{"report_id":"888665b7-ec7f-4984-bd85-46d1d9ac5c0a","version":6,"status":"done","tags":[],"date":"2025-08-07T22:44:30Z","url":{"schema":"http","addr":"1xlite-825174.top/en/","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":0,"asn":0,"as":"","country":"Iran","country_code":"IR"},"final":{"url":{"schema":"https","addr":"1xlite-825174.top/en/block","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"title":"1xBet"},"submit":{"url":{"schema":"http","addr":"1xlite-825174.top/en/","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":0,"asn":0,"as":"","country":"Iran","country_code":"IR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-11T22:44:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-07","alert":"Sinkholed","trigger":"1xlite-825174.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"1xlite-825174.top","ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"domain_registered":"2025-02-05","domain_rank":0,"first_seen":"2025-07-25T19:33:55.311396Z","last_seen":"2025-08-02T15:42:59.329253Z","alert_count":20,"request_count":20,"received_data":1312242,"sent_data":14077,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-08-06T15:12:45.48732Z","alert_count":0,"request_count":2,"received_data":735847,"sent_data":1019,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"radar.cedexis.com","ip":{"addr":"45.54.49.5","port":443,"asn":63911,"as":"NetActuate, Inc","country":"United States","country_code":"US"},"domain_registered":"2009-01-07","domain_rank":3035,"first_seen":"2013-11-27T02:31:43Z","last_seen":"2025-08-01T12:24:52.482314Z","alert_count":0,"request_count":2,"received_data":1415,"sent_data":850,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":0,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2025-08-06T15:34:17.533447Z","alert_count":0,"request_count":2,"received_data":1702,"sent_data":2069,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":25607,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2025-08-06T15:46:31.989321Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":891,"comment":"","tags":null,"fingerprints":null},{"fqdn":"v3.traincdn.com","ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"domain_registered":"2022-11-10","domain_rank":0,"first_seen":"2022-11-25T10:00:40Z","last_seen":"2025-08-01T08:55:16.056472Z","alert_count":0,"request_count":66,"received_data":6110922,"sent_data":33152,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-131019888-1\u0026cx=c\u0026gtm=45je5861v893859730za200\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211~105103161~105103163~105135708~105135710","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"de7a08a1699f403c47b15d9362138690","sha1":"66ba65f61bea27570eef815bf8c73c139592a73e","sha256":"daaf48ddfd7e61279cefc471ac4e985bcb9e457fc20b5a72e92c74997e6bd957","sha512":"b54da2df04280ca52fc91abefabc92816faab1bbcd986b167e71e91412e5787b038c20cf24f5c73ed651dcd3e31d2f995bb93efebbd0548a238c29719a40d0b1","ssdeep":"3072:LMjWxF/A4BwA2XN4j70OLuQ5AadSz7IJLevvfvwq5VLT2PG6Dt4ISNp94zCm:TxP2XC5LHAyevYOT2PG6B4xNv4t","tlshash":"af4409cc77d6b42683a36478503f114bb23b7992f84cd894e182d8d82e74aa94277f7d","size":273581,"data":"","first_seen":"2025-08-07T22:44:37.629738Z","last_seen":"2025-08-07T22:44:37.629738Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/b3bc5d68/desktop/default/vendors/plugins.v-tooltip-43e84f42.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"88d2e8013367a63b23424c7dd15dbd1a","sha1":"0b5af342eea9ad8f298f60728b98cbfb19d6f64b","sha256":"3f75170cf3c9a566c77e74756896e8250da5d76073f5b1a2f6f61d3a0293dc67","sha512":"f2599ada1e889c6f83f61c6f1a09b6c2059a3ab7d9a59a10c01863482b532060c4259f43201fe0d311d3a80601a2d066add9e7fd4a17aa04555f727236f99177","ssdeep":"1536:HKb/midlpXHhP7aVRTPRSCv1MHDWdRfm5eH:HE/mUBPoRTP8w+WRfmK","tlshash":"5673a74e72d0f0b203e7b1b5402f620fb2776558a40ae454b2b1e6d4ac3da5db267e3d","size":76824,"data":"","first_seen":"2025-08-06T18:28:12.614407Z","last_seen":"2025-08-21T07:44:03.353054Z","times_seen":170,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/b3bc5d68/desktop/default/vendors/plugins.vue-js-modal-cf702a86.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c33145627f8c880dca23879d76141698","sha1":"ec8f415e1bb9f2d299b6c204fc7ec499c901498a","sha256":"ac0cbb26350b015a038d087de685d27d2790fcbd31c8fff4c2ccb38d1b477cd1","sha512":"8a26f64d313bd36a81d67ac648b90ef0b016f5240cbd7894ef8a9da44cf42039c4c2803dd77d46f4f8ee4160b2a047514f232f08eba618c2b362b60d07270770","ssdeep":"384:vBy0a9vOeCGAZIXfK2rVsAdm00uow4HQEjacGXGQVe6ubqJ:SHyIXfPt4wE9GXGQcbqJ","tlshash":"f1c2288977d8307442db5573627f2b0ab23e295474269888f772e8e65cb864d206ff3c","size":26667,"data":"","first_seen":"2025-08-06T18:28:12.609535Z","last_seen":"2025-08-21T07:44:03.353689Z","times_seen":170,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_accept_language_parser_B6TW5FDZ.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"e3f1c4089db6b910890e85d97a2e2066","sha1":"85828920da3c3fd7856acde184e835ac314295cd","sha256":"6c28afe5a52e0f9b1138fe498b254c8671058a058b555651ccae8e91e7534614","sha512":"0fc9e47336d93f4f6ae6dbffaaee9145b46d4ba6c75aad12acbded8fc3468d1d8d29fb76440dba071ad362f725287ea38b5f48045e51c39fd5bf842f5ec0abd6","ssdeep":"","tlshash":"d821f09fbac2b5908394184d4e2ec055f23a2957641ce5fcd625e6827c407a186f2c0d","size":1297,"data":"","first_seen":"2025-05-14T05:06:37.190071Z","last_seen":"2025-08-22T06:38:14.173196Z","times_seen":1811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/bcd0d061c1.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"835c1a59e7fc9f0ebfb150d135fb2bf3","sha1":"4ff9cbb99f43344c801e96f1598b633f4fe57218","sha256":"59941e16d6c87dd1080d57118c9c7c76e2af900f075d6fa717f47082099150b2","sha512":"807e2cb267e6adfb3422dd072ba900e40c13eb474a02db12ebe8bcb172e8b79038506fabf66fc75edaeda59f83ef93dd106a55f05ed81b52ee563f505b8dce32","ssdeep":"","tlshash":"5c01f17ffa72f528610188ddd926ac61e3452de71b85a6e8d1dd42739302073e44a8e3","size":811,"data":"","first_seen":"2025-08-07T09:17:39.876486Z","last_seen":"2025-08-13T11:06:58.714596Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/9d27dd7965.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"8f6e7336551a4ff42fa72ee26aaf7778","sha1":"6eac629f64bed9ea7d19b805901c0e2efdeaa3fc","sha256":"fd7b40aca469cc913856d8ccd9ff5a2edf6175d403696734cbadecc68cbad472","sha512":"559ab9409e47c3b9b56fa322783e7216e2b6c800083e1a8f87efb87a69557995675f76f5291d0827abacac28838a7c4d3e10254c6149ee29fc81ebf81a04dd99","ssdeep":"","tlshash":"1ac02b210c6562b02e0f8ec8747134b60411a0453fb8ecc00c3403176163af0f5ab404","size":147,"data":"","first_seen":"2025-08-07T09:17:39.938234Z","last_seen":"2025-08-13T11:06:58.695051Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/en/block","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"Function","is_inline":false,"md5":"e4ec0cb7f8605183cfbc142b40e55dc5","sha1":"24f200f13f333dd947a3e75e26b2a69a5c165c84","sha256":"d76221bc16e6d3a2a6753310dc7a16b931418287d79d6dd56609769973ad6512","sha512":"acd76987096e91601e4210fa2b4bf143e4e317ae9ba2af8aefec1fc0b20cd104a0ae371470795420a211a66853a5a829ca9f7d8d42dcc13eff7b979304f5a646","ssdeep":"1536:/Wk2hkwLQ7lMZZWu+uJugugjhjEQ3oRxCLdu2P03eOP03e4q4Jy6A8BbP03ex4i5:ek2hkwLyWZZYQ3gx32P03eOP03e4q4JH","tlshash":"e48362003cd458d01bd74839b3aa3873d058c967fa880d2a56a5d90b5aabd1ef3e7d37","size":87140,"data":"","first_seen":"2025-07-29T04:15:45.324031Z","last_seen":"2025-08-19T12:05:43.27267Z","times_seen":304,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/en/block","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"Function","is_inline":false,"md5":"a01893d8e129ad16c1e0fc5c7537f411","sha1":"0e46d1bf2718f848d9d596fa269eaedb31204772","sha256":"cbe7b89533bcd75b69f3e54807308551d68242ec1761e63bee1a99fc6e560175","sha512":"074e309b533fc11690afbeab9b4dda85851e086c0ede97936860c7a5c4120ed9a16c6ced4fffdad21ca322f6c6e51577bd4966c5264b4a9780495acc451aee65","ssdeep":"","tlshash":"0d9004f515405350c5533d54401f1d5400f105703c40cc71014cdcd10c710f0335d5dd","size":47,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-05-08T10:33:26.007149Z","times_seen":14039,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/b3bc5d68/desktop/default/vendors/plugins.vue-notification-55b134c3.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"f60338d05b6644faa04b71bee0b8ac19","sha1":"6e7d8644e0863ff5f8e1f97fb6d9778434a4e8fa","sha256":"cdf6aa2a53eb67c99887eadb05959cb7c77ec667e9d31bdd5c68e77308d4ef1a","sha512":"a54d03255c505c65c8f089c909d92bb4b1c9f4313e394343fdfd0c55769a1832b32e245602acd48ff1788b934e9351c7dcc5a54e636e61eef199863a63506651","ssdeep":"192:jU1hQXHv3CbfKpqEVwhSIkrReP+SdHtfGA2D3ow5EE9bJ52bFZLy2mp4ilVh:jn3CmpcDkAP+S/fGAWf5VbWbLy2mmijh","tlshash":"5d4296ceb2c2b4650be760b6402f110af136a96869ab54d4f3b1d4f2adb564c413bf39","size":12563,"data":"","first_seen":"2025-08-06T18:28:12.67104Z","last_seen":"2025-08-21T07:44:03.331678Z","times_seen":170,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/b3bc5d68/desktop/default/Betting.Core-cd4bf9e2.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"202e512f0b5d858215b1cfaa73502332","sha1":"a04a6f324ec16fe481bfd4eedcbec40343844b83","sha256":"878d4d5e29d861bbb48f8b38f61504ac773ce349ee2355b2d21d31ea31c519ae","sha512":"f6081f7b138c59c4cba5c6aa2432fa3587a149f3ff91f24c90e8bc7fce939181e0af8f714ef1247e8a44f7094f20efae2278c52876072b2ef391c2e7856ff4aa","ssdeep":"","tlshash":"1041c68539d17449473f14d984ea8472b0b92e95399d01ec6586d9d03178d86c2a6d8b","size":2187,"data":"","first_seen":"2025-08-07T22:44:37.464241Z","last_seen":"2025-08-08T10:01:12.396288Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/main-static/b3bc5d68/check-ob.js","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"c065700c9c8c493403359e1f2baa10d9","sha1":"4630fe729e70bdf63fa7ba6c84ec277fd1f51030","sha256":"1e61f0c82ae82ffcf503fcd4b4c8ae27b32c11e19b882d5d13f3c44364c893f4","sha512":"b2e1c73cb94f5e3ceb35c3662bf4d72baf800a9a7c64318b1db07d50e9c885dbd94821ef3b3916d1b8b4fabb8f45cb588834b41c6a8a7f4d2c3e9c3866083ee7","ssdeep":"","tlshash":"96d0a79fb900211406939267d12f8668807724973f008182500597e069b8f4c4b37895","size":219,"data":"","first_seen":"2024-07-17T14:33:52Z","last_seen":"2026-01-22T06:40:31.153166Z","times_seen":6298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/b1f097c39d.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"3841bad3970b39a37752037572cf4ab7","sha1":"d9decad41aa913fff740d8f6eedbe3a175db032f","sha256":"1549ff746e6a7a035c63deac4d6a8c196c2d6e8fc05a3718af113ecd65613e4a","sha512":"f9c11cc58c7b4922d00ff0c1cfd7f1f57eef21dd04dc3833e9a50855b6dcc0ce62e09b84e6e791c75b8f5486c202fb3c4885606911d7fa13070e23f8be73d473","ssdeep":"","tlshash":"5821a7303034e52b0fff0bd8c8331854f72c2258a73565d176cc6fa102aa506529eb77","size":1166,"data":"","first_seen":"2025-08-07T09:17:39.942596Z","last_seen":"2025-08-13T11:06:58.684122Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/en/block","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"Function","is_inline":false,"md5":"bc51ed8c76553717f10d58b2df60fd76","sha1":"e2d03a8fd8d280074b226c288880f9df299c7cb1","sha256":"bee994eaf88453f6343ba57571a069054c12c9b4e42f8cbad4f2ad75c7fb264c","sha512":"3207379b65060d0e80623fa966633b5ea31358b20de9aeb2c9416fa7d29f1972bf30809e39f0b826565e569d856dd2498ee0ec5285271c127f54daa7cf391911","ssdeep":"","tlshash":"489004473441140c47d7175410375c4c0c1500705441df400451dc510d51031114545c","size":39,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-05-08T10:33:26.023509Z","times_seen":14054,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/en/block","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"domTimer","is_inline":false,"md5":"01f4b51b4ba7edd00ad9f0a22259f06e","sha1":"00723d0eda4be61a7b1c542b0a08a94a94a60017","sha256":"9fdac1c31a22f55dbb8ca225ee28c3f7e88b41cce82968af0018c9f8b3bd35ba","sha512":"83d180c9960a53f88da3e3ff8616b4e095b7d642182f5855cfa386d48a19b888fedbde6433d1f926d9dd93d0a813a24590591729a6d8393543dfc490efee2070","ssdeep":"","tlshash":"29500000c000c0c0c000c03c0000000000003300c0c00030033000000c3000c0000003","size":10,"data":"","first_seen":"2024-09-21T15:04:59Z","last_seen":"2026-01-22T06:40:31.224966Z","times_seen":5888,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/b3bc5d68/desktop/default/Page.Block-71fbad99.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e85b0f4063257e193c45da1530d99c9","sha1":"25bf44716753f7d0630c448c3d7fba05771013ea","sha256":"15509a8e996cef9f1b1ae47ee3a26257c89d9a7b6c88cf7887c105ddf86582a1","sha512":"162d4d921fac452a4aa6205c63f8e3baa3ff2e3f4471c415bcfd5eb5b9790c7486143c7b871fa6680d64cf0d9e3e37279ee4f8d4af656dff55c799bae23fb4f8","ssdeep":"","tlshash":"84f00e9b6422bccd94e6009343b781b7b8cc3a7a0649696002a0c8a132f6c56081024f","size":476,"data":"","first_seen":"2025-08-06T18:28:12.689061Z","last_seen":"2025-08-21T07:44:03.367137Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/en/block","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"70c03aae606ca7c1e57da81ace73b92a","sha1":"1c44f9800dfa9cb782a3d9cbfb365e4c39ed7ae5","sha256":"068975893703ef48b56d58f8e29a9aff610f11e6c35ff394082d21f15befb297","sha512":"beb59c8b0ae1228be0bd24d02d15a463d8b4c1334a1760cce6dba17f256d8840ef85cadb2675ea00b52e5a33381fe17ea0410a028eb07c81ba67e861a189033f","ssdeep":"","tlshash":"8f31631dfe1cf4760512b6bad13f630eab7318a6a914b8088865a8987c74e4f9456ccc","size":1736,"data":"","first_seen":"2025-08-07T22:44:37.734591Z","last_seen":"2025-08-08T10:01:12.438775Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/en/block","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"Function","is_inline":false,"md5":"94361ed86ab9b2fbb8d805c2025df46a","sha1":"3f428332f7a1c7196a85c93a373a966d75708c19","sha256":"eee4d228a49a86625f29410cf9a23d145e821a09cbb1f7a4d7557d206872715a","sha512":"c8f4fb7c642357730c6c59e0b49fe3ec16c228d83d4ce402dc62f01e451529b8087240afca37096cebdaaabf47c189dfde5e6e2d780440f663f0e2bc8cf88ff7","ssdeep":"","tlshash":"f6b012df6c8351104a9292e001dec8f0443620303b00cc45544ce7716d2e865de2625e","size":96,"data":"","first_seen":"2023-12-06T14:32:27Z","last_seen":"2026-05-08T07:58:59.475428Z","times_seen":8015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/en/block","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"eval","is_inline":false,"md5":"e9a4879fbcf3b91dd44c69d9307b96f0","sha1":"9e38f75ac9cc63991b112919b7a53807813524d4","sha256":"6d0cbf43475d9073a38eda332c6d5f6628761985961fedc048786d61df897119","sha512":"3ca0c73553167447aa5dbadc1e1dc69732fd790de093261c711c332756d768be55d1d438b001258fbd9dc282c2ca0ac6a13a117826da5b0737697db8109def5f","ssdeep":"","tlshash":"a5512e11e03c5a3bd933462e920f7f125eac55b22a892f5cb61c4bac25c60ce91136cb","size":2593,"data":"","first_seen":"2025-07-31T01:11:02.59783Z","last_seen":"2025-08-13T10:36:50.679141Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/en/block","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"Function","is_inline":false,"md5":"00beb9884d0391b342eadd30744b539a","sha1":"3124c0bd593822379d22f13d3e08e70a1bf5ea14","sha256":"92394eec5690449a4f6cfc9a7f97497a69e926b2365cb9a9aad3507a844f835c","sha512":"6fa2e21df54ca406f570cb639529d68edac5de27fd4bc3a9daa8fd0465b583ede1c1cabb550237deb75d8bf88f39e80c1a77777d794826ad3272630108e58661","ssdeep":"","tlshash":"539002492940210685661152001e5c58411491b094906c9140429c551d52020125ab5d","size":44,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-05-08T10:33:26.025806Z","times_seen":14052,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/b3bc5d68/desktop/default/DC-9300c31f.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"908fe1921bb9985923bd000857a63b0b","sha1":"bd133a86c3052d7511e7dbf84e3fe5cd5e42ca2a","sha256":"6e0246ee40b4ee41148520118cda5f4a761f3f29013b6fb84c644d24de301fcf","sha512":"8e34cc4ca2719d94219693872a1ec698aac243ee3fba69970d6c717c9784cf29b6bccd670791df47f43b63063e49812a56f05b8ff99033eb0e8796c01935827f","ssdeep":"","tlshash":"9e41864575a4bc1283f908d419ff7206013bf076648dca75d6e36dc708a7f56a117d19","size":2304,"data":"","first_seen":"2025-08-06T18:28:12.68354Z","last_seen":"2025-08-13T10:36:50.669193Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/$_$.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"2cdaa92927f02e0b628f1ef4d7dd8caf","sha1":"9104a2e16ed080b80a42588b8aeb52ebec47ab7a","sha256":"ef8101ffea52addcdcfcc3a83f96ff2d4613fb3ae6d1c16bbe4852387b73a9db","sha512":"31da80bc1b17aa708fef74b0211af91fce1b4a5f518f11e5caa80f50e9a7791b6e94924e381f550fc44a02f4c1d785e5b95fa2464e7968b5cab079612d70d839","ssdeep":"","tlshash":"1ba002935a5ef66c209044860696e74733823d6a3477b1d625bc5509e6061474817257","size":69,"data":"","first_seen":"2025-05-14T05:06:37.199299Z","last_seen":"2026-03-18T19:40:26.76398Z","times_seen":5502,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_chunk_7HDOEZTP.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"7e76c08e7f16815131a5f13a10c1efba","sha1":"5f800877b78a0713157fe119bc1a2d9a260f72e1","sha256":"c6f29a0c7c3ed884ccffd7a529fd2fc599e2da1f31af658146f0e36a3f4c00dc","sha512":"564dd139cad65e99fb210caf791d0582fa6312fb19e5c8395296361bd1904c2019d246132d42545f47f43a589bf3900e0468ed262251056c22d8172c55017e7b","ssdeep":"","tlshash":"b421f1e55fb87ba3627e26e4a02e0041e001d53752b4f1d4e294dfb464e945c035b4b6","size":1194,"data":"","first_seen":"2025-05-14T05:06:37.154171Z","last_seen":"2025-08-22T06:38:14.169571Z","times_seen":1811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/hd-api/external/assets/hdf.js","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"0009b06af6892358f6c573335f102046","sha1":"cb899ce5fb6756d389a12e5049f2180dec2366ed","sha256":"540a50ce4665aa5a15e6afcdf7a260860e1896e77955c7ed128d1e6489bedac3","sha512":"83e9ce72ca4725bf501fe711538455aaa2fb278095d4d3938615b1907416446b8a8ed1f4f34fb296ea4c9a6d6b6e0fecbe31afa240305e7d23baa4145b2cd1c8","ssdeep":"48:Pen1yuqKi6649JoXznZwhU6fINwld0mPr6eC5/F6ALWBl/NR3vMNNeEcxHb8JiTP:Y1yuqKioolwHgObfENerHbkiTgRx05","tlshash":"d581323660ee2d3153639052d53fe5e9f229a8073968ec4831fc588a0f40f6189b2e3b","size":4203,"data":"","first_seen":"2025-07-24T09:34:40.995531Z","last_seen":"2025-10-16T23:35:31.258248Z","times_seen":2029,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/en/block","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"eval","is_inline":false,"md5":"ffb8c2027736488cd8e67fa9d1b9963b","sha1":"cf23ea5d5e5c0b24919cf7c6e587972e61b00fbe","sha256":"ef574450d5bd2a442233d12abda491511f33cdaa4078344e5bad5d80045a2913","sha512":"f8d034a722c4e84ef57ea06e437f8f0b4bbadf9f3efc6d6448c13783ea982727fd03fd2a6a5d50d935c5f0f6918d3cc8913cda5743a34c5279c2ebe8ae579753","ssdeep":"6144:TjL5AVzkqHhEBhWqZKW1wqWiXx7GF4s7Ga5MaiWVIufJJYJCCt/t:T/epeYZ6w4x7GF4s7Ga5MaiWVIufJJYZ","tlshash":"b15473826587e0c7828c5e2b963aac13d508dc7d9d7c9f08d948ef5cac737b72766818","size":303947,"data":"","first_seen":"2025-08-07T22:44:37.487433Z","last_seen":"2025-08-07T22:44:37.487433Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google-analytics.com/analytics.js","fqdn":"www.google-analytics.com","domain":"google-analytics.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f24128d0c9cba7be2916c693427a3483","sha1":"1b6397d496ea896ebc2018b01b995cee4f166029","sha256":"58173de4697da1a218f04c3a783a733bab4e769ceabc37cd42da9dc3e036a7e8","sha512":"c4950733b44e258bbc817ce6396f002caec1e11a6413fd0038c9baef2d5f1d992b1fd0ec52515aba52faedb52c28b996a7fc063f28a0f45f3aab5e2f91bf5be5","ssdeep":"96:A1VdZYqhPnjpWx4/eTe8qSMbqaQd6VL2Jyt9LdJoyayCVPVD5wdBfQPfCHiUr3:AXdZYqNjpU4yPqSMbqaQGL2QfdDayCZC","tlshash":"a6a1dc9939fb50210233b1bd1bafa918b23895236208dd61b98c9364bf94437d7f1fc9","size":4691,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-05-08T12:53:20.28018Z","times_seen":853489,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/b3bc5d68/desktop/default/vendors/app-95e27f16.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c71c6686d84a407f612f25a4ab55aa19","sha1":"8e0279571fa55a02aae183b18859836bb1cc9942","sha256":"f211b3d5880ad92ce646d378e3c94bdaf4d8f0a2767f18818d41b2424fa85652","sha512":"18f5595ee7e999ec1f41f0911c910d42a6510597b4f700fc6766d2917439c5a263117d8c5e54b3f19f15f1050a1a5ffb8e341af55a19d585b6bb5320adc2a354","ssdeep":"12288:mbnLX0yfGBSG6xO9Y4g1Qztkscud3auGE8DKN4ElOKQjS:CX0yfGBSG6xO9Y4g1ekscSqOwo42ZQjS","tlshash":"51155b99b980f2560aa36be9d06b1017e32d6e5ebc0ce444f2e7cdd536998047136f2f","size":936483,"data":"","first_seen":"2025-08-07T22:44:37.612133Z","last_seen":"2025-08-13T10:36:50.655349Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/785871f5ae.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"f94450c539719168946dc2b7f4c2e5f8","sha1":"8337bc9dc830cb0881e242e2c59561c3afa23b11","sha256":"9699dd885ec986f3af7e272c5b444a1f26648c618d9cb65ef9d0131478a8239a","sha512":"721de1a5bfd2ab9bfbaf6c1a6c99883f7f04b3cb2b90cb16df36444cb97c893ba44fe764e4751a17ce21dec6b4b9db8d840661c61101b223075688d4067800dd","ssdeep":"","tlshash":"e961b58574b9a0fa790741cd7d5274b0e35a0cb9239c05b1f2f5888823bd6c45b6f6db","size":3220,"data":"","first_seen":"2025-08-07T09:17:39.873088Z","last_seen":"2025-08-13T11:06:58.68366Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/en/block","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"Function","is_inline":false,"md5":"580b3e56fc9ab6e8b4655f43ee057cc1","sha1":"5dfce565e446f4a167195de9a1a5dd26163c711c","sha256":"446f07b6e56de61d2c2d5b6ba408cc580b492a6d1ede8fc51cfde4ef75a2b382","sha512":"b2350579a3aaa5843b9b16c31782f3d7a4b850ba211d0074aa05d819c89ba49b482eb59aefcfb33f9fc9b270abb7cf7509e1254def23e9f98c116130c47f0018","ssdeep":"","tlshash":"e99002491d851041c56a1160041e1888442488761a40d8d1c480d9551c51630238e45c","size":47,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-05-08T10:33:26.001413Z","times_seen":14046,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/en/block","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"8ba93ea64f8c4e7b8d76be2fa43b7c2f","sha1":"2e52448aeb339b799c9f02fdc34b7b743c792b64","sha256":"59f2419ec460dfe6968ae12b3ee51054a6d2e6febd7002eaf62b212a6fb543a3","sha512":"51d2ab7a5b910ee1e3eb43fca2debb2efd126a469b326f66d0232caccef20f4986ccdc6c4ff1180c6898a45ecddb8dd62649f21a27441f86df966c060978430a","ssdeep":"96:ihgx8q0yK9gO53tQglIelj+5JrbmQrv/gKrLhZyaoQFuBMOfQtSbNClcC:SgCq0vn3tdew6WQrv/vLheQtSbNwcC","tlshash":"9bd1a582d41cfa2fec23891ef03b2f311e54196d79927b14e6ac8b2d34971b5e317646","size":6172,"data":"","first_seen":"2025-08-07T22:44:37.749695Z","last_seen":"2025-08-07T22:44:37.749695Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_c29ed659a5.