{"report_id":"bd249f05-87eb-41ad-8a84-6363eb91591b","version":6,"status":"done","tags":[],"date":"2025-09-28T08:06:47Z","url":{"schema":"http","addr":"refpa32010.com/L?tag=d_131637m_32273c_[]MS[]null[]pb[]general[]106819985_d27082_l191016_clickunder\u0026pb=cbd748604f564b7883285a09608259ca\u0026click_id=4dee5db3523c3eff48d74c6a8ab049d9","fqdn":"refpa32010.com","domain":"refpa32010.com","tld":"com"},"ip":{"addr":"178.253.46.211","port":0,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Iran","country_code":"IR"},"final":{"url":{"schema":"https","addr":"1xlite-93399.world/en/block","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"title":"1xBet"},"submit":{"url":{"schema":"http","addr":"refpa32010.com/L?tag=d_131637m_32273c_[]MS[]null[]pb[]general[]106819985_d27082_l191016_clickunder\u0026pb=cbd748604f564b7883285a09608259ca\u0026click_id=4dee5db3523c3eff48d74c6a8ab049d9","fqdn":"refpa32010.com","domain":"refpa32010.com","tld":"com"},"ip":{"addr":"178.253.46.211","port":0,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Iran","country_code":"IR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-02T08:06:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"v3.traincdn.com","ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"domain_registered":"2022-11-10","domain_rank":256434,"first_seen":"2022-11-25T10:00:40Z","last_seen":"2025-09-22T01:30:50.818803Z","alert_count":0,"request_count":64,"received_data":5666233,"sent_data":32285,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"radar.cedexis.com","ip":{"addr":"45.54.49.5","port":443,"asn":63911,"as":"NetActuate, Inc","country":"United States","country_code":"US"},"domain_registered":"2009-01-07","domain_rank":28156,"first_seen":"2013-11-27T02:31:43Z","last_seen":"2025-09-22T01:30:50.806867Z","alert_count":0,"request_count":2,"received_data":1415,"sent_data":852,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-09-21T22:11:31.071214Z","alert_count":0,"request_count":4,"received_data":1543008,"sent_data":1806,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2025-09-21T22:11:31.293382Z","alert_count":0,"request_count":2,"received_data":1704,"sent_data":2044,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2025-09-21T22:11:30.846888Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":854,"comment":"","tags":null,"fingerprints":null},{"fqdn":"1xlite-93399.world","ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-06-10","domain_rank":1401746,"first_seen":"2025-07-15T22:07:22.317703Z","last_seen":"2025-09-22T01:48:07.200811Z","alert_count":38,"request_count":19,"received_data":970492,"sent_data":53439,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"refpa32010.com","ip":{"addr":"178.253.46.211","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Iran","country_code":"IR"},"domain_registered":"2025-07-10","domain_rank":0,"first_seen":"2025-09-01T17:06:29.852396Z","last_seen":"2025-09-22T21:32:13.946502Z","alert_count":0,"request_count":1,"received_data":254090,"sent_data":644,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-09-21T22:11:30.527953Z","alert_count":0,"request_count":3,"received_data":1674,"sent_data":2654,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/5d6ee6fa/desktop/default/app-da9c3409.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"39b8e4a066559191eb41aea315529a05","sha1":"7824c796edbc82c88a6d25962daa07dc0062ec9f","sha256":"f8cc9ec30178b320a0ed73d0336cb057d6b35a74f00365739a3e4b1a796fe45a","sha512":"bd64d3c4d2c8265b65e20eccdf31defa35953df374459e914311577c25ea3d71a9695958c50a281c96651fc4fff52f118a8f0b4b6ec3c4fbfb80192185d67a68","ssdeep":"12288:1/WpKEunZGKN6+i4gF7jcupM/7mkkjbGy:1/s3AZGQgF7jcupM/7U9","tlshash":"76a44ca5b5c8f48a02f34bdae03b0061e33916a9780dd064f779fdca359bc05916a67f","size":485870,"data":"","first_seen":"2025-09-26T11:18:04.531943Z","last_seen":"2025-09-29T05:34:13.695521Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/en/block","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"eval","is_inline":false,"md5":"aa69f4e26ef76c187e57fc7a2976c9cb","sha1":"7d7a11d347a8bed3897b52bf7f6f1b0dc3528b8b","sha256":"1feee38d88684308e7e31e1e539361ff7bfd1f53a6524b7dbda042f768011326","sha512":"75d3d4dc088bebcb01dc7debaacaa758c2f68cf368e8809ad35aa30a5709208522ee04174552db0067d05946e362995736634e1ce0d624c4197c58275af120ef","ssdeep":"","tlshash":"1d514151e03c5a3be937052e920b7f125fac55b22ac92f5cb61c4b7c26d60ce91136cb","size":2687,"data":"","first_seen":"2025-09-26T12:49:16.797449Z","last_seen":"2025-09-29T05:34:13.716793Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/792ed53757.