512":"00f08f9dd648972c9571547e06172d5505dd13f577fe2e65a497d3856172807ac11c996984e4138d2eb2ac784257fe61864aee15752fe9e9e76f98db931e0c2a","ssdeep":"1536:KtdCG+Dz6RxAx457zL0ASEn091Y0H1mTOzI/OzMFOoTX4u:MMG+yRpzN091Y0VtI/pOoTt","tlshash":"8b5302485551fae2cac3073c0f7a89dbb37a776d519224cd98b69f830d37964bea2070","first_seen":"2023-06-14T19:15:49Z","last_seen":"2026-04-20T11:06:04.783713Z","times_seen":10489,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/cc07db51/desktop/default/vendors/plugins.vue-notification-64139c55.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/cc07db51/desktop/default/vendors/plugins.vue-notification-64139c55.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-06e3157af3b74da69c19c1a87a8a21b0-d49c65e1dd21dc3d-01\r\nlast-modified: Thu, 09 Oct 2025 08:38:03 GMT\r\netag: W/\"c0c8647f5528e52de30bd173aba081bf\"\r\nx-amz-meta-mtime: 1759999082.345199253\r\ncontent-encoding: gzip\r\nexpires: Fri, 10 Oct 2025 08:49:27 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 30894\r\ncache: HIT\r\nx-cached-since: 2025-10-11T09:02:26+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12563,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12563), with no line terminators","md5":"c0c8647f5528e52de30bd173aba081bf","sha1":"830d69596f1078378a80d50e602ccd4d41f0730e","sha256":"0e7f1b08e5a38e5948c72ca7d0b9edd58ac015ef043bfbb5dac77c00640f5c55","sha512":"57890dddce9598d9e2ce7a8387f7c0e36157f0fc7c2f6468713eb8dc2c8ded1de34dfff0aae51c36ef898de6d183587b5d758a7d87337b57e11397b10c2f45dc","ssdeep":"192:zU1hQXHv3CbfKpqEVwhSIkrReP+SdHtfGA2D3ow5EE9bJ52bFZLy2mp4ilVj:zn3CmpcDkAP+S/fGAWf5VbWbLy2mmijj","tlshash":"2e4296ceb2c2b4650be760b6402f110af136a96879ab54d4f3b1d4f2adb564c413bf39","first_seen":"2025-10-09T09:08:10.630187Z","last_seen":"2025-10-13T07:38:20.88464Z","times_seen":164,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_express_day/en/dictionary_84e511afe97bad68fa98353e8037b65e.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_express_day/en/dictionary_84e511afe97bad68fa98353e8037b65e.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-8bc2ef70304d6affd5b5ad809ef6e109-dc2327b35d18ebd8-01\r\nlast-modified: Mon, 30 Jun 2025 14:06:32 GMT\r\netag: W/\"26f10f416f0a3743c3362a51dd558a4b\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Mon, 11 Aug 2025 05:59:51 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1542\r\ncache: HIT\r\nx-cached-since: 2025-10-11T17:11:38+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1202,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"26f10f416f0a3743c3362a51dd558a4b","sha1":"6b458c43b5e31fc0515de1eb1a0e535855a3e936","sha256":"8374658000ae2d2747471b9535397e6de0c036d4e1a767a2a523047f8d06cb73","sha512":"1a6b1e740800f48106a46ff15b36fdeaec72cb4fa2e7a06957a52609f7b5481f1c0bca9e6a07a4112e0a1dbc75918e78fd5085517dd0051b4546b84338715321","ssdeep":"","tlshash":"d7210aa71034073e9d132b2bad3f929006c0485052e8b487379f39fb37ccd949e6d6aa","first_seen":"2025-06-30T16:12:32.415153Z","last_seen":"2025-10-15T02:35:25.221046Z","times_seen":2212,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/46fe3f96f4140750e81ded48911f3e30.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/46fe3f96f4140750e81ded48911f3e30.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: application/json\r\ncontent-length: 747\r\ntraceparent: 00-dd801e604eb6cb9af307be45eccfa205-e90593c86a690a22-01\r\nlast-modified: Thu, 27 Feb 2025 13:26:35 GMT\r\netag: \"f4e90636ec9cff061c4301b3cefdd0d6\"\r\nexpires: Fri, 03 Oct 2025 08:55:23 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2079\r\ncache: HIT\r\nx-cached-since: 2025-10-11T17:02:41+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":747,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f4e90636ec9cff061c4301b3cefdd0d6","sha1":"c506efe9c3672c58434ea10021dab0ad81b1ad98","sha256":"30666f138ccc12735e2f8a6405ddce4a3d8756b9445e3b2732fa2970f14dbcea","sha512":"2db1a1a4419db47b4256906f9c660b85479bb83d2ab0757d1b1c24cdf94d97bdc4a7140d5d8ea31cbf612a77ba1ae6ef46bbd77eb42d24b6d83afebbc46c9216","ssdeep":"","tlshash":"2a012d94bde4083719374ca981a2595d63844b0398297c087adf3d4c5b2096d056e9be","first_seen":"2025-03-01T06:06:39.041672Z","last_seen":"2025-12-04T11:53:51.978889Z","times_seen":4943,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/593f1a6d4223015f3145bf447897f4f2.