{"report_id":"8233f874-0cbe-4c1c-a831-0da904399052","version":6,"status":"done","tags":[],"date":"2025-10-18T11:36:05Z","url":{"schema":"http","addr":"1xlite-62827.bar/en?tag=d_85563m_29145c_[]MS[]null[]null[]general[]{site_id}_d22490_l73747_clickunder","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":0,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"final":{"url":{"schema":"https","addr":"1xlite-62827.bar/en/block","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"title":"1xBet"},"submit":{"url":{"schema":"http","addr":"1xlite-62827.bar/en?tag=d_85563m_29145c_[]MS[]null[]null[]general[]{site_id}_d22490_l73747_clickunder","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":0,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-22T11:36:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-12T22:12:10.358486Z","alert_count":0,"request_count":1,"received_data":502128,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2025-10-12T22:12:24.641328Z","alert_count":0,"request_count":2,"received_data":1700,"sent_data":2101,"comment":"","tags":null,"fingerprints":null},{"fqdn":"radar.cedexis.com","ip":{"addr":"45.54.49.5","port":443,"asn":63911,"as":"NetActuate, Inc","country":"United States","country_code":"US"},"domain_registered":"2009-01-07","domain_rank":28156,"first_seen":"2013-11-27T02:31:43Z","last_seen":"2025-10-13T07:26:02.884531Z","alert_count":0,"request_count":2,"received_data":1415,"sent_data":848,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2025-10-12T22:12:24.63855Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":929,"comment":"","tags":null,"fingerprints":null},{"fqdn":"v3.traincdn.com","ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"domain_registered":"2022-11-10","domain_rank":256434,"first_seen":"2022-11-25T10:00:40Z","last_seen":"2025-10-13T03:48:42.756108Z","alert_count":0,"request_count":64,"received_data":5971325,"sent_data":32148,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"1xlite-62827.bar","ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"domain_registered":"2025-07-09","domain_rank":0,"first_seen":"2025-10-16T19:41:22.353869Z","last_seen":"2025-10-16T19:41:22.353869Z","alert_count":0,"request_count":19,"received_data":964154,"sent_data":49488,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/d0ea2630/desktop/default/Betting.Core-127d9920.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"2437ea306ea06a5cdd55e354d45b0953","sha1":"33cc63002e95c05fb7c87dc8ddabd60834f696f7","sha256":"a17cbcecb67d926a475926712e578386c2d43668b0da3689771995d70c1bd813","sha512":"ec7be232a3aaa6ab83997b37d729a4b72dbe73c24552e85958e26592095b6d3111d5c4c60c4520b26635e005e62d8f00341da9d35f096d8c3ee68edb1859ccd0","ssdeep":"","tlshash":"4a41e9c539c174440b3e02de85ef1db5f0741e4a3a5d00a8a842a9d47568897c2f7ecf","size":2134,"data":"","first_seen":"2025-10-16T12:35:18.584496Z","last_seen":"2025-10-20T12:06:35.123567Z","times_seen":147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/64d1b00c0c.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"09954f89d775dca8606d3f6e4b9d6888","sha1":"b23b45575477181d2f57133487ac3f298d7e450a","sha256":"87554bc980553701bccf83fa8f61a899960fbdf8dba5d74140f3acc5066e37c6","sha512":"746454f69831ba2973583ffae97ca118225c752b54d775f4805afc1a6880fc7a0111326f6f3415407131ec1dca60985dbb835a543586001b2b202a365452fdd3","ssdeep":"","tlshash":"45f047beed72d170610244ed6d1ab832c2c87e7b076eb4f4c1ed4953a3070979a066c7","size":614,"data":"","first_seen":"2025-10-15T08:29:23.283226Z","last_seen":"2025-10-24T10:11:24.408607Z","times_seen":330,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/298507c055.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"dd265ccbf1fedac59fc9856d32e3eec6","sha1":"3751a7444b2db3e71567298885549775bb301eb0","sha256":"9d18bea4956c473ec31c00da0f40b1823f01cc7d91d1bbdfcc92106ce8ecf093","sha512":"231814b42f3e5b9ad27a057a21cd2f48ea1bbef43859b69ef78e34678d82cdbb519b9d4eba5cafb31952c957043ed1794806c023fce7ea350d2d63b260444ba3","ssdeep":"","tlshash":"0f41c8d9b2b035f2e677416dbc0660f1c3082b9d132e10e8d9ed884e220c9c23767793","size":1973,"data":"","first_seen":"2025-10-15T08:29:23.275754Z","last_seen":"2025-10-24T10:11:24.42701Z","times_seen":330,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/en/block","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"introduction_type":"Function","is_inline":false,"md5":"94361ed86ab9b2fbb8d805c2025df46a","sha1":"3f428332f7a1c7196a85c93a373a966d75708c19","sha256":"eee4d228a49a86625f29410cf9a23d145e821a09cbb1f7a4d7557d206872715a","sha512":"c8f4fb7c642357730c6c59e0b49fe3ec16c228d83d4ce402dc62f01e451529b8087240afca37096cebdaaabf47c189dfde5e6e2d780440f663f0e2bc8cf88ff7","ssdeep":"","tlshash":"f6b012df6c8351104a9292e001dec8f0443620303b00cc45544ce7716d2e865de2625e","size":96,"data":"","first_seen":"2023-12-06T14:32:27Z","last_seen":"2026-04-02T22:21:06.560346Z","times_seen":7913,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/en/block","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"3e8abeeab53d06a74536592ad17e8143","sha1":"6cbe02306ca37ce7ab5b32fbd57925e4cbd03d91","sha256":"3c9e28971cf5c490cf84083a2936ae5f7ec90b986d787ae76bd4c80869ef5f6d","sha512":"a0e24defb45617a8fcbc2ea9e3a3f5a6f0141f008565ee4c1c5a2e5030aa08e4ec95d4d8cd70dd5e55c9e923d900953f45e562d8621a815bc53fe97b707ab1f0","ssdeep":"","tlshash":"4631432efe1df0370a52b9f9e03b630eeb732896691570088490a8997d34e4f5956ecd","size":1736,"data":"","first_seen":"2025-10-16T12:35:18.674425Z","last_seen":"2025-10-20T12:06:35.924611Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/d0ea2630/desktop/default/app-661fd105.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"98594f6e08da3cc08ac72f8d6b0d9c53","sha1":"34fa7ad0e82ee83ba1e105b811786764edba60e2","sha256":"03b7d7d64d5f0193ad77364fa604680dff652ad4b8daf1bfbcb240e2ce0d48ca","sha512":"9e1b6dbfb9320aed98391c0503895f68de9343458e4672596b3585cd2ba95a941b4e457f18a2db4a83d157f3b8471993b8302b4b4e9deb89bf87eacc5c0cb5be","ssdeep":"6144:Fht3/9S/eXAth2OfXQbKOt6poZqgTzKXwhdyta73xuO+EtHOaMA7x032DGJFYmbY:l/9jgEZebOHfRLPgF7jcupM/pNPZ5uZk","tlshash":"a4a45c65b589f4ca02e34bdae03b0061e33516b9780dd064f778fdc9359bc05926aa7f","size":482549,"data":"","first_seen":"2025-10-16T12:35:18.519399Z","last_seen":"2025-10-20T12:06:35.17591Z","times_seen":147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/en/block","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"introduction_type":"eval","is_inline":false,"md5":"6120143bc9b5b58d26c7e33bc6b346d5","sha1":"5bf2e4e80fc8ce6e2989ab7e31f9b247d1871dea","sha256":"b18b9584829ef7846fd2f7d9e1c6ab7766701e74672e63b26ebdb5dfd627033a","sha512":"660b19a8026e06d1a120004839c4ca12caf96df03c2a4e37f24f2cec5b25463def8974c3242a4a4954dc168c338b663a61e206be2356dcf9747bb9d8cc0dbd3a","ssdeep":"","tlshash":"db513015e03c9a3bdd27152e920f7f135fac15b66a892b5cb21c4bac25d61ce910368b","size":2675,"data":"","first_seen":"2025-10-15T08:29:23.454096Z","last_seen":"2025-10-26T00:58:26.531325Z","times_seen":368,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_base-app_175fce7baa.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"e6f1c5f819edc56f697caeacf64cc733","sha1":"13a83c6217e03df37c2ef7890cd8f2c898d02902","sha256":"8ca756d242d61f3fcb381ad969a0d4531ac7bb0651007d873c76090ddc8817d2","sha512":"4e99f6336a811b68efe5cadce87dbb608a854e43849ce7cb75f32f3dc9a5144b12e7cb14c10a10364325a62504da942b509ec2775423a7ef6ac2efaf9348f432","ssdeep":"49152:jtI6vPM7SQcFy2ZcgOr6fKfzUac2A2+LqAYWYtf3MUV:MgKii5","tlshash":"92759d55f156bd232ae754daa4271183b64c4a1dd408fc90f2ebdce83ace84162deb7c","size":1640461,"data":"","first_seen":"2025-10-15T08:29:23.41572Z","last_seen":"2025-10-24T10:11:24.539432Z","times_seen":387,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/5705a4ffe2.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"37ea8580ff8889e8b5a9f0ddb9daa3b4","sha1":"e409436952bcb4c0a2e9d590134563e19b641b27","sha256":"1714c5afa8490c6320d1882b7406b25873823124b4e169ba05b235b6a25997d6","sha512":"cf06050e59dec19e90ba3e63652b92a62559ee85bb371543592942a74baa432bb9f99ee9c22d141ad84b44427585cd920cdae4ae3b426c7b890ce274c513a288","ssdeep":"","tlshash":"2861b78178b590fa791741893e527470e34b1db9135c16b1f2f9888833ad2845f2e6db","size":3201,"data":"","first_seen":"2025-10-15T08:29:23.332415Z","last_seen":"2025-10-24T10:11:24.42144Z","times_seen":330,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/en/block","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"introduction_type":"eval","is_inline":false,"md5":"d3c5f948adaac4c549850d5c162c0c59","sha1":"c861f4c5eb90ba0d2a04c20af8bbcf89a31dac45","sha256":"51968565c71212e1e3a7385c50326983ecf1251f3cd5cbd39d9195f96b9f91d1","sha512":"54305ae740e241842e3772288fa63549e09d2cd9e883220809e75baa3a9f6f7bdb17126b156d758cc504d44629612b5fbd2ceba2041545c56734e524fbaa80e6","ssdeep":"6144:FLNzC765lRLAIqfSODiBlmdmImy1vwCEBxpjD8:FP5l3Ry1IzBxx8","tlshash":"19745f949596c081d67a4d303b7e2d99e089ad616b8c7239bf18f0d8e3b3176f16df20","size":351525,"data":"","first_seen":"2025-10-18T11:36:15.562158Z","last_seen":"2025-10-18T11:36:15.562158Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/en/block","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"introduction_type":"Function","is_inline":false,"md5":"bc51ed8c76553717f10d58b2df60fd76","sha1":"e2d03a8fd8d280074b226c288880f9df299c7cb1","sha256":"bee994eaf88453f6343ba57571a069054c12c9b4e42f8cbad4f2ad75c7fb264c","sha512":"3207379b65060d0e80623fa966633b5ea31358b20de9aeb2c9416fa7d29f1972bf30809e39f0b826565e569d856dd2498ee0ec5285271c127f54daa7cf391911","ssdeep":"","tlshash":"489004473441140c47d7175410375c4c0c1500705441df400451dc510d51031114545c","size":39,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-04-04T02:11:54.64242Z","times_seen":12995,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/en/block","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"11b2183b7e02210e6d9828ee5677d6b9","sha1":"972d7d138f529b8d311500ff1a91604b814af13a","sha256":"48b7e4b954d0fd39b20d129ccddcf549b877ec0f24971e9c95e3f52355eda33a","sha512":"de3f049b57b4540a7b29440424eec09b331732ab74797674594d83c28af896b835a80d2e1704e1432ecb100fd0e2dfa979087165499b61722a67e2676ab1688e","ssdeep":"96:Dhgx8q0yK9gll1QklIelj+5JkhmwvwrKGYkhHr6QWuBMOfQtSbNClcV:1gCq0vUXNew6jwvwSkhNQtSbNwcV","tlshash":"51d1a392e41cfa2fdc23991ef06b2f310e54196979927b10e6accb2d34971b5a30764a","size":6261,"data":"","first_seen":"2025-10-16T19:41:28.239443Z","last_seen":"2025-10-18T11:36:15.731061Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/d0ea2630/desktop/default/runtime-527669a3.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"913de44e908d0de200f204329f44d87d","sha1":"bc7d7d0dd3d2eea54b31c164c16eec4bf53ae6ce","sha256":"051cb1fb50979a5da5941dcb615f649da0d8caa28e6965da4a7944063cf45ced","sha512":"9bc5277cbb34e4632dcae8eb2e2e52280df10c236063e9ffcbb5c590dc711c8b58f7aba4c268c5cb3bcba50ccda492d98d28837c884e287852478eadcb7f0cec","ssdeep":"384:ZvFjE/yItnhbnI4g4B5E/yItnhqVnJ200f/Wt:RxrIthbnI4g4B5rIthOnXoG","tlshash":"d0721e5d6f1acd671d22cdc33c217d21585824335c4647ece6fee2284018ea8a5afe6f","size":17003,"data":"","first_seen":"2025-10-16T12:35:18.548396Z","last_seen":"2025-10-20T12:06:35.150972Z","times_seen":147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/d0ea2630/desktop/default/vendors/plugins.vue-notification-21af354b.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"319e473d2d4c33a429b37037b6d4d15c","sha1":"4a020d146feb7253a4714e03565c51dfe7ed82bf","sha256":"e115a2179709be2d095189735f9125719c491e8a60bcb543ba023aae0f38a4b5","sha512":"330f273c85d1eb10153b42a94e1443faf019b9585e549eb309d655f0a5e3c4bce8924867bae693267da295a9e2cf8507dac9055c9d0f53fa06f0215f3ce39e53","ssdeep":"192:jU1hQXHv3CbfKpqEVwhSIkrReP+SdHtfGA2D3ow5EE9bJ52bFZLy2mp4ilVj:jn3CmpcDkAP+S/fGAWf5VbWbLy2mmijj","tlshash":"d242a6ceb2c2b4650be760b6402f110af136a96869ab54d4f3b1d4f2adb564c413bf39","size":12563,"data":"","first_seen":"2025-10-15T10:41:17.784043Z","last_seen":"2025-10-22T09:09:00.912861Z","times_seen":228,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/d0ea2630/desktop/default/DC-3096f303.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9eede4913571711240e6e16bb01e1537","sha1":"bb9b480ed7c38521647c2c6049248572085dbdb5","sha256":"ba1381a78f987804074b6d0efd0dfcde5cc300de14329a76961a79f82c6f4ca6","sha512":"ddee2f6588a7a6ebb2f4a84de4f6a38bd68258bc652784e45fa4f6f9083ddf1070829c8db9e7f4538f11c8fca30f6debed43ff5f37281908d47e3d1424caf2ce","ssdeep":"","tlshash":"de41830930a4fc1193b90cd869ff72061027f076648dc9b4d2a32a8b08a7faaa217916","size":2201,"data":"","first_seen":"2025-10-15T10:41:17.807598Z","last_seen":"2025-10-22T09:09:00.874716Z","times_seen":228,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_chunk_LNU73JEK.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"d96d317966512ab8915a90670ca5a5af","sha1":"a810be1c3e515adb49804e8d976250deb16fd77d","sha256":"f125201d62c452efba070d856821885c7cfd539a31d55846caa6ae3a7522d3cf","sha512":"460b29966e6f5ac4d34ccc714217d29686d7aff42efa92a102729d40aa36dd4fbb87116178b2f9fdece5fdb09cb2bf2024312d3f1b86abb69644f695c76aca2d","ssdeep":"","tlshash":"a521f1e56fbc7ba362be2ae4a02e0041e001d53752f4f1d4f294dfb4a4e949d035b5b6","size":1232,"data":"","first_seen":"2025-08-22T10:11:14.554562Z","last_seen":"2026-03-04T04:00:43.411503Z","times_seen":3921,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/en/block","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"introduction_type":"Function","is_inline":false,"md5":"00beb9884d0391b342eadd30744b539a","sha1":"3124c0bd593822379d22f13d3e08e70a1bf5ea14","sha256":"92394eec5690449a4f6cfc9a7f97497a69e926b2365cb9a9aad3507a844f835c","sha512":"6fa2e21df54ca406f570cb639529d68edac5de27fd4bc3a9daa8fd0465b583ede1c1cabb550237deb75d8bf88f39e80c1a77777d794826ad3272630108e58661","ssdeep":"","tlshash":"539002492940210685661152001e5c58411491b094906c9140429c551d52020125ab5d","size":44,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-04-04T02:11:54.635403Z","times_seen":12993,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/en/block","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"introduction_type":"Function","is_inline":false,"md5":"580b3e56fc9ab6e8b4655f43ee057cc1","sha1":"5dfce565e446f4a167195de9a1a5dd26163c711c","sha256":"446f07b6e56de61d2c2d5b6ba408cc580b492a6d1ede8fc51cfde4ef75a2b382","sha512":"b2350579a3aaa5843b9b16c31782f3d7a4b850ba211d0074aa05d819c89ba49b482eb59aefcfb33f9fc9b270abb7cf7509e1254def23e9f98c116130c47f0018","ssdeep":"","tlshash":"e99002491d851041c56a1160041e1888442488761a40d8d1c480d9551c51630238e45c","size":47,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-04-04T02:11:54.634728Z","times_seen":12987,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a34e5823f1ec800fbb771025d10713de","sha1":"ad3f5a85418d11587ba626e8a91c3e70cfe055a9","sha256":"bc6c55faa969f7bde53b2c75c7b0236f37da74d7e67fde156347ec01c9848d67","sha512":"8d65507ef66e4967cd2744724c45d6065f8e6d0ce140f4fdffb4af291ab43b819ab66bd0d387d7f3c6aaeea262f6c88d5a05d8dd375db317611fe015cce25e39","ssdeep":"6144:PBdNc6tQSyOR+hV4nkEt7F8KWjxSqpRVQeAtWvkAX6HJLGy1Voyb1pJwuu4pT:5k6rRUhV4nkEt7F0EqiexRy1RT","tlshash":"47b4098e73c6742652daf478502f02cba87b25a2b49dc8a6b1c9ccf02d7455a4277f7c","size":501524,"data":"","first_seen":"2025-10-18T07:40:04.776791Z","last_seen":"2025-10-18T11:36:15.507944Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/d0ea2630/desktop/default/Page.Block-341f655b.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"540ddb382555f69abdb00ce5c731a5f5","sha1":"b10a3a52da36395ed26946fa375c6d3e5848161e","sha256":"291bfaaef272c1d6c2950aba6188e1785d52b2b67c86f1c0b50769e1e5cb9117","sha512":"3c4f3f2c55e5496eb3d397df51784416672098c064bfa5f1588e9b95deb8cffc7f3e45609909defee6878be823a8360abfa54de849f7a726339608e0a5eb5b3b","ssdeep":"","tlshash":"53f00e9b2862fc8e95e200c343b6c1b7b4cc797a0649592002a0c8b532ba816082024f","size":476,"data":"","first_seen":"2025-10-15T10:41:17.862952Z","last_seen":"2025-10-22T09:09:00.925228Z","times_seen":223,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/d0ea2630/desktop/default/commons/app-cb5d2580.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"fbf9b0644fe713c005df34e58f6a91cb","sha1":"b9e35c57d65632c50bdd152179534d3deb4201ee","sha256":"01ecbb7d7ad3cba49330b60dfc8554dad1f236d1694d7316f955bd0be5bd550c","sha512":"b6b576a0cfe76fe1a7270c558cb282aa877116da8db06a7df92c2e4177df0b9ebe456c2b01aa4afdf17d2389e9ef713c5f806f88d6076e23668b82c432a61472","ssdeep":"1536:TCrmhLG5YGf7BMr3y6MPC0UiXH2DHJjIAG3wvvjE+gjmZVBu+PWKfkohItp:Om0YGNMrmXHUp0qXjE+gjmZf4GIP","tlshash":"93d3d5dcf695b03117e721b5407f150bf23a7898680ac0a4f266e8d53db888ea167f7d","size":137774,"data":"","first_seen":"2025-10-15T10:41:17.367216Z","last_seen":"2025-10-22T09:09:00.879015Z","times_seen":228,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/d0ea2630/desktop/default/vendors/plugins.v-tooltip-93a743d4.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"6095b99ea6b5be7b5dcafe42f44baeb8","sha1":"269d663b709cc3e60b6e30ef95594f77429c8214","sha256":"ccf08e1181410179e0b75a8ea69faa413631fb7abd31e67d0a612cbdd9d2986d","sha512":"e4c86bea30e97306c318af4b0cac8da66935602dc4eb96bb4f42b584e9f37c1f641c8c296168f998c9f84e69acbba008bdc79eec7a9cb8b7ffc64bed14c89b6c","ssdeep":"768:y9V29ZVNZNAbt5LRbQkc5WMZI+7tSCUC8Lk7t8R6zk+BaNfSby/Qw/Hyg57bh0PO:y9cZDZeb7LCkc5TPRSCv1MHqWdRfm5Qp","tlshash":"0573c78e73d4f0b203e7b175412f620fb2776558b40ad014b2b1e6d4ac3da5aa267e3d","size":76818,"data":"","first_seen":"2025-10-15T10:41:17.575272Z","last_seen":"2025-10-22T09:09:00.882454Z","times_seen":228,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_vue_deps_FCX6UWBT.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"588b298e9096c73f4d84f2961d4378ba","sha1":"568c0ac4c8540c21caf445d8490348a9929143da","sha256":"cc5353d60fc3bbcefb808e19d05925ab3fb0cff09092317813265725e95fa808","sha512":"a093cd11cb064df4b612ee5ee7128b352a1bfd951eaaa68553cf0aba097e9561774ecca5d78f3e0b6dbea18d21bade34a0d18426d66e0b37f9f67a439d7d3051","ssdeep":"768:lwZ1yyQBOuHJ3aUiJJUfns+/C8vsqJlm8qgqYHg7FD0v341KE:lwWBOuHJqUiJJUfns+/0qJlmbgqYHg7H","tlshash":"65e25cd8b779bca2335e908c90370323b37559e7484d9020f7e65e9235a5a0282e7f7e","size":31184,"data":"","first_seen":"2025-10-09T09:08:10.597929Z","last_seen":"2025-10-30T11:27:15.273914Z","times_seen":1015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_popper_js_WZJKYEQD.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"bea5b052c307601192270938523fa030","sha1":"937f7094c67f5a92c1032a7bc3f21ee94bec66ef","sha256":"f41290374ba615854ebb4b28a07de775581707f3b6427bcc01c0529c62476f64","sha512":"b9bff7f7d9b518ec76898a732114873c01206378c2a840c62062f05487ef773716ce841d7a5bafe3f0c65fbfdf05509852571a3a6b381661cb6f4984d6bc23a9","ssdeep":"384:ZP7iayBuR9vu3z1JXvykd2+LaqHdC6RjVnTGm/7piCXmH8kCCcvJTCyCu+meAxiZ:piZwO3XvO+NMSJt3XmckXcv4nxJAxiH5","tlshash":"7b92a28c7684b0a287a7a2a7a07f860f71376865650e9004f59cf6ec3c35dba507bc7d","size":21252,"data":"","first_seen":"2025-08-22T10:11:14.555802Z","last_seen":"2026-03-04T04:00:43.408775Z","times_seen":3920,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/8237bfd1b7.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"f4ab74c92a88099f643e219bf86e277b","sha1":"c8b2efe89b8e3631d55c1c851c4d39d0aea693d7","sha256":"791da6fc1d03e9e0b868629b9fb8bcb4a4cc06df2ea481e315a4834732475cbc","sha512":"a72c8ec5c3d391da324ac703c28324d884aa3f76f0383681d6fbe16b0560b18f10a9d6e158f4be5873442f394c5e4cda996f5334af92ca14ed37c044bf3acec7","ssdeep":"","tlshash":"d701106970b29088a5eb49cabd24103a97381a02371e4cf9f7ddcab7405a18255aa886","size":740,"data":"","first_seen":"2025-10-15T08:29:23.28783Z","last_seen":"2025-10-24T10:11:24.422177Z","times_seen":330,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/hd-api/external/apps/c5e31d5915661de4393e3f1489b00ebc4497dd48/api.js","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"32053c9c355cf85427a5cc3f07de0b09","sha1":"f3c13d6a657ffa2ca8997f54f4779f0c02f1600a","sha256":"0ec410318f3ecc3a3aef3de68e99190845248bcc12282aa15eb9acc87f8837d3","sha512":"cbb8c7ef0bbed264989bf5b4af7d216cdeacc5684641c37d429e5ceca7dc04e55254e81f319cd856e7b4f447565bf5abf4e9915f5725eb57cfb142f113362078","ssdeep":"","tlshash":"2211756e18ed58291a9275c402b7ccfc642036363219d4c495ede9e1072ff990032f5c","size":1024,"data":"","first_seen":"2025-07-24T09:34:41.13762Z","last_seen":"2026-04-02T22:21:06.196613Z","times_seen":3848,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/en/block","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"introduction_type":"Function","is_inline":false,"md5":"7bcdb973ab8af8e24ab11cb554a1ba6e","sha1":"24e8a10f240f2b06f81d7c173cd0a90606641fc1","sha256":"916ec4eb9b485eb47f43a17fe212e84e4b72600b45eb6d4588599ad495a57fcd","sha512":"1d890761e2a00081531fda5c0489ebf4df4140a9748bdc6d97bd355023e3e4ab09e19663ab319cf775e28ba71d99ab09f20d5414a561fa10fa3be2cb874484ca","ssdeep":"","tlshash":"e380044710411010cdd351d040573c44001044f114c4dc500040fdd11c53030110545c","size":34,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-04-04T02:11:54.634111Z","times_seen":13002,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript,export const meta = import.meta;","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d772b7d405b447ecee54ab61cdd5108","sha1":"dd65fb9cd5a7cb94a40fe161f4f72303a61eb3b7","sha256":"b90ff694e492935b6036fb7e878d365dab51aafa46f0afb1e33414e7ecc3307b","sha512":"a3947640368602c9fd9dee887bb1a7e463890ff42e2ddd292c377593c5fad246d3e3363e9898cd1e5ecda9c59b5cf7c7cd0acfc2a5a1e5d3acec2cf0d62e20b2","ssdeep":"","tlshash":"1f800003800802380aa0c880028e80b00ab222203f00c08328088b302e3b08aca332a2","size":32,"data":"","first_seen":"2023-12-06T14:32:28Z","last_seen":"2026-04-02T22:21:06.579225Z","times_seen":7912,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/d0ea2630/desktop/default/vendors/app-b4dcc82c.