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6056e830277be5c82779b6fe03d9e4e","sha1":"6f9b1c2f40091dbc71ba4d671adbf12d6e0cfd73","sha256":"14241f6033a8bd3219707f87df1af25202b099a44e9b68b3e834838f67fe5668","sha512":"a2772723fb3c2bbc5d5c6ce4d476b0a31c69bd64000987f8554c41873d89a205cfbc847a88433d9578d4bd06f15ae597ded183807776441180f5ff3bfe4eb3ba","ssdeep":"","tlshash":"6261c6c578b960f9790741cd3d927070e39a1db9139c05b1f2f9888823bd6c45b2f69b","size":3205,"data":"","first_seen":"2025-09-24T10:08:54.342793Z","last_seen":"2025-09-30T08:01:23.58765Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/en/block","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"580b3e56fc9ab6e8b4655f43ee057cc1","sha1":"5dfce565e446f4a167195de9a1a5dd26163c711c","sha256":"446f07b6e56de61d2c2d5b6ba408cc580b492a6d1ede8fc51cfde4ef75a2b382","sha512":"b2350579a3aaa5843b9b16c31782f3d7a4b850ba211d0074aa05d819c89ba49b482eb59aefcfb33f9fc9b270abb7cf7509e1254def23e9f98c116130c47f0018","ssdeep":"","tlshash":"e99002491d851041c56a1160041e1888442488761a40d8d1c480d9551c51630238e45c","size":47,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-04-05T01:11:28.395146Z","times_seen":13002,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/main-static/5d6ee6fa/check-ob.js","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"c065700c9c8c493403359e1f2baa10d9","sha1":"4630fe729e70bdf63fa7ba6c84ec277fd1f51030","sha256":"1e61f0c82ae82ffcf503fcd4b4c8ae27b32c11e19b882d5d13f3c44364c893f4","sha512":"b2e1c73cb94f5e3ceb35c3662bf4d72baf800a9a7c64318b1db07d50e9c885dbd94821ef3b3916d1b8b4fabb8f45cb588834b41c6a8a7f4d2c3e9c3866083ee7","ssdeep":"","tlshash":"96d0a79fb900211406939267d12f8668807724973f008182500597e069b8f4c4b37895","size":219,"data":"","first_seen":"2024-07-17T14:33:52Z","last_seen":"2026-01-22T06:40:31.153166Z","times_seen":6298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/5d6ee6fa/desktop/default/vendors/app-851b1992.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"bea69619a1af7c453e472538ef8dde24","sha1":"83044c53c2601822db0cfc257fb07b20fe77d2e4","sha256":"d60c31cc3ce5f3e1d4b643ea980342b68a8a83b7dd50b802989e1c7cb00a7497","sha512":"9b9b554fb7dfd2258e659c5887d25a6e72227549543d587b704819ffe2ece51dc28ed408a88608972b2b33cb3cf1c5c93761c7c38ed86a9b6ba4c88ccbabc6b0","ssdeep":"12288:VbdQhOyvNhOgY4g104bmicRIQclrz3t/h1dYoW:chOyvNhOgY4g1nnuPW3RrdlW","tlshash":"1a154ba9b581f2560aa36ba9d06b0017e33d5e5ebc0ce444f2e7cdd53a59804713af2f","size":946383,"data":"","first_seen":"2025-09-26T11:18:04.524495Z","last_seen":"2025-09-29T05:34:13.663764Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_vue_deps_IMSSW3CC.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"88a6fb60a16266cbe3ecb52fd8b93126","sha1":"eb542aa1fa7c81175d735276bc982753baa7a969","sha256":"992b792506b7364dbca69a628101f8ca3c278b1e3f5551e898d84d1537637b90","sha512":"3d9ccbd74fd0ca647ee3413cd66daadc156e03254f11feaf32e8786a9084734e36450753868cadf7a2c1fc8d59064a3bc047c0474ce46bce43566bfe758fea56","ssdeep":"768:GwZ1yyQBxrKWnaIlIO+jKr4R5Vx3zt7RH8PocaFz12c:GwWBxrKWaIlIO+jKrYVhZ7RH8PpaJ12c","tlshash":"e5d24c94b73abc62339d908990370713b27659e7484d9020f7e59ea231b5a43c2fbb7d","size":29933,"data":"","first_seen":"2025-09-10T10:32:48.528015Z","last_seen":"2025-10-09T08:36:47.172805Z","times_seen":768,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_localforage_PJNUBKRP.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"7e7ebd44e3a6550f862e122ab7df6409","sha1":"384ecbc3ab0f65e6b0f88c1e68ba3eb73fad4999","sha256":"138767518a09e63d24f918f6380923893a2ec3aa59a640e51c83517501823076","sha512":"e2766b50e289dc6a69fa30432a49a0b7743f15cd15a54d707959c7623f258057a821a94285c492746216cfbf815089309b6cc09b930ba7977ff9c4ffc352d76e","ssdeep":"768:wDKAOpvMewHFuM96WwZACjzz46zSTKsBE1OvFXfX1UXk:wm8uPW43zEIOvdlUU","tlshash":"a5d2b68c7799f02683bb3070907f580ef237a912594d90a0e591e5f86dbd75c822bfad","size":30277,"data":"","first_seen":"2025-08-22T10:11:14.535778Z","last_seen":"2026-03-04T04:00:43.425133Z","times_seen":3921,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/en/block","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"eval","is_inline":false,"md5":"b8d59da6b97581ca5d3acca0ffcc8967","sha1":"0bd99049d066a5f33b7c67fdb644fe57fb8d00e8","sha256":"3acc11abe388c23e1ce821de857ab4262cae8ba224cb4fb831b8102e88f293c7","sha512":"c7d7e78e9a60c8cda7dbd76fa05e603b59c0cac4cdaec25d25bbe131b8ab5204f151fc3cf9aa90e07d6d092268e480418f67d9cbbfedcc9c0ef825df7704ceb3","ssdeep":"6144:7qTr+hURVifOnT0ten2YQSKhlupeSU45FzgLZ60DpkvYvXe08YcAvM:7qTBAFBEeSU45FzkDamXe0cAU","tlshash":"cc7451895dc1e8b0f58e3d1e11ff1e5f600e1ce4719e8cbaab08e9299f965357d2290c","size":353090,"data":"","first_seen":"2025-09-28T08:06:55.610324Z","last_seen":"2025-09-28T08:06:55.610324Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/en/block","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"7bcdb973ab8af8e24ab11cb554a1ba6e","sha1":"24e8a10f240f2b06f81d7c173cd0a90606641fc1","sha256":"916ec4eb9b485eb47f43a17fe212e84e4b72600b45eb6d4588599ad495a57fcd","sha512":"1d890761e2a00081531fda5c0489ebf4df4140a9748bdc6d97bd355023e3e4ab09e19663ab319cf775e28ba71d99ab09f20d5414a561fa10fa3be2cb874484ca","ssdeep":"","tlshash":"e380044710411010cdd351d040573c44001044f114c4dc500040fdd11c53030110545c","size":34,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-04-05T01:11:28.405291Z","times_seen":13017,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/5d6ee6fa/desktop/default/Betting.Core-eda663f6.