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"b95f2867a4f69c6f87508d4376778ab8","sha1":"34b733244053bb0634826b593e14e88782e81680","sha256":"f318dcd075506078ef1811c0a12962c5fed8811ee39cc3c77691a81063e05340","sha512":"dd8d736d26cad47776c4e4706beed168dedd02d25dfa0570a7f4874fcb260ff78951ac7cb94d91d225837db6a33eebf5b236932fe7b2e2014a1c9f9d309b0c61","ssdeep":"384:6tP2qT4YEUXGPYsH3M95B59IBMNUiLPqnIJdlh3uY3V47Czazgjdk:SP2qT4pUX/sH3M95B5qB6UEPME1uY3nk","tlshash":"9972a7a6726c3a2683d648f240355603e72b0cb979104499fb7c6edb7c198cd42ffa78","size":16157,"data":"","first_seen":"2025-07-01T14:08:29.773148Z","last_seen":"2025-12-23T22:34:35.075094Z","times_seen":1892,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_libphonenumber_js_Q6RMKWT6.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"1da464d70e78b04b9b808e82e4ad9487","sha1":"0c79e65516d1525ecb43d13cfb4ccb0631095a28","sha256":"b4c72b8036ca6767ab61490178f901538646f2aa1001cb042caa134174a41595","sha512":"517231e24fe48dcf9e907f32f759a9d8cc0471202dd5a22dd27efffeeb989e0f12b0db848280f03739b2e267ce95feb128ee8e9305cdd4e299c3fd19695ffdb8","ssdeep":"3072:sOU03o4Pwjp9BumfaVpfMHgWH71RgZXo9k:sXpzumWpf2gWH71RgZok","tlshash":"5af3b9f73640ab6775b23b188e4ad28f6f9c9c51cc88908caae7d4db5d61c22707db14","size":158815,"data":"","first_seen":"2025-05-14T05:06:37.168433Z","last_seen":"2025-08-22T06:38:14.163241Z","times_seen":1811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/b1b34cc682.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"976a138bb908c8748c7b8b68b30e6d98","sha1":"a9b0c822831d800ae444a8326de16734e9f9b918","sha256":"a532fe95785ae3831da3c508398ce89e4a1a45e67fda7a4836a8003429fcfb49","sha512":"2327c3a727bcd0b86e1b267c95a5b6f3208d0d73e3342e579baa8ba293585b52bce148a3f81d1f1e5220fefe7bfc86650756c6cf6858e4042cfb7122c8166653","ssdeep":"","tlshash":"fd21d7ecb9f830bc0e0d8adea03d5022db48164d761cfce853ce9a9473100dca6a4b96","size":1235,"data":"","first_seen":"2025-08-07T09:17:39.955388Z","last_seen":"2025-08-13T11:06:58.721235Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript,export const meta = import.meta;","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d772b7d405b447ecee54ab61cdd5108","sha1":"dd65fb9cd5a7cb94a40fe161f4f72303a61eb3b7","sha256":"b90ff694e492935b6036fb7e878d365dab51aafa46f0afb1e33414e7ecc3307b","sha512":"a3947640368602c9fd9dee887bb1a7e463890ff42e2ddd292c377593c5fad246d3e3363e9898cd1e5ecda9c59b5cf7c7cd0acfc2a5a1e5d3acec2cf0d62e20b2","ssdeep":"","tlshash":"1f800003800802380aa0c880028e80b00ab222203f00c08328088b302e3b08aca332a2","size":32,"data":"","first_seen":"2023-12-06T14:32:28Z","last_seen":"2026-05-08T07:58:59.470921Z","times_seen":8014,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_localforage_FJKG5M2E.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"02cf95f00794b77df34632e34a59c5be","sha1":"b64889fb6cbe78a141688ea761a627997ef8a8af","sha256":"bf78b7b3dd6ecbdea04c575edfb6022ed1b2e98c7a9cb9f02ab851ca638f1b83","sha512":"6bcdddd806b94dc8964c98ed5c8481f1ac5e74c707fe5d48760bd7d2edc2b8b52e58b3d7910d0ae316b3e196924d32734ccd5ffc33377df8de471e43c99fd6d3","ssdeep":"768:+DKAOpvMewHFuM96WwZACjzz46zSTKsBE1OvFXfX1UXk:+m8uPW43zEIOvdlUU","tlshash":"23d2c68c7799f02683bb3070907f580ef237a912594d90a0e591e5f86dbd75c822bfad","size":30277,"data":"","first_seen":"2025-05-14T05:06:37.193247Z","last_seen":"2025-08-22T06:38:14.178861Z","times_seen":1811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/hd-api/external/apps/c5e31d5915661de4393e3f1489b00ebc4497dd48/api.js","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"32053c9c355cf85427a5cc3f07de0b09","sha1":"f3c13d6a657ffa2ca8997f54f4779f0c02f1600a","sha256":"0ec410318f3ecc3a3aef3de68e99190845248bcc12282aa15eb9acc87f8837d3","sha512":"cbb8c7ef0bbed264989bf5b4af7d216cdeacc5684641c37d429e5ceca7dc04e55254e81f319cd856e7b4f447565bf5abf4e9915f5725eb57cfb142f113362078","ssdeep":"","tlshash":"2211756e18ed58291a9275c402b7ccfc642036363219d4c495ede9e1072ff990032f5c","size":1024,"data":"","first_seen":"2025-07-24T09:34:41.13762Z","last_seen":"2026-05-08T07:58:59.425742Z","times_seen":3951,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/captcha-api/assets/hunt-captcha.js","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a4a85022660df71224540bc365be7f","sha1":"c3940cabd0d874cb9e7ebe3a55a9ba0d09e27d64","sha256":"a5c4afed6bd868553d8974f7ef6cbb8d473a1effc473bfc3709e732745ea12b5","sha512":"3ab167d04cf4e801ae55b22f16aa596bcd6a49d4bdac1137d7508fb0275a451cf6eca8113c6640dee150311f91d911d75462d8ad67e9d760ce1d2fb1555d794f","ssdeep":"1536:A5ZQ8SJ/xo/NkvZku6u/u+umj9jCCKXPcLXu2j03eQj03e4C4Jy6A8B5j03eF4ie:AfQ8SJZKCvZOCQPB2j03eQj03e4C4Jyr","tlshash":"199352403cd494d01bd34c39b3ba3c72e054c557fa880e2a55a9d90f5aab92eb3f6d32","size":89083,"data":"","first_seen":"2025-07-29T04:15:45.312421Z","last_seen":"2025-08-19T12:05:43.234536Z","times_seen":304,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/en/block","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"Function","is_inline":false,"md5":"07ee59694224486cc0f2fcef389036fa","sha1":"6bead01889a54ae38476a6bb7d3ac7133df0e3ad","sha256":"3ccff93d1f3fe85ab5b1f6da18741cc9e68fde9d142272acb7c31fa146d1424e","sha512":"973dc72a9455afe63b925422b4083cf3c16c829d90156857931abcf317978e9ff1c400bd644dcffe413c200621cd44ec91f7cea61017dcf3ec5ad8ed3d376139","ssdeep":"6144:8jB8dkdmz1OVvDYSTcAFMAKcjx7GF4K7Ga5MaiWVIufJ7+jCCBd:8jyekLiMCx7GF4K7Ga5MaiWVIufJ7+jr","tlshash":"43549482758770c7c38c6a27971ba813d544dc3dad789f09ea482f5cac73b877b62819","size":292102,"data":"","first_seen":"2025-08-07T22:44:37.756768Z","last_seen":"2025-08-07T22:44:37.756768Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/en/sandbox%20eval%20code","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"92b651082ce234f66bb544e678befda3","sha1":"14c21c55ddce43b6f677caadf51d4ab98c6a3df8","sha256":"25d57d1d97abeb84531d3d3e5754dd5cb19a2c115edfa7cfc7af8247084faded","sha512":"b4fcbc037e0a3d91db2a624921e96b878e9e18dd998ad5649d77d7d053faf28b09c8725a0542aef702310bf85f3037b70985c274db8acabd021efb171d41f361","ssdeep":"","tlshash":"34c08ca3e74026ae2a1166b2b810e003a2866b015aa78402b00a003b1441fe21aaa1a8","size":147,"data":"","first_seen":"2023-04-11T21:07:53Z","last_seen":"2026-05-08T12:53:20.279641Z","times_seen":855144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/b3bc5d68/desktop/default/runtime-a296fdb3.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"e7daaf7ff938808a5f11401d508bba1b","sha1":"c740103b671e9ac30fff6ea4f07a6780e6952922","sha256":"c4bc089b0f5a41737a8892779d871fa598ffd8ffd837d84b3a0a96f748d27a66","sha512":"cbcd99c6acdbb351aa4bcc389998a6d0c53a962db6ef0bfe695a2411e7bd19d6c794267b635e2bd4f0f47111dd621089dfd6034ac80c9d162cf1748fafadd290","ssdeep":"384:Js51G0PCItn8MEL4u4B50PCItn80/HfZyWDJWf:eqDIt8MEL4u4B5DIt8AzDJg","tlshash":"0c82209eaf1acc671923dcc338213d25595820335c5647ece6fee2195018e6ca5afe2f","size":18456,"data":"","first_seen":"2025-08-07T22:44:37.639518Z","last_seen":"2025-08-08T10:01:12.401187Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/b3bc5d68/desktop/default/app-29c62af1.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"83e9664e31dccd860fa1b44f71f96e71","sha1":"f18ac9377979e93fcf2640807147c528f53f2d2b","sha256":"9c79646405c513340abc23a38a31488fc7dafeeeb6c7763b1e1fa9142458c9c6","sha512":"7eb3344734b6830f6ad9b7ebf1f9f93f6820b61b07e92e8a501ee9f26baa6ceff55f537736d172ab44cf2f531b485219de3cb76bd7e10995bb49f0db58f4bef7","ssdeep":"12288:ihZEgC7jcupMA7YvS7lcZzAdTPQx7oT5Jtc:ih2gC7jcupMA7YvAlcZEnm","tlshash":"82b45d65b588f4ca02f34bdae03a0061e33916a9390dd064f77dedca359bc09d16a67f","size":498675,"data":"","first_seen":"2025-08-07T22:44:37.582322Z","last_seen":"2025-08-08T10:01:12.329236Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_base-app_97d20bce3a.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"9c4713294904ce9ee7da1de9770ad6f8","sha1":"4e59d9f475e99d0e51313d2aa9eefa9172e32c99","sha256":"97d02b95b073d80f0f44fc8e518f3887127fa12ebf14b48a8102490471a0e21e","sha512":"3fa5893bbc180e76baca4a0306dddf50c09c9397670e5c8e4b932ad62413a930353afd2ae1f2b7268c6a163823da3ceebb6f689d1e26cc2b71354c07d1daa595","ssdeep":"12288:5UnFDaj/9z70DlxAx1lz2BJCFaFI9SKr2YSO8mwHSGPmYcXl7aeobrafah:uJaj/9z7oPA9z2ESe2YS6GPw7robYI","tlshash":"7e657d55b016b8121dd744eb90370643b19c5aae9496f8a0f6fadcf837ce804529fbbc","size":1416979,"data":"","first_seen":"2025-08-07T09:17:39.977101Z","last_seen":"2025-08-13T11:06:58.735424Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/entry-4547fbfe57.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"87decac5677850033be2b5d1dfc338a4","sha1":"cc64b3a3def4c377c08c8e83032f68cd43733660","sha256":"6a798a6c2a8967d2f3c5ce8641309617d52bcdd1d24faf4cacf572e403284a59","sha512":"cb700bd7177e588cc8f6eb67b63ed44974d6bc7957d53fc134e0410178d4dd0cb251f9873510bde62b33a3eeab433f0c5ffaff8577915f80920805201b7f51f7","ssdeep":"768:H8agbkK7Gg18bzepte5SpZxR/DjB30CeAzC+bau9mVF/scn+SRasJZS7fBkctWw6:ctb3Gg14M9Qeau9mVF/sc5nL9l","tlshash":"a2e2b47474a7b0b520da59587739bd52c2c80f5fec8af8e251cb89ab17c308884067fb","size":31312,"data":"","first_seen":"2025-08-07T09:17:39.935453Z","last_seen":"2025-08-13T11:06:58.719527Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/1b53196e16.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"639252fd09829c05b4e9f1e67192e8d0","sha1":"dc7e7bedc22c08672f9dd10dcfa4e40ac94cd1e3","sha256":"3925d9517f0d2c426766b3c97a22de5a9ef951a1ea69f9e870b84fe12460ceb1","sha512":"b4df3a0db5a329fbd35b945146c6460cd211ddf2d12e1124a9076430eba0221514ae4cc19ab25593813cd4dfb674a52ca2264ac14795afb75d3a1566878f59fd","ssdeep":"","tlshash":"5a41c89573b035f2e637915dbd1670f0d3182a8d132e10e8eee9884e210c9d227a7793","size":1973,"data":"","first_seen":"2025-08-07T09:17:39.941432Z","last_seen":"2025-08-13T11:06:58.721772Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_popper_js_E2H7ZPXQ.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"3cf0cae38afae9add22f7884e5061231","sha1":"2a41037501375a439385a76a047876619683418f","sha256":"322482e3beae5a985d069beea981614510fda90a5df7295b776a324d461fc43d","sha512":"b61ed44fab86cdc14e9e1b8af7924afec6148d03d878007f89d1beb7a24a1862efaa2d6b43dcc04df35c6920ef742ffc5a59a2434b798554394d3e28f88b7a13","ssdeep":"384:nPP7iayBuR9vu3z1JXvykd2+LaqHdC6RjVnTGm/7piCXmH8kCCcvJTCyCu+meAxu:riZwO3XvO+NMSJt3XmckXcv4nxJAxiH5","tlshash":"7d92a28c7684b0a287a7a2a7a07f860f71376865650e9004f59cf6ec3c35dba507bc7d","size":21252,"data":"","first_seen":"2025-05-14T05:06:37.148925Z","last_seen":"2025-08-22T06:38:14.115567Z","times_seen":1787,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_vue_deps_DYMTJONH.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"1580a3cfe81fd30910a49dfe64cc8e7b","sha1":"314144dc49595482ba46c0b85b38d5f73ef73a7b","sha256":"8989a021d20f0fc08c43966a287cbd99e43142a5a0ff42eb232756a101de6035","sha512":"65a68a90c0bbac3609abafd1e200227d970f2a35a5158d699972651cdcdcc4c60e08dbe7e3f605621abb04e016e064f71057c9332d2a4e46dd704aad5ee3196b","ssdeep":"384:yo1wZ1yyQBPgmtk3aNPtFvsddbHyrKe/k43RuD6EgUBBmCWEg4bGy7IbEALvzAdw:lwZ1yyQBDk3a1tF+5E/uDRgQBpWEg2mh","tlshash":"de824be47bb9fd93339840dc80671b53f26948a7844cd074e799ae9330a454385b6bbe","size":19175,"data":"","first_seen":"2025-05-14T05:06:37.162459Z","last_seen":"2025-08-22T06:38:14.178048Z","times_seen":1811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/en/block","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"Function","is_inline":false,"md5":"7bcdb973ab8af8e24ab11cb554a1ba6e","sha1":"24e8a10f240f2b06f81d7c173cd0a90606641fc1","sha256":"916ec4eb9b485eb47f43a17fe212e84e4b72600b45eb6d4588599ad495a57fcd","sha512":"1d890761e2a00081531fda5c0489ebf4df4140a9748bdc6d97bd355023e3e4ab09e19663ab319cf775e28ba71d99ab09f20d5414a561fa10fa3be2cb874484ca","ssdeep":"","tlshash":"e380044710411010cdd351d040573c44001044f114c4dc500040fdd11c53030110545c","size":34,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-05-08T10:33:26.013652Z","times_seen":14061,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"radar.cedexis.com/1/23802/radar.js","fqdn":"radar.cedexis.com","domain":"cedexis.com","tld":"com"},"ip":{"addr":"45.54.49.5","port":443,"asn":63911,"as":"NetActuate, Inc","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"82dec77fd0353c7c71ce053b8601387e","sha1":"fbbca95419e1d0c042e0a5fdf10f380aca66188c","sha256":"39f2b7b0fa78d37d0c84d2d6618bd635d86fd683d9bcdd5729850cb2a62522f7","sha512":"6872c895cb44711405e57a436dfbe15d094f9159e11ee2b89983c63b1f18f6acbdfaf0ccbb5e48b2bf24f366f16584c660bca4b6b14c048a134bb77a60f6563e","ssdeep":"","tlshash":"02e068ae9391a318537a2dbacc4e060ba0f6114888e5e4e029f5c2c00461bae072bfb4","size":390,"data":"","first_seen":"2024-02-13T14:23:26Z","last_seen":"2026-01-15T12:01:08.184588Z","times_seen":7496,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/4967534db7.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"3657b1bc4284460c29374d95165c6e2b","sha1":"d665e1485dfaa67a4f6e77e42634cdbcfef8e2c5","sha256":"e2172b08154dcb165dc4193fc676b61ead5f4d834f35859085e82c653b246504","sha512":"4062e1f58e76bbe3a89a15e52750336b145813f91c981ccfdf70409d2a34c6ff0e07c1f0d3780721e17b2e00690e6974e1c62d0e84057f68914d0729de930fe9","ssdeep":"","tlshash":"3141c89d27f6a434740d0e9dec0530e25b6818563aede4f5f59d8f64022126be642d82","size":2287,"data":"","first_seen":"2025-08-07T09:17:39.878615Z","last_seen":"2025-08-13T11:06:58.720699Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7V60YW2S5H","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"696db42b74964551f1f07bca0229355f","sha1":"e97d32b8fa0545dee70abc9b3303ee7c4dc5dd8a","sha256":"fef7a23967b177cbf6cf8651fe7a811aaf35d37ce486e19ba3adeebc13cfc6eb","sha512":"0fd5790d5081873496171bad68fa98fd504503d2c3d40501934cd7b6715ca9b2a88be757faa7173898546281ea83c982d1d73a08afff028b7b60e8443629ef3e","ssdeep":"6144:6xP2NUB72LMAyev+Ot6GT2PG6B4xd6nccOu:0Pi2WlGmdOzB","tlshash":"b7a409ce73c674669396f478503f01cba97b29a2b49cc8aab1c9cce02d3455a4177f78","size":460239,"data":"","first_seen":"2025-08-07T22:44:37.644982Z","last_seen":"2025-08-07T22:44:37.644982Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/en/block","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"0b98130f014da439d3f2b1ed3d430632","sha1":"a067a3eb1ed94540bd9edad9683da25cd26b324d","sha256":"99fde80642ac1337f435b166c468b26611c73f906a618f33f7ca263646e744af","sha512":"2042fedc934deda33cf758471c84dc511d16f680738e29d3a73f6f453141e836521f456134c1d5b5cc1fd6c9fe4f145d57894bfff71606d420acf74654c30034","ssdeep":"3072:95PqrqaApkgJhv5tGirZrqaAQkgJhv5+OHR/98XDOnJFn9:fPtigLCFJgLs3Dibn9","tlshash":"4524942f660c1d3e911f2eb9c94f7d4e57bc9e2a30cb6c019c9a6e2914e3694426347f","size":220722,"data":"","first_seen":"2025-08-07T22:44:37.766986Z","last_seen":"2025-08-07T22:44:37.766986Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_fast_deep_equal_XYWIEKOD.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"0af3fe0c072a5bb3b6c731767187982f","sha1":"55db5afb57265dc92fd121fe9ae565ffb2f53b2c","sha256":"655bbe85da91e863401c6f96e24b41f5c2fe51a4245cecc2deb2b8c9600fef30","sha512":"8aab8cafc0b01c11f0b3b4bab4cb8b00ac25007153fd86b45ac8bfe325109c1a5215e89825fde4d7698a64f6c549e8140ed441ddb558d98a5654d52df9d568be","ssdeep":"","tlshash":"a41159c232e3a0d1c3e058cd1001d902f23969e9e4bca0c9d757e6b83cb2a53987672a","size":865,"data":"","first_seen":"2025-05-14T05:06:37.184748Z","last_seen":"2025-08-22T06:38:14.125712Z","times_seen":1811,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/57a15c50fa.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"a46ab5c3b2fbd72a1fcd01b45090b4e0","sha1":"13d150b68e3deb4b863f570a5f4a52b76f46b0b5","sha256":"0638c6b10ab0081a9cd48258bdae8ea6191bfe9401b6d4e7f0dbe4d33fbc0ddb","sha512":"dd1c518ada57218b970131ddbe5bd02eabcbb11b5398085d2adb9c15fd3c47845a2982de7eb2b77f54566bcab3375293a01dbab73ad3282da7ae463f31d1a244","ssdeep":"","tlshash":"5ef0a037f57261295001ccfde022ec6067271d936bd0aba8e4cf43361312672e889972","size":452,"data":"","first_seen":"2025-08-07T09:17:39.917476Z","last_seen":"2025-08-13T11:06:58.726975Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/b3bc5d68/desktop/default/analytics-030fe893.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d729d8ef4a30c3cc3efa9be22929f21","sha1":"c31584f446959a3f683324a596714214b91ac857","sha256":"68cef93aefc140bba3962feb458ee052f0cec6de1a135d8943a6e802c04a7382","sha512":"cf0214348bad3272b04d1b9fb4435a5469a708bf0008785d0ef4757b8b805d6df0d9d65dadd7ae2111ba97807965116f98d0a956a35883e4585e347f6fca7868","ssdeep":"192:nvOGjPZxnESG5+vnj33VeA9nshuXWaVwQWJ3vQF+45PQzarvO6Rx+ikm:PjPZxnESG52r3VeAhbXWaVwQWFQFf5P7","tlshash":"06029689bc88e47007ba19f8f67b9a0ae07657172406c451caf9d8c43d7ea8f5017e8d","size":8833,"data":"","first_seen":"2025-08-06T18:28:12.651205Z","last_seen":"2025-08-13T10:36:50.633862Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/b3bc5d68/desktop/default/commons/app-2f1d53e3.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c83747fb0d1196dd08f02ae8c641fff","sha1":"bff0e4dcc28bde39af9746c6fb7caad4d6972dc6","sha256":"6287be95f2921d14c3490a8a9feda99d5bdf47d83ef832a1de7c72b62526b554","sha512":"9d3e81948552a3d8b0deb65675eb8efe8af8520e3ed0df7a7db2edf191c6275d3c05ca06544bc65cc796bb740b0e9bc3b934390412e8f33d7d01b95f81480924","ssdeep":"1536:x0UiXH2DHJjIAG3wvvjE+gjmZVBKCrmhUG5YGf7BMr3y6MPp+PWKPSytt7:MXHUp0qXjE+gjmZNmlYGNMrLPtJ","tlshash":"acd3d5dcf695b03117e721b5407f150bf23a7898680ac0a4f266e8d53db888ea167f7d","size":137774,"data":"","first_seen":"2025-08-07T22:44:37.720434Z","last_seen":"2025-08-21T07:44:03.347986Z","times_seen":166,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/116cf28908.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"78dcd3710a893017aada24261887aa70","sha1":"0c9d22a29f5a8e7b6d73c8465b7f222146b16175","sha256":"778c5a40c87422e96fe993959bf76ac703e9da860bd46413dbe4fbf14567a3f2","sha512":"ac5b0bb0388d4d2d3e76b655206f4fb41de5f2854653a6acd036d227317e3d98c7f522650a89a39102d302ead16cefca23468daa6133c4dfcc3eb7d2cfc6e84b","ssdeep":"","tlshash":"b97195b871f5607477a45ece6c3724b3e2983604341cd4e4e3adca7526cb0a281a7d76","size":3802,"data":"","first_seen":"2025-08-07T09:17:39.891436Z","last_seen":"2025-08-13T11:06:58.694541Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-7V60YW2S5H\u0026cid=1104915943.1754606645\u0026gtm=45je5861v893859730za200zd893859730\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528500~104684208~104684211~104948813~105103161~105103163~105135708~105135710\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528500~104684208~104684211~104948813~105103161~105103163~105135708~105135710\u0026z=436561587","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:44:05.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:36:51 GMT","end":"Mon, 29 Sep 2025 08:36:50 GMT"},"fingerprint":{"sha1":"5F:6E:88:84:0D:03:06:C9:1C:FD:3B:27:60:0A:E4:F1:38:44:0C:17","sha256":"E7:9E:7F:BF:9C:B7:AD:C0:57:A6:D9:DE:DB:56:01:D6:5D:91:C7:10:F3:88:D7:BE:AE:36:96:71:3F:99:51:24"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-7V60YW2S5H\u0026cid=1104915943.1754606645\u0026gtm=45je5861v893859730za200zd893859730\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528500~104684208~104684211~104948813~105103161~105103163~105135708~105135710\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528500~104684208~104684211~104948813~105103161~105103163~105135708~105135710\u0026z=436561587 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-825174.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Thu, 07 Aug 2025 22:44:05 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-05-08T12:53:19.773272Z","times_seen":863700,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":76,"dns":2,"connect":15,"send":0,"wait":34,"receive":1,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-909/desktop/media_asset/76139502d31389d9792507a4f7388978.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:54.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-909/desktop/media_asset/76139502d31389d9792507a4f7388978.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-825174.top/\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:54 GMT\r\ncontent-type: application/json\r\ncontent-length: 182\r\ntraceparent: 00-40a6820f9dc3f70855b9b51f13bafa65-e5356334e26e933a-01\r\nlast-modified: Thu, 27 Feb 2025 08:55:56 GMT\r\netag: \"0a64a07e9a34e8a5b5e97e80a10888c5\"\r\nexpires: Thu, 07 Aug 2025 23:43:54 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":182,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0a64a07e9a34e8a5b5e97e80a10888c5","sha1":"82545cbc39b7dcc031dd10dea841a0b3698243d6","sha256":"7201497e7e8cdf9d35bf6998e43dcde5feea535f9828ce3ee98785781016126c","sha512":"fd619b94af18c7082a4f18556f1443081c8dc650b263c49c56f2514184d4f62e253ad87a220baa9396d7a06bc9ec3cc8ec75eee829a6c1016c4a3af2c1afa5ae","ssdeep":"","tlshash":"f0c02220e5f88823012b68bc80eaa55417504b2339021c20374c0a884b6162400149b8","first_seen":"2025-02-27T19:55:38.982186Z","last_seen":"2026-03-31T06:06:31.551304Z","times_seen":4136,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/b3bc5d68/desktop/default/Betting.Core-cd4bf9e2.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:54.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/b3bc5d68/desktop/default/Betting.Core-cd4bf9e2.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-825174.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:54 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-d64b4044fe98a69ad014f77e6fb7c850-c97786d4e778d0ae-01\r\nlast-modified: Thu, 07 Aug 2025 11:51:47 GMT\r\netag: W/\"202e512f0b5d858215b1cfaa73502332\"\r\nx-amz-meta-mtime: 1754567507.265376894\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Aug 2025 18:24:18 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 15576\r\ncache: HIT\r\nx-cached-since: 2025-08-07T18:24:18+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2187,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2187), with no line terminators","md5":"202e512f0b5d858215b1cfaa73502332","sha1":"a04a6f324ec16fe481bfd4eedcbec40343844b83","sha256":"878d4d5e29d861bbb48f8b38f61504ac773ce349ee2355b2d21d31ea31c519ae","sha512":"f6081f7b138c59c4cba5c6aa2432fa3587a149f3ff91f24c90e8bc7fce939181e0af8f714ef1247e8a44f7094f20efae2278c52876072b2ef391c2e7856ff4aa","ssdeep":"","tlshash":"1041c68539d17449473f14d984ea8472b0b92e95399d01ec6586d9d03178d86c2a6d8b","first_seen":"2025-08-07T22:44:37.464241Z","last_seen":"2025-08-08T10:01:12.396288Z","times_seen":8,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/8192228305b202797f207eeb6842287c.png","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:54.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/8192228305b202797f207eeb6842287c.png HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-825174.