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f119e72a56c24f5cdb869df98ff16c6","sha1":"d5ce151c438469a1cf0d28f22ec0d62d4892ee2e","sha256":"80f73a5cc21d9583f773c0affbad1601cb38f3dd1aa77470e9bbe87a05a08b13","sha512":"8f9467873dc9d0b0d59beb1a9f33d64804b73e1383858b2d6986eb7cd325c8634605b2aa6637c49450f4be377b0f5baff8075af321102fc3123ca536d771de8f","ssdeep":"12288:wdQX/yYLwGkPMdYog1RMU3I0EUeCBzYIr4f8+Ydm:vX/yYEGkPMdYog1RXTB3a64fbYdm","tlshash":"e5254c69b981f2560aa36ae5c06b0057e33d6f1ebc0cd454f2e7cdd5395a804713ab2f","size":965462,"data":"","first_seen":"2025-10-16T11:45:51.67353Z","last_seen":"2025-10-22T09:09:00.907644Z","times_seen":196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/captcha-api/assets/hunt-captcha.js","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc87b27db434ca92aea6e1a1ceb5b78c","sha1":"905e65010d66d0bba5836f44cfb27ad9cda60051","sha256":"b7c2d216440e81574ce9b359404af25382d21f6d06b31162e1d56d97e721f117","sha512":"c93461ca41050b2ed4cf5724b61293de852034eb5cd9856e5af84ca3569584db0df14c267a9350839d3fbc4b536d416a56b8b7b0cc4f67c7770660212dc99912","ssdeep":"768:mfqz/IppUgutFIIfCpFujCbsboXim9ifscjA6NecfjCdjhACLiZhT/rAztF1TP7C:xEIW0BLIS","tlshash":"0693de857de2c08793d35bd6923f4cd8e87504cb66966f488812f91bf9ae86783d4833","size":90808,"data":"","first_seen":"2025-09-24T12:37:05.081519Z","last_seen":"2025-10-24T09:11:09.901149Z","times_seen":1174,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/d0ea2630/desktop/default/analytics-37204c5b.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"32002c2828068768bd9ed0ace55757af","sha1":"cf7ff29f0e465d92f22547b7d92150a1aa3e20c5","sha256":"18f8b783a06fcbaf3db85c73a7807bed474e253b04f24a911436dc6842925731","sha512":"80fe8683133be64da428fd5f899e057d6aa1392571e441e67a7b245182cebbbfb62655eb54421a566b302af2519cd09a7e2e6f145b2f00b390cba30a2e0351af","ssdeep":"192:9vOGjPZxnEW5+vYjV3VeA9vshusWaawPWJ3vQFtRnqzPQzxfvO6Rx+RkovO9O:9jPZxnEW52Y3VeA1bsWaawPWFQFHqzPR","tlshash":"5912978a7d88e43007ba19b8f67b9a0ae07657172406c091caf9d8843d7da8f511becd","size":9435,"data":"","first_seen":"2025-10-15T10:41:17.660865Z","last_seen":"2025-10-22T09:09:00.872614Z","times_seen":221,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"radar.cedexis.com/1/23802/radar.js","fqdn":"radar.cedexis.com","domain":"cedexis.com","tld":"com"},"ip":{"addr":"45.54.49.5","port":443,"asn":63911,"as":"NetActuate, Inc","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"82dec77fd0353c7c71ce053b8601387e","sha1":"fbbca95419e1d0c042e0a5fdf10f380aca66188c","sha256":"39f2b7b0fa78d37d0c84d2d6618bd635d86fd683d9bcdd5729850cb2a62522f7","sha512":"6872c895cb44711405e57a436dfbe15d094f9159e11ee2b89983c63b1f18f6acbdfaf0ccbb5e48b2bf24f366f16584c660bca4b6b14c048a134bb77a60f6563e","ssdeep":"","tlshash":"02e068ae9391a318537a2dbacc4e060ba0f6114888e5e4e029f5c2c00461bae072bfb4","size":390,"data":"","first_seen":"2024-02-13T14:23:26Z","last_seen":"2026-01-15T12:01:08.184588Z","times_seen":7496,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/main-static/d0ea2630/check-ob.js","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c065700c9c8c493403359e1f2baa10d9","sha1":"4630fe729e70bdf63fa7ba6c84ec277fd1f51030","sha256":"1e61f0c82ae82ffcf503fcd4b4c8ae27b32c11e19b882d5d13f3c44364c893f4","sha512":"b2e1c73cb94f5e3ceb35c3662bf4d72baf800a9a7c64318b1db07d50e9c885dbd94821ef3b3916d1b8b4fabb8f45cb588834b41c6a8a7f4d2c3e9c3866083ee7","ssdeep":"","tlshash":"96d0a79fb900211406939267d12f8668807724973f008182500597e069b8f4c4b37895","size":219,"data":"","first_seen":"2024-07-17T14:33:52Z","last_seen":"2026-01-22T06:40:31.153166Z","times_seen":6298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/en/block","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"introduction_type":"domTimer","is_inline":false,"md5":"01f4b51b4ba7edd00ad9f0a22259f06e","sha1":"00723d0eda4be61a7b1c542b0a08a94a94a60017","sha256":"9fdac1c31a22f55dbb8ca225ee28c3f7e88b41cce82968af0018c9f8b3bd35ba","sha512":"83d180c9960a53f88da3e3ff8616b4e095b7d642182f5855cfa386d48a19b888fedbde6433d1f926d9dd93d0a813a24590591729a6d8393543dfc490efee2070","ssdeep":"","tlshash":"29500000c000c0c0c000c03c0000000000003300c0c00030033000000c3000c0000003","size":10,"data":"","first_seen":"2024-09-21T15:04:59Z","last_seen":"2026-01-22T06:40:31.224966Z","times_seen":5888,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/d0ea2630/desktop/default/vendors/plugins.vue-js-modal-67a81d1c.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"86fb68912492ee656b4abb0da2c47e75","sha1":"668f45a7edacce4f6133dbc3e33e8104da829098","sha256":"6c55f6df6c3e799db28b35e44df8a057f9bfe8a8ff7a068a2a8deba91961f29a","sha512":"c6ccf6ff8058ac79407f280edb459b65caafb5f98263a6eca8ff6b9e2f5e2e43d0ec8ea6d86d3b87e2201e8dfdd719daee848a955fd746df30892cc61940b5da","ssdeep":"384:hBy0a9vOeCGAZIXfK2rVsAdm00uow4HQEjacGXGQVe6ubqj:4HyIXfPt4wE9GXGQcbqj","tlshash":"37c2288977d8307442db5563627f2b0ab23e295474269888b772e8e65cb864d206ff3c","size":26667,"data":"","first_seen":"2025-10-15T10:41:17.704149Z","last_seen":"2025-10-22T09:09:00.93439Z","times_seen":228,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/$_$.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"2cdaa92927f02e0b628f1ef4d7dd8caf","sha1":"9104a2e16ed080b80a42588b8aeb52ebec47ab7a","sha256":"ef8101ffea52addcdcfcc3a83f96ff2d4613fb3ae6d1c16bbe4852387b73a9db","sha512":"31da80bc1b17aa708fef74b0211af91fce1b4a5f518f11e5caa80f50e9a7791b6e94924e381f550fc44a02f4c1d785e5b95fa2464e7968b5cab079612d70d839","ssdeep":"","tlshash":"1ba002935a5ef66c209044860696e74733823d6a3477b1d625bc5509e6061474817257","size":69,"data":"","first_seen":"2025-05-14T05:06:37.199299Z","last_seen":"2026-03-18T19:40:26.76398Z","times_seen":5502,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_fast_deep_equal_RNYYWXHZ.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"00e44cad05af09626c2b10aeee7de5a3","sha1":"4461fd05cdd85255f4ab24edd5ac80e7b6dec92e","sha256":"5277a86b8db312b1e34318cb994829e113d8204c3a2e88ab594e5135b2bbfb2a","sha512":"548bf615b1118881d21a0cfd2d530b3f0ce1e14cc93cb6afce662b30ac70877fa152fd71b5d786bb2e43e31a1980e00b83106b1f4b3ae12fbb2ddbedf6c81841","ssdeep":"","tlshash":"901159c232e3a0d183e058cd1001d906f23969e9a4bca0c9c757e6b93cb2a53d87672a","size":865,"data":"","first_seen":"2025-08-22T10:11:14.567955Z","last_seen":"2026-03-04T04:00:43.420123Z","times_seen":3921,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_accept_language_parser_LEQ4UAP5.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"83e311eb8e222d229b6177bd007ce9eb","sha1":"96b851ffda0eab794c2bb637255a48ae25770144","sha256":"d0ff62de588e1c47eedbd91a89dcf394e2ec5bd09392ea556b9a34108077e9ad","sha512":"fd2e1bfb6588598e356ddc08724c2e6f602b89626b30eeca2c25b8f60340f25e28a761b8e13b75d1627172530abf7dd0e586e792f53759d08bda626145f65b0d","ssdeep":"","tlshash":"202112debed2b5908394188c4e2ec055f23a2957641ce6fcd765e7827c403a186f3c1d","size":1297,"data":"","first_seen":"2025-08-22T10:11:14.559442Z","last_seen":"2026-03-04T04:00:43.42063Z","times_seen":3921,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/entry-85eb62a623.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2c61145571ca7d693b524d5422d4712","sha1":"2c0ad3d0cf6f63b06991f9e0cd1033321e9557ef","sha256":"01739d54bc5f14a90b20510ee1e7d3132253e697cd1b1333cc64cdad5f1afd55","sha512":"e272d3b6633b43dfcd21dc709ab2092f71db874cb75a493a39d1c0824ddaac313932430dc1d16dbd160e144e52ba28f516cdbedc3d374d23bc0d3a9cd260d3e6","ssdeep":"384:HtHdN7ay1ZxtPlaMrmWT3Cj5lWg5KKSAqtndKolTxolw8cEpEeLcl+96VWBHDCiO:Ht9V1tP8hWT3Cj5lWyPStdKolTxolhcB","tlshash":"99b25f743597b0b625da9a582739bc43d6c80f6fac9bfde2908a48e613d304880567f7","size":23752,"data":"","first_seen":"2025-10-15T08:29:23.328291Z","last_seen":"2025-10-24T10:11:24.418135Z","times_seen":330,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/hd-api/external/assets/hdf.js","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"17cc4ade9ae4dd646178200428d67b62","sha1":"8949891455535a68218c809864ed91eb0f800c84","sha256":"b0c9aa9ea44642cc4d2a68a6a0ea81b2d8578aca18a4769c64f8b482189572c3","sha512":"ed1d64775d6f6aee5ac22448f6678a4742459eec3389d87d9383e7053ed5cf31cc74eb8ef0b3f3597b02e16f53d07bf88b2b7695c5f072cae01f7c2e48b00155","ssdeep":"","tlshash":"316182a764ae7e1212480cc7a47e9a4b7050e9063ca9f850d0bf6ccf2404da1c9a1f1b","size":3281,"data":"","first_seen":"2025-10-17T07:26:39.008746Z","last_seen":"2025-12-13T09:36:03.351895Z","times_seen":1800,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_localforage_PJNUBKRP.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"7e7ebd44e3a6550f862e122ab7df6409","sha1":"384ecbc3ab0f65e6b0f88c1e68ba3eb73fad4999","sha256":"138767518a09e63d24f918f6380923893a2ec3aa59a640e51c83517501823076","sha512":"e2766b50e289dc6a69fa30432a49a0b7743f15cd15a54d707959c7623f258057a821a94285c492746216cfbf815089309b6cc09b930ba7977ff9c4ffc352d76e","ssdeep":"768:wDKAOpvMewHFuM96WwZACjzz46zSTKsBE1OvFXfX1UXk:wm8uPW43zEIOvdlUU","tlshash":"a5d2b68c7799f02683bb3070907f580ef237a912594d90a0e591e5f86dbd75c822bfad","size":30277,"data":"","first_seen":"2025-08-22T10:11:14.535778Z","last_seen":"2026-03-04T04:00:43.425133Z","times_seen":3921,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/en/block","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"introduction_type":"Function","is_inline":false,"md5":"2092af1a5ff714fe557788d0c0cf7e8a","sha1":"5e883902207e4a5f957bb4a98fa3631bc40770d6","sha256":"1d2aee86e0eeb7540fa93fae6c3f47d5c8416f502473044727e2996240f6c430","sha512":"cd0e89dc0858ba642f71fbfd9c8acde14b313704755401750b6a5ad077f7b48228d3129d9a582f283b4210a7fc6b9c6d09fdcc2ef60dc645447a870b576b9f7e","ssdeep":"768:F7If/w9984iH2Hgrm1WDSVVsboBem967sePAGNsQfjCzPhCCLiLhT/rAztF1TP7f:Q6HWmQF4B","tlshash":"db83ed557de38087d3d393c6963f80d8e97504cb2ad66f488852ba27f9ae85783d4833","size":88723,"data":"","first_seen":"2025-09-24T12:37:05.164235Z","last_seen":"2025-10-24T09:11:09.932463Z","times_seen":1173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/en/block","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"introduction_type":"Function","is_inline":false,"md5":"5389fe9c538ca1331efceef28189cfb6","sha1":"6920383897471810523e064471380813a6aab336","sha256":"4b1ab7095da0332f5f17764f9e205f454c9ebca06f854468bb25c713f1b5015f","sha512":"bf1899946ff33e7f86f874c8e49b2ba1e51c56b99b991313bc7819f15a7fdf50fb68fd079672aa42cd3f49d558a06febf2a78af6d733a3f12200ec84f7fb1bc3","ssdeep":"6144:I1TKfOQ4BdlTEqaTsIFytx1GFySSm7fI22HfTLV7ny:IO4Bd133m7wpHfTLVry","tlshash":"e0746094598a8081d67a49303b1e2d59e089fe617bcc7239bf28f4d8e3b3156f56df20","size":338129,"data":"","first_seen":"2025-10-18T11:36:15.751596Z","last_seen":"2025-10-18T11:36:15.751596Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/en/block","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"introduction_type":"Function","is_inline":false,"md5":"a01893d8e129ad16c1e0fc5c7537f411","sha1":"0e46d1bf2718f848d9d596fa269eaedb31204772","sha256":"cbe7b89533bcd75b69f3e54807308551d68242ec1761e63bee1a99fc6e560175","sha512":"074e309b533fc11690afbeab9b4dda85851e086c0ede97936860c7a5c4120ed9a16c6ced4fffdad21ca322f6c6e51577bd4966c5264b4a9780495acc451aee65","ssdeep":"","tlshash":"0d9004f515405350c5533d54401f1d5400f105703c40cc71014cdcd10c710f0335d5dd","size":47,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-04-04T02:11:54.636693Z","times_seen":12984,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/en/block","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"d05e70daebc80008313f914205049c34","sha1":"5eaea96f9ffb61501dcf90f250925fdfa3c6fd23","sha256":"5a50e3cc701e0a7b115cf2572ce538663ee840b27bd349eea0672e67b5fb2fad","sha512":"9275a435d56e1de43fa37313281d6afc515c0899c3ad38ffb6d87a301ca4f2e49105741f9157b57a2be1b7d517364245286d79ab5899b547336c32d8d223d26e","ssdeep":"3072:95si4opeRfJdpBP+PpM4oteRfJdp83HR/98FDwQwWu7YH:fsxfvofy2DZaMH","tlshash":"cd24b52fa90c1c3e951f1eb6c54f7d8e57bc9e1a20cb6c119cae6e2911e7694026343f","size":226445,"data":"","first_seen":"2025-10-18T11:36:15.757853Z","last_seen":"2025-10-18T11:36:15.757853Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/6eff9a15d5.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"3532927e4b8e6575dc977b7ab2cf5fff","sha1":"17937daa7907905c0229a3ebeb8c7e19288ec386","sha256":"dfc3e0a1a14b6ce16021d8aed307b0a016f14631b36ea3dcf990329880436c10","sha512":"8ddae06f2dcabf77525e0bb1f30d3f7f5bec477df12e869f972ef46258f622ca5a0850ae5b5086f6c97a74dfb6487bc0458e6c7cd107362c00dd25145c9b5787","ssdeep":"","tlshash":"c851c7dd66f834b83a094e69e81e3471c76c284736ade4f0e6ad5f64033068ce294f82","size":3094,"data":"","first_seen":"2025-10-15T08:29:23.268713Z","last_seen":"2025-10-24T10:11:24.435356Z","times_seen":330,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_e9c881b43b.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:41.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_e9c881b43b.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62827.bar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-eef0dba4fcfc50df7269f7409fecc725-e223fa503a42b66f-01\r\nlast-modified: Fri, 17 Oct 2025 13:08:28 GMT\r\netag: W/\"a4a18ae51843c635fcbd72697fef91f3\"\r\nx-amz-meta-mtime: 1760706465.785537468\r\ncontent-encoding: gzip\r\nexpires: Sun, 19 Oct 2025 09:04:56 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 9046\r\ncache: HIT\r\nx-cached-since: 2025-10-18T09:04:56+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3676,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3675)","md5":"a4a18ae51843c635fcbd72697fef91f3","sha1":"72ab3b809992b85801884e7e67e846e07d7bafa7","sha256":"6d218c3466eee591e86432b09f3536529b0542129e78c56f17967c33d8924eec","sha512":"2cff3445996c77b95bd2c165774b33cd1af1ab8407f0b582df9dc1a5195e27b977ae1b36094296376c6c181c4ed5249087148f196c7868ba7b2c2a2101cbe715","ssdeep":"","tlshash":"3c71639abcb4c1398933f812128c8e7d0671fdaad9251c8ef6dd872654c3a970190af9","first_seen":"2025-10-09T09:08:10.646635Z","last_seen":"2025-10-30T11:27:15.243146Z","times_seen":1015,"resource_available":false,"data":null}},"time_used":395,"timings":{"blocked":189,"dns":81,"connect":6,"send":0,"wait":3,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/d0ea2630/desktop/default/app-661fd105.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:42.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/d0ea2630/desktop/default/app-661fd105.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62827.bar/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-a3d722c6f81d301a98a48fd5aad6abeb-b5457b91eeb13b7c-01\r\nlast-modified: Thu, 16 Oct 2025 11:36:59 GMT\r\netag: W/\"98594f6e08da3cc08ac72f8d6b0d9c53\"\r\nx-amz-meta-mtime: 1760614618.794919231\r\ncontent-encoding: gzip\r\nexpires: Fri, 17 Oct 2025 11:47:12 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 85442\r\ncache: HIT\r\nx-cached-since: 2025-10-17T11:51:40+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":482549,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"98594f6e08da3cc08ac72f8d6b0d9c53","sha1":"34fa7ad0e82ee83ba1e105b811786764edba60e2","sha256":"03b7d7d64d5f0193ad77364fa604680dff652ad4b8daf1bfbcb240e2ce0d48ca","sha512":"9e1b6dbfb9320aed98391c0503895f68de9343458e4672596b3585cd2ba95a941b4e457f18a2db4a83d157f3b8471993b8302b4b4e9deb89bf87eacc5c0cb5be","ssdeep":"6144:Fht3/9S/eXAth2OfXQbKOt6poZqgTzKXwhdyta73xuO+EtHOaMA7x032DGJFYmbY:l/9jgEZebOHfRLPgF7jcupM/pNPZ5uZk","tlshash":"a4a45c65b589f4ca02e34bdae03b0061e33516b9780dd064f778fdc9359bc05926aa7f","first_seen":"2025-10-16T12:35:18.519399Z","last_seen":"2025-10-20T12:06:35.17591Z","times_seen":147,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_forgot_password/en/dictionary_776c0b6a6ae43ea4503f983fa859981a.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:42.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_forgot_password/en/dictionary_776c0b6a6ae43ea4503f983fa859981a.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62827.bar/\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-0c0afdd5a1edb4044d5e4436d948a8a9-5c40b17ec95c5086-01\r\nlast-modified: Thu, 26 Jun 2025 16:06:49 GMT\r\netag: W/\"9e075dc2a068d12162e260d49c92f233\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Thu, 26 Jun 2025 17:12:47 GMT\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1692\r\ncache: HIT\r\nx-cached-since: 2025-10-18T11:07:30+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4086,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9e075dc2a068d12162e260d49c92f233","sha1":"9c748240ee9aeeb922f9998005c557517763a979","sha256":"81b3796da635e227e36b1a44c3224d8e0ccda902293beb08f84d870ed3bcee99","sha512":"6572c0bd8d55d4edc9ff8f263ef021d454593330e2f09759a2a26153870083e1d2cc308575d01196919d60a86170bd6b24436163427692b99eed38d0643eac9e","ssdeep":"","tlshash":"13819e0959831ef21abf8e90705e88663be5d06bde1764140fb5c30f3377e93668284a","first_seen":"2025-06-26T22:02:08.124583Z","last_seen":"2025-12-10T17:51:01.422955Z","times_seen":3966,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-1208/desktop/media_asset/11a9eaa2a0d27ac0d234f64664d21afe.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:42.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-1208/desktop/media_asset/11a9eaa2a0d27ac0d234f64664d21afe.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62827.bar/\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-94fec32f11456cad94abca24dba83960-462fe8b8b96c9113-01\r\nlast-modified: Fri, 01 Aug 2025 06:40:25 GMT\r\netag: W/\"b255cc6c6ca667c6f42f2d9ab151b21e\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 18 Oct 2025 12:35:37 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\ncache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7481,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b255cc6c6ca667c6f42f2d9ab151b21e","sha1":"a0c241d3c2fa56d392cc204f2d386046a5273a9b","sha256":"9c347db4287a13bf6e86c34baa07bf255437a85566ba14a77199a753b73a400b","sha512":"62bb36631dfa4cd6790efcf39ff920a0b11741cd1b5ecd936ecce083090c0336cb216eb28f838e05e27fff2509a6b8724d0f6c61349da57506e6eca112c8a294","ssdeep":"48:TzABBABGkABjABFygABCN/ABCNYN8ABWHABaEABzzEFABIIX4ABBxSHsABYiwABp:lFbClXCL3cblP+XyLO5GIM","tlshash":"e7f11784fff04c33112f94ad98b37a89a7884f07a95a7d1c7f9d294c1f1451a04aadbe","first_seen":"2025-08-01T12:24:56.656253Z","last_seen":"2025-11-07T10:46:34.805118Z","times_seen":2150,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/hd-api/external/assets/hdf.js","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:51.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-62827.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 09:19:37 GMT","end":"Tue, 23 Dec 2025 09:19:36 GMT"},"fingerprint":{"sha1":"3D:8B:55:91:01:43:89:9A:B2:C9:DA:95:89:31:CA:E6:4B:4A:7B:1C","sha256":"87:2A:30:15:94:6B:E8:A9:B8:88:D5:8A:C4:E0:DA:84:C5:AC:29:E6:F6:70:01:E9:59:FB:3A:50:62:94:F7:6C"}}},"request":{"raw":"GET /hd-api/external/assets/hdf.js HTTP/1.1\r\nHost: 1xlite-62827.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62827.bar/en/block\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder; auid=LiC2ZGjze42Wt07pAxy1Ag==; window_width=1280; che_g=50d29c68-8050-457e-b91e-4d85f21ae555; SESSION=c3aa36a1e79f9804fbbecaca68e9ec98\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 1537\r\ncache-control: public, max-age=300\r\ncontent-encoding: gzip\r\netag: 17cc4ade9ae4dd646178200428d67b62\r\nvary: Accept-Encoding\r\nx-dt: 1208\r\nx-request-guid: 7ea938a2a4c55cbb9424da7efae9af33\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.006, wf-uht;dur=0.010\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3281,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3280)","md5":"17cc4ade9ae4dd646178200428d67b62","sha1":"8949891455535a68218c809864ed91eb0f800c84","sha256":"b0c9aa9ea44642cc4d2a68a6a0ea81b2d8578aca18a4769c64f8b482189572c3","sha512":"ed1d64775d6f6aee5ac22448f6678a4742459eec3389d87d9383e7053ed5cf31cc74eb8ef0b3f3597b02e16f53d07bf88b2b7695c5f072cae01f7c2e48b00155","ssdeep":"","tlshash":"316182a764ae7e1212480cc7a47e9a4b7050e9063ca9f850d0bf6ccf2404da1c9a1f1b","first_seen":"2025-10-17T07:26:39.008746Z","last_seen":"2025-12-13T09:36:03.351895Z","times_seen":1800,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:53.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"GET /gtag/js?id=G-7JGWL9SV66 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62827.bar/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 18 Oct 2025 11:35:53 GMT\r\nexpires: Sat, 18 Oct 2025 11:35:53 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 159481\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":501524,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12571)","md5":"a34e5823f1ec800fbb771025d10713de","sha1":"ad3f5a85418d11587ba626e8a91c3e70cfe055a9","sha256":"bc6c55faa969f7bde53b2c75c7b0236f37da74d7e67fde156347ec01c9848d67","sha512":"8d65507ef66e4967cd2744724c45d6065f8e6d0ce140f4fdffb4af291ab43b819ab66bd0d387d7f3c6aaeea262f6c88d5a05d8dd375db317611fe015cce25e39","ssdeep":"6144:PBdNc6tQSyOR+hV4nkEt7F8KWjxSqpRVQeAtWvkAX6HJLGy1Voyb1pJwuu4pT:5k6rRUhV4nkEt7F0EqiexRy1RT","tlshash":"47b4098e73c6742652daf478502f02cba87b25a2b49dc8a6b1c9ccf02d7455a4277f7c","first_seen":"2025-10-18T07:40:04.776791Z","last_seen":"2025-10-18T11:36:15.507944Z","times_seen":3,"resource_available":true,"data":null}},"time_used":338,"timings":{"blocked":109,"dns":1,"connect":21,"send":0,"wait":50,"receive":63,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/hd-api/external/verify","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:53.