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9a797c3b89bf15336330cb65375dd9e","sha1":"adca70a03cfa40f604cfc03063da9fa69b194623","sha256":"a8b375a8fd1d0ba2a43584326a4805b89cbf377df35a24aa5b2423a0bf415169","sha512":"5e2adcb4eaba788cb532e9125d6070b8bb33fb0ac68d694ba0da1d381d14c803ae3552f49573fb156c0cf06c05712a4d9076695f215ce14ca8618548549d5766","ssdeep":"","tlshash":"8c41c88535d274440bbe019541ef0ab6b0686e993d5f04b9a543ead074a489ac1f7f8b","size":1953,"data":"","first_seen":"2025-09-26T11:18:04.554741Z","last_seen":"2025-09-29T05:34:13.659064Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_chunk_LNU73JEK.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"d96d317966512ab8915a90670ca5a5af","sha1":"a810be1c3e515adb49804e8d976250deb16fd77d","sha256":"f125201d62c452efba070d856821885c7cfd539a31d55846caa6ae3a7522d3cf","sha512":"460b29966e6f5ac4d34ccc714217d29686d7aff42efa92a102729d40aa36dd4fbb87116178b2f9fdece5fdb09cb2bf2024312d3f1b86abb69644f695c76aca2d","ssdeep":"","tlshash":"a521f1e56fbc7ba362be2ae4a02e0041e001d53752f4f1d4f294dfb4a4e949d035b5b6","size":1232,"data":"","first_seen":"2025-08-22T10:11:14.554562Z","last_seen":"2026-03-04T04:00:43.411503Z","times_seen":3921,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_base-app_0f97545e93.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"6f4d800a0f28df5fb48904c1504fc345","sha1":"fa4d03d18c76124ebc1db7386aa9e1a83ebb5a38","sha256":"039b56a4d68f9fb1c1c3caab68666f7ba2092548cf9ec050af52a5472dd2e130","sha512":"fa3e4a717e122659ffbbf8d5c3e483106c750040eb5400ad6dcf5c92b76f04eb51a5f0c62442ffc2ac167f93798447de33c5d4c435d205af6ae21a64d30927ec","ssdeep":"24576:qQO3ln7dgdFmUmKCE5/p6qs9/m82+nCAs49z:pO3ln7dgdFSKCE5/p6TCAsQz","tlshash":"98659d44f067bc222ed784eaa4770142b15c5a5d940aaca0f2faddf837ce551628fb7c","size":1478180,"data":"","first_seen":"2025-09-24T10:08:54.372708Z","last_seen":"2025-10-02T07:15:42.711174Z","times_seen":264,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_popper_js_WZJKYEQD.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"bea5b052c307601192270938523fa030","sha1":"937f7094c67f5a92c1032a7bc3f21ee94bec66ef","sha256":"f41290374ba615854ebb4b28a07de775581707f3b6427bcc01c0529c62476f64","sha512":"b9bff7f7d9b518ec76898a732114873c01206378c2a840c62062f05487ef773716ce841d7a5bafe3f0c65fbfdf05509852571a3a6b381661cb6f4984d6bc23a9","ssdeep":"384:ZP7iayBuR9vu3z1JXvykd2+LaqHdC6RjVnTGm/7piCXmH8kCCcvJTCyCu+meAxiZ:piZwO3XvO+NMSJt3XmckXcv4nxJAxiH5","tlshash":"7b92a28c7684b0a287a7a2a7a07f860f71376865650e9004f59cf6ec3c35dba507bc7d","size":21252,"data":"","first_seen":"2025-08-22T10:11:14.555802Z","last_seen":"2026-03-04T04:00:43.408775Z","times_seen":3920,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/7e381af68a.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"d6a027801db4c1d6536c15243e2d00f3","sha1":"9aaed4050d0bfe2a02b1b29664a01cf37879bed0","sha256":"3265763eaa32326200f4f271f0b9e5ec907d69eac1036426deb31607e02fb17e","sha512":"4fe4b085a93a4284a08a989bac26185fa62930a2904a96005245b8ea11782fbff08a3fadc7da95da3fcc6be3c798810accff433a21aa8c5b424c2500acfd81dc","ssdeep":"","tlshash":"ab11487830f5d054f76a58ce7d29207a537c1904370da8f2f3bd459610da096d5b7d8a","size":947,"data":"","first_seen":"2025-09-24T10:08:54.306524Z","last_seen":"2025-10-02T07:15:42.690332Z","times_seen":191,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bdf2b31a85d877996513823aa69f2088","sha1":"e70e75e819c8382fc9ed9fd0ba49c82007002d3b","sha256":"4df651e059f5eadfcbe28c2431f6cc015b3f91a1cf91bb1657f5d889ef69ef2f","sha512":"1e45ba9dc67418a4422dc2b116e13159e7beed18791d9a67950c0da0c4c1dcc9687951000ca37667498f663e61bd0c8c643e71060c107dc455b5f5f00cabb29c","ssdeep":"6144:PB5pmM2/0NpXYqkD1gIui/RPG1SvuVcUGq3W6D:5jmL2YlX/Dli","tlshash":"d8a4f98e73c674265396f478906f01cba9bb24a2b49cc8a6b1c9dcf02d7459a4137f7c","size":492757,"data":"","first_seen":"2025-09-28T08:06:55.64187Z","last_seen":"2025-09-28T22:31:40.716382Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"radar.cedexis.com/1/23802/radar.js","fqdn":"radar.cedexis.com","domain":"cedexis.com","tld