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 5202\r\ntraceparent: 00-692352565cd340a2e3863ad90acd592d-dae773d13c4e9e2e-01\r\nlast-modified: Wed, 26 Jun 2024 08:22:59 GMT\r\netag: \"b9a636eef54b2844b571fe7de49184a7\"\r\nexpires: Thu, 07 Aug 2025 23:43:54 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5202,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 514 x 514, 8-bit colormap, non-interlaced","md5":"b9a636eef54b2844b571fe7de49184a7","sha1":"bf653690790ced40eb3189da075a275d951d1607","sha256":"001bfcdd52b658d46543a1aec889d35b73b3909b47097cc011b95e96fc9e3743","sha512":"7b288a27a69c91697042ebb6f80f48cf25e0c6260620ee8f4b0e7afa75430b95c394c3f284445e0628b347341b89480e2e7098510bc07f4db43ecc46d893c38f","ssdeep":"96:561aQaPXOi0Ui/+kgrJtv72TgGuDG9JAsXgQrjQ:470T0PEnv7Sgc9vPQ","tlshash":"56b19e22d46fe4a53230c81b67c1820a1df839c6e72c29d0e8ed4db5e2c8b7f84883c4","first_seen":"2023-11-17T17:46:27Z","last_seen":"2026-01-13T06:38:33.673472Z","times_seen":5260,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/web-api/session","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:44:02.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-825174.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 05:20:42 GMT","end":"Sun, 05 Oct 2025 05:20:41 GMT"},"fingerprint":{"sha1":"04:60:44:F6:3A:B7:AE:C2:2B:CC:53:B8:B8:F1:17:D1:E7:20:4A:80","sha256":"A2:6A:C8:4A:60:55:06:B8:97:74:2F:51:1E:72:32:45:6B:89:A8:B6:9F:2E:04:61:41:13:93:13:A6:E7:9B:F8"}}},"request":{"raw":"GET /web-api/session HTTP/1.1\r\nHost: 1xlite-825174.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-825174.top/en/block\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nx-app-n: v3-nuxt2\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; auid=U5PiFmiVLCc87YLUA1l2Ag==; lng=en; cookies_agree_type=3; tzo=2; is12h=0; window_width=1280; che_g=988d34c4-6415-4e02-88ab-9e96c8a62889\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:44:02 GMT\r\ncache-control: no-cache, private\r\nserver-timing: dt_total;dur=0.061, p;dur=17.161, wf-uht;dur=0.029\r\nset-cookie: ua=deleted; expires=Thu, 01 Jan 1970 00:00:01 GMT; Max-Age=0; path=/\nSESSION=2e3522cba4dd1d6269f3f33499618caa; path=/; secure; httponly; samesite=lax\r\nx-dt: 909\r\nx-time-ng: 0.019, 0.019\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-08T12:53:20.27382Z","times_seen":14838021,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-07","alert":"Sinkholed","trigger":"1xlite-825174.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/hd-api/external/019886b4-a6bb-7550-8baa-b69c43685289.js","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:44:02.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-825174.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 05:20:42 GMT","end":"Sun, 05 Oct 2025 05:20:41 GMT"},"fingerprint":{"sha1":"04:60:44:F6:3A:B7:AE:C2:2B:CC:53:B8:B8:F1:17:D1:E7:20:4A:80","sha256":"A2:6A:C8:4A:60:55:06:B8:97:74:2F:51:1E:72:32:45:6B:89:A8:B6:9F:2E:04:61:41:13:93:13:A6:E7:9B:F8"}}},"request":{"raw":"GET /hd-api/external/019886b4-a6bb-7550-8baa-b69c43685289.js HTTP/1.1\r\nHost: 1xlite-825174.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-825174.top/en/block\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; auid=U5PiFmiVLCc87YLUA1l2Ag==; lng=en; cookies_agree_type=3; tzo=2; is12h=0; window_width=1280; che_g=988d34c4-6415-4e02-88ab-9e96c8a62889; SESSION=2e3522cba4dd1d6269f3f33499618caa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:44:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 88379\r\ncache-control: private, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-dt: 909\r\nx-hd-trace-id: b06ff9bc-36ff-4ce0-b18e-5062157a4600\r\nx-request-guid: 91f74c4351198c83b93f2bfee53a00d4\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.006, wf-uht;dur=0.025\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":303947,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ffb8c2027736488cd8e67fa9d1b9963b","sha1":"cf23ea5d5e5c0b24919cf7c6e587972e61b00fbe","sha256":"ef574450d5bd2a442233d12abda491511f33cdaa4078344e5bad5d80045a2913","sha512":"f8d034a722c4e84ef57ea06e437f8f0b4bbadf9f3efc6d6448c13783ea982727fd03fd2a6a5d50d935c5f0f6918d3cc8913cda5743a34c5279c2ebe8ae579753","ssdeep":"6144:TjL5AVzkqHhEBhWqZKW1wqWiXx7GF4s7Ga5MaiWVIufJJYJCCt/t:T/epeYZ6w4x7GF4s7Ga5MaiWVIufJJYZ","tlshash":"b15473826587e0c7828c5e2b963aac13d508dc7d9d7c9f08d948ef5cac737b72766818","first_seen":"2025-08-07T22:44:37.487433Z","last_seen":"2025-08-07T22:44:37.487433Z","times_seen":1,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-07","alert":"Sinkholed","trigger":"1xlite-825174.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:44:03.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:44:03 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63920\r\ntraceparent: 00-91a380090c61a00e227dc78d2801bb70-de8f99159e7e80a0-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"a65527fcb58f66a7cfbc0e6b160538b4\"\r\nexpires: Thu, 07 Aug 2025 14:39:23 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 3132\r\ncache: HIT\r\nx-cached-since: 2025-08-07T21:51:51+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63920,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63920, version 1.0","md5":"a65527fcb58f66a7cfbc0e6b160538b4","sha1":"45d260e7fa343401b5bb0df982a014f53e2d253b","sha256":"fb13c3a1cbac60649b76f7d7f85c1645d35ac69b85ce5f4eb0692505ecc2cd45","sha512":"8448e96abe326f43285b2d8b0d75beaf0e9c9e051e8754841d907b30eb303ae24c447011306da6a1703b9192d02aeff76a4517bdf94ec6e7dc360ce3538802af","ssdeep":"1536:UIG3hJMkJeK8ic5iZGnJ4URj9vqXOQ6UqYdbuA5RVK1:UL31hcLlRjDQ6Uq4W1","tlshash":"7f5302df8de32a148ff78772668885f4f4927c68898c8e7345526a8907f07d6b96c04f","first_seen":"2023-05-07T18:04:27Z","last_seen":"2026-05-08T02:24:37.977914Z","times_seen":10410,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/b3bc5d68/desktop/default/analytics-030fe893.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:44:04.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/b3bc5d68/desktop/default/analytics-030fe893.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-825174.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:44:04 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-41ce32b330752156394f039f6e405810-34459cb8ada4f937-01\r\nlast-modified: Thu, 07 Aug 2025 11:51:47 GMT\r\netag: W/\"5d729d8ef4a30c3cc3efa9be22929f21\"\r\nx-amz-meta-mtime: 1754567507.268376905\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Aug 2025 12:15:47 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 37556\r\ncache: HIT\r\nx-cached-since: 2025-08-07T12:18:08+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8833,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8833), with no line terminators","md5":"5d729d8ef4a30c3cc3efa9be22929f21","sha1":"c31584f446959a3f683324a596714214b91ac857","sha256":"68cef93aefc140bba3962feb458ee052f0cec6de1a135d8943a6e802c04a7382","sha512":"cf0214348bad3272b04d1b9fb4435a5469a708bf0008785d0ef4757b8b805d6df0d9d65dadd7ae2111ba97807965116f98d0a956a35883e4585e347f6fca7868","ssdeep":"192:nvOGjPZxnESG5+vnj33VeA9nshuXWaVwQWJ3vQF+45PQzarvO6Rx+ikm:PjPZxnESG52r3VeAhbXWaVwQWFQFf5P7","tlshash":"06029689bc88e47007ba19f8f67b9a0ae07657172406c451caf9d8c43d7ea8f5017e8d","first_seen":"2025-08-06T18:28:12.651205Z","last_seen":"2025-08-13T10:36:50.633862Z","times_seen":51,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/b3bc5d68/desktop/default/vendors/plugins.v-tooltip-43e84f42.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:54.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/b3bc5d68/desktop/default/vendors/plugins.v-tooltip-43e84f42.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-825174.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:54 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-221d91771856ff5bd1d5af203fcf0f04-07d4ae3a2687b6f9-01\r\nlast-modified: Thu, 07 Aug 2025 11:51:48 GMT\r\netag: W/\"88d2e8013367a63b23424c7dd15dbd1a\"\r\nx-amz-meta-mtime: 1754567507.286376969\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Aug 2025 12:15:44 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 37556\r\ncache: HIT\r\nx-cached-since: 2025-08-07T12:17:58+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":76824,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65476)","md5":"88d2e8013367a63b23424c7dd15dbd1a","sha1":"0b5af342eea9ad8f298f60728b98cbfb19d6f64b","sha256":"3f75170cf3c9a566c77e74756896e8250da5d76073f5b1a2f6f61d3a0293dc67","sha512":"f2599ada1e889c6f83f61c6f1a09b6c2059a3ab7d9a59a10c01863482b532060c4259f43201fe0d311d3a80601a2d066add9e7fd4a17aa04555f727236f99177","ssdeep":"1536:HKb/midlpXHhP7aVRTPRSCv1MHDWdRfm5eH:HE/mUBPoRTP8w+WRfmK","tlshash":"5673a74e72d0f0b203e7b1b5402f620fb2776558a40ae454b2b1e6d4ac3da5db267e3d","first_seen":"2025-08-06T18:28:12.614407Z","last_seen":"2025-08-21T07:44:03.353054Z","times_seen":170,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/b1f097c39d.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:55.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/b1f097c39d.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:55 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-9bd3638c6ff4b3028aac0ac7c0667fa4-7fa7dc7c26062e06-01\r\nlast-modified: Thu, 07 Aug 2025 06:36:52 GMT\r\netag: W/\"3841bad3970b39a37752037572cf4ab7\"\r\nx-amz-meta-mtime: 1754548541.933596148\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Aug 2025 06:46:01 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 57202\r\ncache: HIT\r\nx-cached-since: 2025-08-07T06:50:33+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1166,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1165)","md5":"3841bad3970b39a37752037572cf4ab7","sha1":"d9decad41aa913fff740d8f6eedbe3a175db032f","sha256":"1549ff746e6a7a035c63deac4d6a8c196c2d6e8fc05a3718af113ecd65613e4a","sha512":"f9c11cc58c7b4922d00ff0c1cfd7f1f57eef21dd04dc3833e9a50855b6dcc0ce62e09b84e6e791c75b8f5486c202fb3c4885606911d7fa13070e23f8be73d473","ssdeep":"","tlshash":"5821a7303034e52b0fff0bd8c8331854f72c2258a73565d176cc6fa102aa506529eb77","first_seen":"2025-08-07T09:17:39.942596Z","last_seen":"2025-08-13T11:06:58.684122Z","times_seen":49,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/captcha-api/assets/hunt-captcha.js","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:44:02.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-825174.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 05:20:42 GMT","end":"Sun, 05 Oct 2025 05:20:41 GMT"},"fingerprint":{"sha1":"04:60:44:F6:3A:B7:AE:C2:2B:CC:53:B8:B8:F1:17:D1:E7:20:4A:80","sha256":"A2:6A:C8:4A:60:55:06:B8:97:74:2F:51:1E:72:32:45:6B:89:A8:B6:9F:2E:04:61:41:13:93:13:A6:E7:9B:F8"}}},"request":{"raw":"GET /captcha-api/assets/hunt-captcha.js HTTP/1.1\r\nHost: 1xlite-825174.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-825174.top/en/block\r\nCookie: platform_type=desktop; auid=U5PiFmiVLCc87YLUA1l2Ag==; lng=en; cookies_agree_type=3; tzo=2; is12h=0; window_width=1280; che_g=988d34c4-6415-4e02-88ab-9e96c8a62889; SESSION=2e3522cba4dd1d6269f3f33499618caa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:44:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: public, max-age=300\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-dt: 909\r\nx-request-id: c7b974887a3c37c77b5a04ecfdc2638b\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.057, wf-uht;dur=0.017\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89083,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"46a4a85022660df71224540bc365be7f","sha1":"c3940cabd0d874cb9e7ebe3a55a9ba0d09e27d64","sha256":"a5c4afed6bd868553d8974f7ef6cbb8d473a1effc473bfc3709e732745ea12b5","sha512":"3ab167d04cf4e801ae55b22f16aa596bcd6a49d4bdac1137d7508fb0275a451cf6eca8113c6640dee150311f91d911d75462d8ad67e9d760ce1d2fb1555d794f","ssdeep":"1536:A5ZQ8SJ/xo/NkvZku6u/u+umj9jCCKXPcLXu2j03eQj03e4C4Jy6A8B5j03eF4ie:AfQ8SJZKCvZOCQPB2j03eQj03e4C4Jyr","tlshash":"199352403cd494d01bd34c39b3ba3c72e054c557fa880e2a55a9d90f5aab92eb3f6d32","first_seen":"2025-07-29T04:15:45.312421Z","last_seen":"2025-08-19T12:05:43.234536Z","times_seen":304,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-07","alert":"Sinkholed","trigger":"1xlite-825174.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/f0f8f53033.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:52.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/f0f8f53033.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-825174.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:53 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-779dea21fb2e7179231cd9610552e7c1-b7a9b856ce2eb091-01\r\nlast-modified: Thu, 07 Aug 2025 06:36:52 GMT\r\netag: W/\"fb90f087eeaea6cbdb4db28836e69b9d\"\r\nx-amz-meta-mtime: 1754548541.934596192\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Aug 2025 18:21:48 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 15725\r\ncache: HIT\r\nx-cached-since: 2025-08-07T18:21:48+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2293,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2292)","md5":"fb90f087eeaea6cbdb4db28836e69b9d","sha1":"b54c508226e041bc2dad3326457abe75637593c5","sha256":"d7621980f15c44d4dd897010179d73ff6f82564dcd01165c7372fa8edab18727","sha512":"1f2a25d210751865e2e8d085a9957cce9c2c261876cf92b273a840dbb4c219dcee205ada6742dd43b9ea0441cc8fb7c871837cfbd1a3dc48225b628cb33eecfc","ssdeep":"","tlshash":"0e41cbdeac74e5761a33e032d6881eb95530b423c93159c3f0cde32615c7a921db2ead","first_seen":"2025-08-05T10:20:54.838571Z","last_seen":"2025-08-13T11:06:58.700183Z","times_seen":70,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":140,"dns":12,"connect":11,"send":0,"wait":6,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:53.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:53 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63748\r\ntraceparent: 00-7d0b68e321da583dc5af167c1994d134-6794ead4ebcb42d7-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"6887b6f24414dbc612dbf42ccdc76b70\"\r\nexpires: Thu, 16 Jan 2025 10:32:14 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1949\r\ncache: HIT\r\nx-cached-since: 2025-08-07T22:11:24+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63748, version 1.0","md5":"6887b6f24414dbc612dbf42ccdc76b70","sha1":"8068d3abfbc6cbf35b55919da45b1f4d2d136238","sha256":"fc5c015fc32518f1ed810fa84ca28941eb9d5a3c81acc8df69a4dbbeedef7b0c","sha512":"00f08f9dd648972c9571547e06172d5505dd13f577fe2e65a497d3856172807ac11c996984e4138d2eb2ac784257fe61864aee15752fe9e9e76f98db931e0c2a","ssdeep":"1536:KtdCG+Dz6RxAx457zL0ASEn091Y0H1mTOzI/OzMFOoTX4u:MMG+yRpzN091Y0VtI/pOoTt","tlshash":"8b5302485551fae2cac3073c0f7a89dbb37a776d519224cd98b69f830d37964bea2070","first_seen":"2023-06-14T19:15:49Z","last_seen":"2026-05-07T11:29:51.77598Z","times_seen":10553,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:53.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:53 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63920\r\ntraceparent: 00-4efff88ec6d3ecd0cab53ed0653000cc-1c31eab8f353b494-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"a65527fcb58f66a7cfbc0e6b160538b4\"\r\nexpires: Thu, 07 Aug 2025 14:39:23 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 3122\r\ncache: HIT\r\nx-cached-since: 2025-08-07T21:51:51+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63920,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63920, version 1.0","md5":"a65527fcb58f66a7cfbc0e6b160538b4","sha1":"45d260e7fa343401b5bb0df982a014f53e2d253b","sha256":"fb13c3a1cbac60649b76f7d7f85c1645d35ac69b85ce5f4eb0692505ecc2cd45","sha512":"8448e96abe326f43285b2d8b0d75beaf0e9c9e051e8754841d907b30eb303ae24c447011306da6a1703b9192d02aeff76a4517bdf94ec6e7dc360ce3538802af","ssdeep":"1536:UIG3hJMkJeK8ic5iZGnJ4URj9vqXOQ6UqYdbuA5RVK1:UL31hcLlRjDQ6Uq4W1","tlshash":"7f5302df8de32a148ff78772668885f4f4927c68898c8e7345526a8907f07d6b96c04f","first_seen":"2023-05-07T18:04:27Z","last_seen":"2026-05-08T02:24:37.977914Z","times_seen":10410,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-909/desktop/media_asset/6bd3d83cc53fe65daea80c7423fe18bc.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:54.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-909/desktop/media_asset/6bd3d83cc53fe65daea80c7423fe18bc.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-825174.top/\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:54 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-efba8edbff57c2c44e8af66637bb2d40-cf0399169df4bab1-01\r\nlast-modified: Thu, 27 Feb 2025 09:04:32 GMT\r\netag: W/\"811ce3b7877d19901e45430cb6523d62\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 07 Aug 2025 23:43:54 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\ncache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14232,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"811ce3b7877d19901e45430cb6523d62","sha1":"16a905115a678fdef3923f91c6f76cbab613e84d","sha256":"10fbb74dbac63abfe9c4f5a77abc03757ef3527a479d4ae70dc977b515eec8cb","sha512":"21a43d793bd4200ff9972a793442fe492b6a1699f20053c4f01695f69f918685bf30f03f778346c2f61bac40d2e51bb25360d0ffc15448200c666ab4edf38e65","ssdeep":"96:BDkGHVTSY15XWGsQfGJo/JamRKkmP9kDeD3LzwCyi8TunZh:bVTS1KXR9RKkekDGoCyXOD","tlshash":"59523d65f6f40c33113b98ae65f76a8953948f07aa6d7c293b9c2b4c1f1462e0076d3e","first_seen":"2025-02-27T19:55:39.119779Z","last_seen":"2026-01-05T12:50:32.841809Z","times_seen":4543,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_localforage_FJKG5M2E.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:55.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_localforage_FJKG5M2E.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:55 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-1f2866b92ed433ddb892ee516c4118b4-7689b49419ab598c-01\r\nlast-modified: Thu, 07 Aug 2025 07:06:07 GMT\r\netag: W/\"02cf95f00794b77df34632e34a59c5be\"\r\nx-amz-meta-mtime: 1754549916.309612546\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Aug 2025 08:26:21 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 51454\r\ncache: HIT\r\nx-cached-since: 2025-08-07T08:26:21+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30277,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (30255)","md5":"02cf95f00794b77df34632e34a59c5be","sha1":"b64889fb6cbe78a141688ea761a627997ef8a8af","sha256":"bf78b7b3dd6ecbdea04c575edfb6022ed1b2e98c7a9cb9f02ab851ca638f1b83","sha512":"6bcdddd806b94dc8964c98ed5c8481f1ac5e74c707fe5d48760bd7d2edc2b8b52e58b3d7910d0ae316b3e196924d32734ccd5ffc33377df8de471e43c99fd6d3","ssdeep":"768:+DKAOpvMewHFuM96WwZACjzz46zSTKsBE1OvFXfX1UXk:+m8uPW43zEIOvdlUU","tlshash":"23d2c68c7799f02683bb3070907f580ef237a912594d90a0e591e5f86dbd75c822bfad","first_seen":"2025-05-14T05:06:37.193247Z","last_seen":"2025-08-22T06:38:14.178861Z","times_seen":1811,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-ui/3.3.340/Desktop/Default/merged.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:52.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-ui/3.3.340/Desktop/Default/merged.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-825174.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:53 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-799e2b69384fc783f4ef84f834d337fa-a998cbce7580662f-01\r\nlast-modified: Thu, 07 Aug 2025 13:56:34 GMT\r\netag: W/\"1dac6e5ac3d9fa5489fa147bb76ce29f\"\r\nx-amz-meta-mtime: 1754574961.450790377\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Aug 2025 18:21:47 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 15726\r\ncache: HIT\r\nx-cached-since: 2025-08-07T18:21:47+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1316405,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a1812a2626b70a7807beab5cdc2bfc8c","sha1":"421f915c7ded2ce3eab1a5f0703d7ddf6f77b540","sha256":"23a1b8cc3acdc5e635dfbecf4f8c023b2efea462a0962c2b45cf179274783b2f","sha512":"18f177898433b9e6f7d6148cb45882e8c88a8217082fd79249c8634455d7708780726ba21ccd9b59c5c235a88b16234dbc01329fc98a69bc5435bcf8c1ce2bb1","ssdeep":"24576:VAxEvoQ30ffnqKvmfpBxJvYyRe2eRtTGxvON7ON:Vl","tlshash":"fd25851cf24e91343e37d624a2949ffc6220b7139a131c7ef8a6415a0ec3553b5a6dbb","first_seen":"2025-08-07T22:44:37.515197Z","last_seen":"2025-08-08T10:01:12.317241Z","times_seen":8,"resource_available":false,"data":null}},"time_used":612,"timings":{"blocked":298,"dns":15,"connect":1,"send":0,"wait":1,"receive":0,"ssl":288},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/version.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:52.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /version.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-825174.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:53 GMT\r\ncontent-type: application/json\r\ncontent-length: 11\r\ntraceparent: 00-c2cd37d80b544ac02bf60be46b1914a8-f30dca4abb3480b5-01\r\nlast-modified: Thu, 07 Aug 2025 11:59:14 GMT\r\netag: \"9462e67193d62a2b9669de2ec8906294\"\r\nx-amz-meta-mtime: 1754567954.638983953\r\nexpires: Thu, 07 Aug 2025 12:03:13 GMT\r\ncache-control: max-age=60\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 19\r\ncache: HIT\r\nx-cached-since: 2025-08-07T22:43:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text","md5":"9462e67193d62a2b9669de2ec8906294","sha1":"caf71ced38a76dce00e6a82061ed7067571b2a49","sha256":"369a5b79e7d9ff1dd441b49d6d046975e5acca4c50b44e25c16f86287df482a3","sha512":"39781e1e5524b1f7d82aed606d82c5e0c0ecad2dbb906f0e4f389a8cc19f9a1d3d051cf3615d03ca579715f6380fba3584806e55437cfb41b68c85a947422441","ssdeep":"","tlshash":"e250000c00000cc030000f030030c0300c000f0cc0000c003033000c00f000000c3c00","first_seen":"2025-08-07T22:44:37.518169Z","last_seen":"2025-08-08T10:01:12.363578Z","times_seen":8,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":6,"connect":11,"send":0,"wait":1,"receive":1,"ssl":275},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/b3bc5d68/desktop/default/vendors/plugins.vue-notification-55b134c3.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:54.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/b3bc5d68/desktop/default/vendors/plugins.vue-notification-55b134c3.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-825174.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:54 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-af6922d426571c8b32c8a262864a8393-e3a323349944fc29-01\r\nlast-modified: Thu, 07 Aug 2025 11:51:48 GMT\r\netag: W/\"f60338d05b6644faa04b71bee0b8ac19\"\r\nx-amz-meta-mtime: 1754567507.287376972\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Aug 2025 12:15:40 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 37556\r\ncache: HIT\r\nx-cached-since: 2025-08-07T12:17:58+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12563,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12563), with no line terminators","md5":"f60338d05b6644faa04b71bee0b8ac19","sha1":"6e7d8644e0863ff5f8e1f97fb6d9778434a4e8fa","sha256":"cdf6aa2a53eb67c99887eadb05959cb7c77ec667e9d31bdd5c68e77308d4ef1a","sha512":"a54d03255c505c65c8f089c909d92bb4b1c9f4313e394343fdfd0c55769a1832b32e245602acd48ff1788b934e9351c7dcc5a54e636e61eef199863a63506651","ssdeep":"192:jU1hQXHv3CbfKpqEVwhSIkrReP+SdHtfGA2D3ow5EE9bJ52bFZLy2mp4ilVh:jn3CmpcDkAP+S/fGAWf5VbWbLy2mmijh","tlshash":"5d4296ceb2c2b4650be760b6402f110af136a96869ab54d4f3b1d4f2adb564c413bf39","first_seen":"2025-08-06T18:28:12.67104Z","last_seen":"2025-08-21T07:44:03.331678Z","times_seen":170,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/en/block","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-07T22:43:52.