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-62827.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 09:19:37 GMT","end":"Tue, 23 Dec 2025 09:19:36 GMT"},"fingerprint":{"sha1":"3D:8B:55:91:01:43:89:9A:B2:C9:DA:95:89:31:CA:E6:4B:4A:7B:1C","sha256":"87:2A:30:15:94:6B:E8:A9:B8:88:D5:8A:C4:E0:DA:84:C5:AC:29:E6:F6:70:01:E9:59:FB:3A:50:62:94:F7:6C"}}},"request":{"raw":"POST /hd-api/external/verify HTTP/1.1\r\nHost: 1xlite-62827.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62827.bar/en/block\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 191537\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder; auid=LiC2ZGjze42Wt07pAxy1Ag==; window_width=1280; che_g=50d29c68-8050-457e-b91e-4d85f21ae555; SESSION=c3aa36a1e79f9804fbbecaca68e9ec98\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:53 GMT\r\ncontent-type: application/json\r\ncontent-length: 819\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-dt: 1208\r\nx-request-guid: e47b059e5e0087c9ffe42acfff730982\r\nx-time-ng: 0.004\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.109, wf-uht;dur=0.051\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1035,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"87886563427bdc33b277be3c084d68b1","sha1":"1d376c21c45288f9497307f071b0bc03449e1e53","sha256":"f786398c64a95db0ac25915c29374773ab61b245b8cd334527b0cd11b98ed3bf","sha512":"2269955392dc4d39fab6433d9ac4a1837cb95e811e31fcccfc9db19906bd68ffc9d22da919812053f75021b7798e709053232fe2f4c069e3fe406e70b038cfbd","ssdeep":"","tlshash":"c91175c150fc5e4bffe6556839bf7f2445e66102045b744172fb4e065ab34e85162684","first_seen":"2025-10-18T11:36:15.510386Z","last_seen":"2025-10-18T11:36:15.510386Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":0,"dns":0,"connect":0,"send":46,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_css_542ed6.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:41.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_css_542ed6.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62827.bar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-07d0adc5541e436ae60e832edc111bbe-1c4d492c02d720a9-01\r\nlast-modified: Fri, 17 Oct 2025 13:08:28 GMT\r\netag: W/\"7eb4f3d4c97ec66a32269ae3b07d7653\"\r\nx-amz-meta-mtime: 1760706465.784537382\r\ncontent-encoding: gzip\r\nexpires: Sun, 19 Oct 2025 08:15:39 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 12003\r\ncache: HIT\r\nx-cached-since: 2025-10-18T08:15:39+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11025,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (11024)","md5":"7eb4f3d4c97ec66a32269ae3b07d7653","sha1":"e31f7fc270a78d455c90a57d8c365bccf6ebdfb0","sha256":"542ed6b44d2771468d5e5d4c77dfddaab1f7d4169bf692a087c56f024d9813dc","sha512":"02195935d732af0ae4dceecb4677bcb4ad90d284dfbd27a707ee927fc587fb3a9bacc8bd8cf315ee025b67d1a53b33fb0e9ced17d24ea019deb2a0be9765ec37","ssdeep":"192:mLhA5ZO73iyDDW7qE/eVgnmnh8RbxJEU4PuiPBvDDQ7qOtIZ4Io:QAXOLisDUqE/Y8RbxUuwBLDCqOt24v","tlshash":"cc3226adc9e495231d26b5216388be7c85f0f06aee314e55f80ec6104ad3f9f15e0e79","first_seen":"2025-08-13T23:36:01.800779Z","last_seen":"2026-03-04T04:00:43.402045Z","times_seen":3922,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":190,"dns":90,"connect":7,"send":0,"wait":3,"receive":0,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/d0ea2630/desktop/default/runtime-527669a3.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:42.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/d0ea2630/desktop/default/runtime-527669a3.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62827.bar/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-21b373c95b9b91ddbb60c62e777ee483-360126581a8800b5-01\r\nlast-modified: Thu, 16 Oct 2025 11:36:59 GMT\r\netag: W/\"913de44e908d0de200f204329f44d87d\"\r\nx-amz-meta-mtime: 1760614618.811919392\r\ncontent-encoding: gzip\r\nexpires: Fri, 17 Oct 2025 11:47:12 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 85442\r\ncache: HIT\r\nx-cached-since: 2025-10-17T11:51:40+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17003,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (17003), with no line terminators","md5":"913de44e908d0de200f204329f44d87d","sha1":"bc7d7d0dd3d2eea54b31c164c16eec4bf53ae6ce","sha256":"051cb1fb50979a5da5941dcb615f649da0d8caa28e6965da4a7944063cf45ced","sha512":"9bc5277cbb34e4632dcae8eb2e2e52280df10c236063e9ffcbb5c590dc711c8b58f7aba4c268c5cb3bcba50ccda492d98d28837c884e287852478eadcb7f0cec","ssdeep":"384:ZvFjE/yItnhbnI4g4B5E/yItnhqVnJ200f/Wt:RxrIthbnI4g4B5rIthOnXoG","tlshash":"d0721e5d6f1acd671d22cdc33c217d21585824335c4647ece6fee2284018ea8a5afe6f","first_seen":"2025-10-16T12:35:18.548396Z","last_seen":"2025-10-20T12:06:35.150972Z","times_seen":147,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-1208/desktop/media_asset/6db60e0798c6116cd03bbf81bbad905d.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:42.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-1208/desktop/media_asset/6db60e0798c6116cd03bbf81bbad905d.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62827.bar/\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-2ca900640e6ba7eaf4ad6bd035bcba7f-da26eb10746bfe4a-01\r\nlast-modified: Thu, 27 Feb 2025 09:05:15 GMT\r\netag: W/\"811ce3b7877d19901e45430cb6523d62\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 18 Oct 2025 12:35:42 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\ncache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14232,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"811ce3b7877d19901e45430cb6523d62","sha1":"16a905115a678fdef3923f91c6f76cbab613e84d","sha256":"10fbb74dbac63abfe9c4f5a77abc03757ef3527a479d4ae70dc977b515eec8cb","sha512":"21a43d793bd4200ff9972a793442fe492b6a1699f20053c4f01695f69f918685bf30f03f778346c2f61bac40d2e51bb25360d0ffc15448200c666ab4edf38e65","ssdeep":"96:BDkGHVTSY15XWGsQfGJo/JamRKkmP9kDeD3LzwCyi8TunZh:bVTS1KXR9RKkekDGoCyXOD","tlshash":"59523d65f6f40c33113b98ae65f76a8953948f07aa6d7c293b9c2b4c1f1462e0076d3e","first_seen":"2025-02-27T19:55:39.119779Z","last_seen":"2026-01-05T12:50:32.841809Z","times_seen":4543,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_accept_language_parser_LEQ4UAP5.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:43.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_accept_language_parser_LEQ4UAP5.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:43 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-e297a2bb9d7e346943fe561de0f418eb-ecc5425971d67638-01\r\nlast-modified: Fri, 17 Oct 2025 13:08:25 GMT\r\netag: W/\"83e311eb8e222d229b6177bd007ce9eb\"\r\nx-amz-meta-mtime: 1760706466.353586795\r\ncontent-encoding: gzip\r\nexpires: Sun, 19 Oct 2025 09:36:36 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 7147\r\ncache: HIT\r\nx-cached-since: 2025-10-18T09:36:36+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1297,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1265)","md5":"83e311eb8e222d229b6177bd007ce9eb","sha1":"96b851ffda0eab794c2bb637255a48ae25770144","sha256":"d0ff62de588e1c47eedbd91a89dcf394e2ec5bd09392ea556b9a34108077e9ad","sha512":"fd2e1bfb6588598e356ddc08724c2e6f602b89626b30eeca2c25b8f60340f25e28a761b8e13b75d1627172530abf7dd0e586e792f53759d08bda626145f65b0d","ssdeep":"","tlshash":"202112debed2b5908394188c4e2ec055f23a2957641ce6fcd765e7827c403a186f3c1d","first_seen":"2025-08-22T10:11:14.559442Z","last_seen":"2026-03-04T04:00:43.42063Z","times_seen":3921,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-1208/desktop/media_asset/c17a300fca712bb940bf2a63819a56cd.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:43.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-1208/desktop/media_asset/c17a300fca712bb940bf2a63819a56cd.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62827.bar/\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:43 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-83dac6662408240f74e7a596e4b3d14c-db8dfc51c54a5feb-01\r\nlast-modified: Fri, 19 Sep 2025 14:23:29 GMT\r\netag: W/\"b5a6dbdf3f12e11d0c5275b2ca6dc739\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 18 Oct 2025 12:35:38 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\ncache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3091,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b5a6dbdf3f12e11d0c5275b2ca6dc739","sha1":"a8495df42a8f1e18c12dc1723660d062bbc8fb6b","sha256":"8febfd79d9b9b1298af34575340a4288d6d5b01ee4e50c57f5a5509d602412f2","sha512":"813327003eefeef8e9772adc05530b46f52fc044d76f5ed1393854052836ae2f89a0118697367681afbab9084b4e215c3120bf09ea2713553a7e8286ca9afe2d","ssdeep":"","tlshash":"85514b4df6e41c33012f19bdc0f76a6993d84f4f694a7c283a9d6c4d1bd451900aad3e","first_seen":"2025-07-21T03:11:29.13175Z","last_seen":"2026-01-11T03:06:49.449217Z","times_seen":2816,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:53.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:53 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63920\r\ntraceparent: 00-e7df5f132a7a77c6a0bb0ce26bdc9adc-2ffa3b5331d07389-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"a65527fcb58f66a7cfbc0e6b160538b4\"\r\nexpires: Sun, 10 Aug 2025 19:21:26 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1582\r\ncache: HIT\r\nx-cached-since: 2025-10-18T11:09:31+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63920,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63920, version 1.0","md5":"a65527fcb58f66a7cfbc0e6b160538b4","sha1":"45d260e7fa343401b5bb0df982a014f53e2d253b","sha256":"fb13c3a1cbac60649b76f7d7f85c1645d35ac69b85ce5f4eb0692505ecc2cd45","sha512":"8448e96abe326f43285b2d8b0d75beaf0e9c9e051e8754841d907b30eb303ae24c447011306da6a1703b9192d02aeff76a4517bdf94ec6e7dc360ce3538802af","ssdeep":"1536:UIG3hJMkJeK8ic5iZGnJ4URj9vqXOQ6UqYdbuA5RVK1:UL31hcLlRjDQ6Uq4W1","tlshash":"7f5302df8de32a148ff78772668885f4f4927c68898c8e7345526a8907f07d6b96c04f","first_seen":"2023-05-07T18:04:27Z","last_seen":"2026-04-04T04:09:16.94457Z","times_seen":10137,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je5af1v897130004za200zd897130004\u0026_p=1760787353254\u0026em=tv.1~em.ODS1igyfeIhzOTHENqwIfH1sb8t0oxg8FT6iY2YCmeo\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=952693072.1760787354\u0026ecid=1467884601\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026ec_mode=a\u0026_s=2\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~105322303~115480709~115938466~115938468~116110422~116110424\u0026sid=1760787353\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-62827.bar%2Fen%2Fblock\u0026dt=1xBet\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026ep.optimize_id=GTM-5R4MT54\u0026tfd=13064","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:53.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je5af1v897130004za200zd897130004\u0026_p=1760787353254\u0026em=tv.1~em.ODS1igyfeIhzOTHENqwIfH1sb8t0oxg8FT6iY2YCmeo\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=952693072.1760787354\u0026ecid=1467884601\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026ec_mode=a\u0026_s=2\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~105322303~115480709~115938466~115938468~116110422~116110424\u0026sid=1760787353\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-62827.bar%2Fen%2Fblock\u0026dt=1xBet\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026ep.optimize_id=GTM-5R4MT54\u0026tfd=13064 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62827.bar/\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://1xlite-62827.bar\r\ndate: Sat, 18 Oct 2025 11:35:53 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:158:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:158:0\r\nreport-to: {\"group\":\"ascnsrsggc:158:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:158:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":34,"dns":0,"connect":10,"send":0,"wait":19,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/d0ea2630/desktop/default/css/13382faf.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:41.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/d0ea2630/desktop/default/css/13382faf.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62827.bar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-b8d0d40c98fb84c1159b9cfb9c0ec7f6-687e644ad3825628-01\r\nlast-modified: Thu, 16 Oct 2025 11:36:59 GMT\r\netag: W/\"522bed13bfb021f11f9100e2f5a2fa88\"\r\nx-amz-meta-mtime: 1760614618.796919249\r\ncontent-encoding: gzip\r\nexpires: Fri, 17 Oct 2025 11:47:12 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 85493\r\ncache: HIT\r\nx-cached-since: 2025-10-17T11:50:49+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15193,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (15193), with no line terminators","md5":"522bed13bfb021f11f9100e2f5a2fa88","sha1":"e35753a7f9434702331a022a65fea710096f73ed","sha256":"0c09117600e3f9a9377db07f0a4e5f78ff1a2f8ab3cef75d04640ce229032d22","sha512":"dbc706017a1281f67cd28689755365d1ec1e52a9efd00bf367b97892c71f8c96eeceb078a274b0c5dfa5acb405c4d12e5c3594022c1b126e0195329dd0fb3b00","ssdeep":"192:HOIOH7nvxxxY4lctZLJh6N0dtu8yvrs9lvhvuvoQwltoQrNTC4cjWnk3LbBQ:HCJxxY4MJJqJQr9C4GWk3PBQ","tlshash":"1362b61fd53692b21d238c52728ebf383539722628a65735f44e26488ddbb9703d0fb8","first_seen":"2025-09-30T10:36:50.754445Z","last_seen":"2025-12-02T07:51:56.02009Z","times_seen":2313,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":169,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/d0ea2630/desktop/default/commons/app-cb5d2580.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:42.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/d0ea2630/desktop/default/commons/app-cb5d2580.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62827.bar/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-46a848401af6f690a3d108f19c3ac83d-bcffbcdeb49f54f2-01\r\nlast-modified: Thu, 16 Oct 2025 11:36:59 GMT\r\netag: W/\"fbf9b0644fe713c005df34e58f6a91cb\"\r\nx-amz-meta-mtime: 1760614618.79591924\r\ncontent-encoding: gzip\r\nexpires: Fri, 17 Oct 2025 11:47:12 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 85442\r\ncache: HIT\r\nx-cached-since: 2025-10-17T11:51:40+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":137774,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65468)","md5":"fbf9b0644fe713c005df34e58f6a91cb","sha1":"b9e35c57d65632c50bdd152179534d3deb4201ee","sha256":"01ecbb7d7ad3cba49330b60dfc8554dad1f236d1694d7316f955bd0be5bd550c","sha512":"b6b576a0cfe76fe1a7270c558cb282aa877116da8db06a7df92c2e4177df0b9ebe456c2b01aa4afdf17d2389e9ef713c5f806f88d6076e23668b82c432a61472","ssdeep":"1536:TCrmhLG5YGf7BMr3y6MPC0UiXH2DHJjIAG3wvvjE+gjmZVBu+PWKfkohItp:Om0YGNMrmXHUp0qXjE+gjmZf4GIP","tlshash":"93d3d5dcf695b03117e721b5407f150bf23a7898680ac0a4f266e8d53db888ea167f7d","first_seen":"2025-10-15T10:41:17.367216Z","last_seen":"2025-10-22T09:09:00.879015Z","times_seen":228,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/d0ea2630/desktop/default/vendors/plugins.vue-js-modal-67a81d1c.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:42.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/d0ea2630/desktop/default/vendors/plugins.vue-js-modal-67a81d1c.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62827.bar/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-87d17fae43b8dc673fb4f3fd1f32e7f0-b472c8191295cd59-01\r\nlast-modified: Thu, 16 Oct 2025 11:36:59 GMT\r\netag: W/\"86fb68912492ee656b4abb0da2c47e75\"\r\nx-amz-meta-mtime: 1760614618.81591943\r\ncontent-encoding: gzip\r\nexpires: Fri, 17 Oct 2025 11:47:13 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 85441\r\ncache: HIT\r\nx-cached-since: 2025-10-17T11:51:41+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26667,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (26667), with no line terminators","md5":"86fb68912492ee656b4abb0da2c47e75","sha1":"668f45a7edacce4f6133dbc3e33e8104da829098","sha256":"6c55f6df6c3e799db28b35e44df8a057f9bfe8a8ff7a068a2a8deba91961f29a","sha512":"c6ccf6ff8058ac79407f280edb459b65caafb5f98263a6eca8ff6b9e2f5e2e43d0ec8ea6d86d3b87e2201e8dfdd719daee848a955fd746df30892cc61940b5da","ssdeep":"384:hBy0a9vOeCGAZIXfK2rVsAdm00uow4HQEjacGXGQVe6ubqj:4HyIXfPt4wE9GXGQcbqj","tlshash":"37c2288977d8307442db5563627f2b0ab23e295474269888b772e8e65cb864d206ff3c","first_seen":"2025-10-15T10:41:17.704149Z","last_seen":"2025-10-22T09:09:00.93439Z","times_seen":228,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_reset_password/en/dictionary_612c6e919ca15d39cc751a619a3952c7.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:42.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_reset_password/en/dictionary_612c6e919ca15d39cc751a619a3952c7.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62827.bar/\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 765\r\ntraceparent: 00-82f8f501549aadda4362efe5af2dac6c-868699883f5cdb3c-01\r\nlast-modified: Wed, 11 Oct 2023 12:52:53 GMT\r\netag: \"00f980f23f1b4c1ccee99ed49e0a8feb\"\r\ncache-control: max-age=3600\r\nexpires: Thu, 16 Jan 2025 10:53:47 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 3119\r\ncache: HIT\r\nx-cached-since: 2025-10-18T10:43:43+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":765,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"00f980f23f1b4c1ccee99ed49e0a8feb","sha1":"4cb07094de9bffff1bf81d94446280b91013b660","sha256":"bb3be3377fbb8e66a4b5a8a3866dfd865a37cb4a96482ab2f439981e03b57cea","sha512":"45587feec47804731eb344682dd7465959a50f2f47e114e332e875097a9e2009d6fe41e8ff684fb287d935fd9c4d12a5b83e1fe310f3ceca6061d569502ac1de","ssdeep":"","tlshash":"80015701129f0ef21b4bc65a940b1c71b2a0c043936b8c8757baeb8f73bbd8b009584f","first_seen":"2023-09-28T10:29:17Z","last_seen":"2026-04-02T22:21:06.221985Z","times_seen":5044,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:43.070Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-62827.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 09:19:37 GMT","end":"Tue, 23 Dec 2025 09:19:36 GMT"},"fingerprint":{"sha1":"3D:8B:55:91:01:43:89:9A:B2:C9:DA:95:89:31:CA:E6:4B:4A:7B:1C","sha256":"87:2A:30:15:94:6B:E8:A9:B8:88:D5:8A:C4:E0:DA:84:C5:AC:29:E6:F6:70:01:E9:59:FB:3A:50:62:94:F7:6C"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-62827.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62827.bar/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: e12f7f8e-e08d-4d07-aa64-23f59c478ad5\r\nContent-Length: 89\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder; postback_watcher=; auid=LiC2ZGjze42Wt07pAxy1Ag==; window_width=1920\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:43 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\nx-dt: 1208\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.009, wf-uht;dur=0.008\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"2ef761302c23ff90ea262c6057da48d3","sha1":"a94f245def8c9fd38e5f4ca0d024a68455683f3d","sha256":"8784ca775acf49d30fd68c6fdc06328cf0117c6e08f5e2039a3e3c6de57762a6","sha512":"5506cd9197d95a7e42eff519822ada1f98c80f6bc03677145bbc7e0e1a9978ac59a7845a3886d546898b03ad2fda27d6d9d7cffc15fd8d6ade47881ccfbba146","ssdeep":"","tlshash":"c970000020088000080800000a0a0e220a308208880c08320080be280882ce8000f083","first_seen":"2025-10-18T11:36:15.540588Z","last_seen":"2025-10-18T11:36:15.540588Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/8237bfd1b7.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:43.807Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/8237bfd1b7.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:43 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 740\r\ntraceparent: 00-3e497d9c659b3cd1998592a85b97c58b-de4ddbf8b6171c8f-01\r\nlast-modified: Wed, 15 Oct 2025 07:28:08 GMT\r\netag: \"f4ab74c92a88099f643e219bf86e277b\"\r\nx-amz-meta-mtime: 1760513214.068966603\r\nexpires: Thu, 16 Oct 2025 07:31:13 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 13609\r\ncache: HIT\r\nx-cached-since: 2025-10-18T07:48:54+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":740,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (737)","md5":"f4ab74c92a88099f643e219bf86e277b","sha1":"c8b2efe89b8e3631d55c1c851c4d39d0aea693d7","sha256":"791da6fc1d03e9e0b868629b9fb8bcb4a4cc06df2ea481e315a4834732475cbc","sha512":"a72c8ec5c3d391da324ac703c28324d884aa3f76f0383681d6fbe16b0560b18f10a9d6e158f4be5873442f394c5e4cda996f5334af92ca14ed37c044bf3acec7","ssdeep":"","tlshash":"d701106970b29088a5eb49cabd24103a97381a02371e4cf9f7ddcab7405a18255aa886","first_seen":"2025-10-15T08:29:23.28783Z","last_seen":"2025-10-24T10:11:24.422177Z","times_seen":330,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/site-admin/colors/07cf27f4829a85fa0f8f250f95003b0f.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:41.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/site-admin/colors/07cf27f4829a85fa0f8f250f95003b0f.