":"com"},"ip":{"addr":"45.54.49.5","port":443,"asn":63911,"as":"NetActuate, Inc","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"82dec77fd0353c7c71ce053b8601387e","sha1":"fbbca95419e1d0c042e0a5fdf10f380aca66188c","sha256":"39f2b7b0fa78d37d0c84d2d6618bd635d86fd683d9bcdd5729850cb2a62522f7","sha512":"6872c895cb44711405e57a436dfbe15d094f9159e11ee2b89983c63b1f18f6acbdfaf0ccbb5e48b2bf24f366f16584c660bca4b6b14c048a134bb77a60f6563e","ssdeep":"","tlshash":"02e068ae9391a318537a2dbacc4e060ba0f6114888e5e4e029f5c2c00461bae072bfb4","size":390,"data":"","first_seen":"2024-02-13T14:23:26Z","last_seen":"2026-01-15T12:01:08.184588Z","times_seen":7496,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/en/block","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"2092af1a5ff714fe557788d0c0cf7e8a","sha1":"5e883902207e4a5f957bb4a98fa3631bc40770d6","sha256":"1d2aee86e0eeb7540fa93fae6c3f47d5c8416f502473044727e2996240f6c430","sha512":"cd0e89dc0858ba642f71fbfd9c8acde14b313704755401750b6a5ad077f7b48228d3129d9a582f283b4210a7fc6b9c6d09fdcc2ef60dc645447a870b576b9f7e","ssdeep":"768:F7If/w9984iH2Hgrm1WDSVVsboBem967sePAGNsQfjCzPhCCLiLhT/rAztF1TP7f:Q6HWmQF4B","tlshash":"db83ed557de38087d3d393c6963f80d8e97504cb2ad66f488852ba27f9ae85783d4833","size":88723,"data":"","first_seen":"2025-09-24T12:37:05.164235Z","last_seen":"2025-10-24T09:11:09.932463Z","times_seen":1173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/en/block","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"domTimer","is_inline":false,"md5":"01f4b51b4ba7edd00ad9f0a22259f06e","sha1":"00723d0eda4be61a7b1c542b0a08a94a94a60017","sha256":"9fdac1c31a22f55dbb8ca225ee28c3f7e88b41cce82968af0018c9f8b3bd35ba","sha512":"83d180c9960a53f88da3e3ff8616b4e095b7d642182f5855cfa386d48a19b888fedbde6433d1f926d9dd93d0a813a24590591729a6d8393543dfc490efee2070","ssdeep":"","tlshash":"29500000c000c0c0c000c03c0000000000003300c0c00030033000000c3000c0000003","size":10,"data":"","first_seen":"2024-09-21T15:04:59Z","last_seen":"2026-01-22T06:40:31.224966Z","times_seen":5888,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/5d6ee6fa/desktop/default/commons/app-7783ccb1.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"09308d446ae2c99aeba67630bf50e2f5","sha1":"f33b40206cdc2f548f9e72885a2d09024f3339f1","sha256":"53b204b32d4350219ef2d8903d54525e4f78c144a02810a7c1691358ca347170","sha512":"35975b8a394610855cec42df98d164cf035b1bf163b3d43ebdbbf69e7a6b30f17ad9071d8e302fb823cd8e2e45396558da8f76991a2bf3eec0b2e29b9f01cd95","ssdeep":"1536:o0UiXH2DHJjIAG3wvvjE+gjmZVB8Crmh6G5YGf7BMr3y6MP0+PWK5GFBtF:HXHUp0qXjE+gjmZDmXYGNMra+B7","tlshash":"29d3d5dcf695b03117e721b5407f150bf23a7898680ac0a4f266e8d53db888ea167f7d","size":137774,"data":"","first_seen":"2025-09-26T11:18:04.460936Z","last_seen":"2025-09-29T05:34:13.616319Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/5d6ee6fa/desktop/default/vendors/plugins.vue-notification-9169c5f6.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6663530ba08abb2004a37d340cee1c4","sha1":"2453c8212ed3c6d276fdb0222a84bccbdc581b4b","sha256":"563798db19c6b62f2df4cac7ebc788db1341d0c31fff579e97836f8231ad354e","sha512":"87ad02a2832b8f2a4f39e312edfc0550d2584856c5c8399c511751acadd6944c08823690717a9cccf030290c801834a6c35e282d3088deab77a90368440088f8","ssdeep":"192:VU1hQXHv3CbfKpqEVwhSIkrReP+SdHtfGA2D3ow5EE9bJ52bFZLy2mp4ilVk:Vn3CmpcDkAP+S/fGAWf5VbWbLy2mmijk","tlshash":"2842a6ceb2c2b4650be760b6402f110af136a96879ab54d4f3b1d4f2adb564c413bf39","size":12563,"data":"","first_seen":"2025-09-26T11:18:04.571288Z","last_seen":"2025-10-09T08:36:47.218974Z","times_seen":280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/5d6ee6fa/desktop/default/vendors/plugins.v-tooltip-b91a2521.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4f1ab82911ce3164d66e67d37b36e2d","sha1":"313e4be41775adf6b6310148999a67c8084073a0","sha256":"4a60aa9f1bbcb80558b3c6718626dd2a844cc8d085441ec684c313385a75c439","sha512":"7cabd406cece957e75463d0a02f19609b72a7ef98e194074d358130b01032c6584ebc7161e89ee349b2716dc2994fb6da75f53dbb69348bf47de325b1b6eeefa","ssdeep":"1536:2tbnDD3jvHT7/E0bITPRSCv1MHxWdRfm5d5:6b/bz7XITP8w0WRfmR","tlshash":"5473d88e72d0f0b603e7b1b5403f620fb2776518b40ad454b2b1e6d4ac3da59a267e3d","size":76824,"data":"","first_seen":"2025-09-26T11:18:04.439176Z","last_seen":"2025-09-29T05:34:13.629403Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/5d6ee6fa/desktop/default/DC-788e2912.