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-825174.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 05:20:42 GMT","end":"Sun, 05 Oct 2025 05:20:41 GMT"},"fingerprint":{"sha1":"04:60:44:F6:3A:B7:AE:C2:2B:CC:53:B8:B8:F1:17:D1:E7:20:4A:80","sha256":"A2:6A:C8:4A:60:55:06:B8:97:74:2F:51:1E:72:32:45:6B:89:A8:B6:9F:2E:04:61:41:13:93:13:A6:E7:9B:F8"}}},"request":{"raw":"GET /en/block HTTP/1.1\r\nHost: 1xlite-825174.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; auid=U5PiFmiVLCc87YLUA1l2Ag==; lng=en; cookies_agree_type=3; tzo=2; is12h=0\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 203 Non Authoritative\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:52 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 301279\r\naccept-ranges: none\r\nserver-timing: dt_total;dur=0.003, total;dur=138;desc=\"Nuxt Server Time\"\r\nset-cookie: gw-mm=; Path=/; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Secure; SameSite=None; Partitioned\nlng=en; Path=/\ncookies_agree_type=3; Path=/\ntzo=2; Path=/\nis12h=0; Path=/\r\nx-dt: 909\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"203","status_text":"Non Authoritative","fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":301279,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (57341)","md5":"0edd1f36b506d67f414767985b77bd96","sha1":"86b117de9bd3874cf3c2e95e8a0bce4cf75e4f56","sha256":"43ea39e67aaf86067bbb45f5a4392b6eca04ee6f1fe065f169f5a0ac268f23b9","sha512":"d32b227f076566dfe0d4e85e2edcc3025b2d67cb33791b2c65e0f1f04d56cc94e7a05c49fe9a9a90e3e0c02c87fd12ac5e82c99e6005835fdabbcac0e1cbecf1","ssdeep":"6144:0EO1mFV75xWt5JkyunibMhYIpeWPtigLCFJgLs3Dibns:0EO1mFV75xWt5JkyunibMhzpeWViSCFJ","tlshash":"7054c52ea90c4d3e551f2a75c54f7e5e1bbcda2a649a2d01dcad6f6810d378007a383f","first_seen":"2025-08-07T22:44:37.524021Z","last_seen":"2025-08-07T22:44:37.524021Z","times_seen":1,"resource_available":false,"data":null}},"time_used":334,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":223,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-07","alert":"Sinkholed","trigger":"1xlite-825174.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_css_fa250b.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:52.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_css_fa250b.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-825174.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:53 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-88d8a41fe629e477c4ab12903539a261-c20d0e8e9b5943ab-01\r\nlast-modified: Wed, 06 Aug 2025 14:37:13 GMT\r\netag: W/\"6930036c51ac0d6da2a569c3299320df\"\r\nx-amz-meta-mtime: 1754490863.453344195\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Aug 2025 02:54:21 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 71372\r\ncache: HIT\r\nx-cached-since: 2025-08-07T02:54:21+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4166,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3743)","md5":"6930036c51ac0d6da2a569c3299320df","sha1":"c36bc325c530bd7ee888334bc968ea995122e809","sha256":"fa250b633eacd94488fa8737792046daac13b544b34c0f8964d0baad556b3dd5","sha512":"4199499a932a52a904cb42db970e438d170faa2f3c8fa72d07215cf8d4f857e8d98fc16f4b8e2411a42a930b594585b2b30cc24ecedf44d8320aacd515dc1af4","ssdeep":"48:72e0VsMQbBQhzRVRlHLHYOR8avyVwnHVqkvK5LGsagLGsBTufum1M:Z0EbBQ77VHY+DKu1WQxKufum1M","tlshash":"1b81658ab8b8c1766d27e81302898e7e4235f9ead9151c9ef2de471714c3e5240658bc","first_seen":"2025-08-06T17:49:53.362823Z","last_seen":"2025-08-13T11:06:58.698532Z","times_seen":72,"resource_available":false,"data":null}},"time_used":610,"timings":{"blocked":298,"dns":10,"connect":11,"send":0,"wait":1,"receive":0,"ssl":260},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-909/desktop/media_asset/4f434a8099dbd7e6bba50d6cd0b7c115.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:55.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-909/desktop/media_asset/4f434a8099dbd7e6bba50d6cd0b7c115.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-825174.top/\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:55 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-1be053aa0cdff17e455966e4880f5f9c-d53ee8134f136d91-01\r\nlast-modified: Mon, 21 Jul 2025 00:54:40 GMT\r\netag: W/\"b5a6dbdf3f12e11d0c5275b2ca6dc739\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 07 Aug 2025 23:42:00 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\ncache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3091,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b5a6dbdf3f12e11d0c5275b2ca6dc739","sha1":"a8495df42a8f1e18c12dc1723660d062bbc8fb6b","sha256":"8febfd79d9b9b1298af34575340a4288d6d5b01ee4e50c57f5a5509d602412f2","sha512":"813327003eefeef8e9772adc05530b46f52fc044d76f5ed1393854052836ae2f89a0118697367681afbab9084b4e215c3120bf09ea2713553a7e8286ca9afe2d","ssdeep":"","tlshash":"85514b4df6e41c33012f19bdc0f76a6993d84f4f694a7c283a9d6c4d1bd451900aad3e","first_seen":"2025-07-21T03:11:29.13175Z","last_seen":"2026-01-11T03:06:49.449217Z","times_seen":2816,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/b3bc5d68/desktop/default/css/f4a6b4a1.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:52.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/b3bc5d68/desktop/default/css/f4a6b4a1.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-825174.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:53 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-f8b65622a77996c351e0cfee313ab965-01a3b59d95941ded-01\r\nlast-modified: Thu, 07 Aug 2025 11:51:48 GMT\r\netag: W/\"c35e1f3095c9bcb152c7c7eaa08a6b30\"\r\nx-amz-meta-mtime: 1754567507.273376922\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Aug 2025 19:20:41 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 12129\r\ncache: HIT\r\nx-cached-since: 2025-08-07T19:21:44+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40934,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (40934), with no line terminators","md5":"c35e1f3095c9bcb152c7c7eaa08a6b30","sha1":"20e6aea8052d81338abb0d11b42efbf536dce498","sha256":"4242090978c2cf4e48cbf134bf93438332b3571ca890133037e7f52a659c3c57","sha512":"0861069db2acce2f2e112d9527c49cf146a340d4efc4f3b008506031eb022cf67da8cabd63d94f42ff2289fff1473d6618381f9d274c86899188f38584acaf0c","ssdeep":"768:S/TaXC/9ApQzOofleFAE1/aW1XuJV2/DF0TcNh5MQe43GU5Kf:KTEC/9ApQzlfleFAE1/aWz3GUI","tlshash":"0603215eeca8d1760d3bf521a288be3c01b0f42ade314d97e50e57a118c3f9b15e0e69","first_seen":"2025-08-07T22:44:37.532656Z","last_seen":"2025-08-13T10:36:50.664413Z","times_seen":48,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":122,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_auth/en/dictionary_6532f52674837885437d0c36e7f2e9fa.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:54.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_auth/en/dictionary_6532f52674837885437d0c36e7f2e9fa.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-825174.top/\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-54e480d4c17470310a73d153318cb708-156f8fb997853aeb-01\r\nlast-modified: Fri, 18 Jul 2025 12:07:12 GMT\r\netag: W/\"ff494c258f5860173099ad3e5239fc34\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Fri, 18 Jul 2025 13:34:07 GMT\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 229\r\ncache: HIT\r\nx-cached-since: 2025-08-07T22:40:05+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9639,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ff494c258f5860173099ad3e5239fc34","sha1":"a9e8142f1fb22d54008215268bd107f33880ab68","sha256":"1be6ea961911a3d68be1c53da90c5d29a372252eef7be68178d35c43fba20ce1","sha512":"2c95793e5722e411c0e0e68949eded3263d3e4f78b5d22a37afaafa33f1b51f87566216af1102a89824ef3f3af9a836b105909a0b7d308102bb255dddee0fb22","ssdeep":"192:HvhX8mmq4spyU7SKi5mz8jrUoIOFJM1YABslAByZhqV+2p+QvM9pKTp:HvhX8mmqdsU7ziUmJM1YABsOByZh4nMM","tlshash":"4112f11a817a0c57cfdbca827c495b5ce3a409b446b94c6d8cf9c23e03a2765d7af354","first_seen":"2025-07-18T14:10:38.030956Z","last_seen":"2025-08-22T14:22:43.540938Z","times_seen":540,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-909/desktop/media_asset/b7f7d28b254c8889b566f8eb2f52a499.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:54.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-909/desktop/media_asset/b7f7d28b254c8889b566f8eb2f52a499.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-825174.top/\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:54 GMT\r\ncontent-type: application/json\r\ncontent-length: 747\r\ntraceparent: 00-9e1e00c162237f48b234c471943fd31c-eb390bd0bf9efd25-01\r\nlast-modified: Thu, 27 Feb 2025 13:27:06 GMT\r\netag: \"f4e90636ec9cff061c4301b3cefdd0d6\"\r\nexpires: Tue, 29 Jul 2025 16:05:33 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\ncache: REVALIDATED\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":747,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f4e90636ec9cff061c4301b3cefdd0d6","sha1":"c506efe9c3672c58434ea10021dab0ad81b1ad98","sha256":"30666f138ccc12735e2f8a6405ddce4a3d8756b9445e3b2732fa2970f14dbcea","sha512":"2db1a1a4419db47b4256906f9c660b85479bb83d2ab0757d1b1c24cdf94d97bdc4a7140d5d8ea31cbf612a77ba1ae6ef46bbd77eb42d24b6d83afebbc46c9216","ssdeep":"","tlshash":"2a012d94bde4083719374ca981a2595d63844b0398297c087adf3d4c5b2096d056e9be","first_seen":"2025-03-01T06:06:39.041672Z","last_seen":"2025-12-04T11:53:51.978889Z","times_seen":4943,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:54.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-825174.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 05:20:42 GMT","end":"Sun, 05 Oct 2025 05:20:41 GMT"},"fingerprint":{"sha1":"04:60:44:F6:3A:B7:AE:C2:2B:CC:53:B8:B8:F1:17:D1:E7:20:4A:80","sha256":"A2:6A:C8:4A:60:55:06:B8:97:74:2F:51:1E:72:32:45:6B:89:A8:B6:9F:2E:04:61:41:13:93:13:A6:E7:9B:F8"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-825174.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-825174.top/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: b6f2dfd1-7bd6-4835-80cc-692915c3fe90\r\nContent-Length: 98\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; auid=U5PiFmiVLCc87YLUA1l2Ag==; lng=en; cookies_agree_type=3; tzo=2; is12h=0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:54 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\nx-dt: 909\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.112, wf-uht;dur=0.011\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"5f5d5bcbffd28012939b87744ca71677","sha1":"f188fdb8ec252cdc955b15036c6cc2718efa7829","sha256":"c58ba08206fa089c2053e51749e628b339c3c3a43b426c316a9d857fb9c6bbd1","sha512":"a2d49d81ba441d5918bd9911b228d84942539a8f195feaca4d59ef1f8269c6b0b57b9c62353ed25ffe7504dbb33ac3ac55d3d1512d87cb3acb851bdec48033a6","ssdeep":"","tlshash":"147000002208a0a000208e82b308282c082e8202022080222080ea38022aaa0020a023","first_seen":"2025-08-07T22:44:37.543797Z","last_seen":"2025-08-07T22:44:37.543797Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-07","alert":"Sinkholed","trigger":"1xlite-825174.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:54.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-825174.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 05:20:42 GMT","end":"Sun, 05 Oct 2025 05:20:41 GMT"},"fingerprint":{"sha1":"04:60:44:F6:3A:B7:AE:C2:2B:CC:53:B8:B8:F1:17:D1:E7:20:4A:80","sha256":"A2:6A:C8:4A:60:55:06:B8:97:74:2F:51:1E:72:32:45:6B:89:A8:B6:9F:2E:04:61:41:13:93:13:A6:E7:9B:F8"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-825174.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-825174.top/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: b6f2dfd1-7bd6-4835-80cc-692915c3fe90\r\nContent-Length: 90\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; auid=U5PiFmiVLCc87YLUA1l2Ag==; lng=en; cookies_agree_type=3; tzo=2; is12h=0; window_width=1280\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:54 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\nx-dt: 909\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.095, wf-uht;dur=0.011\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ae4cc22a4432f3a7a610b427d41b7349","sha1":"31ca7a6798c0a5a83e41e2dbc7e66360904a43da","sha256":"1d38d52e1f9946fedaae9be5cc938541b324f2b46929ff9bdccc15d7703092ab","sha512":"a1d9a28211b17e99a859c5f988a171db4cb77d533bc3e2feef7686d48581652dc6ebf97c9f6716cfbd125cef6b105a1569780755f2c5fc33009886596aea4efa","ssdeep":"","tlshash":"52700000232020800aa00a330208282c08388823802002202280a0300028ae0000e023","first_seen":"2025-08-07T22:44:37.547745Z","last_seen":"2025-08-07T22:44:37.547745Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-07","alert":"Sinkholed","trigger":"1xlite-825174.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/57a15c50fa.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:55.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/57a15c50fa.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:55 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 452\r\ntraceparent: 00-348d818dffd0babcaa4fbeb269781770-bf270f9452282d0e-01\r\nlast-modified: Thu, 07 Aug 2025 06:36:52 GMT\r\netag: \"a46ab5c3b2fbd72a1fcd01b45090b4e0\"\r\nx-amz-meta-mtime: 1754548541.932596103\r\nexpires: Fri, 08 Aug 2025 21:58:03 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2752\r\ncache: HIT\r\nx-cached-since: 2025-08-07T21:58:03+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":452,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (451)","md5":"a46ab5c3b2fbd72a1fcd01b45090b4e0","sha1":"13d150b68e3deb4b863f570a5f4a52b76f46b0b5","sha256":"0638c6b10ab0081a9cd48258bdae8ea6191bfe9401b6d4e7f0dbe4d33fbc0ddb","sha512":"dd1c518ada57218b970131ddbe5bd02eabcbb11b5398085d2adb9c15fd3c47845a2982de7eb2b77f54566bcab3375293a01dbab73ad3282da7ae463f31d1a244","ssdeep":"","tlshash":"5ef0a037f57261295001ccfde022ec6067271d936bd0aba8e4cf43361312672e889972","first_seen":"2025-08-07T09:17:39.917476Z","last_seen":"2025-08-13T11:06:58.726975Z","times_seen":49,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:44:06.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-825174.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 05:20:42 GMT","end":"Sun, 05 Oct 2025 05:20:41 GMT"},"fingerprint":{"sha1":"04:60:44:F6:3A:B7:AE:C2:2B:CC:53:B8:B8:F1:17:D1:E7:20:4A:80","sha256":"A2:6A:C8:4A:60:55:06:B8:97:74:2F:51:1E:72:32:45:6B:89:A8:B6:9F:2E:04:61:41:13:93:13:A6:E7:9B:F8"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-825174.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-825174.top/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: b6f2dfd1-7bd6-4835-80cc-692915c3fe90\r\nContent-Length: 109\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; auid=U5PiFmiVLCc87YLUA1l2Ag==; lng=en; cookies_agree_type=3; tzo=2; is12h=0; window_width=1280; che_g=988d34c4-6415-4e02-88ab-9e96c8a62889; SESSION=2e3522cba4dd1d6269f3f33499618caa; _ga_7V60YW2S5H=GS2.1.s1754606645$o1$g0$t1754606645$j60$l0$h1860095263; _ga=GA1.1.1104915943.1754606645\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:44:06 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\nx-dt: 909\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.093, wf-uht;dur=0.012\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c0d5906dd918d97614987e305bde4078","sha1":"18d06b9bfbaa1bc9c3f6fad6c6a931d2d2a9ae8c","sha256":"e59e10cd93dd9ebea6a9a8a9ead302628a56f250733042280b1d0dcb2cfc13e2","sha512":"a975f1177b972178b6d29798f1b2d1ac44cdf48ca172512d778e0a12e39afe0cfe7b376f29cdd37e07be4c25a0188826d04458799df344726c67b84c50306696","ssdeep":"","tlshash":"8f700002220002c00220020a8228282822aa803b2800e0e22080a8300020ea0008e033","first_seen":"2025-08-07T22:44:37.553819Z","last_seen":"2025-08-07T22:44:37.553819Z","times_seen":1,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-07","alert":"Sinkholed","trigger":"1xlite-825174.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/c0e02032d1.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:52.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/c0e02032d1.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-825174.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:53 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-ab3e6236fb89ee59e1fa34a0c49b8345-d0638d3898ceaa8d-01\r\nlast-modified: Thu, 07 Aug 2025 06:36:52 GMT\r\netag: W/\"3d3e04f603cc58802ff96240abbdc3aa\"\r\nx-amz-meta-mtime: 1754548541.933596148\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Aug 2025 21:27:02 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 4611\r\ncache: HIT\r\nx-cached-since: 2025-08-07T21:27:02+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11073,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (11072)","md5":"3d3e04f603cc58802ff96240abbdc3aa","sha1":"e7e6a5d59c97236922354b40d288736f034a1ce3","sha256":"611f7a963cd4aa278f1ba51f2401247df8c658929b76bfdce45bec08be83d7bd","sha512":"7e83129353390d84ab95d6f7e877ffd699e3b8fdb735ca7b5500f23b1a1aa907f0b14429479b7434c5d68c44699444d1c26bf5a47df750d3dc13986cb98049dd","ssdeep":"192:mLhAtZO73iyDDW7qE/cVgnmnh8lbIJkUgPuiPBvDDQ7q+tI84gE:QA7OLisDUqE/q8lbIYuwBLDCq+tH4T","tlshash":"663226adc9e495231d26b5216388be7c85f0f06aee314e55f81ec2104ad3f9f15e0e79","first_seen":"2025-05-21T19:03:48.568644Z","last_seen":"2025-08-13T11:06:58.695546Z","times_seen":1387,"resource_available":false,"data":null}},"time_used":600,"timings":{"blocked":292,"dns":14,"connect":9,"send":0,"wait":1,"receive":0,"ssl":277},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_8b107fce8e1b8b81e584855319cd4a36.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:54.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_8b107fce8e1b8b81e584855319cd4a36.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-825174.top/\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-cb3a3b58f9800c3aa7eb55ae64260d09-b0b2f0adaac25465-01\r\nlast-modified: Thu, 07 Aug 2025 16:06:54 GMT\r\netag: W/\"f3b1308e645ec827a3ae8619e553bdfc\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Thu, 07 Aug 2025 17:15:12 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1653\r\ncache: HIT\r\nx-cached-since: 2025-08-07T22:16:21+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":140056,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f3b1308e645ec827a3ae8619e553bdfc","sha1":"64ecdf24440be115254970f895c32fbbac3a5192","sha256":"02d97994329798a18973d027b240b23def00fdbada794a25511d29f484a511ea","sha512":"f14d765c59fa43797380fcef39ccf4cf91c525ab902df333d091be8f0d287378034dc0280075e0a7c4e32ceb2f0a26846201ea75f6a76977b2f1431644883b1f","ssdeep":"3072:rNCMI9Z0rkk7etAfRxxlRNE/ljNArLCzsc6Wrs9fuJmeprZh:rlIsoJ2fVlRNE/ljNQCzy9fuJme1P","tlshash":"43d3e70a194c6e7f0fda22ddf94edf4962b40055aab2c822d8eec11e7197fd2817714b","first_seen":"2025-08-07T22:44:37.560304Z","last_seen":"2025-08-08T10:01:12.382713Z","times_seen":8,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_c29ed659a5.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:54.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_c29ed659a5.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:54 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-198f1e5fbcce50af10ff53f39eb55343-97e07e370a06d1a3-01\r\nlast-modified: Thu, 07 Aug 2025 11:19:13 GMT\r\netag: W/\"b95f2867a4f69c6f87508d4376778ab8\"\r\nx-amz-meta-mtime: 1754565435.551211797\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Aug 2025 13:18:45 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 33909\r\ncache: HIT\r\nx-cached-since: 2025-08-07T13:18:45+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16157,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (16156)","md5":"b95f2867a4f69c6f87508d4376778ab8","sha1":"34b733244053bb0634826b593e14e88782e81680","sha256":"f318dcd075506078ef1811c0a12962c5fed8811ee39cc3c77691a81063e05340","sha512":"dd8d736d26cad47776c4e4706beed168dedd02d25dfa0570a7f4874fcb260ff78951ac7cb94d91d225837db6a33eebf5b236932fe7b2e2014a1c9f9d309b0c61","ssdeep":"384:6tP2qT4YEUXGPYsH3M95B59IBMNUiLPqnIJdlh3uY3V47Czazgjdk:SP2qT4pUX/sH3M95B5qB6UEPME1uY3nk","tlshash":"9972a7a6726c3a2683d648f240355603e72b0cb979104499fb7c6edb7c198cd42ffa78","first_seen":"2025-07-01T14:08:29.773148Z","last_seen":"2025-12-23T22:34:35.075094Z","times_seen":1892,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/116cf28908.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:55.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/116cf28908.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:55 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-8b76ee22c144bf841c261dd3da4af2e1-f39f5fad2ced20f4-01\r\nlast-modified: Thu, 07 Aug 2025 06:36:52 GMT\r\netag: W/\"78dcd3710a893017aada24261887aa70\"\r\nx-amz-meta-mtime: 1754548541.928595926\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Aug 2025 22:20:17 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1418\r\ncache: HIT\r\nx-cached-since: 2025-08-07T22:20:17+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3802,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3799)","md5":"78dcd3710a893017aada24261887aa70","sha1":"0c9d22a29f5a8e7b6d73c8465b7f222146b16175","sha256":"778c5a40c87422e96fe993959bf76ac703e9da860bd46413dbe4fbf14567a3f2","sha512":"ac5b0bb0388d4d2d3e76b655206f4fb41de5f2854653a6acd036d227317e3d98c7f522650a89a39102d302ead16cefca23468daa6133c4dfcc3eb7d2cfc6e84b","ssdeep":"","tlshash":"b97195b871f5607477a45ece6c3724b3e2983604341cd4e4e3adca7526cb0a281a7d76","first_seen":"2025-08-07T09:17:39.891436Z","last_seen":"2025-08-13T11:06:58.694541Z","times_seen":49,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/bff-api/config/group/get?groups=d.technical\u0026lang=en","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:55.274Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-825174.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 05:20:42 GMT","end":"Sun, 05 Oct 2025 05:20:41 GMT"},"fingerprint":{"sha1":"04:60:44:F6:3A:B7:AE:C2:2B:CC:53:B8:B8:F1:17:D1:E7:20:4A:80","sha256":"A2:6A:C8:4A:60:55:06:B8:97:74:2F:51:1E:72:32:45:6B:89:A8:B6:9F:2E:04:61:41:13:93:13:A6:E7:9B:F8"}}},"request":{"raw":"GET /bff-api/config/group/get?groups=d.technical\u0026lang=en HTTP/1.1\r\nHost: 1xlite-825174.