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:21.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/593f1a6d4223015f3145bf447897f4f2.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:21 GMT\r\ncontent-type: application/json\r\ncontent-length: 241\r\ntraceparent: 00-1be01065e188dac241840a2f57dc4e90-11c798521018a4e2-01\r\nlast-modified: Thu, 27 Feb 2025 13:24:25 GMT\r\netag: \"39257fbb62736206d5245e08925d7b60\"\r\nexpires: Thu, 27 Feb 2025 14:48:35 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 643\r\ncache: HIT\r\nx-cached-since: 2025-10-11T17:26:38+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":241,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"39257fbb62736206d5245e08925d7b60","sha1":"4c11e3cb6a16b884772b88acdba30a2ad98e86b8","sha256":"3a3cf0f5c60899ffb49d9825516aec475fd7b78cea8ae0b5b58dfb4e658f041e","sha512":"e9b44ac92bbad9c54e500f735f553154c92897c80700709b61b39443f76edbd1d3d38d0d6014e6052cc5f5931b78c55194e308c86336f809de1541efa1e0ac8f","ssdeep":"","tlshash":"58d02e40f2e01833201f94f981b5a109e74b0b03e402a808fa0c21881bac8252426c3a","first_seen":"2025-03-01T06:06:39.04916Z","last_seen":"2025-10-28T05:34:45.039411Z","times_seen":3826,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/site-admin/css_vars/29b5cda95fa390c124de39b6aeca6d24.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:19.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/site-admin/css_vars/29b5cda95fa390c124de39b6aeca6d24.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:19 GMT\r\ncontent-type: text/css\r\ncontent-length: 46\r\ntraceparent: 00-8a7fe84566747ad691035dfb67c49536-2f6ff5882dd4f08f-01\r\nlast-modified: Thu, 20 Mar 2025 13:29:31 GMT\r\netag: \"29b5cda95fa390c124de39b6aeca6d24\"\r\ncache-control: max-age=3600\r\nexpires: Fri, 26 Sep 2025 20:51:22 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1908\r\ncache: HIT\r\nx-cached-since: 2025-10-11T17:05:31+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"29b5cda95fa390c124de39b6aeca6d24","sha1":"46f68f69533c1fdc737eb36e8e7af7672178e610","sha256":"6021ec0aede22eadcb8401fe945d345202320437c7be01b157f0cb282ebe7c88","sha512":"8a62d0b23596f91ed5dbd111fce75e940b4b6fe542716d9fad76d610eb9a90f67bad145f3dcfd977b5a7a6d414d66e94c0abcaf6cabce2310d94af56cdf0e13b","ssdeep":"","tlshash":"54900294a50c22502025c656109c48d0119412566621255851533451b4438405960188","first_seen":"2025-03-20T19:27:14.305804Z","last_seen":"2025-11-18T11:41:52.983768Z","times_seen":4852,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":110,"dns":53,"connect":1,"send":0,"wait":1,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/6147dc85b9.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:19.675Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/6147dc85b9.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:19 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-26b9889cd5a8d4a60abd91319b7875d2-6556c137155664e0-01\r\nlast-modified: Fri, 10 Oct 2025 07:53:56 GMT\r\netag: W/\"b73bed50181c012f133f6aae4a69da3f\"\r\nx-amz-meta-mtime: 1760082764.194904708\r\ncontent-encoding: gzip\r\nexpires: Sat, 11 Oct 2025 11:13:41 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 22890\r\ncache: HIT\r\nx-cached-since: 2025-10-11T11:15:49+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2285,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2284)","md5":"b73bed50181c012f133f6aae4a69da3f","sha1":"1826d3b1ec485876a8240d3250ef43fa0dbf7658","sha256":"6eec44c2601e34ffede82c0f79f5a1cc80ec4aec63ed4960e9260f757dd4798f","sha512":"01dccd364919af69cc280e3dae45ddfac2c9dd07f64e5cc4d45f9c28ca1ee944d7c61c23a6c95182f0827c083f0665638eb097c3e3d64daa41cee2086a3f45c8","ssdeep":"","tlshash":"ef417bdef8b9a5712d33e012d60c5ef95470b627c5214982f4cdd3a226c3a922db1dae","first_seen":"2025-08-22T10:11:14.526935Z","last_seen":"2025-11-12T13:10:30.998735Z","times_seen":2470,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":87,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_auth/en/dictionary_9994dbf24098fdec2c71a17a0ad5844b.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_auth/en/dictionary_9994dbf24098fdec2c71a17a0ad5844b.