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c02a131b63154996e7d0bca0d25dc39","sha1":"8576dc09b6ffb5b2c40db830f755ec9094358775","sha256":"2b56586d53c4ae06c7180ab581fc4e002b1042ae792c57467b07c19a77e2228f","sha512":"89ccb81b3658ac1bd9d873924201b828fcb653049a51fdbc0f949a751946502658bc1d15eca03e9ca2b76b6e612ec49b502773bed710c8644fec87bff7f5fd97","ssdeep":"","tlshash":"a141a40931a4fc11d7f90cd869ff72061027f076a48dc9b4d3a36a8b08b7f6aa217916","size":2201,"data":"","first_seen":"2025-09-26T11:18:04.427515Z","last_seen":"2025-10-09T08:36:47.24483Z","times_seen":280,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/77b401ad5c.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"670fa8e5c6b227843fb8d3ff8114d346","sha1":"f071e3dd1eb20508fc9dbc44ec023b620c0d0cb9","sha256":"23c5a22a417e9ce45446413ee45fa5098ffccca9859047e8ee08f227677ffd8c","sha512":"b1c49452665cfbc1e493f4cb0e8ad32305f881b54a162668b38073108d5606ed3fed0236d34d98a143b24300a0b95ce937884aef81a2a77c5774fafdef3ace2c","ssdeep":"","tlshash":"a42167703034e52b4bfb1bd888671451f72c3258672671d177cc6ea142a9506926e767","size":1164,"data":"","first_seen":"2025-09-24T10:08:54.271062Z","last_seen":"2025-10-02T07:15:42.634839Z","times_seen":193,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/hd-api/external/apps/c5e31d5915661de4393e3f1489b00ebc4497dd48/api.js","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"32053c9c355cf85427a5cc3f07de0b09","sha1":"f3c13d6a657ffa2ca8997f54f4779f0c02f1600a","sha256":"0ec410318f3ecc3a3aef3de68e99190845248bcc12282aa15eb9acc87f8837d3","sha512":"cbb8c7ef0bbed264989bf5b4af7d216cdeacc5684641c37d429e5ceca7dc04e55254e81f319cd856e7b4f447565bf5abf4e9915f5725eb57cfb142f113362078","ssdeep":"","tlshash":"2211756e18ed58291a9275c402b7ccfc642036363219d4c495ede9e1072ff990032f5c","size":1024,"data":"","first_seen":"2025-07-24T09:34:41.13762Z","last_seen":"2026-04-04T22:05:16.639307Z","times_seen":3852,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/en/block","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"94361ed86ab9b2fbb8d805c2025df46a","sha1":"3f428332f7a1c7196a85c93a373a966d75708c19","sha256":"eee4d228a49a86625f29410cf9a23d145e821a09cbb1f7a4d7557d206872715a","sha512":"c8f4fb7c642357730c6c59e0b49fe3ec16c228d83d4ce402dc62f01e451529b8087240afca37096cebdaaabf47c189dfde5e6e2d780440f663f0e2bc8cf88ff7","ssdeep":"","tlshash":"f6b012df6c8351104a9292e001dec8f0443620303b00cc45544ce7716d2e865de2625e","size":96,"data":"","first_seen":"2023-12-06T14:32:27Z","last_seen":"2026-04-04T22:05:16.684666Z","times_seen":7917,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/en/block","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"89af852874529644d10c512286b9f8bc","sha1":"ae48c4f991064c5e840f1a5982b31b2bee104d5d","sha256":"f84905f7e233456a377a145c27541a090f2749e76564d244a7f73e6e23dcfb1e","sha512":"49a571dee85345c3de0378460663405511321ca25a4d229545a4838f0a20f09f657bbf0b872e5cf253ef4d48bf7052953d64fea1d6243ae15df9081a5d6153a7","ssdeep":"","tlshash":"6031115dfa1cf03b0512b6b9a83f630eab3324a56929b4089450b8da6c34e4f6856ccd","size":1736,"data":"","first_seen":"2025-09-26T11:18:04.631795Z","last_seen":"2025-09-29T05:34:13.71008Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/5d6ee6fa/desktop/default/vendors/plugins.vue-js-modal-b32f2a92.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa99bfb4e71c5abb534e73587ed5b260","sha1":"5bc9fc1e4ee17870f1dbb1a415895e1dd8453c53","sha256":"e9b0d1416246d29a12324feeda815355a79d539619da300e082a7fd47c316fc8","sha512":"c30eddb7d49b96cbc81a3a237cdca70c190241e1758d34e0602014b32f0f2ad40153340d7a2e10514bdefd65154e18d249754a18e115ba01656331d82232418b","ssdeep":"384:CBy0a9vOeCGAZIXfK2rVsAdm00uow4HQEjacGXGQVe6ubqA:tHyIXfPt4wE9GXGQcbqA","tlshash":"59c2288977d8307442db5573627f2b0ab23e295474269888f772e8e65cb864d206ff3c","size":26667,"data":"","first_seen":"2025-09-26T11:18:04.508852Z","last_seen":"2025-09-29T05:34:13.623202Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/$_$.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"2cdaa92927f02e0b628f1ef4d7dd8caf","sha1":"9104a2e16ed080b80a42588b8aeb52ebec47ab7a","sha256":"ef8101ffea52addcdcfcc3a83f96ff2d4613fb3ae6d1c16bbe4852387b73a9db","sha512":"31da80bc1b17aa708fef74b0211af91fce1b4a5f518f11e5caa80f50e9a7791b6e94924e381f550fc44a02f4c1d785e5b95fa2464e7968b5cab079612d70d839","ssdeep":"","tlshash":"1ba002935a5ef66c209044860696e74733823d6a3477b1d625bc5509e6061474817257","size":69,"data":"","first_seen":"2025-05-14T05:06:37.199299Z","last_seen":"2026-03-18T19:40:26.76398Z","times_seen":5502,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_fast_deep_equal_RNYYWXHZ.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"00e44cad05af09626c2b10aeee7de5a3","sha1":"4461fd05cdd85255f4ab24edd5ac80e7b6dec92e","sha256":"5277a86b8db312b1e34318cb994829e113d8204c3a2e88ab594e5135b2bbfb2a","sha512":"548bf615b1118881d21a0cfd2d530b3f0ce1e14cc93cb6afce662b30ac70877fa152fd71b5d786bb2e43e31a1980e00b83106b1f4b3ae12fbb2ddbedf6c81841","ssdeep":"","tlshash":"901159c232e3a0d183e058cd1001d906f23969e9a4bca0c9c757e6b93cb2a53d87672a","size":865,"data":"","first_seen":"2025-08-22T10:11:14.567955Z","last_seen":"2026-03-04T04:00:43.420123Z","times_seen":3921,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/entry-20da4d518d.