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-825174.top/en/block\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nis-srv: false\r\nx-svc-source: __TECHNICAL_PAGES_APP__\r\nx-app-n: __TECHNICAL_PAGES_APP__\r\nx-geoip2-country-code: ru\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; auid=U5PiFmiVLCc87YLUA1l2Ag==; lng=en; cookies_agree_type=3; tzo=2; is12h=0; window_width=1920; che_g=988d34c4-6415-4e02-88ab-9e96c8a62889\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:55 GMT\r\ncontent-type: application/json\r\ncontent-length: 742\r\ncache-control: no-cache, private\r\nserver-timing: dt_total;dur=0.125, bff;dur=36.21, wf-uht;dur=0.077\r\nx-dt: 909\r\nx-pod: R-bnng7\r\nx-time-ng: 0.067\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":742,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4eb311659e468207be5833d01806a6bc","sha1":"5470741fa048379479314630596a5491a24baa52","sha256":"614a8b74dbb5809ee856b8f0d67ef11d72c7b5d7180d3a9929915e02f5254c76","sha512":"95bbe62d24bbf459cf43f18c530ac8ad75d53fa70c368d05efbca987c19d2f6a0e0b7f5bf74e91800a90617a01e5bda9642b5da3841f47842b87aefe26a9df52","ssdeep":"","tlshash":"c501845e00a5ca3d706c063adb865e109eed502b3284b851fe0cacac60d6ddef95680f","first_seen":"2025-07-18T16:37:04.833261Z","last_seen":"2025-11-06T09:03:00.039673Z","times_seen":977,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":105,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-07","alert":"Sinkholed","trigger":"1xlite-825174.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/hd-api/external/assets/hdf.js","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:44:02.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-825174.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 05:20:42 GMT","end":"Sun, 05 Oct 2025 05:20:41 GMT"},"fingerprint":{"sha1":"04:60:44:F6:3A:B7:AE:C2:2B:CC:53:B8:B8:F1:17:D1:E7:20:4A:80","sha256":"A2:6A:C8:4A:60:55:06:B8:97:74:2F:51:1E:72:32:45:6B:89:A8:B6:9F:2E:04:61:41:13:93:13:A6:E7:9B:F8"}}},"request":{"raw":"GET /hd-api/external/assets/hdf.js HTTP/1.1\r\nHost: 1xlite-825174.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-825174.top/en/block\r\nCookie: platform_type=desktop; auid=U5PiFmiVLCc87YLUA1l2Ag==; lng=en; cookies_agree_type=3; tzo=2; is12h=0; window_width=1280; che_g=988d34c4-6415-4e02-88ab-9e96c8a62889; SESSION=2e3522cba4dd1d6269f3f33499618caa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:44:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 1687\r\ncache-control: public, max-age=300\r\ncontent-encoding: gzip\r\netag: 0009b06af6892358f6c573335f102046\r\nvary: Accept-Encoding\r\nx-dt: 909\r\nx-request-guid: 167fda344b957ab20885561e1a68d3f5\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.058, wf-uht;dur=0.012\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4203,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"C++ source, ASCII text, with very long lines (874)","md5":"0009b06af6892358f6c573335f102046","sha1":"cb899ce5fb6756d389a12e5049f2180dec2366ed","sha256":"540a50ce4665aa5a15e6afcdf7a260860e1896e77955c7ed128d1e6489bedac3","sha512":"83e9ce72ca4725bf501fe711538455aaa2fb278095d4d3938615b1907416446b8a8ed1f4f34fb296ea4c9a6d6b6e0fecbe31afa240305e7d23baa4145b2cd1c8","ssdeep":"48:Pen1yuqKi6649JoXznZwhU6fINwld0mPr6eC5/F6ALWBl/NR3vMNNeEcxHb8JiTP:Y1yuqKioolwHgObfENerHbkiTgRx05","tlshash":"d581323660ee2d3153639052d53fe5e9f229a8073968ec4831fc588a0f40f6189b2e3b","first_seen":"2025-07-24T09:34:40.995531Z","last_seen":"2025-10-16T23:35:31.258248Z","times_seen":2029,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-07","alert":"Sinkholed","trigger":"1xlite-825174.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/hd-api/external/verify","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:44:04.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-825174.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 05:20:42 GMT","end":"Sun, 05 Oct 2025 05:20:41 GMT"},"fingerprint":{"sha1":"04:60:44:F6:3A:B7:AE:C2:2B:CC:53:B8:B8:F1:17:D1:E7:20:4A:80","sha256":"A2:6A:C8:4A:60:55:06:B8:97:74:2F:51:1E:72:32:45:6B:89:A8:B6:9F:2E:04:61:41:13:93:13:A6:E7:9B:F8"}}},"request":{"raw":"POST /hd-api/external/verify HTTP/1.1\r\nHost: 1xlite-825174.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-825174.top/en/block\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 108713\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; auid=U5PiFmiVLCc87YLUA1l2Ag==; lng=en; cookies_agree_type=3; tzo=2; is12h=0; window_width=1280; che_g=988d34c4-6415-4e02-88ab-9e96c8a62889; SESSION=2e3522cba4dd1d6269f3f33499618caa\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:44:04 GMT\r\ncontent-type: application/json\r\ncontent-length: 607\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-dt: 909\r\nx-request-guid: 1cccafbe71a18f7cb59ae3ed749cbbc2\r\nx-time-ng: 0.008\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.102, wf-uht;dur=0.044\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":742,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"dd8a84a5157f6775349cfbb2aa8f2838","sha1":"8389224997a5ade52dc7618f75165e5d418c62b2","sha256":"3b7671ad89b605df0502354cf44254ba3880c5f5c33ebb8ce48ea4712164cece","sha512":"be04c332731bdf3032fca991fd97f69aa13319c4080cd4845ffef997f240201121f8d14bd49362e15958675daa4ca649b68d266848abea465bef9759e16019b5","ssdeep":"","tlshash":"6601996c848c1f0a3b96bc5419fb1f82135742d2440550e9ab371c36cf7d64590770f7","first_seen":"2025-08-07T22:44:37.577073Z","last_seen":"2025-08-07T22:44:37.577073Z","times_seen":1,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":0,"dns":0,"connect":0,"send":67,"wait":265,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-07","alert":"Sinkholed","trigger":"1xlite-825174.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/b3bc5d68/desktop/default/app-29c62af1.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:53.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/b3bc5d68/desktop/default/app-29c62af1.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-825174.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:53 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-3b65bb7ac7dc234f960152e220db549d-4e1141d8dbc0b173-01\r\nlast-modified: Thu, 07 Aug 2025 11:51:47 GMT\r\netag: W/\"83e9664e31dccd860fa1b44f71f96e71\"\r\nx-amz-meta-mtime: 1754567507.268376905\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Aug 2025 12:15:42 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 37556\r\ncache: HIT\r\nx-cached-since: 2025-08-07T12:17:57+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":498675,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"83e9664e31dccd860fa1b44f71f96e71","sha1":"f18ac9377979e93fcf2640807147c528f53f2d2b","sha256":"9c79646405c513340abc23a38a31488fc7dafeeeb6c7763b1e1fa9142458c9c6","sha512":"7eb3344734b6830f6ad9b7ebf1f9f93f6820b61b07e92e8a501ee9f26baa6ceff55f537736d172ab44cf2f531b485219de3cb76bd7e10995bb49f0db58f4bef7","ssdeep":"12288:ihZEgC7jcupMA7YvS7lcZzAdTPQx7oT5Jtc:ih2gC7jcupMA7YvAlcZEnm","tlshash":"82b45d65b588f4ca02f34bdae03a0061e33916a9390dd064f77dedca359bc09d16a67f","first_seen":"2025-08-07T22:44:37.582322Z","last_seen":"2025-08-08T10:01:12.329236Z","times_seen":8,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/vision.json","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:54.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-825174.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 05:20:42 GMT","end":"Sun, 05 Oct 2025 05:20:41 GMT"},"fingerprint":{"sha1":"04:60:44:F6:3A:B7:AE:C2:2B:CC:53:B8:B8:F1:17:D1:E7:20:4A:80","sha256":"A2:6A:C8:4A:60:55:06:B8:97:74:2F:51:1E:72:32:45:6B:89:A8:B6:9F:2E:04:61:41:13:93:13:A6:E7:9B:F8"}}},"request":{"raw":"GET /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/vision.json HTTP/1.1\r\nHost: 1xlite-825174.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-825174.top/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: b6f2dfd1-7bd6-4835-80cc-692915c3fe90\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; auid=U5PiFmiVLCc87YLUA1l2Ag==; lng=en; cookies_agree_type=3; tzo=2; is12h=0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:54 GMT\r\nx-dt: 909\r\nx-rejected: E001\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.055, wf-uht;dur=0.010\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-08T12:53:20.27382Z","times_seen":14838021,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-07","alert":"Sinkholed","trigger":"1xlite-825174.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_express_day/en/dictionary_84e511afe97bad68fa98353e8037b65e.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:54.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_express_day/en/dictionary_84e511afe97bad68fa98353e8037b65e.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-825174.top/\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-02f944dd0e3a2ea862a6e231b6e531a9-c6ac45be3cb141bd-01\r\nlast-modified: Mon, 30 Jun 2025 14:06:32 GMT\r\netag: W/\"26f10f416f0a3743c3362a51dd558a4b\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Thu, 07 Aug 2025 22:51:06 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1774\r\ncache: HIT\r\nx-cached-since: 2025-08-07T22:14:20+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1202,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"26f10f416f0a3743c3362a51dd558a4b","sha1":"6b458c43b5e31fc0515de1eb1a0e535855a3e936","sha256":"8374658000ae2d2747471b9535397e6de0c036d4e1a767a2a523047f8d06cb73","sha512":"1a6b1e740800f48106a46ff15b36fdeaec72cb4fa2e7a06957a52609f7b5481f1c0bca9e6a07a4112e0a1dbc75918e78fd5085517dd0051b4546b84338715321","ssdeep":"","tlshash":"d7210aa71034073e9d132b2bad3f929006c0485052e8b487379f39fb37ccd949e6d6aa","first_seen":"2025-06-30T16:12:32.415153Z","last_seen":"2025-10-15T02:35:25.221046Z","times_seen":2212,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/4967534db7.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:55.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/4967534db7.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:55 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-b1372b5ad038c53b98e64eaba78fe275-de347b32ca148682-01\r\nlast-modified: Thu, 07 Aug 2025 06:36:52 GMT\r\netag: W/\"3657b1bc4284460c29374d95165c6e2b\"\r\nx-amz-meta-mtime: 1754548541.931596059\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Aug 2025 06:46:00 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 57203\r\ncache: HIT\r\nx-cached-since: 2025-08-07T06:50:32+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2287,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1913)","md5":"3657b1bc4284460c29374d95165c6e2b","sha1":"d665e1485dfaa67a4f6e77e42634cdbcfef8e2c5","sha256":"e2172b08154dcb165dc4193fc676b61ead5f4d834f35859085e82c653b246504","sha512":"4062e1f58e76bbe3a89a15e52750336b145813f91c981ccfdf70409d2a34c6ff0e07c1f0d3780721e17b2e00690e6974e1c62d0e84057f68914d0729de930fe9","ssdeep":"","tlshash":"3141c89d27f6a434740d0e9dec0530e25b6818563aede4f5f59d8f64022126be642d82","first_seen":"2025-08-07T09:17:39.878615Z","last_seen":"2025-08-13T11:06:58.720699Z","times_seen":49,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-909/desktop/media_asset/932868bb74c3678b7a34b67db765abe7.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:54.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-909/desktop/media_asset/932868bb74c3678b7a34b67db765abe7.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-825174.top/\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:54 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-fc70ba327ce677e758881ee46302eab8-fc0d4af8ddb9d9ed-01\r\nlast-modified: Thu, 07 Aug 2025 13:37:24 GMT\r\netag: W/\"997bfeaf2924e7d0632cf40f25560047\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 07 Aug 2025 23:43:54 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\ncache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23113,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"997bfeaf2924e7d0632cf40f25560047","sha1":"3c22bf3f6abd2c48fb467b17ac86bc526dea1ba8","sha256":"eaa4c5dce6ef97b18b56392792f9a64647ee3b332e1e4363619e1420d865165d","sha512":"fc4a8fced4294b4b23a6e28545dfdce1cc201636222399e1771bfc8ec8714af0c2f9f8e40257e5007f31aba2779eb51f2b8ffcda82e3566055cd6b4db3e8098d","ssdeep":"384:hrLr0fLPwUj+uZbC445IOhT9TYXw1LyaN1C1WjTZU:hvkD+yEW","tlshash":"d8a23b85faf40c33202f90ae95f3b90e93d85f879d4a6c14bfac2a4d2b54519016bd7e","first_seen":"2025-08-07T22:44:37.592111Z","last_seen":"2025-09-03T09:56:06.827267Z","times_seen":260,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/$_$.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:54.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/$_$.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:54 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 69\r\ntraceparent: 00-b0e20a651335e3e163f85788bf76d21f-3265626bf03f690e-01\r\nlast-modified: Thu, 07 Aug 2025 06:36:52 GMT\r\netag: \"2cdaa92927f02e0b628f1ef4d7dd8caf\"\r\nx-amz-meta-mtime: 1754548541.924595748\r\nexpires: Fri, 08 Aug 2025 20:18:25 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 8729\r\ncache: HIT\r\nx-cached-since: 2025-08-07T20:18:25+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"2cdaa92927f02e0b628f1ef4d7dd8caf","sha1":"9104a2e16ed080b80a42588b8aeb52ebec47ab7a","sha256":"ef8101ffea52addcdcfcc3a83f96ff2d4613fb3ae6d1c16bbe4852387b73a9db","sha512":"31da80bc1b17aa708fef74b0211af91fce1b4a5f518f11e5caa80f50e9a7791b6e94924e381f550fc44a02f4c1d785e5b95fa2464e7968b5cab079612d70d839","ssdeep":"","tlshash":"1ba002935a5ef66c209044860696e74733823d6a3477b1d625bc5509e6061474817257","first_seen":"2025-05-14T05:06:37.199299Z","last_seen":"2026-03-18T19:40:26.76398Z","times_seen":5502,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_fast_deep_equal_XYWIEKOD.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:55.031Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_fast_deep_equal_XYWIEKOD.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:55 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 865\r\ntraceparent: 00-8e0d5c554bab89673f79994f0f2f7664-deab6ee09e376463-01\r\nlast-modified: Wed, 06 Aug 2025 14:37:10 GMT\r\netag: \"0af3fe0c072a5bb3b6c731767187982f\"\r\nx-amz-meta-mtime: 1754490863.790355232\r\nexpires: Fri, 08 Aug 2025 08:09:51 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 51454\r\ncache: HIT\r\nx-cached-since: 2025-08-07T08:26:21+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":865,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (840)","md5":"0af3fe0c072a5bb3b6c731767187982f","sha1":"55db5afb57265dc92fd121fe9ae565ffb2f53b2c","sha256":"655bbe85da91e863401c6f96e24b41f5c2fe51a4245cecc2deb2b8c9600fef30","sha512":"8aab8cafc0b01c11f0b3b4bab4cb8b00ac25007153fd86b45ac8bfe325109c1a5215e89825fde4d7698a64f6c549e8140ed441ddb558d98a5654d52df9d568be","ssdeep":"","tlshash":"a41159c232e3a0d1c3e058cd1001d902f23969e9e4bca0c9d757e6b83cb2a53987672a","first_seen":"2025-05-14T05:06:37.184748Z","last_seen":"2025-08-22T06:38:14.125712Z","times_seen":1811,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:55.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-825174.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 05:20:42 GMT","end":"Sun, 05 Oct 2025 05:20:41 GMT"},"fingerprint":{"sha1":"04:60:44:F6:3A:B7:AE:C2:2B:CC:53:B8:B8:F1:17:D1:E7:20:4A:80","sha256":"A2:6A:C8:4A:60:55:06:B8:97:74:2F:51:1E:72:32:45:6B:89:A8:B6:9F:2E:04:61:41:13:93:13:A6:E7:9B:F8"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json HTTP/1.1\r\nHost: 1xlite-825174.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-825174.top/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: b6f2dfd1-7bd6-4835-80cc-692915c3fe90\r\nContent-Length: 19\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; auid=U5PiFmiVLCc87YLUA1l2Ag==; lng=en; cookies_agree_type=3; tzo=2; is12h=0; window_width=1280; che_g=988d34c4-6415-4e02-88ab-9e96c8a62889\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:55 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nx-dt: 909\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.006, wf-uht;dur=0.012\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-05-08T12:53:22.577043Z","times_seen":264240,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-07","alert":"Sinkholed","trigger":"1xlite-825174.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:55.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-825174.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 05:20:42 GMT","end":"Sun, 05 Oct 2025 05:20:41 GMT"},"fingerprint":{"sha1":"04:60:44:F6:3A:B7:AE:C2:2B:CC:53:B8:B8:F1:17:D1:E7:20:4A:80","sha256":"A2:6A:C8:4A:60:55:06:B8:97:74:2F:51:1E:72:32:45:6B:89:A8:B6:9F:2E:04:61:41:13:93:13:A6:E7:9B:F8"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-825174.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-825174.top/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: b6f2dfd1-7bd6-4835-80cc-692915c3fe90\r\nContent-Length: 72\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; auid=U5PiFmiVLCc87YLUA1l2Ag==; lng=en; cookies_agree_type=3; tzo=2; is12h=0; window_width=1280; che_g=988d34c4-6415-4e02-88ab-9e96c8a62889\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:55 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\nx-dt: 909\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.092, wf-uht;dur=0.013\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"ca5ad92561f380d8fda88188f5054711","sha1":"81333054fd8963d03b3febcc778979318c360dde","sha256":"166f249feee1318186aaf2f9faa4aa3cb27b638fb639d9675d8f697528c4bacb","sha512":"0ca6b3a3a7c1ad4505a86ca7a31f1fd195fb4f1ba28c9b94e314ccbebe8ada72b696802c10abc9ea0c03af31c88ddee29d4b304f77a7e1e70a2578215959ba00","ssdeep":"","tlshash":"b07000203300208802200282a20828280028a002a020083820a0b2300020aa3020a2a3","first_seen":"2025-08-07T22:44:37.602467Z","last_seen":"2025-08-07T22:44:37.602467Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-07","alert":"Sinkholed","trigger":"1xlite-825174.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/hd-api/external/apps/c5e31d5915661de4393e3f1489b00ebc4497dd48/api.js","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:44:02.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-825174.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 05:20:42 GMT","end":"Sun, 05 Oct 2025 05:20:41 GMT"},"fingerprint":{"sha1":"04:60:44:F6:3A:B7:AE:C2:2B:CC:53:B8:B8:F1:17:D1:E7:20:4A:80","sha256":"A2:6A:C8:4A:60:55:06:B8:97:74:2F:51:1E:72:32:45:6B:89:A8:B6:9F:2E:04:61:41:13:93:13:A6:E7:9B:F8"}}},"request":{"raw":"GET /hd-api/external/apps/c5e31d5915661de4393e3f1489b00ebc4497dd48/api.js HTTP/1.1\r\nHost: 1xlite-825174.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-825174.top/en/block\r\nCookie: platform_type=desktop; auid=U5PiFmiVLCc87YLUA1l2Ag==; lng=en; cookies_agree_type=3; tzo=2; is12h=0; window_width=1280; che_g=988d34c4-6415-4e02-88ab-9e96c8a62889; SESSION=2e3522cba4dd1d6269f3f33499618caa\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:44:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 615\r\ncache-control: public, max-age=300\r\ncontent-encoding: gzip\r\netag: 32053c9c355cf85427a5cc3f07de0b09\r\nvary: Accept-Encoding\r\nx-dt: 909\r\nx-request-guid: 90fbb5e6e89ca7d0167113170c1d7bda\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.104, wf-uht;dur=0.013\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1024,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1023)","md5":"32053c9c355cf85427a5cc3f07de0b09","sha1":"f3c13d6a657ffa2ca8997f54f4779f0c02f1600a","sha256":"0ec410318f3ecc3a3aef3de68e99190845248bcc12282aa15eb9acc87f8837d3","sha512":"cbb8c7ef0bbed264989bf5b4af7d216cdeacc5684641c37d429e5ceca7dc04e55254e81f319cd856e7b4f447565bf5abf4e9915f5725eb57cfb142f113362078","ssdeep":"","tlshash":"2211756e18ed58291a9275c402b7ccfc642036363219d4c495ede9e1072ff990032f5c","first_seen":"2025-07-24T09:34:41.13762Z","last_seen":"2026-05-08T07:58:59.425742Z","times_seen":3951,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-07","alert":"Sinkholed","trigger":"1xlite-825174.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-ui/2.3.273/Desktop/Default/client.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:52.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-ui/2.3.273/Desktop/Default/client.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-825174.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:53 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-c4d4f02c9be0517fb979f49343e8017a-78c3d5c1a742dcf1-01\r\nlast-modified: Fri, 27 Jun 2025 13:38:05 GMT\r\netag: W/\"a8a44b273c4f19498dfe5dfbe6d66b5f\"\r\nx-amz-meta-mtime: 1751031482.572809748\r\ncontent-encoding: gzip\r\nexpires: Thu, 03 Jul 2025 09:30:19 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 79014\r\ncache: HIT\r\nx-cached-since: 2025-08-07T00:46:59+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":645724,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"a8a44b273c4f19498dfe5dfbe6d66b5f","sha1":"6d68353f0344e5f497f983d9843493c5cba4416e","sha256":"3a55dbb30fd14dbf83a9bd142e1a2cdff2008b12994f1e1cea74cd55b2c6792a","sha512":"273e8d7d3b18691b6e08821b482381aeea7042cc9605ef88b5fa92a3621d4cb84d32c5398cf45b18dc99a821634052b907edb6ba2b1f0170c52ecdf65c51c74c","ssdeep":"6144:VeAjJKlbYNYHPKNuive9uW7/vrhoi99ET/qvW7hAnUCF:IDoUKi99ET/qveAnUCF","tlshash":"dbd4932cf59dd1353e3be62153885ffc2a20b6479b221c7af459035b1ec365221a2dbb","first_seen":"2025-07-09T10:12:06.30113Z","last_seen":"2025-08-22T06:38:14.128944Z","times_seen":782,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":141,"dns":14,"connect":1,"send":0,"wait":8,"receive":0,"ssl":134},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/b3bc5d68/desktop/default/vendors/app-95e27f16.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:53.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/b3bc5d68/desktop/default/vendors/app-95e27f16.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-825174.