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62827.bar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: text/css\r\ntraceparent: 00-978f7bc494db480fff5ab7d98ca80144-24bfa178b2d4453f-01\r\nlast-modified: Fri, 17 Oct 2025 08:34:20 GMT\r\netag: W/\"07cf27f4829a85fa0f8f250f95003b0f\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Fri, 17 Oct 2025 11:09:04 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2162\r\ncache: HIT\r\nx-cached-since: 2025-10-18T10:59:40+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40978,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (40978), with no line terminators","md5":"07cf27f4829a85fa0f8f250f95003b0f","sha1":"2dea057c3bafcf85a0ea75b5e3289517d5d66d6c","sha256":"dc072e5636eb8c2897cf992d3e688c57856517393f38e9f0df5e913f64a53a4b","sha512":"3dd26f5e84f416ea229cb9a8d4933280581056dbd91fd0e71d0510a8647d0633b5d29a49262af7ab3de7ea82a8461a24784c2b9f350cffb1a3bfe85545b30ce9","ssdeep":"384:+EO1mFSK75xWt5JkyunibMhS4EeIIc+7rpeN:+EO1mFSK75xWt5JkyunibMhS4pIypeN","tlshash":"88037b7ded91c1712a591931911c677b3d36e9ceae240f8fd02c63e670c1b022be5a7a","first_seen":"2025-10-01T08:34:29.157739Z","last_seen":"2025-10-30T12:45:26.171228Z","times_seen":1005,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":195,"dns":91,"connect":1,"send":0,"wait":2,"receive":0,"ssl":108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/d0ea2630/desktop/default/vendors/app-b4dcc82c.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:42.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/d0ea2630/desktop/default/vendors/app-b4dcc82c.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62827.bar/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-dd6b3d7993ff52cf07479c85b48e8fcc-49f1c0a67f3d1146-01\r\nlast-modified: Thu, 16 Oct 2025 11:36:59 GMT\r\netag: W/\"8f119e72a56c24f5cdb869df98ff16c6\"\r\nx-amz-meta-mtime: 1760614618.813919411\r\ncontent-encoding: gzip\r\nexpires: Fri, 17 Oct 2025 11:47:12 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.003\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 85442\r\ncache: HIT\r\nx-cached-since: 2025-10-17T11:51:40+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":965462,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64585)","md5":"8f119e72a56c24f5cdb869df98ff16c6","sha1":"d5ce151c438469a1cf0d28f22ec0d62d4892ee2e","sha256":"80f73a5cc21d9583f773c0affbad1601cb38f3dd1aa77470e9bbe87a05a08b13","sha512":"8f9467873dc9d0b0d59beb1a9f33d64804b73e1383858b2d6986eb7cd325c8634605b2aa6637c49450f4be377b0f5baff8075af321102fc3123ca536d771de8f","ssdeep":"12288:wdQX/yYLwGkPMdYog1RMU3I0EUeCBzYIr4f8+Ydm:vX/yYEGkPMdYog1RXTB3a64fbYdm","tlshash":"e5254c69b981f2560aa36ae5c06b0057e33d6f1ebc0cd454f2e7cdd5395a804713ab2f","first_seen":"2025-10-16T11:45:51.67353Z","last_seen":"2025-10-22T09:09:00.907644Z","times_seen":196,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_registration/en/dictionary_2b26d0b331fbb9865b4c4c997fcf830c.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:42.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_registration/en/dictionary_2b26d0b331fbb9865b4c4c997fcf830c.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62827.bar/\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-f98b034769a4c506cee4d7ce1d8467e7-d4c8d4fa869a41d0-01\r\nlast-modified: Wed, 15 Oct 2025 08:07:41 GMT\r\netag: W/\"997224ff384b3c331c8ad36315357af7\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Wed, 15 Oct 2025 09:17:45 GMT\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\ncache: REVALIDATED\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25966,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"79bdda040bfa51d6be2d065803c4704b","sha1":"fbd9b77826d45b075929344d0f2acadd12d61a8b","sha256":"fdb6af24e1c00aab373c22feb4fc73dff717f0922223abb37390bbe36aa04497","sha512":"c6bd27ae2a59b2ad65265b9c21d5c81edaddb6ba261f23308146602b14def42486ec8d8bb6bd87bef4741e27186b89181d685ca3e527d37ccbbba50afcbe1fe9","ssdeep":"384:JSUsZ6LlTYvzH5W8qD8bqBSxkhx+/Y5egww10N8axMcWp/3pHyTqC:HqLHuDDsxkP++3910N8TtwTqC","tlshash":"c8c2d78f9f649c7307c3451b7d8b2b9a26fe0058769208548fbe8a7d1374b91a33349d","first_seen":"2025-10-15T09:19:30.684403Z","last_seen":"2025-10-22T12:12:26.062257Z","times_seen":263,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:53.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:53 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63920\r\ntraceparent: 00-8443e2ea5eb86b8c61369a2f9322a8af-5a4199a25065d0fe-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"a65527fcb58f66a7cfbc0e6b160538b4\"\r\nexpires: Sun, 10 Aug 2025 19:21:26 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1582\r\ncache: HIT\r\nx-cached-since: 2025-10-18T11:09:31+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63920,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63920, version 1.0","md5":"a65527fcb58f66a7cfbc0e6b160538b4","sha1":"45d260e7fa343401b5bb0df982a014f53e2d253b","sha256":"fb13c3a1cbac60649b76f7d7f85c1645d35ac69b85ce5f4eb0692505ecc2cd45","sha512":"8448e96abe326f43285b2d8b0d75beaf0e9c9e051e8754841d907b30eb303ae24c447011306da6a1703b9192d02aeff76a4517bdf94ec6e7dc360ce3538802af","ssdeep":"1536:UIG3hJMkJeK8ic5iZGnJ4URj9vqXOQ6UqYdbuA5RVK1:UL31hcLlRjDQ6Uq4W1","tlshash":"7f5302df8de32a148ff78772668885f4f4927c68898c8e7345526a8907f07d6b96c04f","first_seen":"2023-05-07T18:04:27Z","last_seen":"2026-04-04T04:09:16.94457Z","times_seen":10137,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_coupon/en/dictionary_78f0b5102bf11b5ab31f4ac48e612b50.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:42.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_coupon/en/dictionary_78f0b5102bf11b5ab31f4ac48e612b50.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62827.bar/\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-03c731ae93ed8d877f08ddd680f6b8e4-eb9e9bdd4dd44354-01\r\nlast-modified: Fri, 17 Oct 2025 16:07:35 GMT\r\netag: W/\"1d16135ee57d1c351f40fa85666a9d39\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Fri, 17 Oct 2025 17:40:59 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 3063\r\ncache: HIT\r\nx-cached-since: 2025-10-18T10:44:39+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28567,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"1d16135ee57d1c351f40fa85666a9d39","sha1":"1658ad92c58a7ef5ece7093c17302d27c32bf1f3","sha256":"95103df3d640744b3509be2dab3ebdbbd0c3be6d035d09ca18bff6b055942094","sha512":"11ff852dee2c4ad8c71da8f61023fdd866f23843021bf49e0f5235db30bc6039d038f6abbd4d36839bb52536171312303e9122b27581a408dd3421606b865c3e","ssdeep":"384:1lq4J/8i+GZCH6CqyXLbhU8QnBehe6pjfsE6oCNRbWxB5gVInt5DQHirGqT:nq4JKeSjIoLhg4t5DQ+zT","tlshash":"c1d2723eb403fcbbf58600c4ae6bbda361b80058d3a9ce5b98db485e21e71de5157847","first_seen":"2025-10-17T17:07:20.229219Z","last_seen":"2025-10-27T12:24:56.380188Z","times_seen":430,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/d0ea2630/desktop/default/Betting.Core-127d9920.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:43.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/d0ea2630/desktop/default/Betting.Core-127d9920.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62827.bar/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:43 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-84db08ffcfab53aee9d685cc73e19fe9-73ac0177d930f9eb-01\r\nlast-modified: Thu, 16 Oct 2025 11:36:59 GMT\r\netag: W/\"2437ea306ea06a5cdd55e354d45b0953\"\r\nx-amz-meta-mtime: 1760614618.791919202\r\ncontent-encoding: gzip\r\nexpires: Fri, 17 Oct 2025 11:47:14 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 85442\r\ncache: HIT\r\nx-cached-since: 2025-10-17T11:51:41+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2134,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2134), with no line terminators","md5":"2437ea306ea06a5cdd55e354d45b0953","sha1":"33cc63002e95c05fb7c87dc8ddabd60834f696f7","sha256":"a17cbcecb67d926a475926712e578386c2d43668b0da3689771995d70c1bd813","sha512":"ec7be232a3aaa6ab83997b37d729a4b72dbe73c24552e85958e26592095b6d3111d5c4c60c4520b26635e005e62d8f00341da9d35f096d8c3ee68edb1859ccd0","ssdeep":"","tlshash":"4a41e9c539c174440b3e02de85ef1db5f0741e4a3a5d00a8a842a9d47568897c2f7ecf","first_seen":"2025-10-16T12:35:18.584496Z","last_seen":"2025-10-20T12:06:35.123567Z","times_seen":147,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/hd-api/external/0199f71a-c80e-733d-b074-6d661b350f4f.js","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:51.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-62827.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 09:19:37 GMT","end":"Tue, 23 Dec 2025 09:19:36 GMT"},"fingerprint":{"sha1":"3D:8B:55:91:01:43:89:9A:B2:C9:DA:95:89:31:CA:E6:4B:4A:7B:1C","sha256":"87:2A:30:15:94:6B:E8:A9:B8:88:D5:8A:C4:E0:DA:84:C5:AC:29:E6:F6:70:01:E9:59:FB:3A:50:62:94:F7:6C"}}},"request":{"raw":"GET /hd-api/external/0199f71a-c80e-733d-b074-6d661b350f4f.js HTTP/1.1\r\nHost: 1xlite-62827.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62827.bar/en/block\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder; auid=LiC2ZGjze42Wt07pAxy1Ag==; window_width=1280; che_g=50d29c68-8050-457e-b91e-4d85f21ae555; SESSION=c3aa36a1e79f9804fbbecaca68e9ec98\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 101372\r\ncache-control: private, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-dt: 1208\r\nx-hd-trace-id: ly2//P9Pc7E/lbIle8+KSQdw9KLy/mQ7Sx6rS4H0Gbd5ySuD1pTEqpaM6zPAg/mvHLxvuvAKiJZ7/bVSLEH7+Q5fNNm2pXWy+vgZDr8j1xcMlk45DCA65+xwx9tZWg3QCnI/UORbyt69+kDy9J6bl3cSLubhv+nGtOvG/KutExNdw4cI5SAMHIxos8LWGwKHrYI=\r\nx-request-guid: 89f9384dfc400b16e4409d2c6316d8e8\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.045, wf-uht;dur=0.029\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":351525,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d3c5f948adaac4c549850d5c162c0c59","sha1":"c861f4c5eb90ba0d2a04c20af8bbcf89a31dac45","sha256":"51968565c71212e1e3a7385c50326983ecf1251f3cd5cbd39d9195f96b9f91d1","sha512":"54305ae740e241842e3772288fa63549e09d2cd9e883220809e75baa3a9f6f7bdb17126b156d758cc504d44629612b5fbd2ceba2041545c56734e524fbaa80e6","ssdeep":"6144:FLNzC765lRLAIqfSODiBlmdmImy1vwCEBxpjD8:FP5l3Ry1IzBxx8","tlshash":"19745f949596c081d67a4d303b7e2d99e089ad616b8c7239bf18f0d8e3b3176f16df20","first_seen":"2025-10-18T11:36:15.562158Z","last_seen":"2025-10-18T11:36:15.562158Z","times_seen":1,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:52.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:52 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63920\r\ntraceparent: 00-97d0b65738db2bc26a0c9ccb0193deb0-9936190428df2c90-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"a65527fcb58f66a7cfbc0e6b160538b4\"\r\nexpires: Sun, 10 Aug 2025 19:21:26 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1581\r\ncache: HIT\r\nx-cached-since: 2025-10-18T11:09:31+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63920,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63920, version 1.0","md5":"a65527fcb58f66a7cfbc0e6b160538b4","sha1":"45d260e7fa343401b5bb0df982a014f53e2d253b","sha256":"fb13c3a1cbac60649b76f7d7f85c1645d35ac69b85ce5f4eb0692505ecc2cd45","sha512":"8448e96abe326f43285b2d8b0d75beaf0e9c9e051e8754841d907b30eb303ae24c447011306da6a1703b9192d02aeff76a4517bdf94ec6e7dc360ce3538802af","ssdeep":"1536:UIG3hJMkJeK8ic5iZGnJ4URj9vqXOQ6UqYdbuA5RVK1:UL31hcLlRjDQ6Uq4W1","tlshash":"7f5302df8de32a148ff78772668885f4f4927c68898c8e7345526a8907f07d6b96c04f","first_seen":"2023-05-07T18:04:27Z","last_seen":"2026-04-04T04:09:16.94457Z","times_seen":10137,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":1,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je5af1v897130004za200zd897130004\u0026_p=1760787353254\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=952693072.1760787354\u0026ecid=1467884601\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AEAAAAQ\u0026_s=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~105322303~115480709~115938466~115938468~116110422~116110424\u0026sid=1760787353\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-62827.bar%2Fen%2Fblock\u0026dt=1xBet\u0026en=scroll\u0026ep.optimize_id=GTM-5R4MT54\u0026epn.percent_scrolled=90\u0026upn.ref_id=1\u0026tfd=13063","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:53.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:36 GMT","end":"Mon, 15 Dec 2025 08:40:35 GMT"},"fingerprint":{"sha1":"40:7E:33:E9:D5:23:31:43:6B:CB:8C:02:99:3E:C0:A1:96:B1:B2:DE","sha256":"BE:00:72:E8:21:36:BF:F1:E7:F3:E5:B6:86:FE:98:10:97:9F:3C:C4:3F:0A:F8:4D:E4:62:64:B7:70:FA:56:25"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je5af1v897130004za200zd897130004\u0026_p=1760787353254\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=952693072.1760787354\u0026ecid=1467884601\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AEAAAAQ\u0026_s=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~105322303~115480709~115938466~115938468~116110422~116110424\u0026sid=1760787353\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-62827.bar%2Fen%2Fblock\u0026dt=1xBet\u0026en=scroll\u0026ep.optimize_id=GTM-5R4MT54\u0026epn.percent_scrolled=90\u0026upn.ref_id=1\u0026tfd=13063 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62827.bar/\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://1xlite-62827.bar\r\ndate: Sat, 18 Oct 2025 11:35:53 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:158:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:158:0\r\nreport-to: {\"group\":\"ascnsrsggc:158:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:158:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":33,"dns":0,"connect":8,"send":0,"wait":17,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/$_$.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:43.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/$_$.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:43 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 69\r\ntraceparent: 00-6de7d967da9f7359e07b4176fffac398-8b09d5dc43cfd889-01\r\nlast-modified: Wed, 15 Oct 2025 07:28:08 GMT\r\netag: \"2cdaa92927f02e0b628f1ef4d7dd8caf\"\r\nx-amz-meta-mtime: 1760513214.065966522\r\nexpires: Thu, 16 Oct 2025 22:59:01 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 44722\r\ncache: HIT\r\nx-cached-since: 2025-10-17T23:10:21+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"2cdaa92927f02e0b628f1ef4d7dd8caf","sha1":"9104a2e16ed080b80a42588b8aeb52ebec47ab7a","sha256":"ef8101ffea52addcdcfcc3a83f96ff2d4613fb3ae6d1c16bbe4852387b73a9db","sha512":"31da80bc1b17aa708fef74b0211af91fce1b4a5f518f11e5caa80f50e9a7791b6e94924e381f550fc44a02f4c1d785e5b95fa2464e7968b5cab079612d70d839","ssdeep":"","tlshash":"1ba002935a5ef66c209044860696e74733823d6a3477b1d625bc5509e6061474817257","first_seen":"2025-05-14T05:06:37.199299Z","last_seen":"2026-03-18T19:40:26.76398Z","times_seen":5502,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_vue_deps_FCX6UWBT.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:43.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_vue_deps_FCX6UWBT.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:43 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-8506e89c7cb106a20233d8bce32aeaf5-ccdc374493bb310e-01\r\nlast-modified: Fri, 17 Oct 2025 13:08:25 GMT\r\netag: W/\"588b298e9096c73f4d84f2961d4378ba\"\r\nx-amz-meta-mtime: 1760706466.353586795\r\ncontent-encoding: gzip\r\nexpires: Sun, 19 Oct 2025 08:28:43 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 10956\r\ncache: HIT\r\nx-cached-since: 2025-10-18T08:33:07+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31184,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31044)","md5":"588b298e9096c73f4d84f2961d4378ba","sha1":"568c0ac4c8540c21caf445d8490348a9929143da","sha256":"cc5353d60fc3bbcefb808e19d05925ab3fb0cff09092317813265725e95fa808","sha512":"a093cd11cb064df4b612ee5ee7128b352a1bfd951eaaa68553cf0aba097e9561774ecca5d78f3e0b6dbea18d21bade34a0d18426d66e0b37f9f67a439d7d3051","ssdeep":"768:lwZ1yyQBOuHJ3aUiJJUfns+/C8vsqJlm8qgqYHg7FD0v341KE:lwWBOuHJqUiJJUfns+/0qJlmbgqYHg7H","tlshash":"65e25cd8b779bca2335e908c90370323b37559e7484d9020f7e65e9235a5a0282e7f7e","first_seen":"2025-10-09T09:08:10.597929Z","last_seen":"2025-10-30T11:27:15.273914Z","times_seen":1015,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:43.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-62827.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 09:19:37 GMT","end":"Tue, 23 Dec 2025 09:19:36 GMT"},"fingerprint":{"sha1":"3D:8B:55:91:01:43:89:9A:B2:C9:DA:95:89:31:CA:E6:4B:4A:7B:1C","sha256":"87:2A:30:15:94:6B:E8:A9:B8:88:D5:8A:C4:E0:DA:84:C5:AC:29:E6:F6:70:01:E9:59:FB:3A:50:62:94:F7:6C"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-62827.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62827.bar/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: e12f7f8e-e08d-4d07-aa64-23f59c478ad5\r\nContent-Length: 72\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder; postback_watcher=; auid=LiC2ZGjze42Wt07pAxy1Ag==; window_width=1280; che_g=50d29c68-8050-457e-b91e-4d85f21ae555\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:43 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\nx-dt: 1208\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.107, wf-uht;dur=0.009\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"23a1dbc988a1ef068843bc992ced3d52","sha1":"b2477df31a34162397ec3fb25c186b821a2746f2","sha256":"186740c7dcb22ae46633718012d42d2fa4eb192c8f4fb904fa1b77700d736c70","sha512":"b8a59714870e4923586ead325b527a422c8df5d5a85a9f42304624df072e8bfc475b4f8a35f2e455ad91579f40c906ca5f73d143190bd4d071f59b278feace40","ssdeep":"","tlshash":"e770003020008080280c02002a0388080830e200200000220088a2280000ce8088f883","first_seen":"2025-10-18T11:36:15.571135Z","last_seen":"2025-10-18T11:36:15.571135Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/hd-api/external/apps/c5e31d5915661de4393e3f1489b00ebc4497dd48/api.js","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:51.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-62827.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 09:19:37 GMT","end":"Tue, 23 Dec 2025 09:19:36 GMT"},"fingerprint":{"sha1":"3D:8B:55:91:01:43:89:9A:B2:C9:DA:95:89:31:CA:E6:4B:4A:7B:1C","sha256":"87:2A:30:15:94:6B:E8:A9:B8:88:D5:8A:C4:E0:DA:84:C5:AC:29:E6:F6:70:01:E9:59:FB:3A:50:62:94:F7:6C"}}},"request":{"raw":"GET /hd-api/external/apps/c5e31d5915661de4393e3f1489b00ebc4497dd48/api.js HTTP/1.1\r\nHost: 1xlite-62827.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62827.bar/en/block\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder; auid=LiC2ZGjze42Wt07pAxy1Ag==; window_width=1280; che_g=50d29c68-8050-457e-b91e-4d85f21ae555; SESSION=c3aa36a1e79f9804fbbecaca68e9ec98\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 615\r\ncache-control: public, max-age=300\r\ncontent-encoding: gzip\r\netag: 32053c9c355cf85427a5cc3f07de0b09\r\nvary: Accept-Encoding\r\nx-dt: 1208\r\nx-request-guid: cabe601358875ed182d908592ce60ce2\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.096, wf-uht;dur=0.009\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1024,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1023)","md5":"32053c9c355cf85427a5cc3f07de0b09","sha1":"f3c13d6a657ffa2ca8997f54f4779f0c02f1600a","sha256":"0ec410318f3ecc3a3aef3de68e99190845248bcc12282aa15eb9acc87f8837d3","sha512":"cbb8c7ef0bbed264989bf5b4af7d216cdeacc5684641c37d429e5ceca7dc04e55254e81f319cd856e7b4f447565bf5abf4e9915f5725eb57cfb142f113362078","ssdeep":"","tlshash":"2211756e18ed58291a9275c402b7ccfc642036363219d4c495ede9e1072ff990032f5c","first_seen":"2025-07-24T09:34:41.13762Z","last_seen":"2026-04-02T22:21:06.196613Z","times_seen":3848,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:42.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-62827.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 09:19:37 GMT","end":"Tue, 23 Dec 2025 09:19:36 GMT"},"fingerprint":{"sha1":"3D:8B:55:91:01:43:89:9A:B2:C9:DA:95:89:31:CA:E6:4B:4A:7B:1C","sha256":"87:2A:30:15:94:6B:E8:A9:B8:88:D5:8A:C4:E0:DA:84:C5:AC:29:E6:F6:70:01:E9:59:FB:3A:50:62:94:F7:6C"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json HTTP/1.1\r\nHost: 1xlite-62827.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62827.bar/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: e12f7f8e-e08d-4d07-aa64-23f59c478ad5\r\nContent-Length: 19\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder; postback_watcher=; auid=LiC2ZGjze42Wt07pAxy1Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nx-dt: 1208\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.093, wf-uht;dur=0.009\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-04-04T04:43:01.942606Z","times_seen":225807,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/d0ea2630/desktop/default/vendors/plugins.vue-notification-21af354b.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:42.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/d0ea2630/desktop/default/vendors/plugins.vue-notification-21af354b.