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d108058058de66245a8ee542525803b","sha1":"fcbb66885410e09d3333846fc3ef1da5efb01444","sha256":"5ff9dbafe7d7e6485c1ffd410778755a77e543c54d2d60f97e393c9604edbacc","sha512":"c99a841f9a29917f11ecff3c45a9ae3f250ae080cc2218c786c085778157def1bbfc7b9d327c971b6bfe45cb6e69094308ab5bf83108660c3ace5b26830f0000","ssdeep":"768:HpKJtdVXvHtm6ijJl2og1RExitQcSdW4nfd9Zig9NYVH/NK44vu3rLBLNqb6jMJD:wFVEbFg16Vf97u3rLBLNqhaq","tlshash":"93d2a37834a7b4b561da99986734bd5396c80f5fe88afcd242cb8caa13d314880527f7","size":28560,"data":"","first_seen":"2025-09-24T10:08:54.265846Z","last_seen":"2025-09-30T08:01:23.522694Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/en/block","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"bc51ed8c76553717f10d58b2df60fd76","sha1":"e2d03a8fd8d280074b226c288880f9df299c7cb1","sha256":"bee994eaf88453f6343ba57571a069054c12c9b4e42f8cbad4f2ad75c7fb264c","sha512":"3207379b65060d0e80623fa966633b5ea31358b20de9aeb2c9416fa7d29f1972bf30809e39f0b826565e569d856dd2498ee0ec5285271c127f54daa7cf391911","ssdeep":"","tlshash":"489004473441140c47d7175410375c4c0c1500705441df400451dc510d51031114545c","size":39,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-04-05T01:11:28.410162Z","times_seen":13010,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/en/block","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"ef1d286131ed8653f90c60199b9f11d0","sha1":"b2d4190b5ac610c39b12e634ac9cb78ce04efbb1","sha256":"48ed2eef95c09be16e474797957230939fb35bd5ab71f70e62b1412d51f91665","sha512":"d771c22b718227697705e58ae6b4fe7d46fc62b50c98307f5c3fe8c6ff4114a2f8f17637ba1f8544ef382f40a051045550c44762407aaab252762e682713977f","ssdeep":"96:Dhgx8q0yK9g93QklIelj+5JJHqmQrv/gKrkhZkaoQ8uBMOfQtSbNClc2:1gCq0va3New6RQrv/vkhdQtSbNwc2","tlshash":"6bd1a392e41cfa2fdc23881ef06b2f311e54196969927b10e6bc8b2d34a71b5e307646","size":6241,"data":"","first_seen":"2025-09-26T12:49:16.800712Z","last_seen":"2025-09-29T05:34:13.714028Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/en/block","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":true,"md5":"f2e5c57975891264f7507c7be13f36c9","sha1":"2b7021ba350ae0e8614dcd4acd8930eda3ae0dcd","sha256":"c679f86cb535020af01eddbe4479c9cffdd172b9e954161f47e229b738ec28f3","sha512":"140c4dbd49195454639ec115ba038dbf961dd6ab0873db2ffade06c9f00d209421737a2af5777b8d6860017f341c528900b714c60f863ddfe3c441388651f977","ssdeep":"3072:95dFYSmuUDmKnJV0ASupVHI4fmuUwmKnJV0OtJHR/98pDuu07W54FS:fdOPnHZplrnPtsDN07/FS","tlshash":"e124842f690c1c3e911f1fa9854f7d4e5bbc9e2a20cb6c11dcae6e2914e7694426343f","size":228307,"data":"","first_seen":"2025-09-28T08:06:55.719884Z","last_seen":"2025-09-28T08:06:55.719884Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/6afa6df928.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"f07d1a740a9a1b3f5b0167d0bf44e4d2","sha1":"7ef2209143f924410b0cc7ccb9867704b1af329f","sha256":"ce4b70d82ecefb017a88749072769e6c11eff89a36e3574a1b9f906a80a0c54f","sha512":"f28d311f859508d50873860d4057947db4ed23b7b7864740d9ad292fefdea3dfe6a6e214000d52a65c0036774fda3da02159d7d7619417db40646b1e00196964","ssdeep":"","tlshash":"b1f002beed31a160a10244d95d5aa422c6c43d67075a74e481e94653b31209795065c7","size":614,"data":"","first_seen":"2025-09-24T10:08:54.297813Z","last_seen":"2025-09-30T08:01:23.511669Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/99f79ba341.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"22c9a2eb8969ba132021966eafeaaf05","sha1":"cce396fa70db1059e082c20ce6f892bcc096a4dc","sha256":"8ab830a034124318bace4f95e8d578a319730e4e6f09b6681e9c7d7d6af526b6","sha512":"18946c49a97ad078e628bdba7205fbb4ef1e9f224b23d5004674b4aa3f01301b9df4e3e2c536296733a7dc3c070fb6803fdfa2ab301210c940faec8e0a91dfa3","ssdeep":"","tlshash":"fb41a6dab2b035f7e677519ebd0660f0c2082b9d132f10e8dee9884e210d9d22767793","size":1973,"data":"","first_seen":"2025-09-24T10:08:54.344059Z","last_seen":"2025-09-30T08:01:23.630025Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=DC-14030178\u0026cx=c\u0026gtm=4e59n2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"611d203f7322fb759eb22ec1deda0a48","sha1":"12c5f162c07d0ef907b4f64832008b1c7951a964","sha256":"102d5e3a5c6276798cf8f2e8196cc89f0905262df7f0257a5c8e5ee20f5ffbea","sha512":"be9a2a050d29fed8f3978544200e7424974eb765eff1d1f82c2018eff7b936619b41364ff6c41f9e3cd75eec7965dd61294a920778d3604175e592d384ebbb2f","ssdeep":"3072:ydjmu/D62GmMgZOp90RP18YqkLPW8RthKUfgHwa6z0CZzm/uuxB/G1SvuV8fA3KU:jpmMgZOppYqkD1gAm/9G1SvuVcq+CR","tlshash":"566407cdb3d674664393a478503f004bb1bb6992f84cc895f186d8e42e74aaa4277f7c","size":321108,"data":"","first_seen":"2025-09-28T03:54:14.49164Z","last_seen":"2025-09-28T23:37:00.815987Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript,export