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:53 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-ccb4ea5f8ff27d635f856cf0362a466b-adf8d7a3442e044e-01\r\nlast-modified: Thu, 07 Aug 2025 11:51:48 GMT\r\netag: W/\"c71c6686d84a407f612f25a4ab55aa19\"\r\nx-amz-meta-mtime: 1754567507.286376969\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Aug 2025 12:15:42 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 37556\r\ncache: HIT\r\nx-cached-since: 2025-08-07T12:17:57+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":936483,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64018)","md5":"c71c6686d84a407f612f25a4ab55aa19","sha1":"8e0279571fa55a02aae183b18859836bb1cc9942","sha256":"f211b3d5880ad92ce646d378e3c94bdaf4d8f0a2767f18818d41b2424fa85652","sha512":"18f5595ee7e999ec1f41f0911c910d42a6510597b4f700fc6766d2917439c5a263117d8c5e54b3f19f15f1050a1a5ffb8e341af55a19d585b6bb5320adc2a354","ssdeep":"12288:mbnLX0yfGBSG6xO9Y4g1Qztkscud3auGE8DKN4ElOKQjS:CX0yfGBSG6xO9Y4g1ekscSqOwo42ZQjS","tlshash":"51155b99b980f2560aa36be9d06b1017e32d6e5ebc0ce444f2e7cdd536998047136f2f","first_seen":"2025-08-07T22:44:37.612133Z","last_seen":"2025-08-13T10:36:50.655349Z","times_seen":48,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/b3bc5d68/desktop/default/vendors/plugins.vue-js-modal-cf702a86.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:54.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/b3bc5d68/desktop/default/vendors/plugins.vue-js-modal-cf702a86.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-825174.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:54 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-c9e7f9fba6e85fe5227d85964b822c21-347b416e87fc9a1b-01\r\nlast-modified: Thu, 07 Aug 2025 11:51:48 GMT\r\netag: W/\"c33145627f8c880dca23879d76141698\"\r\nx-amz-meta-mtime: 1754567507.286376969\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Aug 2025 12:15:40 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 37556\r\ncache: HIT\r\nx-cached-since: 2025-08-07T12:17:58+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26667,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (26667), with no line terminators","md5":"c33145627f8c880dca23879d76141698","sha1":"ec8f415e1bb9f2d299b6c204fc7ec499c901498a","sha256":"ac0cbb26350b015a038d087de685d27d2790fcbd31c8fff4c2ccb38d1b477cd1","sha512":"8a26f64d313bd36a81d67ac648b90ef0b016f5240cbd7894ef8a9da44cf42039c4c2803dd77d46f4f8ee4160b2a047514f232f08eba618c2b362b60d07270770","ssdeep":"384:vBy0a9vOeCGAZIXfK2rVsAdm00uow4HQEjacGXGQVe6ubqJ:SHyIXfPt4wE9GXGQcbqJ","tlshash":"f1c2288977d8307442db5573627f2b0ab23e295474269888f772e8e65cb864d206ff3c","first_seen":"2025-08-06T18:28:12.609535Z","last_seen":"2025-08-21T07:44:03.353689Z","times_seen":170,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-909/desktop/media_asset/09d2374becfdf0c9e1a6b53146f6cc14.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:54.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-909/desktop/media_asset/09d2374becfdf0c9e1a6b53146f6cc14.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-825174.top/\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:54 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-1c74bcc980af5eba5fb98e30b5d285c2-0489ddfc33e353e1-01\r\nlast-modified: Fri, 01 Aug 2025 06:38:12 GMT\r\netag: W/\"b255cc6c6ca667c6f42f2d9ab151b21e\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 07 Aug 2025 23:43:37 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\ncache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7481,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b255cc6c6ca667c6f42f2d9ab151b21e","sha1":"a0c241d3c2fa56d392cc204f2d386046a5273a9b","sha256":"9c347db4287a13bf6e86c34baa07bf255437a85566ba14a77199a753b73a400b","sha512":"62bb36631dfa4cd6790efcf39ff920a0b11741cd1b5ecd936ecce083090c0336cb216eb28f838e05e27fff2509a6b8724d0f6c61349da57506e6eca112c8a294","ssdeep":"48:TzABBABGkABjABFygABCN/ABCNYN8ABWHABaEABzzEFABIIX4ABBxSHsABYiwABp:lFbClXCL3cblP+XyLO5GIM","tlshash":"e7f11784fff04c33112f94ad98b37a89a7884f07a95a7d1c7f9d294c1f1451a04aadbe","first_seen":"2025-08-01T12:24:56.656253Z","last_seen":"2025-11-07T10:46:34.805118Z","times_seen":2150,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_reset_password/en/dictionary_612c6e919ca15d39cc751a619a3952c7.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:54.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_reset_password/en/dictionary_612c6e919ca15d39cc751a619a3952c7.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-825174.top/\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 765\r\ntraceparent: 00-c7b0a01011b387789cad1495f3f16879-e1429686f7cbaa53-01\r\nlast-modified: Wed, 11 Oct 2023 12:52:53 GMT\r\netag: \"00f980f23f1b4c1ccee99ed49e0a8feb\"\r\ncache-control: max-age=3600\r\nexpires: Thu, 16 Jan 2025 10:53:47 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1418\r\ncache: HIT\r\nx-cached-since: 2025-08-07T22:20:16+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":765,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"00f980f23f1b4c1ccee99ed49e0a8feb","sha1":"4cb07094de9bffff1bf81d94446280b91013b660","sha256":"bb3be3377fbb8e66a4b5a8a3866dfd865a37cb4a96482ab2f439981e03b57cea","sha512":"45587feec47804731eb344682dd7465959a50f2f47e114e332e875097a9e2009d6fe41e8ff684fb287d935fd9c4d12a5b83e1fe310f3ceca6061d569502ac1de","ssdeep":"","tlshash":"80015701129f0ef21b4bc65a940b1c71b2a0c043936b8c8757baeb8f73bbd8b009584f","first_seen":"2023-09-28T10:29:17Z","last_seen":"2026-05-08T07:58:59.463929Z","times_seen":5130,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_popper_js_E2H7ZPXQ.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:55.038Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_popper_js_E2H7ZPXQ.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:55 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-f97584129108efcdcdd00ca1ed2f8312-dcaf45ce9694c25a-01\r\nlast-modified: Thu, 07 Aug 2025 14:05:32 GMT\r\netag: W/\"3cf0cae38afae9add22f7884e5061231\"\r\nx-amz-meta-mtime: 1754575049.363639704\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Aug 2025 21:04:48 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 5947\r\ncache: HIT\r\nx-cached-since: 2025-08-07T21:04:48+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21252,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21232)","md5":"3cf0cae38afae9add22f7884e5061231","sha1":"2a41037501375a439385a76a047876619683418f","sha256":"322482e3beae5a985d069beea981614510fda90a5df7295b776a324d461fc43d","sha512":"b61ed44fab86cdc14e9e1b8af7924afec6148d03d878007f89d1beb7a24a1862efaa2d6b43dcc04df35c6920ef742ffc5a59a2434b798554394d3e28f88b7a13","ssdeep":"384:nPP7iayBuR9vu3z1JXvykd2+LaqHdC6RjVnTGm/7piCXmH8kCCcvJTCyCu+meAxu:riZwO3XvO+NMSJt3XmckXcv4nxJAxiH5","tlshash":"7d92a28c7684b0a287a7a2a7a07f860f71376865650e9004f59cf6ec3c35dba507bc7d","first_seen":"2025-05-14T05:06:37.148925Z","last_seen":"2025-08-22T06:38:14.115567Z","times_seen":1787,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-909/desktop/media_asset/85fffde64e11d2e484f4141af520560d.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:55.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-909/desktop/media_asset/85fffde64e11d2e484f4141af520560d.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-825174.top/\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:55 GMT\r\ncontent-type: application/json\r\ncontent-length: 241\r\ntraceparent: 00-edad3f757e85cf55fa0e5a986d6c0c77-5ce2e6311c25ace0-01\r\nlast-modified: Thu, 27 Feb 2025 13:24:55 GMT\r\netag: \"39257fbb62736206d5245e08925d7b60\"\r\nexpires: Thu, 07 Aug 2025 23:43:55 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\ncache: MISS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":241,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"39257fbb62736206d5245e08925d7b60","sha1":"4c11e3cb6a16b884772b88acdba30a2ad98e86b8","sha256":"3a3cf0f5c60899ffb49d9825516aec475fd7b78cea8ae0b5b58dfb4e658f041e","sha512":"e9b44ac92bbad9c54e500f735f553154c92897c80700709b61b39443f76edbd1d3d38d0d6014e6052cc5f5931b78c55194e308c86336f809de1541efa1e0ac8f","ssdeep":"","tlshash":"58d02e40f2e01833201f94f981b5a109e74b0b03e402a808fa0c21881bac8252426c3a","first_seen":"2025-03-01T06:06:39.04916Z","last_seen":"2025-10-28T05:34:45.039411Z","times_seen":3826,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=UA-131019888-1\u0026cx=c\u0026gtm=45je5861v893859730za200\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211~105103161~105103163~105135708~105135710","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:44:05.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"A2:8A:24:AD:51:7D:A4:62:BB:34:6F:C9:21:A1:B9:E1:2D:A6:0E:C1","sha256":"9F:B9:94:8F:84:D3:44:71:A7:81:72:C8:80:4D:14:02:E3:E0:30:0C:F1:17:27:83:00:82:D9:C3:68:D3:B3:AF"}}},"request":{"raw":"GET /gtag/js?id=UA-131019888-1\u0026cx=c\u0026gtm=45je5861v893859730za200\u0026tag_exp=101509157~103116026~103200004~103233427~104684208~104684211~105103161~105103163~105135708~105135710 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-825174.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 07 Aug 2025 22:44:05 GMT\r\nexpires: Thu, 07 Aug 2025 22:44:05 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Thu, 07 Aug 2025 21:05:57 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1099:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1099:0\r\nreport-to: {\"group\":\"ascgcycc:1099:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1099:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 97254\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":273581,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2479)","md5":"de7a08a1699f403c47b15d9362138690","sha1":"66ba65f61bea27570eef815bf8c73c139592a73e","sha256":"daaf48ddfd7e61279cefc471ac4e985bcb9e457fc20b5a72e92c74997e6bd957","sha512":"b54da2df04280ca52fc91abefabc92816faab1bbcd986b167e71e91412e5787b038c20cf24f5c73ed651dcd3e31d2f995bb93efebbd0548a238c29719a40d0b1","ssdeep":"3072:LMjWxF/A4BwA2XN4j70OLuQ5AadSz7IJLevvfvwq5VLT2PG6Dt4ISNp94zCm:TxP2XC5LHAyevYOT2PG6B4xNv4t","tlshash":"af4409cc77d6b42683a36478503f114bb23b7992f84cd894e182d8d82e74aa94277f7d","first_seen":"2025-08-07T22:44:37.629738Z","last_seen":"2025-08-07T22:44:37.629738Z","times_seen":1,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":58,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/main-static/b3bc5d68/check-ob.js","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:52.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-825174.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 05:20:42 GMT","end":"Sun, 05 Oct 2025 05:20:41 GMT"},"fingerprint":{"sha1":"04:60:44:F6:3A:B7:AE:C2:2B:CC:53:B8:B8:F1:17:D1:E7:20:4A:80","sha256":"A2:6A:C8:4A:60:55:06:B8:97:74:2F:51:1E:72:32:45:6B:89:A8:B6:9F:2E:04:61:41:13:93:13:A6:E7:9B:F8"}}},"request":{"raw":"GET /main-static/b3bc5d68/check-ob.js HTTP/1.1\r\nHost: 1xlite-825174.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-825174.top/en/block\r\nCookie: platform_type=desktop; auid=U5PiFmiVLCc87YLUA1l2Ag==; lng=en; cookies_agree_type=3; tzo=2; is12h=0\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:52 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 219\r\nlast-modified: Thu, 07 Aug 2025 11:59:14 GMT\r\netag: \"c065700c9c8c493403359e1f2baa10d9\"\r\nx-amz-meta-mtime: 1754567951.769973577\r\nexpires: Fri, 08 Aug 2025 22:43:52 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: wf-uht;dur=0.010\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":219,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"c065700c9c8c493403359e1f2baa10d9","sha1":"4630fe729e70bdf63fa7ba6c84ec277fd1f51030","sha256":"1e61f0c82ae82ffcf503fcd4b4c8ae27b32c11e19b882d5d13f3c44364c893f4","sha512":"b2e1c73cb94f5e3ceb35c3662bf4d72baf800a9a7c64318b1db07d50e9c885dbd94821ef3b3916d1b8b4fabb8f45cb588834b41c6a8a7f4d2c3e9c3866083ee7","ssdeep":"","tlshash":"96d0a79fb900211406939267d12f8668807724973f008182500597e069b8f4c4b37895","first_seen":"2024-07-17T14:33:52Z","last_seen":"2026-01-22T06:40:31.153166Z","times_seen":6298,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-07","alert":"Sinkholed","trigger":"1xlite-825174.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/2fa053989b.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:52.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/2fa053989b.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-825174.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:53 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 704\r\ntraceparent: 00-1d78979cd3746e671ad3d759b9184995-795d2812bf418371-01\r\nlast-modified: Thu, 07 Aug 2025 06:36:52 GMT\r\netag: \"6f0351419dfa3df7e69fe564686a5d71\"\r\nx-amz-meta-mtime: 1754548541.92959597\r\nexpires: Fri, 08 Aug 2025 11:01:00 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 42173\r\ncache: HIT\r\nx-cached-since: 2025-08-07T11:01:00+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":704,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (703)","md5":"6f0351419dfa3df7e69fe564686a5d71","sha1":"7c7550e20b3e8492bc5aae2d2ec8dec0d238c9f6","sha256":"1f6f244dc7942b9b119f4ad9e62c6dfd76b64c80f1da0ce4f3c0fcdaa654f48a","sha512":"a788ae3a6389c12c2ba3073afb75d93aa037d8dde04e0710f90f47679dc6eb3640b303c6e435f0f547d6a0dce0a6830b99322964699db3288c9f3403f3c09083","ssdeep":"","tlshash":"5c01d81f762dd1ec0fb782d42ae06ae93416b626da0610cbf877c1355d8e7032b9056f","first_seen":"2025-07-30T10:49:59.811087Z","last_seen":"2025-08-13T11:06:58.68152Z","times_seen":123,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":139,"dns":11,"connect":11,"send":0,"wait":10,"receive":0,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/b3bc5d68/desktop/default/css/50634edb.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:52.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/b3bc5d68/desktop/default/css/50634edb.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-825174.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:53 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-26e8da59c60a96c33d7ada8efdd303d9-6edc6d86d6139485-01\r\nlast-modified: Thu, 07 Aug 2025 11:51:48 GMT\r\netag: W/\"32cdcf1e197402ef4c5773d5a3f189ba\"\r\nx-amz-meta-mtime: 1754567507.270376912\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Aug 2025 12:15:41 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 37556\r\ncache: HIT\r\nx-cached-since: 2025-08-07T12:17:57+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14222,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (14222), with no line terminators","md5":"32cdcf1e197402ef4c5773d5a3f189ba","sha1":"23bed703305467c8e20f02ce8da39c729035a1f3","sha256":"1b80c18cb594348b9e42cd2c4c70460a56efc1281078d7a70504948da6896fa7","sha512":"7cd4e3e8185ab6dfe3957a7b80b4fd8cd133dff396dfc25909fe1f17e4639f2b37b64e7f35b5a450b612cbd8c957bd80357d9c296259d2494dbaf29b78835bca","ssdeep":"192:vmNOH7nvxxxY4a0tZLJh6N0dt+8yvvo9lvhvuvoUwltoQrNTCALbBQ:vHJxxY4pJJqJQr9CAPBQ","tlshash":"4552a71fd53a92a20d338c52728eff783539722628975235f44d66588ddbbd703d0ba8","first_seen":"2025-08-06T10:05:08.298709Z","last_seen":"2025-08-13T10:36:50.646716Z","times_seen":71,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":125,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/b3bc5d68/desktop/default/runtime-a296fdb3.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:53.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/b3bc5d68/desktop/default/runtime-a296fdb3.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-825174.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:53 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-493cee90a124280d647fce71d47500fc-783b7f9c92fdceac-01\r\nlast-modified: Thu, 07 Aug 2025 11:51:48 GMT\r\netag: W/\"e7daaf7ff938808a5f11401d508bba1b\"\r\nx-amz-meta-mtime: 1754567507.283376958\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Aug 2025 12:15:42 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 37556\r\ncache: HIT\r\nx-cached-since: 2025-08-07T12:17:57+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18456,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (18456), with no line terminators","md5":"e7daaf7ff938808a5f11401d508bba1b","sha1":"c740103b671e9ac30fff6ea4f07a6780e6952922","sha256":"c4bc089b0f5a41737a8892779d871fa598ffd8ffd837d84b3a0a96f748d27a66","sha512":"cbcd99c6acdbb351aa4bcc389998a6d0c53a962db6ef0bfe695a2411e7bd19d6c794267b635e2bd4f0f47111dd621089dfd6034ac80c9d162cf1748fafadd290","ssdeep":"384:Js51G0PCItn8MEL4u4B50PCItn80/HfZyWDJWf:eqDIt8MEL4u4B5DIt8AzDJg","tlshash":"0c82209eaf1acc671923dcc338213d25595820335c5647ece6fee2195018e6ca5afe2f","first_seen":"2025-08-07T22:44:37.639518Z","last_seen":"2025-08-08T10:01:12.401187Z","times_seen":8,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/bcd0d061c1.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:55.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/bcd0d061c1.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:55 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 811\r\ntraceparent: 00-e9a31b161e0b33eb6dc24d10fdda6303-89fbcb14bfa78bb6-01\r\nlast-modified: Thu, 07 Aug 2025 06:36:52 GMT\r\netag: \"835c1a59e7fc9f0ebfb150d135fb2bf3\"\r\nx-amz-meta-mtime: 1754548541.933596148\r\nexpires: Fri, 08 Aug 2025 22:20:17 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1418\r\ncache: HIT\r\nx-cached-since: 2025-08-07T22:20:17+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":811,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (810)","md5":"835c1a59e7fc9f0ebfb150d135fb2bf3","sha1":"4ff9cbb99f43344c801e96f1598b633f4fe57218","sha256":"59941e16d6c87dd1080d57118c9c7c76e2af900f075d6fa717f47082099150b2","sha512":"807e2cb267e6adfb3422dd072ba900e40c13eb474a02db12ebe8bcb172e8b79038506fabf66fc75edaeda59f83ef93dd106a55f05ed81b52ee563f505b8dce32","ssdeep":"","tlshash":"5c01f17ffa72f528610188ddd926ac61e3452de71b85a6e8d1dd42739302073e44a8e3","first_seen":"2025-08-07T09:17:39.876486Z","last_seen":"2025-08-13T11:06:58.714596Z","times_seen":49,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7V60YW2S5H","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:44:04.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"A2:8A:24:AD:51:7D:A4:62:BB:34:6F:C9:21:A1:B9:E1:2D:A6:0E:C1","sha256":"9F:B9:94:8F:84:D3:44:71:A7:81:72:C8:80:4D:14:02:E3:E0:30:0C:F1:17:27:83:00:82:D9:C3:68:D3:B3:AF"}}},"request":{"raw":"GET /gtag/js?id=G-7V60YW2S5H HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-825174.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 07 Aug 2025 22:44:04 GMT\r\nexpires: Thu, 07 Aug 2025 22:44:04 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1099:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1099:0\r\nreport-to: {\"group\":\"ascgcycc:1099:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1099:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 149550\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":460239,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7897)","md5":"696db42b74964551f1f07bca0229355f","sha1":"e97d32b8fa0545dee70abc9b3303ee7c4dc5dd8a","sha256":"fef7a23967b177cbf6cf8651fe7a811aaf35d37ce486e19ba3adeebc13cfc6eb","sha512":"0fd5790d5081873496171bad68fa98fd504503d2c3d40501934cd7b6715ca9b2a88be757faa7173898546281ea83c982d1d73a08afff028b7b60e8443629ef3e","ssdeep":"6144:6xP2NUB72LMAyev+Ot6GT2PG6B4xd6nccOu:0Pi2WlGmdOzB","tlshash":"b7a409ce73c674669396f478503f01cba97b29a2b49cc8aab1c9cce02d3455a4177f78","first_seen":"2025-08-07T22:44:37.644982Z","last_seen":"2025-08-07T22:44:37.644982Z","times_seen":1,"resource_available":true,"data":null}},"time_used":422,"timings":{"blocked":159,"dns":1,"connect":15,"send":0,"wait":51,"receive":47,"ssl":147},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"radar.cedexis.com/1/23802/radar.js","fqdn":"radar.cedexis.com","domain":"cedexis.com","tld":"com"},"ip":{"addr":"45.54.49.5","port":443,"asn":63911,"as":"NetActuate, Inc","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:44:04.750Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"radar.cedexis.com","organization":"Citrix Systems, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A2:3E:30:19:D5:41:3A:11:81:58:E3:B1:6F:F4:D2:78:0B:44:6F:D0","sha256":"BE:70:39:96:BA:51:8F:A7:6A:9D:E1:58:FB:D9:F7:6F:17:5C:DA:A9:6E:54:3F:8F:0B:3D:1E:DF:8C:44:B4:71"}}},"request":{"raw":"GET /1/23802/radar.js HTTP/1.1\r\nHost: radar.cedexis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-825174.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Thu, 07 Aug 2025 22:44:04 GMT\r\nContent-Type: text/html\r\nContent-Length: 138\r\nConnection: keep-alive\r\nLocation: /1707728419/stub.js\r\nExpires: Thu, 07 Aug 2025 22:54:04 GMT\r\nCache-Control: max-age=600\r\nVary: User-Agent,DNT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":390,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-08T12:53:20.27382Z","times_seen":14838021,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":45,"dns":0,"connect":18,"send":0,"wait":20,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/site-admin/colors/cd92ba54cae16d41daf5f586a3cbecea.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:54.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/site-admin/colors/cd92ba54cae16d41daf5f586a3cbecea.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-825174.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:54 GMT\r\ncontent-type: text/css\r\ntraceparent: 00-1711aff72916b01f88c5becc58b78c9d-ee508ab63be9422e-01\r\nlast-modified: Thu, 07 Aug 2025 13:23:42 GMT\r\netag: W/\"cd92ba54cae16d41daf5f586a3cbecea\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Thu, 07 Aug 2025 14:58:29 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 778\r\ncache: HIT\r\nx-cached-since: 2025-08-07T22:30:56+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40673,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (40673), with no line terminators","md5":"cd92ba54cae16d41daf5f586a3cbecea","sha1":"64019485495de9e3c8db583a913de2674f4fbb21","sha256":"31ce9b35619fc08af219e4aaba875b8c43390b01c7c015123627f058d46cfaca","sha512":"37c4dd44804f6bbb8e850f3ed054d4d3a4a813b710bd4d7e9c18368dee7f4efb4396eebc35c0433811481b00fcebf315db9bfb894da361129212a7c9c11b1bc2","ssdeep":"192:+w2ADLPJLeVMGPjqFpSJCmuuZs3NyOzxQOg+lNvChrjgZca7qRjH9W7Sn2b3rLDI:+EO1mFSK75xWt5JkyunibMhS43eI9peN","tlshash":"1e037b7ded91c1712a591931911c677b3d36e9caae240f8fd02c63e630c1b022be5a7a","first_seen":"2025-08-04T22:46:47.651758Z","last_seen":"2025-10-31T01:18:46.264532Z","times_seen":507,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-909/desktop/media_asset/1c8343d7c63d0c7abea2a960ec7a88be.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:54.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-909/desktop/media_asset/1c8343d7c63d0c7abea2a960ec7a88be.