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62827.bar/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-ad0da513ebbaddc4662e8622ab4d0494-7e0e44b0f9ebd2a0-01\r\nlast-modified: Thu, 16 Oct 2025 11:36:59 GMT\r\netag: W/\"319e473d2d4c33a429b37037b6d4d15c\"\r\nx-amz-meta-mtime: 1760614618.81591943\r\ncontent-encoding: gzip\r\nexpires: Fri, 17 Oct 2025 19:14:48 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 58843\r\ncache: HIT\r\nx-cached-since: 2025-10-17T19:14:59+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12563,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12563), with no line terminators","md5":"319e473d2d4c33a429b37037b6d4d15c","sha1":"4a020d146feb7253a4714e03565c51dfe7ed82bf","sha256":"e115a2179709be2d095189735f9125719c491e8a60bcb543ba023aae0f38a4b5","sha512":"330f273c85d1eb10153b42a94e1443faf019b9585e549eb309d655f0a5e3c4bce8924867bae693267da295a9e2cf8507dac9055c9d0f53fa06f0215f3ce39e53","ssdeep":"192:jU1hQXHv3CbfKpqEVwhSIkrReP+SdHtfGA2D3ow5EE9bJ52bFZLy2mp4ilVj:jn3CmpcDkAP+S/fGAWf5VbWbLy2mmijj","tlshash":"d242a6ceb2c2b4650be760b6402f110af136a96869ab54d4f3b1d4f2adb564c413bf39","first_seen":"2025-10-15T10:41:17.784043Z","last_seen":"2025-10-22T09:09:00.912861Z","times_seen":228,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_game/en/dictionary_93855f2d53fc019242443f6d410a450d.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:42.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_game/en/dictionary_93855f2d53fc019242443f6d410a450d.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62827.bar/\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-ae1aa8856e201876dd37e3e3d6af4677-32fcd97cdaf2ddd0-01\r\nlast-modified: Wed, 01 Oct 2025 16:08:03 GMT\r\netag: W/\"13ca50ce37f849de1b02facfcbc0b235\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Wed, 01 Oct 2025 17:34:41 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1616\r\ncache: HIT\r\nx-cached-since: 2025-10-18T11:08:46+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25872,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b83e19a4bdf23d17d041a169e2dcb59b","sha1":"328f96aed426a209c6d34425c98f51e9728bbe06","sha256":"b935b5f0de7590df3d4f036e51c3ee68333da4c1bc3d40cd66fd48d9115e3cc6","sha512":"8e4451602adc389e48c391113a5295a484c8dff9b65ff318b53e4c03702adc9ca044bda15fb0e3467153a4604abe47e54a59ff5bcd3fe65fb7676e4ae057a357","ssdeep":"384:i/B1lizv0Ioy4CEMt6tI0EEfqQ4O4cN86WwTCu9o9V38cdZeXiG+/jtx:Ylivt6tI0EEf66WwTCV/QXiGsjtx","tlshash":"fac2fc05285eeca6c3fb86b474e93bd672f089af5b626186fc48742e2c957c5610f40f","first_seen":"2025-10-01T20:08:28.071573Z","last_seen":"2025-11-21T12:37:41.202009Z","times_seen":1679,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_express_day/en/dictionary_67b69522f83227c7b5ef835272efd0fb.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:42.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_express_day/en/dictionary_67b69522f83227c7b5ef835272efd0fb.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62827.bar/\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-f28655b6e1436de367e83f02be2c2ca1-d5b380dfa6bae361-01\r\nlast-modified: Wed, 15 Oct 2025 12:07:40 GMT\r\netag: W/\"f45468fcd70f76e5e6fa8addfa2e49c0\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Wed, 15 Oct 2025 13:13:04 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2695\r\ncache: HIT\r\nx-cached-since: 2025-10-18T10:50:47+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1237,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f45468fcd70f76e5e6fa8addfa2e49c0","sha1":"ad320e244a89e3c76e71dcee3ba277a3501fe16e","sha256":"ed73b35495fa13c5eeca0d053e5a48d297cd8e2e339b99d3aea9daacb6681f74","sha512":"6055c7fcba989aa364bf8e2b47ca597f69c11f5d5227386e87f4d6594d754c60dc5671b1155b50ef4cf2ccad166bab2ab220221e2dddfb8c78228a5e2d965685","ssdeep":"","tlshash":"5e21cba71035073e9d132b2fad7f529006c04c5152e8b487379f39fb378cd949e6966a","first_seen":"2025-10-15T12:35:50.133678Z","last_seen":"2025-11-21T08:50:14.818683Z","times_seen":1223,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-1208/desktop/media_asset/5a81b5c15873fcf033dd22d6673d2fe5.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:42.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-1208/desktop/media_asset/5a81b5c15873fcf033dd22d6673d2fe5.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62827.bar/\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: application/json\r\ncontent-length: 747\r\ntraceparent: 00-ed7c28d5567ac3200da171728aa7f9ab-5afebe9493241505-01\r\nlast-modified: Thu, 27 Feb 2025 13:27:49 GMT\r\netag: \"f4e90636ec9cff061c4301b3cefdd0d6\"\r\nexpires: Sat, 18 Oct 2025 12:35:42 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":747,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f4e90636ec9cff061c4301b3cefdd0d6","sha1":"c506efe9c3672c58434ea10021dab0ad81b1ad98","sha256":"30666f138ccc12735e2f8a6405ddce4a3d8756b9445e3b2732fa2970f14dbcea","sha512":"2db1a1a4419db47b4256906f9c660b85479bb83d2ab0757d1b1c24cdf94d97bdc4a7140d5d8ea31cbf612a77ba1ae6ef46bbd77eb42d24b6d83afebbc46c9216","ssdeep":"","tlshash":"2a012d94bde4083719374ca981a2595d63844b0398297c087adf3d4c5b2096d056e9be","first_seen":"2025-03-01T06:06:39.041672Z","last_seen":"2025-12-04T11:53:51.978889Z","times_seen":4943,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/d0ea2630/desktop/default/DC-3096f303.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:43.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/d0ea2630/desktop/default/DC-3096f303.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62827.bar/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:43 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-004990f1b8f7f10f138cf6b11dc2561c-c741b9ecb141da2f-01\r\nlast-modified: Thu, 16 Oct 2025 11:36:59 GMT\r\netag: W/\"9eede4913571711240e6e16bb01e1537\"\r\nx-amz-meta-mtime: 1760614618.791919202\r\ncontent-encoding: gzip\r\nexpires: Fri, 17 Oct 2025 11:47:14 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.003\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 85442\r\ncache: HIT\r\nx-cached-since: 2025-10-17T11:51:41+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2201,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2201), with no line terminators","md5":"9eede4913571711240e6e16bb01e1537","sha1":"bb9b480ed7c38521647c2c6049248572085dbdb5","sha256":"ba1381a78f987804074b6d0efd0dfcde5cc300de14329a76961a79f82c6f4ca6","sha512":"ddee2f6588a7a6ebb2f4a84de4f6a38bd68258bc652784e45fa4f6f9083ddf1070829c8db9e7f4538f11c8fca30f6debed43ff5f37281908d47e3d1424caf2ce","ssdeep":"","tlshash":"de41830930a4fc1193b90cd869ff72061027f076648dc9b4d2a32a8b08a7faaa217916","first_seen":"2025-10-15T10:41:17.807598Z","last_seen":"2025-10-22T09:09:00.874716Z","times_seen":228,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/entry-85eb62a623.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:43.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/entry-85eb62a623.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62827.bar/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:43 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-dee90781952b43c89f5a19e53f573571-4a1d40a8e21d064b-01\r\nlast-modified: Wed, 15 Oct 2025 07:28:08 GMT\r\netag: W/\"c2c61145571ca7d693b524d5422d4712\"\r\nx-amz-meta-mtime: 1760513214.070966657\r\ncontent-encoding: gzip\r\nexpires: Thu, 16 Oct 2025 07:31:12 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 13622\r\ncache: HIT\r\nx-cached-since: 2025-10-18T07:48:41+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23752,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (23207)","md5":"c2c61145571ca7d693b524d5422d4712","sha1":"2c0ad3d0cf6f63b06991f9e0cd1033321e9557ef","sha256":"01739d54bc5f14a90b20510ee1e7d3132253e697cd1b1333cc64cdad5f1afd55","sha512":"e272d3b6633b43dfcd21dc709ab2092f71db874cb75a493a39d1c0824ddaac313932430dc1d16dbd160e144e52ba28f516cdbedc3d374d23bc0d3a9cd260d3e6","ssdeep":"384:HtHdN7ay1ZxtPlaMrmWT3Cj5lWg5KKSAqtndKolTxolw8cEpEeLcl+96VWBHDCiO:Ht9V1tP8hWT3Cj5lWyPStdKolTxolhcB","tlshash":"99b25f743597b0b625da9a582739bc43d6c80f6fac9bfde2908a48e613d304880567f7","first_seen":"2025-10-15T08:29:23.328291Z","last_seen":"2025-10-24T10:11:24.418135Z","times_seen":330,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/bff-api/config/group/get?groups=d.technical\u0026lang=en","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:43.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-62827.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 09:19:37 GMT","end":"Tue, 23 Dec 2025 09:19:36 GMT"},"fingerprint":{"sha1":"3D:8B:55:91:01:43:89:9A:B2:C9:DA:95:89:31:CA:E6:4B:4A:7B:1C","sha256":"87:2A:30:15:94:6B:E8:A9:B8:88:D5:8A:C4:E0:DA:84:C5:AC:29:E6:F6:70:01:E9:59:FB:3A:50:62:94:F7:6C"}}},"request":{"raw":"GET /bff-api/config/group/get?groups=d.technical\u0026lang=en HTTP/1.1\r\nHost: 1xlite-62827.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62827.bar/en/block\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nis-srv: false\r\nx-svc-source: __TECHNICAL_PAGES_APP__\r\nx-app-n: __TECHNICAL_PAGES_APP__\r\nx-geoip2-country-code: ru\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder; postback_watcher=; auid=LiC2ZGjze42Wt07pAxy1Ag==; window_width=1920; che_g=50d29c68-8050-457e-b91e-4d85f21ae555\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:43 GMT\r\ncontent-type: application/json\r\ncontent-length: 766\r\ncache-control: no-cache, private\r\nserver-timing: dt_total;dur=0.007, bff;dur=13.10, wf-uht;dur=0.026\r\nx-dt: 1208\r\nx-pod: R-4vbpt\r\nx-time-ng: 0.016\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":766,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"639a84eb9a4428a4aed1fe2e682b59c6","sha1":"3b3a7dc9b206400a37f2ddeed439c3b80654ccc9","sha256":"1a914ae7f5d517e5766bdf18bec4a6e09fdb37aaf42db383cb130a43b8e07008","sha512":"79b880039d1b04563c3a6998eb24bc23c256d854f52593901abd34f083ea7cbb2136520b19e7856a5ab0f48e0ef2a3922f3037994d66ae8f791d836604d924ca","ssdeep":"","tlshash":"d901b55e50a5ca3d7068063adb829e109eed501b3254b841fe0ca89c60d2ddef95180f","first_seen":"2025-07-18T23:56:53.162472Z","last_seen":"2025-11-04T08:34:46.070702Z","times_seen":104,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/seo-module-api/api/public/v1/analytics-counters?project[id]=1208\u0026domain[host]=1xlite-62827.bar","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:43.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-62827.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 09:19:37 GMT","end":"Tue, 23 Dec 2025 09:19:36 GMT"},"fingerprint":{"sha1":"3D:8B:55:91:01:43:89:9A:B2:C9:DA:95:89:31:CA:E6:4B:4A:7B:1C","sha256":"87:2A:30:15:94:6B:E8:A9:B8:88:D5:8A:C4:E0:DA:84:C5:AC:29:E6:F6:70:01:E9:59:FB:3A:50:62:94:F7:6C"}}},"request":{"raw":"GET /seo-module-api/api/public/v1/analytics-counters?project[id]=1208\u0026domain[host]=1xlite-62827.bar HTTP/1.1\r\nHost: 1xlite-62827.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62827.bar/en/block\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nx-app-n: v3-nuxt2\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder; postback_watcher=; auid=LiC2ZGjze42Wt07pAxy1Ag==; window_width=1920\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:43 GMT\r\ncontent-type: application/json\r\ncontent-length: 47\r\ncontent-encoding: br\r\ncache-control: max-age=1200, must-revalidate, public, s-maxage=1800, stale-if-error=86400, stale-while-revalidate=300\r\nx-content-digest: encf4b7cb201e71c1f60b6f90e569ae0ea\r\nage: 1351\r\nx-request-id: 009881194517b3d049cecc063ff65312\r\nx-request-guid: 009881194517b3d049cecc063ff65312\r\nx-time-ng: 0.003\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: p;dur=1.5530586242676, wf-uht;dur=0.022\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d327ba13bb1db5d3bdd1d55a10c9efeb","sha1":"e1e7bcd7effbbd7e7345effa2a2f0f5c7074bb94","sha256":"a3992fa7701216e66dd528a170fbae5d556428c9f6c04290521ca106be88b63d","sha512":"d20f6fa0f2d85467ee34c2761efff2dd37cdeb1c6d1199ea6ab833f51d8366e7ccbd791e90c96081c8164fc9a7e6989a1a891600fc09721f27fc5bfc992c1616","ssdeep":"","tlshash":"069002125a446d64580354844145544240a490588d5262010d5496338128118255176b","first_seen":"2025-04-15T20:05:45.664568Z","last_seen":"2026-03-27T20:45:59.20506Z","times_seen":174,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/64d1b00c0c.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:43.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/64d1b00c0c.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:43 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 614\r\ntraceparent: 00-fa9a293ac7c7f990cda56a47b25be392-845b68b31177f37a-01\r\nlast-modified: Wed, 15 Oct 2025 07:28:08 GMT\r\netag: \"09954f89d775dca8606d3f6e4b9d6888\"\r\nx-amz-meta-mtime: 1760513214.068966603\r\nexpires: Thu, 16 Oct 2025 07:31:13 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 13611\r\ncache: HIT\r\nx-cached-since: 2025-10-18T07:48:52+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":614,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (613)","md5":"09954f89d775dca8606d3f6e4b9d6888","sha1":"b23b45575477181d2f57133487ac3f298d7e450a","sha256":"87554bc980553701bccf83fa8f61a899960fbdf8dba5d74140f3acc5066e37c6","sha512":"746454f69831ba2973583ffae97ca118225c752b54d775f4805afc1a6880fc7a0111326f6f3415407131ec1dca60985dbb835a543586001b2b202a365452fdd3","ssdeep":"","tlshash":"45f047beed72d170610244ed6d1ab832c2c87e7b076eb4f4c1ed4953a3070979a066c7","first_seen":"2025-10-15T08:29:23.283226Z","last_seen":"2025-10-24T10:11:24.408607Z","times_seen":330,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"radar.cedexis.com/1707728419/stub.js","fqdn":"radar.cedexis.com","domain":"cedexis.com","tld":"com"},"ip":{"addr":"45.54.49.5","port":443,"asn":63911,"as":"NetActuate, Inc","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:53.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"radar.cedexis.com","organization":"Citrix Systems, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A2:3E:30:19:D5:41:3A:11:81:58:E3:B1:6F:F4:D2:78:0B:44:6F:D0","sha256":"BE:70:39:96:BA:51:8F:A7:6A:9D:E1:58:FB:D9:F7:6F:17:5C:DA:A9:6E:54:3F:8F:0B:3D:1E:DF:8C:44:B4:71"}}},"request":{"raw":"GET /1707728419/stub.js HTTP/1.1\r\nHost: radar.cedexis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62827.bar/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 11:35:53 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Mon, 12 Feb 2024 09:51:01 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"65c9ea05-186\"\r\nExpires: Sat, 01 Nov 2025 11:35:53 GMT\r\nCache-Control: max-age=1209600, public\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":390,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"82dec77fd0353c7c71ce053b8601387e","sha1":"fbbca95419e1d0c042e0a5fdf10f380aca66188c","sha256":"39f2b7b0fa78d37d0c84d2d6618bd635d86fd683d9bcdd5729850cb2a62522f7","sha512":"6872c895cb44711405e57a436dfbe15d094f9159e11ee2b89983c63b1f18f6acbdfaf0ccbb5e48b2bf24f366f16584c660bca4b6b14c048a134bb77a60f6563e","ssdeep":"","tlshash":"02e068ae9391a318537a2dbacc4e060ba0f6114888e5e4e029f5c2c00461bae072bfb4","first_seen":"2024-02-13T14:23:26Z","last_seen":"2026-01-15T12:01:08.184588Z","times_seen":7496,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-ui/3.3.458/Desktop/Default/merged.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:41.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-ui/3.3.458/Desktop/Default/merged.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62827.bar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-c06599cb4b5918898f4188710a8dc5e5-24cc12150f20778b-01\r\nlast-modified: Sat, 18 Oct 2025 07:37:59 GMT\r\netag: W/\"de286cc93581579e24bc193a81f68566\"\r\nx-amz-meta-mtime: 1760773044.920787915\r\ncontent-encoding: gzip\r\nexpires: Sun, 19 Oct 2025 07:41:00 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 14058\r\ncache: HIT\r\nx-cached-since: 2025-10-18T07:41:24+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":878169,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"de286cc93581579e24bc193a81f68566","sha1":"8395c6e7439b26500dbf9373e3e25a99d170c3d8","sha256":"96575528668f57816e3794e21ecfed8f5ce69b4b4b75793c1e3d040619b96714","sha512":"db629eac8f9fc91194293d3c9ee41612d231c67f361142ff23cb675f741d327356bce02e6366a821b098171d61fc45ecc611f3bde66b725a989c7341f49d22ff","ssdeep":"6144:q12WZGVX4t4ePBJmjgoochZN3uOiv+qt7TeEUaN0k:7fNTEUaN0k","tlshash":"5c15505cf29ee2383e37ea2552944ffc6620b7479a231c6ff859018a0ed35436096db7","first_seen":"2025-10-15T09:19:30.31566Z","last_seen":"2025-10-20T08:31:36.379853Z","times_seen":231,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":191,"dns":87,"connect":7,"send":0,"wait":3,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/b5cd9a5e87d930de856c92da15aa121e.png","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:42.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/b5cd9a5e87d930de856c92da15aa121e.png HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62827.bar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 653\r\ntraceparent: 00-c95cf0b17276ee4474850e62a85234b7-544086385825ce9f-01\r\nlast-modified: Wed, 26 Jun 2024 08:18:02 GMT\r\netag: \"e6f0766cbd95db33da44e7a9140648f2\"\r\nexpires: Thu, 16 Jan 2025 10:46:36 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2889\r\ncache: HIT\r\nx-cached-since: 2025-10-18T10:47:33+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":653,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"e6f0766cbd95db33da44e7a9140648f2","sha1":"5f196b1bfe8c3f92bd2ebcd67124e72e81ae6aaf","sha256":"c0399d478788d5d483f104a2e8cb7c32f41cb40e9df0c22e831b2bfa2db63ec0","sha512":"249da39baba03408de98c7fa9a9342ef120436037ab6245b3b4a5f1a206291caaf67481c6ed67064544576697d41ab82499abffec998d837812292a050bf826a","ssdeep":"","tlshash":"90f083e032254a855c02ac7fc33414448fb226cc3682bb09e012887119d24a79dd1368","first_seen":"2023-04-05T22:56:35Z","last_seen":"2026-04-03T12:07:45.643999Z","times_seen":6597,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/d0ea2630/desktop/default/css/7fe5f71b.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:42.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/d0ea2630/desktop/default/css/7fe5f71b.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62827.bar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-b70ac54bc0b65fadcaeb289bee389036-052451cb72827146-01\r\nlast-modified: Thu, 16 Oct 2025 11:36:59 GMT\r\netag: W/\"c610b8710368de3bf2f1c5bb581b6a3a\"\r\nx-amz-meta-mtime: 1760614618.798919268\r\ncontent-encoding: gzip\r\nexpires: Fri, 17 Oct 2025 11:47:13 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 85441\r\ncache: HIT\r\nx-cached-since: 2025-10-17T11:51:41+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3313,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3313), with no line terminators","md5":"c610b8710368de3bf2f1c5bb581b6a3a","sha1":"f67bc86785d434adb2e81a356a7926b8818ac567","sha256":"fad7111846310042401990719146401178f22e2618abf2b058e641b6495e8eba","sha512":"2dfecbd28b59bcf4b361736ce304f33792631b766506b80767f23033cbd37c1a83371af59b833032390f647b69824e9eeeb1f99530e18047f74cd30ffda0e5b1","ssdeep":"","tlshash":"0161c13e9cbc24359e7f472b7053ce84e199a39092030f8afdbb755a4c8b21d3895176","first_seen":"2024-05-14T21:30:49Z","last_seen":"2026-01-22T06:40:31.190981Z","times_seen":5786,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_auth/en/dictionary_9994dbf24098fdec2c71a17a0ad5844b.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:42.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_auth/en/dictionary_9994dbf24098fdec2c71a17a0ad5844b.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62827.bar/\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-571f9326460f6c87b006935f17263b50-73e545c4cd044f7e-01\r\nlast-modified: Mon, 29 Sep 2025 14:07:25 GMT\r\netag: W/\"f2c2792341ec96cd9bbfde3a05cb20cb\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Mon, 29 Sep 2025 15:34:24 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2647\r\ncache: HIT\r\nx-cached-since: 2025-10-18T10:51:35+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9728,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f2c2792341ec96cd9bbfde3a05cb20cb","sha1":"29aa5ed57cc542fa0562ad0c1dc76a2eda7e3818","sha256":"2792db806e0f66be617a9a0cc451ed9a0cf40160f17713f03190e34f4ed938d2","sha512":"2a8ba2b233dd8e9d43289a20a76494d976b39cf7a7058cd80bcfe612407923d37e956d2cdf27def30175b70ba6a9e41915025418581be859eb61a4caf7ebef68","ssdeep":"192:HvhX8mmq4spyU7SKi5mD8jrUFIOFJM1YABslAByZhqV+2p+QvM9pKTp:HvhX8mmqdsU7ziUdJM1YABsOByZh4nMM","tlshash":"9d12111a817a0c57cfdbca82bc495b5ce3a409b446b84c6d8cf9c23e07e2765d6af354","first_seen":"2025-09-29T16:34:59.893965Z","last_seen":"2025-11-07T10:46:34.790322Z","times_seen":1358,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-1208/desktop/media_asset/6f4b356d06708aa38f3cdde00b8dbf08.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:42.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-1208/desktop/media_asset/6f4b356d06708aa38f3cdde00b8dbf08.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62827.bar/\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-59943e6c9477eb32f381e12c6313ceca-d28141a42cd72be3-01\r\nlast-modified: Mon, 13 Oct 2025 13:29:06 GMT\r\netag: W/\"0f0a6e9507b7ee5f85e87a4276736943\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 18 Oct 2025 12:35:42 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\ncache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26469,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0f0a6e9507b7ee5f85e87a4276736943","sha1":"411861a0c41c33c953de7848adda8e4b7e01d7f6","sha256":"c8040b17f23d1a6164bb45520499afa1a528d393b2bc8ed5a1c8a9cf5c75fe07","sha512":"dee2eb0ea82bb44f02a975b72386ac60c6157a30dc17a536da76f72ab930976e1b354c77bf448037f9c4ab3bf50721c01875c774924d319c622dd6ad1477240b","ssdeep":"384:hrLr0fLPwUj+uZbC445IOhT9TYXw1LyaN1C1WjTZ5sogvlQrLgM:hvkD+yEgvarZ","tlshash":"25c23985faf40c33202f90ae95f3b90e93d85f879d0a6c14bfad2a4d2b54519016bd7e","first_seen":"2025-10-13T14:05:09.10654Z","last_seen":"2025-10-21T20:17:19.604524Z","times_seen":288,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_popper_js_WZJKYEQD.