const meta = import.meta;","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d772b7d405b447ecee54ab61cdd5108","sha1":"dd65fb9cd5a7cb94a40fe161f4f72303a61eb3b7","sha256":"b90ff694e492935b6036fb7e878d365dab51aafa46f0afb1e33414e7ecc3307b","sha512":"a3947640368602c9fd9dee887bb1a7e463890ff42e2ddd292c377593c5fad246d3e3363e9898cd1e5ecda9c59b5cf7c7cd0acfc2a5a1e5d3acec2cf0d62e20b2","ssdeep":"","tlshash":"1f800003800802380aa0c880028e80b00ab222203f00c08328088b302e3b08aca332a2","size":32,"data":"","first_seen":"2023-12-06T14:32:28Z","last_seen":"2026-04-04T22:05:16.692096Z","times_seen":7916,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/5d6ee6fa/desktop/default/Page.Block-5311acb2.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"97bcc1ef9d4b849e15b25694fb241a08","sha1":"b34ab3597a21c13f06af055c3c00cc140f1d75e6","sha256":"ff0b2c14b1d90cf3d9d4f1035bffc3c35b80762d7f9369aa32cbab005cd1211f","sha512":"e801a7cbc8c2467d37b552658cb1bdbb847a5cb9a4d9e261c3843668934a6f990c261b80dccd92a1a317f12bdd4561457b74c75e11b45831cf424265b78f7db7","ssdeep":"","tlshash":"80f09e9f5472fc8d95e610d343b6d1f7b48c7a7a0649596046a1c8b532f686a4c2124f","size":476,"data":"","first_seen":"2025-09-26T11:18:04.459121Z","last_seen":"2025-09-29T05:34:13.628342Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/hd-api/external/assets/hdf.js","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"0009b06af6892358f6c573335f102046","sha1":"cb899ce5fb6756d389a12e5049f2180dec2366ed","sha256":"540a50ce4665aa5a15e6afcdf7a260860e1896e77955c7ed128d1e6489bedac3","sha512":"83e9ce72ca4725bf501fe711538455aaa2fb278095d4d3938615b1907416446b8a8ed1f4f34fb296ea4c9a6d6b6e0fecbe31afa240305e7d23baa4145b2cd1c8","ssdeep":"48:Pen1yuqKi6649JoXznZwhU6fINwld0mPr6eC5/F6ALWBl/NR3vMNNeEcxHb8JiTP:Y1yuqKioolwHgObfENerHbkiTgRx05","tlshash":"d581323660ee2d3153639052d53fe5e9f229a8073968ec4831fc588a0f40f6189b2e3b","size":4203,"data":"","first_seen":"2025-07-24T09:34:40.995531Z","last_seen":"2025-10-16T23:35:31.258248Z","times_seen":2029,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/5d6ee6fa/desktop/default/analytics-65909e6d.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef421eb72520707cfae3915d5df2f7eb","sha1":"fbc692955c25be960cdbf8efcf25adebd30f5b47","sha256":"ddf4c6b519af133c0030a908d150425f2ab04a64c15622f06d7c887d60608693","sha512":"bcbdb916bc0c251123218f663c7b21b79df3d48657c4544184b4fc63d27d64d7464faf5909d915b3d3c260d96f5f7ebe6e8c71b48f3bf26d897df931a6f23f23","ssdeep":"192:MvO+jPZxnEW5+vfj33Veo9Pshu7WapwQWJ3vQ9Om0PQzpVvOSRxGj2km:QjPZxnEW52z3VeoJb7WapwQWFQ9F0Piv","tlshash":"e102a68dbcc9e43007fa19b8e67b9a0ae07617173405c451caead8c43d7ea8f111be9d","size":8845,"data":"","first_seen":"2025-09-26T11:18:04.47832Z","last_seen":"2025-09-29T05:34:13.689489Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/5d6ee6fa/desktop/default/runtime-477f39f4.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ba1d12e5db790dfec73c5330d7ecc04","sha1":"7ba9e49599e840e1ddcff1d7fa12ca98e2b144d1","sha256":"dcc2f5fc6d2912d8a50989c31647c6daad945a5e2dab2175fa3c1ee55c987548","sha512":"59bc687f03e68e7a54008bed543397a8962a7be99875b9b4778ed23260c435016192666d7ecfd11c730fae86ebf4f4077a060e419398cd896a78aec9044d6ba7","ssdeep":"384:xe2xBMWItnjn6hy4sQr/BMWItnjngGFGs034VCbtsy/xoWw:06RItT6hy4sQr/RItTHsVoVCp0j","tlshash":"fb722e5daf1acd675d22dcc33c213d25586824335c460bece6fee2198018e6865afe6f","size":17477,"data":"","first_seen":"2025-09-26T11:18:04.417213Z","last_seen":"2025-09-29T05:34:13.694791Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_accept_language_parser_LEQ4UAP5.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"83e311eb8e222d229b6177bd007ce9eb","sha1":"96b851ffda0eab794c2bb637255a48ae25770144","sha256":"d0ff62de588e1c47eedbd91a89dcf394e2ec5bd09392ea556b9a34108077e9ad","sha512":"fd2e1bfb6588598e356ddc08724c2e6f602b89626b30eeca2c25b8f60340f25e28a761b8e13b75d1627172530abf7dd0e586e792f53759d08bda626145f65b0d","ssdeep":"","tlshash":"202112debed2b5908394188c4e2ec055f23a2957641ce6fcd765e7827c403a186f3c1d","size":1297,"data":"","first_seen":"2025-08-22T10:11:14.559442Z","last_seen":"2026-03-04T04:00:43.42063Z","times_seen":3921,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/1c99cd8ddb.