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-825174.top/\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:54 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-0b420d174411fc32028740be8de41b2e-bc954a180ea24b37-01\r\nlast-modified: Mon, 16 Jun 2025 11:26:25 GMT\r\netag: W/\"1a7ec72aad44f9540cb604d7cde5ff38\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 07 Aug 2025 23:43:26 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\ncache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14466,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1a7ec72aad44f9540cb604d7cde5ff38","sha1":"65e5851d652e0471c213282efb5eeee31ae813db","sha256":"94d4bf6bc00a09b766ea0ba441e860dc40ee6d398be80e89016dd0ee662869d6","sha512":"05c4574c3785992daed7bb3616a938d1d04dc9679132ee8997147a21c32d2dab5537e51060ecce9969c4e2ea5c4ba97299c5f2622a3f6fb097c066e189d37f79","ssdeep":"96:75b7Ba79eu4QWGAdryCiQFpzLJLJeHZVZYpH3UGHSTSSbbGiJinHs:u7kJ2VK3UsyinHs","tlshash":"935246d9bae41c33112b60bdd5f7f91aa3dc1f439d4aa8287eac6d4c1b6050500aed7e","first_seen":"2025-06-17T07:58:23.417687Z","last_seen":"2025-11-14T10:22:49.434452Z","times_seen":2557,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:54.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-825174.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 05:20:42 GMT","end":"Sun, 05 Oct 2025 05:20:41 GMT"},"fingerprint":{"sha1":"04:60:44:F6:3A:B7:AE:C2:2B:CC:53:B8:B8:F1:17:D1:E7:20:4A:80","sha256":"A2:6A:C8:4A:60:55:06:B8:97:74:2F:51:1E:72:32:45:6B:89:A8:B6:9F:2E:04:61:41:13:93:13:A6:E7:9B:F8"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-825174.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-825174.top/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: b6f2dfd1-7bd6-4835-80cc-692915c3fe90\r\nContent-Length: 48\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; auid=U5PiFmiVLCc87YLUA1l2Ag==; lng=en; cookies_agree_type=3; tzo=2; is12h=0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:54 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\nx-dt: 909\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.113, wf-uht;dur=0.009\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"43c4a5c73ee660391516d0d68f383cd4","sha1":"597af08048903dfc1c721ad57c1816be044b8fb9","sha256":"9c3d91caf59a0855943ae7a52b938d7e91c44a66282d9c0cb9a79d2468751e94","sha512":"1fc9322ec3f8331d24b3f96b8cf2ada317dff315e28c002459b2fe4145d31ac607dffe1e98ff5bd9a8c9a0333d4cc7a34e2e8fed798e301a33662bfd35ba48e0","ssdeep":"","tlshash":"557000802200308008202a0a020828ac082c820200308022b080b030222aaa0022a02b","first_seen":"2025-08-07T22:44:37.652059Z","last_seen":"2025-08-07T22:44:37.652059Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-07","alert":"Sinkholed","trigger":"1xlite-825174.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/seo-module-api/api/public/v1/analytics-counters?project[id]=909\u0026domain[host]=1xlite-825174.top","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:54.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-825174.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 05:20:42 GMT","end":"Sun, 05 Oct 2025 05:20:41 GMT"},"fingerprint":{"sha1":"04:60:44:F6:3A:B7:AE:C2:2B:CC:53:B8:B8:F1:17:D1:E7:20:4A:80","sha256":"A2:6A:C8:4A:60:55:06:B8:97:74:2F:51:1E:72:32:45:6B:89:A8:B6:9F:2E:04:61:41:13:93:13:A6:E7:9B:F8"}}},"request":{"raw":"GET /seo-module-api/api/public/v1/analytics-counters?project[id]=909\u0026domain[host]=1xlite-825174.top HTTP/1.1\r\nHost: 1xlite-825174.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-825174.top/en/block\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nx-app-n: v3-nuxt2\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; auid=U5PiFmiVLCc87YLUA1l2Ag==; lng=en; cookies_agree_type=3; tzo=2; is12h=0; window_width=1920\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:54 GMT\r\ncontent-type: application/json\r\ncontent-length: 76\r\ncache-control: max-age=1200, must-revalidate, public, s-maxage=1800, stale-if-error=86400, stale-while-revalidate=300\r\nx-content-digest: en43c984bba6946316b6444bf2e6429a4c\r\nage: 63\r\nx-request-id: 0ec0eaa59c5e42f0dccedcab33ea2521\r\nx-request-guid: 0ec0eaa59c5e42f0dccedcab33ea2521\r\ncontent-encoding: br\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: p;dur=1.2030601501465, wf-uht;dur=0.009\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":72,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d16a8ac1708c68ffe54008167c7b1788","sha1":"cc0cedaa9215ddb62c7710b4c292a6f734b7f729","sha256":"e96767324a6d812c43f3c1ad8c49540f61f8e2cf73f360c3b93e9aad26c1a21f","sha512":"ee05baddcd3c938536081b07c848a96420ce30202a80512d31f46a7ee0b48e1cb3aff0901cfb13cfc81d6d760f8ef9347468605c99e1cc33a82fd6a78f77c202","ssdeep":"","tlshash":"0fa00261a708dee86507744044eb8a63c4b874a5deb553069d44c371d29c6587055e2f","first_seen":"2023-09-17T06:24:55Z","last_seen":"2025-11-04T05:33:54.95641Z","times_seen":108,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-07","alert":"Sinkholed","trigger":"1xlite-825174.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_base-app_97d20bce3a.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:54.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_base-app_97d20bce3a.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:54 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-314e09f67e15e6149cf2ea175cb4f5fd-b4f43cde85eb8b51-01\r\nlast-modified: Thu, 07 Aug 2025 14:05:35 GMT\r\netag: W/\"9c4713294904ce9ee7da1de9770ad6f8\"\r\nx-amz-meta-mtime: 1754575049.356639633\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Aug 2025 22:43:54 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.004\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\ncache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1416979,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (23471)","md5":"12c8270b4323f0d96c5b899af9582e15","sha1":"a54916ea2e2e3ef0e44b8f79051df160bfbc1708","sha256":"47e0a9701cb526969545829850e8a7114c1d79437192c0056de7b41aca9317f0","sha512":"57bf802c045797ade1c381e75821a05504357a6ff73fbce94c9d473b2e459a15c456860634fc95b9852dd02fa833e69ece6954e1ec295ef7865b476e671418fa","ssdeep":"12288:5UnFDaj/9z70DlxAx1lz2BJCFaFI9SKr2YSO8mwHSGPmYcXx:uJaj/9z7oPA9z2ESe2YS6GPU","tlshash":"09256d49b016b8122dd748e790370643b29c5a6e8495f8a0f5fadcf8378e914639fb7c","first_seen":"2025-08-07T09:17:39.950125Z","last_seen":"2025-08-13T11:06:58.707308Z","times_seen":67,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_chunk_7HDOEZTP.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:54.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_chunk_7HDOEZTP.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:54 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-6dc97e649769cc94428315fef5a48948-e8507a52ca580031-01\r\nlast-modified: Wed, 06 Aug 2025 14:37:10 GMT\r\netag: W/\"7e76c08e7f16815131a5f13a10c1efba\"\r\nx-amz-meta-mtime: 1754490863.790355232\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Aug 2025 08:26:21 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 51453\r\ncache: HIT\r\nx-cached-since: 2025-08-07T08:26:21+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1194,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1193)","md5":"7e76c08e7f16815131a5f13a10c1efba","sha1":"5f800877b78a0713157fe119bc1a2d9a260f72e1","sha256":"c6f29a0c7c3ed884ccffd7a529fd2fc599e2da1f31af658146f0e36a3f4c00dc","sha512":"564dd139cad65e99fb210caf791d0582fa6312fb19e5c8395296361bd1904c2019d246132d42545f47f43a589bf3900e0468ed262251056c22d8172c55017e7b","ssdeep":"","tlshash":"b421f1e55fb87ba3627e26e4a02e0041e001d53752b4f1d4e294dfb464e945c035b4b6","first_seen":"2025-05-14T05:06:37.154171Z","last_seen":"2025-08-22T06:38:14.169571Z","times_seen":1811,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_accept_language_parser_B6TW5FDZ.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:55.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_accept_language_parser_B6TW5FDZ.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:55 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-31fab58a402b41b730149d58f94ac211-f0f9aeafe2ea4220-01\r\nlast-modified: Thu, 07 Aug 2025 14:05:32 GMT\r\netag: W/\"e3f1c4089db6b910890e85d97a2e2066\"\r\nx-amz-meta-mtime: 1754575049.363639704\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Aug 2025 19:00:36 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 13268\r\ncache: HIT\r\nx-cached-since: 2025-08-07T19:02:47+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1297,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1265)","md5":"e3f1c4089db6b910890e85d97a2e2066","sha1":"85828920da3c3fd7856acde184e835ac314295cd","sha256":"6c28afe5a52e0f9b1138fe498b254c8671058a058b555651ccae8e91e7534614","sha512":"0fc9e47336d93f4f6ae6dbffaaee9145b46d4ba6c75aad12acbded8fc3468d1d8d29fb76440dba071ad362f725287ea38b5f48045e51c39fd5bf842f5ec0abd6","ssdeep":"","tlshash":"d821f09fbac2b5908394184d4e2ec055f23a2957641ce5fcd625e6827c407a186f2c0d","first_seen":"2025-05-14T05:06:37.190071Z","last_seen":"2025-08-22T06:38:14.173196Z","times_seen":1811,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/b5cd9a5e87d930de856c92da15aa121e.png","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:53.700Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/b5cd9a5e87d930de856c92da15aa121e.png HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-825174.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 653\r\ntraceparent: 00-dfe153526a04fd82c88ee78fa3ebed64-4b75eb9dbcf9f092-01\r\nlast-modified: Wed, 26 Jun 2024 08:18:02 GMT\r\netag: \"e6f0766cbd95db33da44e7a9140648f2\"\r\nexpires: Thu, 16 Jan 2025 10:46:36 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 963\r\ncache: HIT\r\nx-cached-since: 2025-08-07T22:27:50+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":653,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"e6f0766cbd95db33da44e7a9140648f2","sha1":"5f196b1bfe8c3f92bd2ebcd67124e72e81ae6aaf","sha256":"c0399d478788d5d483f104a2e8cb7c32f41cb40e9df0c22e831b2bfa2db63ec0","sha512":"249da39baba03408de98c7fa9a9342ef120436037ab6245b3b4a5f1a206291caaf67481c6ed67064544576697d41ab82499abffec998d837812292a050bf826a","ssdeep":"","tlshash":"90f083e032254a855c02ac7fc33414448fb226cc3682bb09e012887119d24a79dd1368","first_seen":"2023-04-05T22:56:35Z","last_seen":"2026-04-03T12:07:45.643999Z","times_seen":6597,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_coupon/en/dictionary_cb717e2b5ab98574f65239fef62c0a69.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:54.209Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_coupon/en/dictionary_cb717e2b5ab98574f65239fef62c0a69.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-825174.top/\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-f3bc5e3a923d89512df559b35534d83f-7197d8a52e3ab8b8-01\r\nlast-modified: Wed, 06 Aug 2025 16:07:18 GMT\r\netag: W/\"537cbcf2ac5d20368a3cb58816772b87\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Thu, 07 Aug 2025 14:14:18 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2887\r\ncache: HIT\r\nx-cached-since: 2025-08-07T21:55:47+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28083,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"537cbcf2ac5d20368a3cb58816772b87","sha1":"d9dc2e7c095b8ec370e242ef27a0e93948edc8c9","sha256":"3a96cf466703694d8c72e4c615759c9d7c1f63910a47fd85714fcc4a37eca093","sha512":"b5002648e8dfc12eff6d09a4ae578cff1463f25b58ed1ff5990883dafbce3c8d49eb71dffcf6b55f02e2d2442beb133f4a981afe6115c734a6f10da095c0b474","ssdeep":"384:1lq4p/8i+GZCH6CqyXLbh18QnBehe6pjfsE6oCNhWxB5gVInt5DQHibGqT:nq4kKeSjIodhg4t5DQMzT","tlshash":"4ec2723e7403fcbbf58600c4aeabbda361b80098d3a9ce5b94db485e21e71de5157847","first_seen":"2025-08-06T17:49:53.342901Z","last_seen":"2025-08-21T10:34:02.631923Z","times_seen":262,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/1b53196e16.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:55.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/1b53196e16.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:55 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-d08a39888946bc5a3937444e3d723ff0-7172d0a921dceb82-01\r\nlast-modified: Thu, 07 Aug 2025 06:36:52 GMT\r\netag: W/\"639252fd09829c05b4e9f1e67192e8d0\"\r\nx-amz-meta-mtime: 1754548541.928595926\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Aug 2025 06:46:01 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 57202\r\ncache: HIT\r\nx-cached-since: 2025-08-07T06:50:33+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1973,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1972)","md5":"639252fd09829c05b4e9f1e67192e8d0","sha1":"dc7e7bedc22c08672f9dd10dcfa4e40ac94cd1e3","sha256":"3925d9517f0d2c426766b3c97a22de5a9ef951a1ea69f9e870b84fe12460ceb1","sha512":"b4df3a0db5a329fbd35b945146c6460cd211ddf2d12e1124a9076430eba0221514ae4cc19ab25593813cd4dfb674a52ca2264ac14795afb75d3a1566878f59fd","ssdeep":"","tlshash":"5a41c89573b035f2e637915dbd1670f0d3182a8d132e10e8eee9884e210c9d227a7793","first_seen":"2025-08-07T09:17:39.941432Z","last_seen":"2025-08-13T11:06:58.721772Z","times_seen":49,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_libphonenumber_js_Q6RMKWT6.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:54.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_libphonenumber_js_Q6RMKWT6.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:54 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-775a19abab3464d3db21b9dcd680eb9e-e10b0a0822caab7b-01\r\nlast-modified: Thu, 07 Aug 2025 07:06:07 GMT\r\netag: W/\"1da464d70e78b04b9b808e82e4ad9487\"\r\nx-amz-meta-mtime: 1754549916.309612546\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Aug 2025 08:26:19 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 51455\r\ncache: HIT\r\nx-cached-since: 2025-08-07T08:26:19+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":158815,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (65509)","md5":"1da464d70e78b04b9b808e82e4ad9487","sha1":"0c79e65516d1525ecb43d13cfb4ccb0631095a28","sha256":"b4c72b8036ca6767ab61490178f901538646f2aa1001cb042caa134174a41595","sha512":"517231e24fe48dcf9e907f32f759a9d8cc0471202dd5a22dd27efffeeb989e0f12b0db848280f03739b2e267ce95feb128ee8e9305cdd4e299c3fd19695ffdb8","ssdeep":"3072:sOU03o4Pwjp9BumfaVpfMHgWH71RgZXo9k:sXpzumWpf2gWH71RgZok","tlshash":"5af3b9f73640ab6775b23b188e4ad28f6f9c9c51cc88908caae7d4db5d61c22707db14","first_seen":"2025-05-14T05:06:37.168433Z","last_seen":"2025-08-22T06:38:14.163241Z","times_seen":1811,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/en/","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-07T22:43:51.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-825174.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 05:20:42 GMT","end":"Sun, 05 Oct 2025 05:20:41 GMT"},"fingerprint":{"sha1":"04:60:44:F6:3A:B7:AE:C2:2B:CC:53:B8:B8:F1:17:D1:E7:20:4A:80","sha256":"A2:6A:C8:4A:60:55:06:B8:97:74:2F:51:1E:72:32:45:6B:89:A8:B6:9F:2E:04:61:41:13:93:13:A6:E7:9B:F8"}}},"request":{"raw":"GET /en/ HTTP/1.1\r\nHost: 1xlite-825174.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:51 GMT\r\nlocation: /en\r\nreason-v3: slash_end\r\nserver-timing: dt_total;dur=0.011, total;dur=0;desc=\"Nuxt Server Time\", wf-uht;dur=0.008\r\nset-cookie: platform_type=desktop; Path=/; Expires=Sun, 10 Aug 2025 22:43:51 GMT; Secure; SameSite=None; Partitioned\ngw-mm=; Path=/; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Secure; SameSite=None; Partitioned\nauid=U5PiFmiVLCc87YLUA1l2Ag==; path=/; secure; httponly; samesite=lax\r\nx-dt: 909\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":301279,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-08T12:53:20.27382Z","times_seen":14838021,"resource_available":true,"data":null}},"time_used":265,"timings":{"blocked":112,"dns":1,"connect":43,"send":0,"wait":40,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-07","alert":"Sinkholed","trigger":"1xlite-825174.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/en","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-07T22:43:51.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-825174.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 05:20:42 GMT","end":"Sun, 05 Oct 2025 05:20:41 GMT"},"fingerprint":{"sha1":"04:60:44:F6:3A:B7:AE:C2:2B:CC:53:B8:B8:F1:17:D1:E7:20:4A:80","sha256":"A2:6A:C8:4A:60:55:06:B8:97:74:2F:51:1E:72:32:45:6B:89:A8:B6:9F:2E:04:61:41:13:93:13:A6:E7:9B:F8"}}},"request":{"raw":"GET /en HTTP/1.1\r\nHost: 1xlite-825174.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; auid=U5PiFmiVLCc87YLUA1l2Ag==\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:52 GMT\r\nlocation: https://1xlite-825174.top/en/block\r\nserver-timing: dt_total;dur=0.004, total;dur=597;desc=\"Nuxt Server Time\", wf-uht;dur=0.610\r\nset-cookie: gw-mm=; Path=/; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Secure; SameSite=None; Partitioned\nlng=en; Path=/\ncookies_agree_type=3; Path=/\ntzo=2; Path=/\nis12h=0; Path=/\r\nx-dt: 909\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":301279,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-08T12:53:20.27382Z","times_seen":14838021,"resource_available":true,"data":null}},"time_used":658,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":658,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-07","alert":"Sinkholed","trigger":"1xlite-825174.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/b3bc5d68/desktop/default/css/7fe5f71b.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:54.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/b3bc5d68/desktop/default/css/7fe5f71b.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-825174.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:54 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-de74345dafc0f80d5e192d6a0da7c385-ae8b1469c8c42f53-01\r\nlast-modified: Thu, 07 Aug 2025 11:51:48 GMT\r\netag: W/\"c610b8710368de3bf2f1c5bb581b6a3a\"\r\nx-amz-meta-mtime: 1754567507.271376915\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Aug 2025 22:43:54 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\ncache: MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3313,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3313), with no line terminators","md5":"c610b8710368de3bf2f1c5bb581b6a3a","sha1":"f67bc86785d434adb2e81a356a7926b8818ac567","sha256":"fad7111846310042401990719146401178f22e2618abf2b058e641b6495e8eba","sha512":"2dfecbd28b59bcf4b361736ce304f33792631b766506b80767f23033cbd37c1a83371af59b833032390f647b69824e9eeeb1f99530e18047f74cd30ffda0e5b1","ssdeep":"","tlshash":"0161c13e9cbc24359e7f472b7053ce84e199a39092030f8afdbb755a4c8b21d3895176","first_seen":"2024-05-14T21:30:49Z","last_seen":"2026-01-22T06:40:31.190981Z","times_seen":5786,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/site-admin/css_vars/29b5cda95fa390c124de39b6aeca6d24.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:54.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/site-admin/css_vars/29b5cda95fa390c124de39b6aeca6d24.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-825174.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:54 GMT\r\ncontent-type: text/css\r\ncontent-length: 46\r\ntraceparent: 00-df2562af0c2b2a1a69515e8986eeee78-18220ce8e3374523-01\r\nlast-modified: Thu, 20 Mar 2025 13:29:31 GMT\r\netag: \"29b5cda95fa390c124de39b6aeca6d24\"\r\ncache-control: max-age=3600\r\nexpires: Thu, 07 Aug 2025 21:57:03 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2371\r\ncache: HIT\r\nx-cached-since: 2025-08-07T22:04:23+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"29b5cda95fa390c124de39b6aeca6d24","sha1":"46f68f69533c1fdc737eb36e8e7af7672178e610","sha256":"6021ec0aede22eadcb8401fe945d345202320437c7be01b157f0cb282ebe7c88","sha512":"8a62d0b23596f91ed5dbd111fce75e940b4b6fe542716d9fad76d610eb9a90f67bad145f3dcfd977b5a7a6d414d66e94c0abcaf6cabce2310d94af56cdf0e13b","ssdeep":"","tlshash":"54900294a50c22502025c656109c48d0119412566621255851533451b4438405960188","first_seen":"2025-03-20T19:27:14.305804Z","last_seen":"2025-11-18T11:41:52.983768Z","times_seen":4852,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_game/en/dictionary_5fccd29f6cbfd77e0defc2ec5d94c5d5.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:54.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_game/en/dictionary_5fccd29f6cbfd77e0defc2ec5d94c5d5.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-825174.top/\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-2ad12b85cfbdf32661ef7253cbc1c95a-4787e44e928237a2-01\r\nlast-modified: Wed, 06 Aug 2025 16:07:18 GMT\r\netag: W/\"cff840305159b31392087726ca86500e\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Thu, 07 Aug 2025 23:10:38 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1816\r\ncache: HIT\r\nx-cached-since: 2025-08-07T22:13:38+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23599,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c893a3f57c8c617c06aa5729f94aa288","sha1":"3980ec693d62949e845eff86b17e4f7c9976809e","sha256":"8fc85060ce7588f6d3db0b44d7e59e6d16fc9fd7ce2bc243fb378f231354ebf9","sha512":"9f08f6b0aece588c27b58432607a1ac3b0b208fa66d4dc8f1654904b6f46c0bc15ee15db6b447226734ff2612987b4e86ff63d23b759aa22609f53a717b8313d","ssdeep":"384:i/B1li9EMt6tI0EEfqQ0O4cN86WwTCu9o9V38cdZ8XiG+/jtx:Ylijt6tI0EEfW6WwTCV/iXiGsjtx","tlshash":"34b21c08289edca6c3fa42b8b4e93bd673f488af1b916256fd4ca52d2d447d5601f40f","first_seen":"2025-08-06T17:49:53.353319Z","last_seen":"2025-08-13T10:36:50.6599Z","times_seen":67,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_forgot_password/en/dictionary_776c0b6a6ae43ea4503f983fa859981a.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:54.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_forgot_password/en/dictionary_776c0b6a6ae43ea4503f983fa859981a.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-825174.top/\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-c4bea27f558e661548239c966f33e06f-897e435425b9e3f5-01\r\nlast-modified: Thu, 26 Jun 2025 16:06:49 GMT\r\netag: W/\"9e075dc2a068d12162e260d49c92f233\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Thu, 26 Jun 2025 17:12:47 GMT\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 3492\r\ncache: HIT\r\nx-cached-since: 2025-08-07T21:45:42+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4086,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9e075dc2a068d12162e260d49c92f233","sha1":"9c748240ee9aeeb922f9998005c557517763a979","sha256":"81b3796da635e227e36b1a44c3224d8e0ccda902293beb08f84d870ed3bcee99","sha512":"6572c0bd8d55d4edc9ff8f263ef021d454593330e2f09759a2a26153870083e1d2cc308575d01196919d60a86170bd6b24436163427692b99eed38d0643eac9e","ssdeep":"","tlshash":"13819e0959831ef21abf8e90705e88663be5d06bde1764140fb5c30f3377e93668284a","first_seen":"2025-06-26T22:02:08.124583Z","last_seen":"2025-12-10T17:51:01.422955Z","times_seen":3966,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/entry-4547fbfe57.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:54.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/entry-4547fbfe57.