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:43.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_popper_js_WZJKYEQD.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:43 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-15c53d61af3031a6191c8ad91ba0807e-a1ac7d7ffa5d53fe-01\r\nlast-modified: Fri, 17 Oct 2025 13:08:25 GMT\r\netag: W/\"bea5b052c307601192270938523fa030\"\r\nx-amz-meta-mtime: 1760706466.353586795\r\ncontent-encoding: gzip\r\nexpires: Sun, 19 Oct 2025 11:25:03 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 640\r\ncache: HIT\r\nx-cached-since: 2025-10-18T11:25:03+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21252,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21232)","md5":"bea5b052c307601192270938523fa030","sha1":"937f7094c67f5a92c1032a7bc3f21ee94bec66ef","sha256":"f41290374ba615854ebb4b28a07de775581707f3b6427bcc01c0529c62476f64","sha512":"b9bff7f7d9b518ec76898a732114873c01206378c2a840c62062f05487ef773716ce841d7a5bafe3f0c65fbfdf05509852571a3a6b381661cb6f4984d6bc23a9","ssdeep":"384:ZP7iayBuR9vu3z1JXvykd2+LaqHdC6RjVnTGm/7piCXmH8kCCcvJTCyCu+meAxiZ:piZwO3XvO+NMSJt3XmckXcv4nxJAxiH5","tlshash":"7b92a28c7684b0a287a7a2a7a07f860f71376865650e9004f59cf6ec3c35dba507bc7d","first_seen":"2025-08-22T10:11:14.555802Z","last_seen":"2026-03-04T04:00:43.408775Z","times_seen":3920,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_chunk_LNU73JEK.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:43.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_chunk_LNU73JEK.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:43 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-f89412ecc49e9f8cd1aca67340f07df9-47513bdcd401e613-01\r\nlast-modified: Fri, 17 Oct 2025 13:08:25 GMT\r\netag: W/\"d96d317966512ab8915a90670ca5a5af\"\r\nx-amz-meta-mtime: 1760706466.353586795\r\ncontent-encoding: gzip\r\nexpires: Sun, 19 Oct 2025 09:36:58 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 7125\r\ncache: HIT\r\nx-cached-since: 2025-10-18T09:36:58+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1232,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1231)","md5":"d96d317966512ab8915a90670ca5a5af","sha1":"a810be1c3e515adb49804e8d976250deb16fd77d","sha256":"f125201d62c452efba070d856821885c7cfd539a31d55846caa6ae3a7522d3cf","sha512":"460b29966e6f5ac4d34ccc714217d29686d7aff42efa92a102729d40aa36dd4fbb87116178b2f9fdece5fdb09cb2bf2024312d3f1b86abb69644f695c76aca2d","ssdeep":"","tlshash":"a521f1e56fbc7ba362be2ae4a02e0041e001d53752f4f1d4f294dfb4a4e949d035b5b6","first_seen":"2025-08-22T10:11:14.554562Z","last_seen":"2026-03-04T04:00:43.411503Z","times_seen":3921,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:52.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:52 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63748\r\ntraceparent: 00-0613c8fa73840306e77a1a4028584443-4cee214f82a331d2-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"6887b6f24414dbc612dbf42ccdc76b70\"\r\nexpires: Thu, 16 Jan 2025 10:32:14 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2070\r\ncache: HIT\r\nx-cached-since: 2025-10-18T11:01:22+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63748, version 1.0","md5":"6887b6f24414dbc612dbf42ccdc76b70","sha1":"8068d3abfbc6cbf35b55919da45b1f4d2d136238","sha256":"fc5c015fc32518f1ed810fa84ca28941eb9d5a3c81acc8df69a4dbbeedef7b0c","sha512":"00f08f9dd648972c9571547e06172d5505dd13f577fe2e65a497d3856172807ac11c996984e4138d2eb2ac784257fe61864aee15752fe9e9e76f98db931e0c2a","ssdeep":"1536:KtdCG+Dz6RxAx457zL0ASEn091Y0H1mTOzI/OzMFOoTX4u:MMG+yRpzN091Y0VtI/pOoTt","tlshash":"8b5302485551fae2cac3073c0f7a89dbb37a776d519224cd98b69f830d37964bea2070","first_seen":"2023-06-14T19:15:49Z","last_seen":"2026-04-04T04:09:16.967231Z","times_seen":10259,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/en?tag=d_85563m_29145c_[]MS[]null[]null[]general[]{site_id}_d22490_l73747_clickunder","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-18T11:35:40.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-62827.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 09:19:37 GMT","end":"Tue, 23 Dec 2025 09:19:36 GMT"},"fingerprint":{"sha1":"3D:8B:55:91:01:43:89:9A:B2:C9:DA:95:89:31:CA:E6:4B:4A:7B:1C","sha256":"87:2A:30:15:94:6B:E8:A9:B8:88:D5:8A:C4:E0:DA:84:C5:AC:29:E6:F6:70:01:E9:59:FB:3A:50:62:94:F7:6C"}}},"request":{"raw":"GET /en?tag=d_85563m_29145c_[]MS[]null[]null[]general[]{site_id}_d22490_l73747_clickunder HTTP/1.1\r\nHost: 1xlite-62827.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:41 GMT\r\nlocation: https://1xlite-62827.bar/en/block\r\nserver-timing: dt_total;dur=0.013, total;dur=433;desc=\"Nuxt Server Time\", wf-uht;dur=0.443\r\nset-cookie: platform_type=desktop; Path=/; Expires=Tue, 21 Oct 2025 11:35:40 GMT; Secure; SameSite=None; Partitioned\ngw-mm=; Path=/; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Secure; SameSite=None; Partitioned\ngw-blk=eyJkYXRhIjp7ImlkIjoyMjk0LCJkaXNwbGF5VHlwZUlkIjoxLCJ0ZW1wbGF0ZVR5cGVJZCI6MSwidGVtcGxhdGVJZCI6MX0sImJyZWFkY3J1bWJzIjpbMSwxMiwxNCwxNSw4ODUsMjMyMiwxNiwyNTA5LDQ5NSw4MTIsOTg1LDgxMywxNywxOCwyMTg2LDIzNjgsMjMwMCwyMzc2LDg0NiwyMjY3LDIyOTEsMjMwMywyMzc1LDgxMCw5NDQsMjIxMSwyNDA5LDI0OTUsMTA5MCwxMDkzLDIxOTEsMjUwMCwxMDAyLDIyNDIsMjMwMSwyNDYxLDI0NjQsMjQ2NSwyNDYyLDI0NjYsMjI1NiwyMjUxLDIyODcsMjQzMiwyNDc4LDIzNDUsNDg0LDM5NSwyMzI4LDI0MDIsMjMzMiw0NzQsNDc2LDEwMDYsMjM5NCwyMzY2LDI0MDMsMjMxMSw4MDksOTEyLDgwNiw3ODYsNzY4LDc3NSw3NjcsNzY2LDc1MSwyNDI0LDEwMzksMjMyNywyNDIyLDI0NjgsOTA3LDk4NCwxMTA2LDI0MDgsMjMwNywyMTU1LDIzNzIsMTExOSwyMjk2LDIzNTQsMjM0MCw5NjgsMjIyOSwyMzkyLDI0MzEsMjQxMywyNDM0LDEwOTYsMjM1MSw3NTksMjIyOCwyMjE0LDg0Myw4NDIsMjM1Miw3NTYsNzQ3LDc0OCw1NDgsMjM1MywyNDI1LDI0MjYsMjQ3MywyNDkyLDc4NywyNDQ2LDIxNjMsODM5LDc4MywyNDc3LDUyNSwyNDgwLDI0MzksMjQ0MCwyNTA3LDUyNCwxMDc1LDI0MTYsMTA3NCw1NDksOTQzLDUxMiwxMTE3LDExMDEsMTA3MywyMzEwLDIzOTcsMjQ2MywyNDUyLDIzNzgsMjM4OCwyMzg5LDIzOTYsMjQwNywyNDEwLDI0MTIsMjQxOCwyNDIwLDI0NzUsMjQyOCwyNDM1LDI0NjcsMjQ1MSwyNDIzLDIzNjksMTA3OCwyNDM3LDExMDAsMjQzNiwyNDI5LDEwMTksNTE1LDUyMiw3NjksNDc1LDU0NSw4MTUsODE3LDI0NTYsMjUwMSwyNTA4LDQ3Nyw0OTgsOTQyLDIzMjAsMjI4OSwyMjgwLDEwODYsOTc4LDEwODQsOTg2LDIxOTcsOTkzLDk3Nyw1MzAsMjI0Myw5ODEsOTg3LDIxODIsMjI5NSwyMTU2LDIxNTcsMTA5Miw4MDQsMjIzOSwyMjIxLDk5NCw5OTksOTk4LDk5NSwxMDA3LDEwMDgsMTAxMCwxMDA1LDExMDIsMjE5OSwyMTk4LDEwMTIsMTAyMywxMDk4LDIyMDEsMTAyMiwxMDQwLDI0NzEsMjQ4OCwyMTU5LDEwODksMjE3OSwxMTIyLDEwODcsMTA0MiwxMDQzLDEwNzYsMTA3NywyMzYyLDI0OTcsMjE3MSwyNDg5LDIxNzcsMjE3NiwyNDkxLDEwODMsNTMxLDk5Miw5OTAsMjM0NywxMDQxLDIzOTgsMjIwMiwxMDE4LDI0NDQsMjQ3MiwxMDk5LDEwODIsNzg0LDU1Nyw3NzgsNzgyLDE5LDY1NiwyMjIwLDIyOTRdfQ==; Path=/; HttpOnly\nlng=en; Path=/\ncookies_agree_type=3; Path=/\ntzo=2; Path=/\nis12h=0; Path=/\nreferral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; Path=/; Expires=Wed, 17 Dec 2025 11:35:41 GMT\nreflinkid=d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder; Path=/; Expires=Sat, 18 Oct 2025 12:35:41 GMT\npostback_watcher=; Path=/; Expires=Sat, 18 Oct 2025 11:35:45 GMT\nauid=LiC2ZGjze42Wt07pAxy1Ag==; path=/; secure; httponly; samesite=lax\r\nx-dt: 1208\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":251700,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":670,"timings":{"blocked":99,"dns":8,"connect":28,"send":0,"wait":472,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/f3f09a899e.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:41.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/f3f09a899e.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62827.bar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 691\r\ntraceparent: 00-eabdb99d94c5ebe9be50654acff1d699-6c00451eab57fb61-01\r\nlast-modified: Wed, 15 Oct 2025 07:28:08 GMT\r\netag: \"66d9547b2e8b21b9cc566ffd2da94221\"\r\nx-amz-meta-mtime: 1760513214.071966684\r\nexpires: Thu, 16 Oct 2025 16:11:37 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 69812\r\ncache: HIT\r\nx-cached-since: 2025-10-17T16:12:10+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":691,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (690)","md5":"66d9547b2e8b21b9cc566ffd2da94221","sha1":"2334880db1e87c5f5c541abe181c930c76fb7246","sha256":"4a0efa233ab948edbc63842d56fd883bbe937e6ee81c75f87451de265e16abce","sha512":"ebf4510bf5bd211ec43e2ba7ee1bcc4cf43454d57a183afb90981ef94db20ccdfa077553219fc37b845ee2791a00f76f80b485d1514e80a947aab06623ae2e30","ssdeep":"","tlshash":"1101d81d3d2d51984977c3c02e984b850023f23b828a30e8b9fbc2187d8a6035a961bf","first_seen":"2025-08-22T10:11:14.566856Z","last_seen":"2025-10-30T09:36:52.111968Z","times_seen":2058,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":171,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/metadata.json","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:42.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-62827.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 09:19:37 GMT","end":"Tue, 23 Dec 2025 09:19:36 GMT"},"fingerprint":{"sha1":"3D:8B:55:91:01:43:89:9A:B2:C9:DA:95:89:31:CA:E6:4B:4A:7B:1C","sha256":"87:2A:30:15:94:6B:E8:A9:B8:88:D5:8A:C4:E0:DA:84:C5:AC:29:E6:F6:70:01:E9:59:FB:3A:50:62:94:F7:6C"}}},"request":{"raw":"GET /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/metadata.json HTTP/1.1\r\nHost: 1xlite-62827.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62827.bar/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: e12f7f8e-e08d-4d07-aa64-23f59c478ad5\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJkYXRhIjp7ImlkIjoyMjk0LCJkaXNwbGF5VHlwZUlkIjoxLCJ0ZW1wbGF0ZVR5cGVJZCI6MSwidGVtcGxhdGVJZCI6MX0sImJyZWFkY3J1bWJzIjpbMSwxMiwxNCwxNSw4ODUsMjMyMiwxNiwyNTA5LDQ5NSw4MTIsOTg1LDgxMywxNywxOCwyMTg2LDIzNjgsMjMwMCwyMzc2LDg0NiwyMjY3LDIyOTEsMjMwMywyMzc1LDgxMCw5NDQsMjIxMSwyNDA5LDI0OTUsMTA5MCwxMDkzLDIxOTEsMjUwMCwxMDAyLDIyNDIsMjMwMSwyNDYxLDI0NjQsMjQ2NSwyNDYyLDI0NjYsMjI1NiwyMjUxLDIyODcsMjQzMiwyNDc4LDIzNDUsNDg0LDM5NSwyMzI4LDI0MDIsMjMzMiw0NzQsNDc2LDEwMDYsMjM5NCwyMzY2LDI0MDMsMjMxMSw4MDksOTEyLDgwNiw3ODYsNzY4LDc3NSw3NjcsNzY2LDc1MSwyNDI0LDEwMzksMjMyNywyNDIyLDI0NjgsOTA3LDk4NCwxMTA2LDI0MDgsMjMwNywyMTU1LDIzNzIsMTExOSwyMjk2LDIzNTQsMjM0MCw5NjgsMjIyOSwyMzkyLDI0MzEsMjQxMywyNDM0LDEwOTYsMjM1MSw3NTksMjIyOCwyMjE0LDg0Myw4NDIsMjM1Miw3NTYsNzQ3LDc0OCw1NDgsMjM1MywyNDI1LDI0MjYsMjQ3MywyNDkyLDc4NywyNDQ2LDIxNjMsODM5LDc4MywyNDc3LDUyNSwyNDgwLDI0MzksMjQ0MCwyNTA3LDUyNCwxMDc1LDI0MTYsMTA3NCw1NDksOTQzLDUxMiwxMTE3LDExMDEsMTA3MywyMzEwLDIzOTcsMjQ2MywyNDUyLDIzNzgsMjM4OCwyMzg5LDIzOTYsMjQwNywyNDEwLDI0MTIsMjQxOCwyNDIwLDI0NzUsMjQyOCwyNDM1LDI0NjcsMjQ1MSwyNDIzLDIzNjksMTA3OCwyNDM3LDExMDAsMjQzNiwyNDI5LDEwMTksNTE1LDUyMiw3NjksNDc1LDU0NSw4MTUsODE3LDI0NTYsMjUwMSwyNTA4LDQ3Nyw0OTgsOTQyLDIzMjAsMjI4OSwyMjgwLDEwODYsOTc4LDEwODQsOTg2LDIxOTcsOTkzLDk3Nyw1MzAsMjI0Myw5ODEsOTg3LDIxODIsMjI5NSwyMTU2LDIxNTcsMTA5Miw4MDQsMjIzOSwyMjIxLDk5NCw5OTksOTk4LDk5NSwxMDA3LDEwMDgsMTAxMCwxMDA1LDExMDIsMjE5OSwyMTk4LDEwMTIsMTAyMywxMDk4LDIyMDEsMTAyMiwxMDQwLDI0NzEsMjQ4OCwyMTU5LDEwODksMjE3OSwxMTIyLDEwODcsMTA0MiwxMDQzLDEwNzYsMTA3NywyMzYyLDI0OTcsMjE3MSwyNDg5LDIxNzcsMjE3NiwyNDkxLDEwODMsNTMxLDk5Miw5OTAsMjM0NywxMDQxLDIzOTgsMjIwMiwxMDE4LDI0NDQsMjQ3MiwxMDk5LDEwODIsNzg0LDU1Nyw3NzgsNzgyLDE5LDY1NiwyMjIwLDIyOTRdfQ==; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder; postback_watcher=; auid=LiC2ZGjze42Wt07pAxy1Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\nx-dt: 1208\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.081, wf-uht;dur=0.009\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6db3f4d465e45aeef2ce11afb1ad1708","sha1":"63167dee2e99355ed5edd910101087ed41af2e0c","sha256":"20e4b8e99b78a94eb4a0629c5e72b3ec7873e03d04667c79b7b6925580fd6dda","sha512":"33648e3a9072ff033c273b2a7ea742554cd92b24da3b3ad5beff3fead2a0ff14da218095b9697716284f38af99b402033c853833ab3a5a5d862ce405c98a2566","ssdeep":"","tlshash":"d49004045004d034540c0001c5071dc51d3c431511c0540d50443f0417d1cd5141f053","first_seen":"2025-10-18T11:36:15.635966Z","last_seen":"2025-10-18T11:36:15.635966Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_base-app_175fce7baa.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:43.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_base-app_175fce7baa.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:43 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-e8e383eb842fc15d3c8d174cfb553463-3b5999e1f6c59d6b-01\r\nlast-modified: Fri, 17 Oct 2025 13:08:28 GMT\r\netag: W/\"e6f1c5f819edc56f697caeacf64cc733\"\r\nx-amz-meta-mtime: 1760706465.783537295\r\ncontent-encoding: gzip\r\nexpires: Sun, 19 Oct 2025 07:15:16 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 15148\r\ncache: HIT\r\nx-cached-since: 2025-10-18T07:23:15+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1640461,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (23760)","md5":"72a13a3a5ec52b943dfde6c160008f82","sha1":"0d069489f74c18ac140ecf2ab11e503a8b09b28e","sha256":"efcf336a19b087fb90b273e5b424006cb9cafd0782fff54c78fe76b80b66c600","sha512":"183556173bc5221444db5b2c630173e800fd67010d295594ca6c79092afdadadeecb10e791efa2829d2a21a27794d5f7cd42c98fe293c03ddfd090fd92c79f74","ssdeep":"24576:jtI6vPM7SQcFy2cincgOr6fKfzUac2A2+LqnBpoYWY7:jtI6vPM7SQcFy2ZcgOr6fKfzUac2A2+k","tlshash":"3a259e65f1127a1335e759d9a4631187ba5c4a5dd80cec80f2ebcde83ada41022eef7c","first_seen":"2025-10-15T08:29:23.203735Z","last_seen":"2025-10-24T10:11:24.459574Z","times_seen":387,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/captcha-api/assets/hunt-captcha.js","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:51.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-62827.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 09:19:37 GMT","end":"Tue, 23 Dec 2025 09:19:36 GMT"},"fingerprint":{"sha1":"3D:8B:55:91:01:43:89:9A:B2:C9:DA:95:89:31:CA:E6:4B:4A:7B:1C","sha256":"87:2A:30:15:94:6B:E8:A9:B8:88:D5:8A:C4:E0:DA:84:C5:AC:29:E6:F6:70:01:E9:59:FB:3A:50:62:94:F7:6C"}}},"request":{"raw":"GET /captcha-api/assets/hunt-captcha.js HTTP/1.1\r\nHost: 1xlite-62827.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62827.bar/en/block\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder; auid=LiC2ZGjze42Wt07pAxy1Ag==; window_width=1280; che_g=50d29c68-8050-457e-b91e-4d85f21ae555; SESSION=c3aa36a1e79f9804fbbecaca68e9ec98\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 23566\r\ncache-control: public, max-age=300\r\ncontent-encoding: gzip\r\netag: cc87b27db434ca92aea6e1a1ceb5b78c\r\nvary: Accept-Encoding\r\nx-dt: 1208\r\nx-request-id: 2431cc272d71b7adfa0cf81818edac5c\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.110, wf-uht;dur=0.024\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":90808,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cc87b27db434ca92aea6e1a1ceb5b78c","sha1":"905e65010d66d0bba5836f44cfb27ad9cda60051","sha256":"b7c2d216440e81574ce9b359404af25382d21f6d06b31162e1d56d97e721f117","sha512":"c93461ca41050b2ed4cf5724b61293de852034eb5cd9856e5af84ca3569584db0df14c267a9350839d3fbc4b536d416a56b8b7b0cc4f67c7770660212dc99912","ssdeep":"768:mfqz/IppUgutFIIfCpFujCbsboXim9ifscjA6NecfjCdjhACLiZhT/rAztF1TP7C:xEIW0BLIS","tlshash":"0693de857de2c08793d35bd6923f4cd8e87504cb66966f488812f91bf9ae86783d4833","first_seen":"2025-09-24T12:37:05.081519Z","last_seen":"2025-10-24T09:11:09.901149Z","times_seen":1174,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:53.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:53 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63748\r\ntraceparent: 00-c5bcadbcb89903a55ed4fac46ebfc44d-39a2e8af9189ee7c-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"6887b6f24414dbc612dbf42ccdc76b70\"\r\nexpires: Thu, 16 Jan 2025 10:32:14 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2071\r\ncache: HIT\r\nx-cached-since: 2025-10-18T11:01:22+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63748, version 1.0","md5":"6887b6f24414dbc612dbf42ccdc76b70","sha1":"8068d3abfbc6cbf35b55919da45b1f4d2d136238","sha256":"fc5c015fc32518f1ed810fa84ca28941eb9d5a3c81acc8df69a4dbbeedef7b0c","sha512":"00f08f9dd648972c9571547e06172d5505dd13f577fe2e65a497d3856172807ac11c996984e4138d2eb2ac784257fe61864aee15752fe9e9e76f98db931e0c2a","ssdeep":"1536:KtdCG+Dz6RxAx457zL0ASEn091Y0H1mTOzI/OzMFOoTX4u:MMG+yRpzN091Y0VtI/pOoTt","tlshash":"8b5302485551fae2cac3073c0f7a89dbb37a776d519224cd98b69f830d37964bea2070","first_seen":"2023-06-14T19:15:49Z","last_seen":"2026-04-04T04:09:16.967231Z","times_seen":10259,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-7JGWL9SV66\u0026cid=952693072.1760787354\u0026gtm=45je5af1v897130004za200zd897130004\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~105322303~115480709~115938466~115938468~116110422~116110424\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~105322303~115480709~115938466~115938468~116110422~116110424\u0026z=127954968","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:53.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:43:45 GMT","end":"Mon, 15 Dec 2025 08:43:44 GMT"},"fingerprint":{"sha1":"AF:04:70:AD:A3:31:10:AE:43:4C:21:61:D5:1E:03:15:9B:9D:82:EB","sha256":"B5:AF:C0:98:F7:62:50:F1:E8:09:72:78:55:CA:3D:4C:A4:82:7A:F5:B7:2F:AC:6D:F0:5D:44:50:49:3B:55:27"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-7JGWL9SV66\u0026cid=952693072.1760787354\u0026gtm=45je5af1v897130004za200zd897130004\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~105322303~115480709~115938466~115938468~116110422~116110424\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~105322303~115480709~115938466~115938468~116110422~116110424\u0026z=127954968 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62827.bar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 18 Oct 2025 11:35:53 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-04T04:45:27.25785Z","times_seen":761597,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":84,"dns":0,"connect":16,"send":0,"wait":36,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-1208/desktop/media_asset/a833e09ccc5d1d4a55f74c11b9f69eb1.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:43.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-1208/desktop/media_asset/a833e09ccc5d1d4a55f74c11b9f69eb1.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62827.bar/\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:43 GMT\r\ncontent-type: application/json\r\ncontent-length: 241\r\ntraceparent: 00-7bf97453a50fb65572b2545f3af6f834-9a33f66cd023835f-01\r\nlast-modified: Thu, 27 Feb 2025 13:25:38 GMT\r\netag: \"39257fbb62736206d5245e08925d7b60\"\r\nexpires: Sat, 18 Oct 2025 12:35:43 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":241,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"39257fbb62736206d5245e08925d7b60","sha1":"4c11e3cb6a16b884772b88acdba30a2ad98e86b8","sha256":"3a3cf0f5c60899ffb49d9825516aec475fd7b78cea8ae0b5b58dfb4e658f041e","sha512":"e9b44ac92bbad9c54e500f735f553154c92897c80700709b61b39443f76edbd1d3d38d0d6014e6052cc5f5931b78c55194e308c86336f809de1541efa1e0ac8f","ssdeep":"","tlshash":"58d02e40f2e01833201f94f981b5a109e74b0b03e402a808fa0c21881bac8252426c3a","first_seen":"2025-03-01T06:06:39.04916Z","last_seen":"2025-10-28T05:34:45.039411Z","times_seen":3826,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/web-api/session","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:51.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-62827.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 09:19:37 GMT","end":"Tue, 23 Dec 2025 09:19:36 GMT"},"fingerprint":{"sha1":"3D:8B:55:91:01:43:89:9A:B2:C9:DA:95:89:31:CA:E6:4B:4A:7B:1C","sha256":"87:2A:30:15:94:6B:E8:A9:B8:88:D5:8A:C4:E0:DA:84:C5:AC:29:E6:F6:70:01:E9:59:FB:3A:50:62:94:F7:6C"}}},"request":{"raw":"GET /web-api/session HTTP/1.1\r\nHost: 1xlite-62827.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62827.bar/en/block\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nx-app-n: v3-nuxt2\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJkYXRhIjp7ImlkIjoyMjk0LCJkaXNwbGF5VHlwZUlkIjoxLCJ0ZW1wbGF0ZVR5cGVJZCI6MSwidGVtcGxhdGVJZCI6MX0sImJyZWFkY3J1bWJzIjpbMSwxMiwxNCwxNSw4ODUsMjMyMiwxNiwyNTA5LDQ5NSw4MTIsOTg1LDgxMywxNywxOCwyMTg2LDIzNjgsMjMwMCwyMzc2LDg0NiwyMjY3LDIyOTEsMjMwMywyMzc1LDgxMCw5NDQsMjIxMSwyNDA5LDI0OTUsMTA5MCwxMDkzLDIxOTEsMjUwMCwxMDAyLDIyNDIsMjMwMSwyNDYxLDI0NjQsMjQ2NSwyNDYyLDI0NjYsMjI1NiwyMjUxLDIyODcsMjQzMiwyNDc4LDIzNDUsNDg0LDM5NSwyMzI4LDI0MDIsMjMzMiw0NzQsNDc2LDEwMDYsMjM5NCwyMzY2LDI0MDMsMjMxMSw4MDksOTEyLDgwNiw3ODYsNzY4LDc3NSw3NjcsNzY2LDc1MSwyNDI0LDEwMzksMjMyNywyNDIyLDI0NjgsOTA3LDk4NCwxMTA2LDI0MDgsMjMwNywyMTU1LDIzNzIsMTExOSwyMjk2LDIzNTQsMjM0MCw5NjgsMjIyOSwyMzkyLDI0MzEsMjQxMywyNDM0LDEwOTYsMjM1MSw3NTksMjIyOCwyMjE0LDg0Myw4NDIsMjM1Miw3NTYsNzQ3LDc0OCw1NDgsMjM1MywyNDI1LDI0MjYsMjQ3MywyNDkyLDc4NywyNDQ2LDIxNjMsODM5LDc4MywyNDc3LDUyNSwyNDgwLDI0MzksMjQ0MCwyNTA3LDUyNCwxMDc1LDI0MTYsMTA3NCw1NDksOTQzLDUxMiwxMTE3LDExMDEsMTA3MywyMzEwLDIzOTcsMjQ2MywyNDUyLDIzNzgsMjM4OCwyMzg5LDIzOTYsMjQwNywyNDEwLDI0MTIsMjQxOCwyNDIwLDI0NzUsMjQyOCwyNDM1LDI0NjcsMjQ1MSwyNDIzLDIzNjksMTA3OCwyNDM3LDExMDAsMjQzNiwyNDI5LDEwMTksNTE1LDUyMiw3NjksNDc1LDU0NSw4MTUsODE3LDI0NTYsMjUwMSwyNTA4LDQ3Nyw0OTgsOTQyLDIzMjAsMjI4OSwyMjgwLDEwODYsOTc4LDEwODQsOTg2LDIxOTcsOTkzLDk3Nyw1MzAsMjI0Myw5ODEsOTg3LDIxODIsMjI5NSwyMTU2LDIxNTcsMTA5Miw4MDQsMjIzOSwyMjIxLDk5NCw5OTksOTk4LDk5NSwxMDA3LDEwMDgsMTAxMCwxMDA1LDExMDIsMjE5OSwyMTk4LDEwMTIsMTAyMywxMDk4LDIyMDEsMTAyMiwxMDQwLDI0NzEsMjQ4OCwyMTU5LDEwODksMjE3OSwxMTIyLDEwODcsMTA0MiwxMDQzLDEwNzYsMTA3NywyMzYyLDI0OTcsMjE3MSwyNDg5LDIxNzcsMjE3NiwyNDkxLDEwODMsNTMxLDk5Miw5OTAsMjM0NywxMDQxLDIzOTgsMjIwMiwxMDE4LDI0NDQsMjQ3MiwxMDk5LDEwODIsNzg0LDU1Nyw3NzgsNzgyLDE5LDY1NiwyMjIwLDIyOTRdfQ==; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder; auid=LiC2ZGjze42Wt07pAxy1Ag==; window_width=1280; che_g=50d29c68-8050-457e-b91e-4d85f21ae555\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:51 GMT\r\ncache-control: no-cache, private\r\nserver-timing: dt_total;dur=0.064, p;dur=357.646, wf-uht;dur=0.367\r\nset-cookie: ua=deleted; expires=Thu, 01 Jan 1970 00:00:01 GMT; Max-Age=0; path=/\nSESSION=c3aa36a1e79f9804fbbecaca68e9ec98; path=/; secure; httponly; samesite=lax\r\nx-dt: 1208\r\nx-time-ng: 0.359, 0.359\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":396,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":395,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-ui/2.3.456/Desktop/Default/client.