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-2fea3ff00c221e0dbd2a4f875cbcb914-b7feb5b3544a1d8a-01\r\nlast-modified: Mon, 29 Sep 2025 14:07:25 GMT\r\netag: W/\"f2c2792341ec96cd9bbfde3a05cb20cb\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Mon, 29 Sep 2025 15:34:24 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 738\r\ncache: HIT\r\nx-cached-since: 2025-10-11T17:25:02+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9728,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f2c2792341ec96cd9bbfde3a05cb20cb","sha1":"29aa5ed57cc542fa0562ad0c1dc76a2eda7e3818","sha256":"2792db806e0f66be617a9a0cc451ed9a0cf40160f17713f03190e34f4ed938d2","sha512":"2a8ba2b233dd8e9d43289a20a76494d976b39cf7a7058cd80bcfe612407923d37e956d2cdf27def30175b70ba6a9e41915025418581be859eb61a4caf7ebef68","ssdeep":"192:HvhX8mmq4spyU7SKi5mD8jrUFIOFJM1YABslAByZhqV+2p+QvM9pKTp:HvhX8mmqdsU7ziUdJM1YABsOByZh4nMM","tlshash":"9d12111a817a0c57cfdbca82bc495b5ce3a409b446b84c6d8cf9c23e07e2765d6af354","first_seen":"2025-09-29T16:34:59.893965Z","last_seen":"2025-11-07T10:46:34.790322Z","times_seen":1358,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:20.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 25ac04db-8eac-4fe0-b7b3-f2c25e413e55\r\nContent-Length: 48\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder; postback_watcher=%7B%22tag%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22pb%22%3A%22c4a963618a5742d9870d0059bcae60ae%22%2C%22click_id%22%3A%223724014758588854419%22%7D; auid=uaJaGGjqlc9YPwDvA8rBAg==; window_width=1920\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:20 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\nx-dt: 285\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.114, wf-uht;dur=0.005\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4d697d552070adaddcb1187fb6e7e07e","sha1":"8db2876a30ba2fe2ad3a12186229170fff34dc06","sha256":"a45380f56d47414838211069f71f795d3a060cd2e0b95e956bbdc7dbbd72a59d","sha512":"d3c83e1064be57799cdc829f044b6569c1ae417865128d97e9b779de44c9453235c8cf65d3b9bcae4476561487bf229bb37d97794f1e2247cab116663fd1fa9f","ssdeep":"","tlshash":"c57000c8208e082e080002880280082008bfca208008882023e020080000ea0080a802","first_seen":"2025-10-11T17:37:52.765296Z","last_seen":"2025-10-11T17:37:52.765296Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:21.356Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 25ac04db-8eac-4fe0-b7b3-f2c25e413e55\r\nContent-Length: 19\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder; postback_watcher=%7B%22tag%22%3A%22d_44402m_28715c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D28763638_d28986_l42736_clickunder%22%2C%22pb%22%3A%22c4a963618a5742d9870d0059bcae60ae%22%2C%22click_id%22%3A%223724014758588854419%22%7D; auid=uaJaGGjqlc9YPwDvA8rBAg==; window_width=1280; che_g=f92bc74a-16b8-48b3-bebb-b1ef175b444c\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:21 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nx-dt: 285\r\nx-time-ng: 0.004\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.045, wf-uht;dur=0.008\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-04-20T14:02:33.701181Z","times_seen":243583,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-11","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-93399.world/en/block","date":"2025-10-11T17:37:29.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 11 Oct 2025 17:37:29 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63920\r\ntraceparent: 00-7686d9855124796e032a8753f4278432-8d4d9a71dcce1d9d-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"a65527fcb58f66a7cfbc0e6b160538b4\"\r\nexpires: Sun, 10 Aug 2025 19:21:26 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 307\r\ncache: HIT\r\nx-cached-since: 2025-10-11T17:32:22+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63920,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63920, version 1.0","md5":"a65527fcb58f66a7cfbc0e6b160538b4","sha1":"45d260e7fa343401b5bb0df982a014f53e2d253b","sha256":"fb13c3a1cbac60649b76f7d7f85c1645d35ac69b85ce5f4eb0692505ecc2cd45","sha512":"8448e96abe326f43285b2d8b0d75beaf0e9c9e051e8754841d907b30eb303ae24c447011306da6a1703b9192d02aeff76a4517bdf94ec6e7dc360ce3538802af","ssdeep":"1536:UIG3hJMkJeK8ic5iZGnJ4URj9vqXOQ6UqYdbuA5RVK1:UL31hcLlRjDQ6Uq4W1","tlshash":"7f5302df8de32a148ff78772668885f4f4927c68898c8e7345526a8907f07d6b96c04f","first_seen":"2023-05-07T18:04:27Z","last_seen":"2026-04-20T11:06:04.829559Z","times_seen":10345,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}