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-825174.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:54 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-45a37a74be0a5acafb800e17b7c68d18-4d3f6be23478d5e7-01\r\nlast-modified: Thu, 07 Aug 2025 06:36:52 GMT\r\netag: W/\"87decac5677850033be2b5d1dfc338a4\"\r\nx-amz-meta-mtime: 1754548541.939596414\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Aug 2025 06:45:59 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 57203\r\ncache: HIT\r\nx-cached-since: 2025-08-07T06:50:31+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31312,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (30667)","md5":"87decac5677850033be2b5d1dfc338a4","sha1":"cc64b3a3def4c377c08c8e83032f68cd43733660","sha256":"6a798a6c2a8967d2f3c5ce8641309617d52bcdd1d24faf4cacf572e403284a59","sha512":"cb700bd7177e588cc8f6eb67b63ed44974d6bc7957d53fc134e0410178d4dd0cb251f9873510bde62b33a3eeab433f0c5ffaff8577915f80920805201b7f51f7","ssdeep":"768:H8agbkK7Gg18bzepte5SpZxR/DjB30CeAzC+bau9mVF/scn+SRasJZS7fBkctWw6:ctb3Gg14M9Qeau9mVF/sc5nL9l","tlshash":"a2e2b47474a7b0b520da59587739bd52c2c80f5fec8af8e251cb89ab17c308884067fb","first_seen":"2025-08-07T09:17:39.935453Z","last_seen":"2025-08-13T11:06:58.719527Z","times_seen":49,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/9d27dd7965.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:55.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/9d27dd7965.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:55 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 147\r\ntraceparent: 00-92e128b334877d02c012a6d26b72a503-fb89c39081b7a5a2-01\r\nlast-modified: Thu, 07 Aug 2025 06:36:52 GMT\r\netag: \"8f6e7336551a4ff42fa72ee26aaf7778\"\r\nx-amz-meta-mtime: 1754548541.93859637\r\nexpires: Fri, 08 Aug 2025 06:46:00 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 57203\r\ncache: HIT\r\nx-cached-since: 2025-08-07T06:50:32+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":147,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"8f6e7336551a4ff42fa72ee26aaf7778","sha1":"6eac629f64bed9ea7d19b805901c0e2efdeaa3fc","sha256":"fd7b40aca469cc913856d8ccd9ff5a2edf6175d403696734cbadecc68cbad472","sha512":"559ab9409e47c3b9b56fa322783e7216e2b6c800083e1a8f87efb87a69557995675f76f5291d0827abacac28838a7c4d3e10254c6149ee29fc81ebf81a04dd99","ssdeep":"","tlshash":"1ac02b210c6562b02e0f8ec8747134b60411a0453fb8ecc00c3403176163af0f5ab404","first_seen":"2025-08-07T09:17:39.938234Z","last_seen":"2025-08-13T11:06:58.695051Z","times_seen":49,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:44:03.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:44:03 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63748\r\ntraceparent: 00-df60c2844c77847f010229258474df83-bcf7054a176f8632-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"6887b6f24414dbc612dbf42ccdc76b70\"\r\nexpires: Thu, 16 Jan 2025 10:32:14 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1959\r\ncache: HIT\r\nx-cached-since: 2025-08-07T22:11:24+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63748, version 1.0","md5":"6887b6f24414dbc612dbf42ccdc76b70","sha1":"8068d3abfbc6cbf35b55919da45b1f4d2d136238","sha256":"fc5c015fc32518f1ed810fa84ca28941eb9d5a3c81acc8df69a4dbbeedef7b0c","sha512":"00f08f9dd648972c9571547e06172d5505dd13f577fe2e65a497d3856172807ac11c996984e4138d2eb2ac784257fe61864aee15752fe9e9e76f98db931e0c2a","ssdeep":"1536:KtdCG+Dz6RxAx457zL0ASEn091Y0H1mTOzI/OzMFOoTX4u:MMG+yRpzN091Y0VtI/pOoTt","tlshash":"8b5302485551fae2cac3073c0f7a89dbb37a776d519224cd98b69f830d37964bea2070","first_seen":"2023-06-14T19:15:49Z","last_seen":"2026-05-07T11:29:51.77598Z","times_seen":10553,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-7V60YW2S5H\u0026gtm=45je5861v893859730za200zd893859730\u0026_p=1754606644631\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528500~104684208~104684211~104948813~105103161~105103163~105135708~105135710\u0026cid=1104915943.1754606645\u0026ecid=1860095263\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AEAAAAQ\u0026_s=1\u0026sid=1754606645\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-825174.top%2Fen%2Fblock\u0026dt=1xBet\u0026en=scroll\u0026ep.optimize_id=GTM-5R4MT54\u0026epn.percent_scrolled=90\u0026upn.ref_id=1\u0026tfd=13629","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:44:05.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"A2:8A:24:AD:51:7D:A4:62:BB:34:6F:C9:21:A1:B9:E1:2D:A6:0E:C1","sha256":"9F:B9:94:8F:84:D3:44:71:A7:81:72:C8:80:4D:14:02:E3:E0:30:0C:F1:17:27:83:00:82:D9:C3:68:D3:B3:AF"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-7V60YW2S5H\u0026gtm=45je5861v893859730za200zd893859730\u0026_p=1754606644631\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528500~104684208~104684211~104948813~105103161~105103163~105135708~105135710\u0026cid=1104915943.1754606645\u0026ecid=1860095263\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AEAAAAQ\u0026_s=1\u0026sid=1754606645\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-825174.top%2Fen%2Fblock\u0026dt=1xBet\u0026en=scroll\u0026ep.optimize_id=GTM-5R4MT54\u0026epn.percent_scrolled=90\u0026upn.ref_id=1\u0026tfd=13629 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-825174.top/\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://1xlite-825174.top\r\ndate: Thu, 07 Aug 2025 22:44:05 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:158:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:158:0\r\nreport-to: {\"group\":\"ascnsrsggc:158:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:158:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-08T12:53:20.27382Z","times_seen":14838021,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":59,"dns":0,"connect":23,"send":0,"wait":30,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-7V60YW2S5H\u0026gtm=45je5861v893859730za200zd893859730\u0026_p=1754606644631\u0026em=tv.1~em.7y6RNKZzPOxSAnVJIwtCXrVw0VgJZiiyMUyKKVvfvJo\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528500~104684208~104684211~104948813~105103161~105103163~105135708~105135710\u0026cid=1104915943.1754606645\u0026ecid=1860095263\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026ec_mode=a\u0026_s=2\u0026sid=1754606645\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-825174.top%2Fen%2Fblock\u0026dt=1xBet\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026ep.optimize_id=GTM-5R4MT54\u0026tfd=13629","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:44:05.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"A2:8A:24:AD:51:7D:A4:62:BB:34:6F:C9:21:A1:B9:E1:2D:A6:0E:C1","sha256":"9F:B9:94:8F:84:D3:44:71:A7:81:72:C8:80:4D:14:02:E3:E0:30:0C:F1:17:27:83:00:82:D9:C3:68:D3:B3:AF"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-7V60YW2S5H\u0026gtm=45je5861v893859730za200zd893859730\u0026_p=1754606644631\u0026em=tv.1~em.7y6RNKZzPOxSAnVJIwtCXrVw0VgJZiiyMUyKKVvfvJo\u0026_gaz=1\u0026gcd=13l3l3l2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527906~104528500~104684208~104684211~104948813~105103161~105103163~105135708~105135710\u0026cid=1104915943.1754606645\u0026ecid=1860095263\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026ec_mode=a\u0026_s=2\u0026sid=1754606645\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-825174.top%2Fen%2Fblock\u0026dt=1xBet\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026ep.optimize_id=GTM-5R4MT54\u0026tfd=13629 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-825174.top/\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://1xlite-825174.top\r\ndate: Thu, 07 Aug 2025 22:44:05 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:158:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:158:0\r\nreport-to: {\"group\":\"ascnsrsggc:158:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:158:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-08T12:53:20.27382Z","times_seen":14838021,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":57,"dns":0,"connect":21,"send":0,"wait":29,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/b3bc5d68/desktop/default/Page.Block-71fbad99.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:53.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/b3bc5d68/desktop/default/Page.Block-71fbad99.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-825174.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:53 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 476\r\ntraceparent: 00-81650e8419c4e4c320076bc911e110af-e8719cb655737e07-01\r\nlast-modified: Thu, 07 Aug 2025 11:51:47 GMT\r\netag: \"9e85b0f4063257e193c45da1530d99c9\"\r\nx-amz-meta-mtime: 1754567507.265376894\r\nexpires: Fri, 08 Aug 2025 21:57:49 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2764\r\ncache: HIT\r\nx-cached-since: 2025-08-07T21:57:49+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":476,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (476), with no line terminators","md5":"9e85b0f4063257e193c45da1530d99c9","sha1":"25bf44716753f7d0630c448c3d7fba05771013ea","sha256":"15509a8e996cef9f1b1ae47ee3a26257c89d9a7b6c88cf7887c105ddf86582a1","sha512":"162d4d921fac452a4aa6205c63f8e3baa3ff2e3f4471c415bcfd5eb5b9790c7486143c7b871fa6680d64cf0d9e3e37279ee4f8d4af656dff55c799bae23fb4f8","ssdeep":"","tlshash":"84f00e9b6422bccd94e6009343b781b7b8cc3a7a0649696002a0c8a132f6c56081024f","first_seen":"2025-08-06T18:28:12.689061Z","last_seen":"2025-08-21T07:44:03.367137Z","times_seen":164,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/b3bc5d68/desktop/default/DC-9300c31f.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:54.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/b3bc5d68/desktop/default/DC-9300c31f.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-825174.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:54 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-9f278fdaa7a74d3a9446d00b41669af3-a01badeb6479f6b8-01\r\nlast-modified: Thu, 07 Aug 2025 11:51:47 GMT\r\netag: W/\"908fe1921bb9985923bd000857a63b0b\"\r\nx-amz-meta-mtime: 1754567507.265376894\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Aug 2025 12:15:44 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 37556\r\ncache: HIT\r\nx-cached-since: 2025-08-07T12:17:58+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2304,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2304), with no line terminators","md5":"908fe1921bb9985923bd000857a63b0b","sha1":"bd133a86c3052d7511e7dbf84e3fe5cd5e42ca2a","sha256":"6e0246ee40b4ee41148520118cda5f4a761f3f29013b6fb84c644d24de301fcf","sha512":"8e34cc4ca2719d94219693872a1ec698aac243ee3fba69970d6c717c9784cf29b6bccd670791df47f43b63063e49812a56f05b8ff99033eb0e8796c01935827f","ssdeep":"","tlshash":"9e41864575a4bc1283f908d419ff7206013bf076648dca75d6e36dc708a7f56a117d19","first_seen":"2025-08-06T18:28:12.68354Z","last_seen":"2025-08-13T10:36:50.669193Z","times_seen":52,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_vue_deps_DYMTJONH.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:55.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_vue_deps_DYMTJONH.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:55 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-7d1ee134e4c8d05de3e021c9c9f7ee20-abb50671dd3ebf66-01\r\nlast-modified: Thu, 07 Aug 2025 14:05:32 GMT\r\netag: W/\"1580a3cfe81fd30910a49dfe64cc8e7b\"\r\nx-amz-meta-mtime: 1754575049.363639704\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Aug 2025 17:41:46 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 18057\r\ncache: HIT\r\nx-cached-since: 2025-08-07T17:42:58+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19175,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19034)","md5":"1580a3cfe81fd30910a49dfe64cc8e7b","sha1":"314144dc49595482ba46c0b85b38d5f73ef73a7b","sha256":"8989a021d20f0fc08c43966a287cbd99e43142a5a0ff42eb232756a101de6035","sha512":"65a68a90c0bbac3609abafd1e200227d970f2a35a5158d699972651cdcdcc4c60e08dbe7e3f605621abb04e016e064f71057c9332d2a4e46dd704aad5ee3196b","ssdeep":"384:yo1wZ1yyQBPgmtk3aNPtFvsddbHyrKe/k43RuD6EgUBBmCWEg4bGy7IbEALvzAdw:lwZ1yyQBDk3a1tF+5E/uDRgQBpWEg2mh","tlshash":"de824be47bb9fd93339840dc80671b53f26948a7844cd074e799ae9330a454385b6bbe","first_seen":"2025-05-14T05:06:37.162459Z","last_seen":"2025-08-22T06:38:14.178048Z","times_seen":1811,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/b1b34cc682.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:55.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/b1b34cc682.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:55 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-efd766791eccf869676a25d30834b19b-cbf4d03f0b64c90b-01\r\nlast-modified: Thu, 07 Aug 2025 06:36:52 GMT\r\netag: W/\"976a138bb908c8748c7b8b68b30e6d98\"\r\nx-amz-meta-mtime: 1754548541.932596103\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Aug 2025 21:11:30 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.003\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 5545\r\ncache: HIT\r\nx-cached-since: 2025-08-07T21:11:30+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1235,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1234)","md5":"976a138bb908c8748c7b8b68b30e6d98","sha1":"a9b0c822831d800ae444a8326de16734e9f9b918","sha256":"a532fe95785ae3831da3c508398ce89e4a1a45e67fda7a4836a8003429fcfb49","sha512":"2327c3a727bcd0b86e1b267c95a5b6f3208d0d73e3342e579baa8ba293585b52bce148a3f81d1f1e5220fefe7bfc86650756c6cf6858e4042cfb7122c8166653","ssdeep":"","tlshash":"fd21d7ecb9f830bc0e0d8adea03d5022db48164d761cfce853ce9a9473100dca6a4b96","first_seen":"2025-08-07T09:17:39.955388Z","last_seen":"2025-08-13T11:06:58.721235Z","times_seen":49,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_block_pages/en/dictionary_9b848ba427b59305d3df2cf0bc5dd080.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:55.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_block_pages/en/dictionary_9b848ba427b59305d3df2cf0bc5dd080.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-825174.top/\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:55 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-cece55ccf90fe807c0a5375f69b03830-831d58f7b9f0c709-01\r\nlast-modified: Fri, 18 Jul 2025 16:06:55 GMT\r\netag: W/\"c557f8f9061794bef4f6b3a5f96cbbb5\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Fri, 18 Jul 2025 17:34:19 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2548\r\ncache: HIT\r\nx-cached-since: 2025-08-07T22:01:27+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2352,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c557f8f9061794bef4f6b3a5f96cbbb5","sha1":"11add862eba30ce83a5f5c71ba4c53b305fd1774","sha256":"bf6a49d0686075ed43f0babe55f6b983cd8a2db79da3f31cc36c9f4d192130d5","sha512":"fe4bcb92b635b15ad1dfe2fed7b19c5bc14523a435815bb2cd572b20cf4b27150293acdee78753bcefa52eb6505124e20a4b46465fa161f0ad7841716909cc9e","ssdeep":"","tlshash":"b941745b733c55e5392841403d0d6d6a7b520168be9161c8fa8cdc9d332f8cae23b62f","first_seen":"2025-07-18T16:37:04.820544Z","last_seen":"2025-10-30T11:47:43.214083Z","times_seen":2348,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/785871f5ae.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:55.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/785871f5ae.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:55 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-ac61bf0215fa3f4822cda945822b81db-81f7944e2c260daa-01\r\nlast-modified: Thu, 07 Aug 2025 06:36:52 GMT\r\netag: W/\"f94450c539719168946dc2b7f4c2e5f8\"\r\nx-amz-meta-mtime: 1754548541.932596103\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Aug 2025 06:46:01 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 57202\r\ncache: HIT\r\nx-cached-since: 2025-08-07T06:50:33+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3220,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3219)","md5":"f94450c539719168946dc2b7f4c2e5f8","sha1":"8337bc9dc830cb0881e242e2c59561c3afa23b11","sha256":"9699dd885ec986f3af7e272c5b444a1f26648c618d9cb65ef9d0131478a8239a","sha512":"721de1a5bfd2ab9bfbaf6c1a6c99883f7f04b3cb2b90cb16df36444cb97c893ba44fe764e4751a17ce21dec6b4b9db8d840661c61101b223075688d4067800dd","ssdeep":"","tlshash":"e961b58574b9a0fa790741cd7d5274b0e35a0cb9239c05b1f2f5888823bd6c45b6f6db","first_seen":"2025-08-07T09:17:39.873088Z","last_seen":"2025-08-13T11:06:58.68366Z","times_seen":49,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"radar.cedexis.com/1707728419/stub.js","fqdn":"radar.cedexis.com","domain":"cedexis.com","tld":"com"},"ip":{"addr":"45.54.49.5","port":443,"asn":63911,"as":"NetActuate, Inc","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:44:04.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"radar.cedexis.com","organization":"Citrix Systems, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A2:3E:30:19:D5:41:3A:11:81:58:E3:B1:6F:F4:D2:78:0B:44:6F:D0","sha256":"BE:70:39:96:BA:51:8F:A7:6A:9D:E1:58:FB:D9:F7:6F:17:5C:DA:A9:6E:54:3F:8F:0B:3D:1E:DF:8C:44:B4:71"}}},"request":{"raw":"GET /1707728419/stub.js HTTP/1.1\r\nHost: radar.cedexis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-825174.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Thu, 07 Aug 2025 22:44:04 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Mon, 12 Feb 2024 09:51:01 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"65c9ea05-186\"\r\nExpires: Thu, 21 Aug 2025 22:44:04 GMT\r\nCache-Control: max-age=1209600, public\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":390,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"82dec77fd0353c7c71ce053b8601387e","sha1":"fbbca95419e1d0c042e0a5fdf10f380aca66188c","sha256":"39f2b7b0fa78d37d0c84d2d6618bd635d86fd683d9bcdd5729850cb2a62522f7","sha512":"6872c895cb44711405e57a436dfbe15d094f9159e11ee2b89983c63b1f18f6acbdfaf0ccbb5e48b2bf24f366f16584c660bca4b6b14c048a134bb77a60f6563e","ssdeep":"","tlshash":"02e068ae9391a318537a2dbacc4e060ba0f6114888e5e4e029f5c2c00461bae072bfb4","first_seen":"2024-02-13T14:23:26Z","last_seen":"2026-01-15T12:01:08.184588Z","times_seen":7496,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/b3bc5d68/desktop/default/commons/app-2f1d53e3.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:53.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/b3bc5d68/desktop/default/commons/app-2f1d53e3.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-825174.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:53 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-cbaa153919ba820f0ba769a7f91de85d-ce3d9e73d5309e14-01\r\nlast-modified: Thu, 07 Aug 2025 11:51:48 GMT\r\netag: W/\"0c83747fb0d1196dd08f02ae8c641fff\"\r\nx-amz-meta-mtime: 1754567507.268376905\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Aug 2025 12:15:39 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 37556\r\ncache: HIT\r\nx-cached-since: 2025-08-07T12:17:57+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":137774,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65476)","md5":"0c83747fb0d1196dd08f02ae8c641fff","sha1":"bff0e4dcc28bde39af9746c6fb7caad4d6972dc6","sha256":"6287be95f2921d14c3490a8a9feda99d5bdf47d83ef832a1de7c72b62526b554","sha512":"9d3e81948552a3d8b0deb65675eb8efe8af8520e3ed0df7a7db2edf191c6275d3c05ca06544bc65cc796bb740b0e9bc3b934390412e8f33d7d01b95f81480924","ssdeep":"1536:x0UiXH2DHJjIAG3wvvjE+gjmZVBKCrmhUG5YGf7BMr3y6MPp+PWKPSytt7:MXHUp0qXjE+gjmZNmlYGNMrLPtJ","tlshash":"acd3d5dcf695b03117e721b5407f150bf23a7898680ac0a4f266e8d53db888ea167f7d","first_seen":"2025-08-07T22:44:37.720434Z","last_seen":"2025-08-21T07:44:03.347986Z","times_seen":166,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-825174.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json","fqdn":"1xlite-825174.top","domain":"1xlite-825174.top","tld":"top"},"ip":{"addr":"83.147.226.22","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:54.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-825174.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Jul 2025 05:20:42 GMT","end":"Sun, 05 Oct 2025 05:20:41 GMT"},"fingerprint":{"sha1":"04:60:44:F6:3A:B7:AE:C2:2B:CC:53:B8:B8:F1:17:D1:E7:20:4A:80","sha256":"A2:6A:C8:4A:60:55:06:B8:97:74:2F:51:1E:72:32:45:6B:89:A8:B6:9F:2E:04:61:41:13:93:13:A6:E7:9B:F8"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json HTTP/1.1\r\nHost: 1xlite-825174.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-825174.top/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: b6f2dfd1-7bd6-4835-80cc-692915c3fe90\r\nContent-Length: 19\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; auid=U5PiFmiVLCc87YLUA1l2Ag==; lng=en; cookies_agree_type=3; tzo=2; is12h=0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:54 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nx-dt: 909\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.069, wf-uht;dur=0.010\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-05-08T12:53:22.577043Z","times_seen":264240,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-07","alert":"Sinkholed","trigger":"1xlite-825174.top","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_registration/en/dictionary_cbde8b5a0c3d88dea8ee62557b2ef409.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-825174.top/en/block","date":"2025-08-07T22:43:54.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_registration/en/dictionary_cbde8b5a0c3d88dea8ee62557b2ef409.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-825174.top/\r\nOrigin: https://1xlite-825174.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Thu, 07 Aug 2025 22:43:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-5e305b15b518ef64ec64309b920fcf2f-a6d19816ecfcb856-01\r\nlast-modified: Wed, 30 Jul 2025 12:06:59 GMT\r\netag: W/\"8b5eb9f2caf196536794f3292d12c281\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Wed, 30 Jul 2025 13:15:14 GMT\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2277\r\ncache: HIT\r\nx-cached-since: 2025-08-07T22:05:57+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22925,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b286491cbc4f71b6cb4dbd659571f17d","sha1":"cf54236392e17a1df0f2d3f11a69467643eec4f3","sha256":"4a5956c339dc3f5bf0fcbe8136ce73c3dde6165994c1397bb4af4c5b9d4049bb","sha512":"1e48d9bc6bb83e66d428763fcdd4459ac21a2df7db174a2bca658fc5bb2d8e69b524e5f9dd00e6854802402a362ab0b3ba8444c61352a1617250f6dc2f1c3616","ssdeep":"384:gtUYZ6LlTYvzH5W8qD8bqBSxkhx+/Y5egwZwcW1/vxHyTqC:/qLHuDDsxkP++3rJgTqC","tlshash":"13a2a54f9f788c7307c3060b7d8b6b9a26fe1158769208198fbd8a6d1375b91a33349d","first_seen":"2025-07-31T01:11:02.511648Z","last_seen":"2025-08-22T06:38:14.167289Z","times_seen":337,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}