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:41.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-ui/2.3.456/Desktop/Default/client.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62827.bar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-14dd7a9532049133b876f8a8c0c99c2b-585f5d4651ec275b-01\r\nlast-modified: Tue, 14 Oct 2025 15:29:49 GMT\r\netag: W/\"e566a837e2a0652ecf4273e4d56b5860\"\r\nx-amz-meta-mtime: 1760455786.881927256\r\ncontent-encoding: gzip\r\nexpires: Fri, 17 Oct 2025 20:11:41 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 55438\r\ncache: HIT\r\nx-cached-since: 2025-10-17T20:11:44+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":617663,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"e566a837e2a0652ecf4273e4d56b5860","sha1":"02b5de2a655bf578ea0c14eaedb36d5d25f971b4","sha256":"e2d34097731fe3476bfd2a643322142ea4d4629fb79107af1d0f6d3e8a8f61f2","sha512":"6545a7944637bbc6a3899303e7e493ba8e41f9f9a329364e696be66e6f28a6ca40112aa8746fd681e0dd144ee0c47271a45db9d85629a12060840e760a41a7f5","ssdeep":"6144:sQTPSTqiH7I7hiDONDN3aBnesPIotova5Uz1KfN6SLe/p739DuZtDD/q90LgrV18:mTqDJqeIege/p739DuZR/q90LaMd","tlshash":"42d4841cf29e91353e37e62162844ffc2630b7579a221c7ff49a019a0ec355371a6dab","first_seen":"2025-10-15T10:41:17.437287Z","last_seen":"2025-11-06T09:27:22.271601Z","times_seen":912,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":176,"dns":82,"connect":4,"send":0,"wait":4,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/version.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:41.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /version.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62827.bar/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: application/json\r\ncontent-length: 11\r\ntraceparent: 00-5333246863ba238296c5d572478dc06e-653b2932c731e2d0-01\r\nlast-modified: Sat, 18 Oct 2025 10:16:55 GMT\r\netag: \"77c1ec219af985b04aa883cfaaad3caa\"\r\nx-amz-meta-mtime: 1760782615.879890119\r\nexpires: Sat, 18 Oct 2025 10:19:43 GMT\r\ncache-control: max-age=60\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 18\r\ncache: HIT\r\nx-cached-since: 2025-10-18T11:35:24+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text","md5":"77c1ec219af985b04aa883cfaaad3caa","sha1":"8618d2ba7516a63e1690697570518e0340b92938","sha256":"d12ae50f3aa631dff546c92d9923f320273177fd8230adf918a15f9480b74bbd","sha512":"1df14cc7cbfd73ac139918ff1cb75f2711941a3cd12e24dc46490f403bf634e8da81bd9b7f1a2d72f381dd3c20455e44b7f00ac393e297a494a185b6119b5b7d","ssdeep":"","tlshash":"0950000c00c0303000000c000003000003000c3000033030030000300000cf0f0c0300","first_seen":"2025-10-18T10:35:00.209516Z","last_seen":"2025-10-20T08:31:36.357126Z","times_seen":89,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":71,"connect":6,"send":0,"wait":3,"receive":0,"ssl":106},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-1208/desktop/media_asset/6fc4702153d937d39aec301f243d20ad.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:42.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-1208/desktop/media_asset/6fc4702153d937d39aec301f243d20ad.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62827.bar/\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: application/json\r\ncontent-length: 182\r\ntraceparent: 00-5ee90169bb8fdc75228284f44211e9fc-08da95368d505508-01\r\nlast-modified: Thu, 27 Feb 2025 08:56:39 GMT\r\netag: \"0a64a07e9a34e8a5b5e97e80a10888c5\"\r\nexpires: Sat, 18 Oct 2025 12:35:42 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":182,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0a64a07e9a34e8a5b5e97e80a10888c5","sha1":"82545cbc39b7dcc031dd10dea841a0b3698243d6","sha256":"7201497e7e8cdf9d35bf6998e43dcde5feea535f9828ce3ee98785781016126c","sha512":"fd619b94af18c7082a4f18556f1443081c8dc650b263c49c56f2514184d4f62e253ad87a220baa9396d7a06bc9ec3cc8ec75eee829a6c1016c4a3af2c1afa5ae","ssdeep":"","tlshash":"f0c02220e5f88823012b68bc80eaa55417504b2339021c20374c0a884b6162400149b8","first_seen":"2025-02-27T19:55:38.982186Z","last_seen":"2026-03-31T06:06:31.551304Z","times_seen":4136,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-1208/desktop/media_asset/70b0db3bfbaf3ce27309f37d266868b4.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:42.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-1208/desktop/media_asset/70b0db3bfbaf3ce27309f37d266868b4.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62827.bar/\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-3cdefebc6c29f2773a35dec141576940-6ec99fe06fb08914-01\r\nlast-modified: Mon, 16 Jun 2025 11:27:23 GMT\r\netag: W/\"1a7ec72aad44f9540cb604d7cde5ff38\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 18 Oct 2025 12:35:42 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\ncache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14466,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1a7ec72aad44f9540cb604d7cde5ff38","sha1":"65e5851d652e0471c213282efb5eeee31ae813db","sha256":"94d4bf6bc00a09b766ea0ba441e860dc40ee6d398be80e89016dd0ee662869d6","sha512":"05c4574c3785992daed7bb3616a938d1d04dc9679132ee8997147a21c32d2dab5537e51060ecce9969c4e2ea5c4ba97299c5f2622a3f6fb097c066e189d37f79","ssdeep":"96:75b7Ba79eu4QWGAdryCiQFpzLJLJeHZVZYpH3UGHSTSSbbGiJinHs:u7kJ2VK3UsyinHs","tlshash":"935246d9bae41c33112b60bdd5f7f91aa3dc1f439d4aa8287eac6d4c1b6050500aed7e","first_seen":"2025-06-17T07:58:23.417687Z","last_seen":"2025-11-14T10:22:49.434452Z","times_seen":2557,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/8192228305b202797f207eeb6842287c.png","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:43.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/8192228305b202797f207eeb6842287c.png HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62827.bar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:43 GMT\r\ncontent-type: image/png\r\ncontent-length: 5202\r\ntraceparent: 00-1158193e3ba4a92c672e887ae1039198-f1e1cb6dca8cc5c7-01\r\nlast-modified: Wed, 26 Jun 2024 08:22:59 GMT\r\netag: \"b9a636eef54b2844b571fe7de49184a7\"\r\nexpires: Tue, 07 Oct 2025 21:12:04 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1224\r\ncache: HIT\r\nx-cached-since: 2025-10-18T11:15:19+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5202,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 514 x 514, 8-bit colormap, non-interlaced","md5":"b9a636eef54b2844b571fe7de49184a7","sha1":"bf653690790ced40eb3189da075a275d951d1607","sha256":"001bfcdd52b658d46543a1aec889d35b73b3909b47097cc011b95e96fc9e3743","sha512":"7b288a27a69c91697042ebb6f80f48cf25e0c6260620ee8f4b0e7afa75430b95c394c3f284445e0628b347341b89480e2e7098510bc07f4db43ecc46d893c38f","ssdeep":"96:561aQaPXOi0Ui/+kgrJtv72TgGuDG9JAsXgQrjQ:470T0PEnv7Sgc9vPQ","tlshash":"56b19e22d46fe4a53230c81b67c1820a1df839c6e72c29d0e8ed4db5e2c8b7f84883c4","first_seen":"2023-11-17T17:46:27Z","last_seen":"2026-01-13T06:38:33.673472Z","times_seen":5260,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/6eff9a15d5.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:43.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/6eff9a15d5.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:43 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-a9ec40e2f202bfb3d60091c6f38ac7d2-fe1b57df97474aef-01\r\nlast-modified: Wed, 15 Oct 2025 07:28:08 GMT\r\netag: W/\"3532927e4b8e6575dc977b7ab2cf5fff\"\r\nx-amz-meta-mtime: 1760513214.067966576\r\ncontent-encoding: gzip\r\nexpires: Thu, 16 Oct 2025 07:31:13 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.003\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 13611\r\ncache: HIT\r\nx-cached-since: 2025-10-18T07:48:52+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3094,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2774)","md5":"3532927e4b8e6575dc977b7ab2cf5fff","sha1":"17937daa7907905c0229a3ebeb8c7e19288ec386","sha256":"dfc3e0a1a14b6ce16021d8aed307b0a016f14631b36ea3dcf990329880436c10","sha512":"8ddae06f2dcabf77525e0bb1f30d3f7f5bec477df12e869f972ef46258f622ca5a0850ae5b5086f6c97a74dfb6487bc0458e6c7cd107362c00dd25145c9b5787","ssdeep":"","tlshash":"c851c7dd66f834b83a094e69e81e3471c76c284736ade4f0e6ad5f64033068ce294f82","first_seen":"2025-10-15T08:29:23.268713Z","last_seen":"2025-10-24T10:11:24.435356Z","times_seen":330,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"radar.cedexis.com/1/23802/radar.js","fqdn":"radar.cedexis.com","domain":"cedexis.com","tld":"com"},"ip":{"addr":"45.54.49.5","port":443,"asn":63911,"as":"NetActuate, Inc","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:53.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"radar.cedexis.com","organization":"Citrix Systems, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A2:3E:30:19:D5:41:3A:11:81:58:E3:B1:6F:F4:D2:78:0B:44:6F:D0","sha256":"BE:70:39:96:BA:51:8F:A7:6A:9D:E1:58:FB:D9:F7:6F:17:5C:DA:A9:6E:54:3F:8F:0B:3D:1E:DF:8C:44:B4:71"}}},"request":{"raw":"GET /1/23802/radar.js HTTP/1.1\r\nHost: radar.cedexis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62827.bar/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sat, 18 Oct 2025 11:35:53 GMT\r\nContent-Type: text/html\r\nContent-Length: 138\r\nConnection: keep-alive\r\nLocation: /1707728419/stub.js\r\nExpires: Sat, 18 Oct 2025 11:45:53 GMT\r\nCache-Control: max-age=600\r\nVary: User-Agent,DNT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":390,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T04:46:10.842589Z","times_seen":13317089,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":45,"dns":0,"connect":18,"send":0,"wait":20,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/main-static/d0ea2630/check-ob.js","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:41.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-62827.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 09:19:37 GMT","end":"Tue, 23 Dec 2025 09:19:36 GMT"},"fingerprint":{"sha1":"3D:8B:55:91:01:43:89:9A:B2:C9:DA:95:89:31:CA:E6:4B:4A:7B:1C","sha256":"87:2A:30:15:94:6B:E8:A9:B8:88:D5:8A:C4:E0:DA:84:C5:AC:29:E6:F6:70:01:E9:59:FB:3A:50:62:94:F7:6C"}}},"request":{"raw":"GET /main-static/d0ea2630/check-ob.js HTTP/1.1\r\nHost: 1xlite-62827.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62827.bar/en/block\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder; postback_watcher=; auid=LiC2ZGjze42Wt07pAxy1Ag==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:41 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 219\r\nlast-modified: Thu, 16 Oct 2025 11:37:14 GMT\r\netag: \"c065700c9c8c493403359e1f2baa10d9\"\r\nx-amz-meta-mtime: 1760614634.523068528\r\nexpires: Sun, 19 Oct 2025 11:35:41 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: wf-uht;dur=0.012\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":219,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"c065700c9c8c493403359e1f2baa10d9","sha1":"4630fe729e70bdf63fa7ba6c84ec277fd1f51030","sha256":"1e61f0c82ae82ffcf503fcd4b4c8ae27b32c11e19b882d5d13f3c44364c893f4","sha512":"b2e1c73cb94f5e3ceb35c3662bf4d72baf800a9a7c64318b1db07d50e9c885dbd94821ef3b3916d1b8b4fabb8f45cb588834b41c6a8a7f4d2c3e9c3866083ee7","ssdeep":"","tlshash":"96d0a79fb900211406939267d12f8668807724973f008182500597e069b8f4c4b37895","first_seen":"2024-07-17T14:33:52Z","last_seen":"2026-01-22T06:40:31.153166Z","times_seen":6298,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/site-admin/css_vars/29b5cda95fa390c124de39b6aeca6d24.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:41.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/site-admin/css_vars/29b5cda95fa390c124de39b6aeca6d24.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62827.bar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: text/css\r\ncontent-length: 46\r\ntraceparent: 00-486605f8899d76f8408aac84389481d9-3243b60c31286979-01\r\nlast-modified: Thu, 20 Mar 2025 13:29:31 GMT\r\netag: \"29b5cda95fa390c124de39b6aeca6d24\"\r\ncache-control: max-age=3600\r\nexpires: Fri, 26 Sep 2025 20:51:22 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1662\r\ncache: HIT\r\nx-cached-since: 2025-10-18T11:08:00+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"29b5cda95fa390c124de39b6aeca6d24","sha1":"46f68f69533c1fdc737eb36e8e7af7672178e610","sha256":"6021ec0aede22eadcb8401fe945d345202320437c7be01b157f0cb282ebe7c88","sha512":"8a62d0b23596f91ed5dbd111fce75e940b4b6fe542716d9fad76d610eb9a90f67bad145f3dcfd977b5a7a6d414d66e94c0abcaf6cabce2310d94af56cdf0e13b","ssdeep":"","tlshash":"54900294a50c22502025c656109c48d0119412566621255851533451b4438405960188","first_seen":"2025-03-20T19:27:14.305804Z","last_seen":"2025-11-18T11:41:52.983768Z","times_seen":4852,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":192,"dns":86,"connect":1,"send":0,"wait":3,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/6147dc85b9.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:41.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/6147dc85b9.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62827.bar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-36a54e1bc1a43e105abf503ed7798d25-d0fe3ee9f6d8dafc-01\r\nlast-modified: Wed, 15 Oct 2025 07:28:08 GMT\r\netag: W/\"b73bed50181c012f133f6aae4a69da3f\"\r\nx-amz-meta-mtime: 1760513214.068966603\r\ncontent-encoding: gzip\r\nexpires: Thu, 16 Oct 2025 11:24:11 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 568\r\ncache: HIT\r\nx-cached-since: 2025-10-18T11:26:14+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2285,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2284)","md5":"b73bed50181c012f133f6aae4a69da3f","sha1":"1826d3b1ec485876a8240d3250ef43fa0dbf7658","sha256":"6eec44c2601e34ffede82c0f79f5a1cc80ec4aec63ed4960e9260f757dd4798f","sha512":"01dccd364919af69cc280e3dae45ddfac2c9dd07f64e5cc4d45f9c28ca1ee944d7c61c23a6c95182f0827c083f0665638eb097c3e3d64daa41cee2086a3f45c8","ssdeep":"","tlshash":"ef417bdef8b9a5712d33e012d60c5ef95470b627c5214982f4cdd3a226c3a922db1dae","first_seen":"2025-08-22T10:11:14.526935Z","last_seen":"2025-11-12T13:10:30.998735Z","times_seen":2470,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":170,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_block_pages/en/dictionary_9b848ba427b59305d3df2cf0bc5dd080.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:43.743Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_block_pages/en/dictionary_9b848ba427b59305d3df2cf0bc5dd080.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62827.bar/\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:43 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-46d4a9cc191a5f7e42134bf83375e9dd-e4577ff747533642-01\r\nlast-modified: Fri, 18 Jul 2025 16:06:55 GMT\r\netag: W/\"c557f8f9061794bef4f6b3a5f96cbbb5\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Fri, 18 Jul 2025 17:34:19 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1704\r\ncache: HIT\r\nx-cached-since: 2025-10-18T11:07:19+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2352,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c557f8f9061794bef4f6b3a5f96cbbb5","sha1":"11add862eba30ce83a5f5c71ba4c53b305fd1774","sha256":"bf6a49d0686075ed43f0babe55f6b983cd8a2db79da3f31cc36c9f4d192130d5","sha512":"fe4bcb92b635b15ad1dfe2fed7b19c5bc14523a435815bb2cd572b20cf4b27150293acdee78753bcefa52eb6505124e20a4b46465fa161f0ad7841716909cc9e","ssdeep":"","tlshash":"b941745b733c55e5392841403d0d6d6a7b520168be9161c8fa8cdc9d332f8cae23b62f","first_seen":"2025-07-18T16:37:04.820544Z","last_seen":"2025-10-30T11:47:43.214083Z","times_seen":2348,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/5705a4ffe2.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:43.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/5705a4ffe2.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:43 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-fd2f320816c4537c9cca53eef29d6ffc-b418f093ecd41bf4-01\r\nlast-modified: Wed, 15 Oct 2025 07:28:08 GMT\r\netag: W/\"37ea8580ff8889e8b5a9f0ddb9daa3b4\"\r\nx-amz-meta-mtime: 1760513214.066966549\r\ncontent-encoding: gzip\r\nexpires: Thu, 16 Oct 2025 07:31:13 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 13609\r\ncache: HIT\r\nx-cached-since: 2025-10-18T07:48:54+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3201,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3200)","md5":"37ea8580ff8889e8b5a9f0ddb9daa3b4","sha1":"e409436952bcb4c0a2e9d590134563e19b641b27","sha256":"1714c5afa8490c6320d1882b7406b25873823124b4e169ba05b235b6a25997d6","sha512":"cf06050e59dec19e90ba3e63652b92a62559ee85bb371543592942a74baa432bb9f99ee9c22d141ad84b44427585cd920cdae4ae3b426c7b890ce274c513a288","ssdeep":"","tlshash":"2861b78178b590fa791741893e527470e34b1db9135c16b1f2f9888833ad2845f2e6db","first_seen":"2025-10-15T08:29:23.332415Z","last_seen":"2025-10-24T10:11:24.42144Z","times_seen":330,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/d0ea2630/desktop/default/analytics-37204c5b.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:53.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/d0ea2630/desktop/default/analytics-37204c5b.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62827.bar/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:53 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-65a7a6180ff83f4eb4f3a1830813bd9b-3cc624aaef1cae53-01\r\nlast-modified: Thu, 16 Oct 2025 11:36:59 GMT\r\netag: W/\"32002c2828068768bd9ed0ace55757af\"\r\nx-amz-meta-mtime: 1760614618.793919221\r\ncontent-encoding: gzip\r\nexpires: Fri, 17 Oct 2025 11:47:26 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 85403\r\ncache: HIT\r\nx-cached-since: 2025-10-17T11:52:30+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9435,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9435), with no line terminators","md5":"32002c2828068768bd9ed0ace55757af","sha1":"cf7ff29f0e465d92f22547b7d92150a1aa3e20c5","sha256":"18f8b783a06fcbaf3db85c73a7807bed474e253b04f24a911436dc6842925731","sha512":"80fe8683133be64da428fd5f899e057d6aa1392571e441e67a7b245182cebbbfb62655eb54421a566b302af2519cd09a7e2e6f145b2f00b390cba30a2e0351af","ssdeep":"192:9vOGjPZxnEW5+vYjV3VeA9vshusWaawPWJ3vQFtRnqzPQzxfvO6Rx+RkovO9O:9jPZxnEW52Y3VeA1bsWaawPWFQFHqzPR","tlshash":"5912978a7d88e43007ba19b8f67b9a0ae07657172406c091caf9d8843d7da8f511becd","first_seen":"2025-10-15T10:41:17.660865Z","last_seen":"2025-10-22T09:09:00.872614Z","times_seen":221,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:54.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-62827.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 09:19:37 GMT","end":"Tue, 23 Dec 2025 09:19:36 GMT"},"fingerprint":{"sha1":"3D:8B:55:91:01:43:89:9A:B2:C9:DA:95:89:31:CA:E6:4B:4A:7B:1C","sha256":"87:2A:30:15:94:6B:E8:A9:B8:88:D5:8A:C4:E0:DA:84:C5:AC:29:E6:F6:70:01:E9:59:FB:3A:50:62:94:F7:6C"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-62827.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62827.bar/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: e12f7f8e-e08d-4d07-aa64-23f59c478ad5\r\nContent-Length: 109\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder; auid=LiC2ZGjze42Wt07pAxy1Ag==; window_width=1280; che_g=50d29c68-8050-457e-b91e-4d85f21ae555; SESSION=c3aa36a1e79f9804fbbecaca68e9ec98; _ga_7JGWL9SV66=GS2.1.s1760787353$o1$g0$t1760787353$j60$l0$h1467884601; _ga=GA1.1.952693072.1760787354\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:54 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\nx-dt: 1208\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.007, wf-uht;dur=0.010\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8353497ec7c7aeb1ead3b84448377bf3","sha1":"d5a6595b54c827ba910a848470593a4e07b96f04","sha256":"bcade8e0b23f496a5b0e163fda0d5cc3ef64c4c4500a7f693773ddf69e2ff387","sha512":"a0057544456b4e710eb711ae0822e6e905367310164d512b2d51fa181c28f4df67eede445a884412b01a9b3c9f57d672e02afc4cae2311fb61b105fc64c5e2f8","ssdeep":"","tlshash":"c97000002000a300080800020b20288088328080200880220080aa280000ef800af003","first_seen":"2025-10-18T11:36:15.681277Z","last_seen":"2025-10-18T11:36:15.681277Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/en/block","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-18T11:35:41.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-62827.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 09:19:37 GMT","end":"Tue, 23 Dec 2025 09:19:36 GMT"},"fingerprint":{"sha1":"3D:8B:55:91:01:43:89:9A:B2:C9:DA:95:89:31:CA:E6:4B:4A:7B:1C","sha256":"87:2A:30:15:94:6B:E8:A9:B8:88:D5:8A:C4:E0:DA:84:C5:AC:29:E6:F6:70:01:E9:59:FB:3A:50:62:94:F7:6C"}}},"request":{"raw":"GET /en/block HTTP/1.1\r\nHost: 1xlite-62827.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder; postback_watcher=; auid=LiC2ZGjze42Wt07pAxy1Ag==\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 203 Non Authoritative\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:41 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 251700\r\naccept-ranges: none\r\nserver-timing: dt_total;dur=0.006, total;dur=158;desc=\"Nuxt Server Time\"\r\nset-cookie: gw-mm=; Path=/; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Secure; SameSite=None; Partitioned\ngw-blk=eyJkYXRhIjp7ImlkIjoyMjk0LCJkaXNwbGF5VHlwZUlkIjoxLCJ0ZW1wbGF0ZVR5cGVJZCI6MSwidGVtcGxhdGVJZCI6MX0sImJyZWFkY3J1bWJzIjpbMSwxMiwxNCwxNSw4ODUsMjMyMiwxNiwyNTA5LDQ5NSw4MTIsOTg1LDgxMywxNywxOCwyMTg2LDIzNjgsMjMwMCwyMzc2LDg0NiwyMjY3LDIyOTEsMjMwMywyMzc1LDgxMCw5NDQsMjIxMSwyNDA5LDI0OTUsMTA5MCwxMDkzLDIxOTEsMjUwMCwxMDAyLDIyNDIsMjMwMSwyNDYxLDI0NjQsMjQ2NSwyNDYyLDI0NjYsMjI1NiwyMjUxLDIyODcsMjQzMiwyNDc4LDIzNDUsNDg0LDM5NSwyMzI4LDI0MDIsMjMzMiw0NzQsNDc2LDEwMDYsMjM5NCwyMzY2LDI0MDMsMjMxMSw4MDksOTEyLDgwNiw3ODYsNzY4LDc3NSw3NjcsNzY2LDc1MSwyNDI0LDEwMzksMjMyNywyNDIyLDI0NjgsOTA3LDk4NCwxMTA2LDI0MDgsMjMwNywyMTU1LDIzNzIsMTExOSwyMjk2LDIzNTQsMjM0MCw5NjgsMjIyOSwyMzkyLDI0MzEsMjQxMywyNDM0LDEwOTYsMjM1MSw3NTksMjIyOCwyMjE0LDg0Myw4NDIsMjM1Miw3NTYsNzQ3LDc0OCw1NDgsMjM1MywyNDI1LDI0MjYsMjQ3MywyNDkyLDc4NywyNDQ2LDIxNjMsODM5LDc4MywyNDc3LDUyNSwyNDgwLDI0MzksMjQ0MCwyNTA3LDUyNCwxMDc1LDI0MTYsMTA3NCw1NDksOTQzLDUxMiwxMTE3LDExMDEsMTA3MywyMzEwLDIzOTcsMjQ2MywyNDUyLDIzNzgsMjM4OCwyMzg5LDIzOTYsMjQwNywyNDEwLDI0MTIsMjQxOCwyNDIwLDI0NzUsMjQyOCwyNDM1LDI0NjcsMjQ1MSwyNDIzLDIzNjksMTA3OCwyNDM3LDExMDAsMjQzNiwyNDI5LDEwMTksNTE1LDUyMiw3NjksNDc1LDU0NSw4MTUsODE3LDI0NTYsMjUwMSwyNTA4LDQ3Nyw0OTgsOTQyLDIzMjAsMjI4OSwyMjgwLDEwODYsOTc4LDEwODQsOTg2LDIxOTcsOTkzLDk3Nyw1MzAsMjI0Myw5ODEsOTg3LDIxODIsMjI5NSwyMTU2LDIxNTcsMTA5Miw4MDQsMjIzOSwyMjIxLDk5NCw5OTksOTk4LDk5NSwxMDA3LDEwMDgsMTAxMCwxMDA1LDExMDIsMjE5OSwyMTk4LDEwMTIsMTAyMywxMDk4LDIyMDEsMTAyMiwxMDQwLDI0NzEsMjQ4OCwyMTU5LDEwODksMjE3OSwxMTIyLDEwODcsMTA0MiwxMDQzLDEwNzYsMTA3NywyMzYyLDI0OTcsMjE3MSwyNDg5LDIxNzcsMjE3NiwyNDkxLDEwODMsNTMxLDk5Miw5OTAsMjM0NywxMDQxLDIzOTgsMjIwMiwxMDE4LDI0NDQsMjQ3MiwxMDk5LDEwODIsNzg0LDU1Nyw3NzgsNzgyLDE5LDY1NiwyMjIwLDIyOTRdfQ==; Path=/; HttpOnly\nlng=en; Path=/\ncookies_agree_type=3; Path=/\ntzo=2; Path=/\nis12h=0; Path=/\r\nx-dt: 1208\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"203","status_text":"Non Authoritative","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":251700,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (40315)","md5":"837420ef507580071c535e47f281a7dd","sha1":"0b6ec5092130d939f616d895b6dad1ab09a4d568","sha256":"91c87d14ea57055cc0e1382a1c22162195bf4bcf51b56447294b4a186e8e05a0","sha512":"e78039e98f166ebef541e37f8f358b0cc35a984d8ef25a736398544e6407e4a5e0e29364c322c3b7c9c076cf65644a523d0905789b6bc1ad5601ee78b7c29995","ssdeep":"3072:sEw5si4opeRfJdpBP+PpM4oteRfJdp83HR/98FDwQwWu7Y+:Usxfvofy2DZaM+","tlshash":"2234d62fa90c1c3e951f1eb5c44f7d8e57bc9e1a20cb6c119caeae6811e7694426343f","first_seen":"2025-10-18T11:36:15.68434Z","last_seen":"2025-10-18T11:36:15.68434Z","times_seen":1,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":243,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:42.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63748\r\ntraceparent: 00-1b2be0518cb744bd65d1ae6ce2c4f1c8-84b9cb77d67426b5-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"6887b6f24414dbc612dbf42ccdc76b70\"\r\nexpires: Thu, 16 Jan 2025 10:32:14 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2060\r\ncache: HIT\r\nx-cached-since: 2025-10-18T11:01:22+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63748, version 1.0","md5":"6887b6f24414dbc612dbf42ccdc76b70","sha1":"8068d3abfbc6cbf35b55919da45b1f4d2d136238","sha256":"fc5c015fc32518f1ed810fa84ca28941eb9d5a3c81acc8df69a4dbbeedef7b0c","sha512":"00f08f9dd648972c9571547e06172d5505dd13f577fe2e65a497d3856172807ac11c996984e4138d2eb2ac784257fe61864aee15752fe9e9e76f98db931e0c2a","ssdeep":"1536:KtdCG+Dz6RxAx457zL0ASEn091Y0H1mTOzI/OzMFOoTX4u:MMG+yRpzN091Y0VtI/pOoTt","tlshash":"8b5302485551fae2cac3073c0f7a89dbb37a776d519224cd98b69f830d37964bea2070","first_seen":"2023-06-14T19:15:49Z","last_seen":"2026-04-04T04:09:16.967231Z","times_seen":10259,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:43.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-62827.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 09:19:37 GMT","end":"Tue, 23 Dec 2025 09:19:36 GMT"},"fingerprint":{"sha1":"3D:8B:55:91:01:43:89:9A:B2:C9:DA:95:89:31:CA:E6:4B:4A:7B:1C","sha256":"87:2A:30:15:94:6B:E8:A9:B8:88:D5:8A:C4:E0:DA:84:C5:AC:29:E6:F6:70:01:E9:59:FB:3A:50:62:94:F7:6C"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-62827.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62827.bar/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: e12f7f8e-e08d-4d07-aa64-23f59c478ad5\r\nContent-Length: 48\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder; postback_watcher=; auid=LiC2ZGjze42Wt07pAxy1Ag==; window_width=1920\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:43 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\nx-dt: 1208\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.074, wf-uht;dur=0.011\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a37a6c0eed4a3b9039463e4ce126096d","sha1":"5328045acf0f75a855711d8a997a4ee4f501e776","sha256":"cce66890c17b8488b8e05e01ac809587f04e40f5200e7cfcc0fcf9a67865bbee","sha512":"3992fca55f02b7e799b29b494df7038250d5e60331f7530825ffd3d5f24ba8e527efe44f12efeb2db3ff73bbb21e6ae674638b5e2ef74355875a724a3ead1c83","ssdeep":"","tlshash":"4070000020808802280800002a8a0c000a38c200002200320080b3280000cec020f283","first_seen":"2025-10-18T11:36:15.688148Z","last_seen":"2025-10-18T11:36:15.688148Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:43.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-62827.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 09:19:37 GMT","end":"Tue, 23 Dec 2025 09:19:36 GMT"},"fingerprint":{"sha1":"3D:8B:55:91:01:43:89:9A:B2:C9:DA:95:89:31:CA:E6:4B:4A:7B:1C","sha256":"87:2A:30:15:94:6B:E8:A9:B8:88:D5:8A:C4:E0:DA:84:C5:AC:29:E6:F6:70:01:E9:59:FB:3A:50:62:94:F7:6C"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-62827.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62827.bar/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: e12f7f8e-e08d-4d07-aa64-23f59c478ad5\r\nContent-Length: 98\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder; postback_watcher=; auid=LiC2ZGjze42Wt07pAxy1Ag==; window_width=1920\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:43 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\nx-dt: 1208\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.298, wf-uht;dur=0.012\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7a511b6425a637aa4941ac00cf33d8ea","sha1":"70a2517a2d2b21b7ba3399900275284b780872ca","sha256":"dd0f1cc1e109c7bdfb982d102dac82718d5a9a6dbfb68315d1f48b5440c183f1","sha512":"7f966f33dd6f9da2fb64d53faa05ac2b9658c0143d9309562c5c90aaa3d69b31440f7af99cbc8af41c805aee651f213e40ba049ef5a069c7244758b0d7720a32","ssdeep":"","tlshash":"51700000208882000c282000aa0e0c000a32c200000080330088b2280000cfc080f883","first_seen":"2025-10-18T11:36:15.691458Z","last_seen":"2025-10-18T11:36:15.691458Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-62827.bar/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json","fqdn":"1xlite-62827.bar","domain":"1xlite-62827.bar","tld":"bar"},"ip":{"addr":"46.32.182.100","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:43.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-62827.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Sep 2025 09:19:37 GMT","end":"Tue, 23 Dec 2025 09:19:36 GMT"},"fingerprint":{"sha1":"3D:8B:55:91:01:43:89:9A:B2:C9:DA:95:89:31:CA:E6:4B:4A:7B:1C","sha256":"87:2A:30:15:94:6B:E8:A9:B8:88:D5:8A:C4:E0:DA:84:C5:AC:29:E6:F6:70:01:E9:59:FB:3A:50:62:94:F7:6C"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json HTTP/1.1\r\nHost: 1xlite-62827.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62827.bar/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: e12f7f8e-e08d-4d07-aa64-23f59c478ad5\r\nContent-Length: 19\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_29145c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l73747_clickunder; postback_watcher=; auid=LiC2ZGjze42Wt07pAxy1Ag==; window_width=1280; che_g=50d29c68-8050-457e-b91e-4d85f21ae555\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:43 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nx-dt: 1208\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.177, wf-uht;dur=0.012\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-04-04T04:43:01.942606Z","times_seen":225807,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:53.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:53 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63748\r\ntraceparent: 00-db9215c11efeb6416341cd3b7ea579a5-0d37692c3eea4a88-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"6887b6f24414dbc612dbf42ccdc76b70\"\r\nexpires: Thu, 16 Jan 2025 10:32:14 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2071\r\ncache: HIT\r\nx-cached-since: 2025-10-18T11:01:22+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63748, version 1.0","md5":"6887b6f24414dbc612dbf42ccdc76b70","sha1":"8068d3abfbc6cbf35b55919da45b1f4d2d136238","sha256":"fc5c015fc32518f1ed810fa84ca28941eb9d5a3c81acc8df69a4dbbeedef7b0c","sha512":"00f08f9dd648972c9571547e06172d5505dd13f577fe2e65a497d3856172807ac11c996984e4138d2eb2ac784257fe61864aee15752fe9e9e76f98db931e0c2a","ssdeep":"1536:KtdCG+Dz6RxAx457zL0ASEn091Y0H1mTOzI/OzMFOoTX4u:MMG+yRpzN091Y0VtI/pOoTt","tlshash":"8b5302485551fae2cac3073c0f7a89dbb37a776d519224cd98b69f830d37964bea2070","first_seen":"2023-06-14T19:15:49Z","last_seen":"2026-04-04T04:09:16.967231Z","times_seen":10259,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/d0ea2630/desktop/default/css/2d76eae9.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:41.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/d0ea2630/desktop/default/css/2d76eae9.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62827.bar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-24826cb52a5dd629912bdea149adf3e1-41695a33ea48132f-01\r\nlast-modified: Thu, 16 Oct 2025 11:36:59 GMT\r\netag: W/\"40af82ca580825454562f67f044d5edf\"\r\nx-amz-meta-mtime: 1760614618.796919249\r\ncontent-encoding: gzip\r\nexpires: Fri, 17 Oct 2025 11:47:12 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 85493\r\ncache: HIT\r\nx-cached-since: 2025-10-17T11:50:49+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40644,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (40644), with no line terminators","md5":"40af82ca580825454562f67f044d5edf","sha1":"0dd9b985cb5fa06f624137ec02279af4fa56704c","sha256":"d65770e2df58fa720bc94230f25f48eb16d74f78242d495d38b0717e7d42db0c","sha512":"35e1618ce4ac45f09d202151a6039e670d329782c7009386c924b4f63fac421943fd0640e91f61164411722a2839be28062152bef29a56f0230101067d5b65be","ssdeep":"768:SnraFC/9ApQze5i/aWVXuNVuvLh0TEAhZMsPnQzX8:erYC/9ApQzOi/aWo","tlshash":"41030f5dfca8d5760d27f521a288ae3c01b0f42bde314d96f90e57a508c3f9b15e0ea9","first_seen":"2025-10-09T09:08:10.649283Z","last_seen":"2025-10-22T09:09:00.933601Z","times_seen":468,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":175,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:42.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63920\r\ntraceparent: 00-ec29c37058e59a3fd6d0dab55c705508-243f992308d81f5e-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"a65527fcb58f66a7cfbc0e6b160538b4\"\r\nexpires: Sun, 10 Aug 2025 19:21:26 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1571\r\ncache: HIT\r\nx-cached-since: 2025-10-18T11:09:31+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63920,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63920, version 1.0","md5":"a65527fcb58f66a7cfbc0e6b160538b4","sha1":"45d260e7fa343401b5bb0df982a014f53e2d253b","sha256":"fb13c3a1cbac60649b76f7d7f85c1645d35ac69b85ce5f4eb0692505ecc2cd45","sha512":"8448e96abe326f43285b2d8b0d75beaf0e9c9e051e8754841d907b30eb303ae24c447011306da6a1703b9192d02aeff76a4517bdf94ec6e7dc360ce3538802af","ssdeep":"1536:UIG3hJMkJeK8ic5iZGnJ4URj9vqXOQ6UqYdbuA5RVK1:UL31hcLlRjDQ6Uq4W1","tlshash":"7f5302df8de32a148ff78772668885f4f4927c68898c8e7345526a8907f07d6b96c04f","first_seen":"2023-05-07T18:04:27Z","last_seen":"2026-04-04T04:09:16.94457Z","times_seen":10137,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/d0ea2630/desktop/default/Page.Block-341f655b.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:42.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/d0ea2630/desktop/default/Page.Block-341f655b.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62827.bar/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 476\r\ntraceparent: 00-1279df07bc97c48fe83a94aa26ff592a-a78971dbe32fd004-01\r\nlast-modified: Thu, 16 Oct 2025 11:36:59 GMT\r\netag: \"540ddb382555f69abdb00ce5c731a5f5\"\r\nx-amz-meta-mtime: 1760614618.792919212\r\nexpires: Fri, 17 Oct 2025 11:47:30 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 85442\r\ncache: HIT\r\nx-cached-since: 2025-10-17T11:51:40+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":476,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (476), with no line terminators","md5":"540ddb382555f69abdb00ce5c731a5f5","sha1":"b10a3a52da36395ed26946fa375c6d3e5848161e","sha256":"291bfaaef272c1d6c2950aba6188e1785d52b2b67c86f1c0b50769e1e5cb9117","sha512":"3c4f3f2c55e5496eb3d397df51784416672098c064bfa5f1588e9b95deb8cffc7f3e45609909defee6878be823a8360abfa54de849f7a726339608e0a5eb5b3b","ssdeep":"","tlshash":"53f00e9b2862fc8e95e200c343b6c1b7b4cc797a0649592002a0c8b532ba816082024f","first_seen":"2025-10-15T10:41:17.862952Z","last_seen":"2025-10-22T09:09:00.925228Z","times_seen":223,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/d0ea2630/desktop/default/vendors/plugins.v-tooltip-93a743d4.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:42.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/d0ea2630/desktop/default/vendors/plugins.v-tooltip-93a743d4.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-62827.bar/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-5f484c96659c75e089ae43e15989e912-24017393235de82c-01\r\nlast-modified: Thu, 16 Oct 2025 11:36:59 GMT\r\netag: W/\"6095b99ea6b5be7b5dcafe42f44baeb8\"\r\nx-amz-meta-mtime: 1760614618.81491942\r\ncontent-encoding: gzip\r\nexpires: Fri, 17 Oct 2025 11:47:13 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 85441\r\ncache: HIT\r\nx-cached-since: 2025-10-17T11:51:41+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":76818,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65476)","md5":"6095b99ea6b5be7b5dcafe42f44baeb8","sha1":"269d663b709cc3e60b6e30ef95594f77429c8214","sha256":"ccf08e1181410179e0b75a8ea69faa413631fb7abd31e67d0a612cbdd9d2986d","sha512":"e4c86bea30e97306c318af4b0cac8da66935602dc4eb96bb4f42b584e9f37c1f641c8c296168f998c9f84e69acbba008bdc79eec7a9cb8b7ffc64bed14c89b6c","ssdeep":"768:y9V29ZVNZNAbt5LRbQkc5WMZI+7tSCUC8Lk7t8R6zk+BaNfSby/Qw/Hyg57bh0PO:y9cZDZeb7LCkc5TPRSCv1MHqWdRfm5Qp","tlshash":"0573c78e73d4f0b203e7b175412f620fb2776558b40ad014b2b1e6d4ac3da5aa267e3d","first_seen":"2025-10-15T10:41:17.575272Z","last_seen":"2025-10-22T09:09:00.882454Z","times_seen":228,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_abee2d6fe13e11526977db18e50711ab.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:42.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_abee2d6fe13e11526977db18e50711ab.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-62827.bar/\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:42 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-6492e2be0da7e35b8840c296c17c3b79-8c5a2adfed9cc5ce-01\r\nlast-modified: Fri, 17 Oct 2025 16:07:35 GMT\r\netag: W/\"2bf4b6f68c59d7041156c890d0d08e89\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Fri, 17 Oct 2025 17:40:59 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 3061\r\ncache: HIT\r\nx-cached-since: 2025-10-18T10:44:41+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":143697,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"2bf4b6f68c59d7041156c890d0d08e89","sha1":"8122df61034b25adb920dd6d31e1f730d57cab74","sha256":"a013496938ba2b75ccd98c2bb25f00a016558ee77f0fae67e0bc9f6d6d339403","sha512":"85dd20f03f5b09184a19aed776a2022de4f717d7c24e84b4c18c558806d0cd6081d9f247de9b0ac4fb660b364ef6725f15d529211046ce1396dc3a29787627b2","ssdeep":"3072:vs4MI9Z0rkk7etAfRxxlRVPGE+AgLAnSc6Wrs6RfuJm9p1Zg:vgIsoJ2fVlRVPGE+/AnkofuJm972","tlshash":"f9e3e80a194c6e7b0fda22ddf94fdf4962b00055aab2c822d8eec11e7197fd2917714b","first_seen":"2025-10-17T17:07:20.463111Z","last_seen":"2025-10-21T16:05:02.578283Z","times_seen":164,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_fast_deep_equal_RNYYWXHZ.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:43.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_fast_deep_equal_RNYYWXHZ.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:43 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 865\r\ntraceparent: 00-9be9c962eae8271854a44ae86f332641-658ae6a3e331fcbc-01\r\nlast-modified: Fri, 17 Oct 2025 13:08:25 GMT\r\netag: \"00e44cad05af09626c2b10aeee7de5a3\"\r\nx-amz-meta-mtime: 1760706466.353586795\r\nexpires: Sun, 19 Oct 2025 05:32:05 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 21818\r\ncache: HIT\r\nx-cached-since: 2025-10-18T05:32:05+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":865,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (840)","md5":"00e44cad05af09626c2b10aeee7de5a3","sha1":"4461fd05cdd85255f4ab24edd5ac80e7b6dec92e","sha256":"5277a86b8db312b1e34318cb994829e113d8204c3a2e88ab594e5135b2bbfb2a","sha512":"548bf615b1118881d21a0cfd2d530b3f0ce1e14cc93cb6afce662b30ac70877fa152fd71b5d786bb2e43e31a1980e00b83106b1f4b3ae12fbb2ddbedf6c81841","ssdeep":"","tlshash":"901159c232e3a0d183e058cd1001d906f23969e9a4bca0c9c757e6b93cb2a53d87672a","first_seen":"2025-08-22T10:11:14.567955Z","last_seen":"2026-03-04T04:00:43.420123Z","times_seen":3921,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_localforage_PJNUBKRP.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:43.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_localforage_PJNUBKRP.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:43 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-8047e82491dd5976828b405c3e4e9c94-21dc0d94560831c1-01\r\nlast-modified: Fri, 17 Oct 2025 13:08:25 GMT\r\netag: W/\"7e7ebd44e3a6550f862e122ab7df6409\"\r\nx-amz-meta-mtime: 1760706466.353586795\r\ncontent-encoding: gzip\r\nexpires: Sun, 19 Oct 2025 09:39:06 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 6997\r\ncache: HIT\r\nx-cached-since: 2025-10-18T09:39:06+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30277,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (30255)","md5":"7e7ebd44e3a6550f862e122ab7df6409","sha1":"384ecbc3ab0f65e6b0f88c1e68ba3eb73fad4999","sha256":"138767518a09e63d24f918f6380923893a2ec3aa59a640e51c83517501823076","sha512":"e2766b50e289dc6a69fa30432a49a0b7743f15cd15a54d707959c7623f258057a821a94285c492746216cfbf815089309b6cc09b930ba7977ff9c4ffc352d76e","ssdeep":"768:wDKAOpvMewHFuM96WwZACjzz46zSTKsBE1OvFXfX1UXk:wm8uPW43zEIOvdlUU","tlshash":"a5d2b68c7799f02683bb3070907f580ef237a912594d90a0e591e5f86dbd75c822bfad","first_seen":"2025-08-22T10:11:14.535778Z","last_seen":"2026-03-04T04:00:43.425133Z","times_seen":3921,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/298507c055.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-62827.bar/en/block","date":"2025-10-18T11:35:43.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/298507c055.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-62827.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 11:35:43 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-d0c56af0d7a8b5d0b932748534016efa-064be540e9264341-01\r\nlast-modified: Wed, 15 Oct 2025 07:28:08 GMT\r\netag: W/\"dd265ccbf1fedac59fc9856d32e3eec6\"\r\nx-amz-meta-mtime: 1760513214.065966522\r\ncontent-encoding: gzip\r\nexpires: Thu, 16 Oct 2025 07:31:13 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.003\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 13609\r\ncache: HIT\r\nx-cached-since: 2025-10-18T07:48:54+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1973,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1972)","md5":"dd265ccbf1fedac59fc9856d32e3eec6","sha1":"3751a7444b2db3e71567298885549775bb301eb0","sha256":"9d18bea4956c473ec31c00da0f40b1823f01cc7d91d1bbdfcc92106ce8ecf093","sha512":"231814b42f3e5b9ad27a057a21cd2f48ea1bbef43859b69ef78e34678d82cdbb519b9d4eba5cafb31952c957043ed1794806c023fce7ea350d2d63b260444ba3","ssdeep":"","tlshash":"0f41c8d9b2b035f2e677416dbc0660f1c3082b9d132e10e8d9ed884e220c9c23767793","first_seen":"2025-10-15T08:29:23.275754Z","last_seen":"2025-10-24T10:11:24.42701Z","times_seen":330,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}