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"dd40552dfc1f96b11eee0e93bed8e11e","sha1":"ea3d9191b850b52efd0fca9a483775a0e4391c69","sha256":"6978d2c2ba3b967b6d19039366cf78da45b0ea320d48ba7c00bcafab3af3cea7","sha512":"0a0f4eb8fabb069d65a1d6200544c02c16c96363b17d761df477563b2569bc670da5e900972879e95b6c435baee02cf89d05d047a123f17220c72550b345adc6","ssdeep":"","tlshash":"0a51d7dc6ef878b8280d8e5af41630619b481c5b36ade8e5f68d8f940320298e251e41","size":2980,"data":"","first_seen":"2025-09-24T10:08:54.350242Z","last_seen":"2025-09-30T08:01:23.622101Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/captcha-api/assets/hunt-captcha.js","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc87b27db434ca92aea6e1a1ceb5b78c","sha1":"905e65010d66d0bba5836f44cfb27ad9cda60051","sha256":"b7c2d216440e81574ce9b359404af25382d21f6d06b31162e1d56d97e721f117","sha512":"c93461ca41050b2ed4cf5724b61293de852034eb5cd9856e5af84ca3569584db0df14c267a9350839d3fbc4b536d416a56b8b7b0cc4f67c7770660212dc99912","ssdeep":"768:mfqz/IppUgutFIIfCpFujCbsboXim9ifscjA6NecfjCdjhACLiZhT/rAztF1TP7C:xEIW0BLIS","tlshash":"0693de857de2c08793d35bd6923f4cd8e87504cb66966f488812f91bf9ae86783d4833","size":90808,"data":"","first_seen":"2025-09-24T12:37:05.081519Z","last_seen":"2025-10-24T09:11:09.901149Z","times_seen":1174,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/en/block","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"cb5d77b8d5d9445538d63f0b8ac1c3b2","sha1":"079522fbbc5e79306a11da6d4bce9daa61929522","sha256":"712935c02ed610fa634225afcb70839dd6ddb16ecb5d6510158c3bdc44818735","sha512":"0abc6eb619411eeeca423e9e707c7f72d7746463133b181dc89cf0af958f488cee9e10015152cb7d6f5d1c429ae60944df9097f7ed16e27cc1969b968218abcd","ssdeep":"6144:7vTQYGFoLzZICHtSlEZqaq0y3C0GUwwcV9B2Bl+kn7SYvbPoWeMte:fL5LzqrfPwwcV9BYnbbPMMM","tlshash":"de7464480dc07cb0f6ce311e12ef129f950e2de5729b8cbaa70c6d299f965167d76a0c","size":339667,"data":"","first_seen":"2025-09-28T08:06:55.732387Z","last_seen":"2025-09-28T08:06:55.732387Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/en/block","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"00beb9884d0391b342eadd30744b539a","sha1":"3124c0bd593822379d22f13d3e08e70a1bf5ea14","sha256":"92394eec5690449a4f6cfc9a7f97497a69e926b2365cb9a9aad3507a844f835c","sha512":"6fa2e21df54ca406f570cb639529d68edac5de27fd4bc3a9daa8fd0465b583ede1c1cabb550237deb75d8bf88f39e80c1a77777d794826ad3272630108e58661","ssdeep":"","tlshash":"539002492940210685661152001e5c58411491b094906c9140429c551d52020125ab5d","size":44,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-04-05T01:11:28.417884Z","times_seen":13008,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/en/block","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"a01893d8e129ad16c1e0fc5c7537f411","sha1":"0e46d1bf2718f848d9d596fa269eaedb31204772","sha256":"cbe7b89533bcd75b69f3e54807308551d68242ec1761e63bee1a99fc6e560175","sha512":"074e309b533fc11690afbeab9b4dda85851e086c0ede97936860c7a5c4120ed9a16c6ced4fffdad21ca322f6c6e51577bd4966c5264b4a9780495acc451aee65","ssdeep":"","tlshash":"0d9004f515405350c5533d54401f1d5400f105703c40cc71014cdcd10c710f0335d5dd","size":47,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-04-05T01:11:28.397557Z","times_seen":12999,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KFGPRJ2V","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a444a4129f80bd143264ec87c8e5a93","sha1":"42403e154de748b8c877c1872776f5989cc30545","sha256":"3c86bf5dc3c69cc636e2294130e7c3d1fecbbe9ccedddd85989fec80cf99ad34","sha512":"14571ece564fea91100c03afdaf77d51640781f8d8ac992c2efd76451c18a06546851fd859b4bee4e365d4b6f1d4a810b723023fba80ef4e10e3a06bb4f58324","ssdeep":"6144:UpmMgZQpZYqkD1gIuq/RPG1SvuVce3CLq:KmWYlJ/Dm","tlshash":"cd742bcdb3c674664392a478903f014bb1bb69a2f44cd854f186d8e42db4aae4277f7c","size":358019,"data":"","first_seen":"2025-09-28T04:22:09.202239Z","last_seen":"2025-09-28T23:37:00.885398Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16664555628\u0026cx=c\u0026gtm=4e59n2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a7b9a4998854b326c1fd06eb3391f35","sha1":"6ffa9632a48661a85f2af8381d257082ad970aab","sha256":"4e4e4613a94878af15742371f43611bf9356d2b01244b787d67dd5b1292b87ee","sha512":"f674ad98abf05a7a055404d02eb171cf896fae4a42b6a13993f88d8270e7af8437445961ad67169565329b3a635dfda8c580235166de1e4e8cef7f91a7fc6b63","ssdeep":"3072:wFLz52Qu/D62GmMgZepV0RP18YqkLPW8RthKUfgHwa6z0CZzu0B/uuxtA/O/G1SE:+pmMgZepxYqkD1gIuq/RPG1SvuVcxUt","tlshash":"ed7419cd73d674265393a478903f018ba5bb68a2f44cc899f185dce42e74a9a4237f7c","size":367760,"data":"","first_seen":"2025-09-28T03:54:14.525044Z","last_seen":"2025-09-28T23:37:00.891941Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"1xlite-93399.world/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 122748d2-89d7-4430-b8ff-b73aab5537eb\r\nContent-Length: 19\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJkYXRhIjp7ImlkIjoyMjk0LCJkaXNwbGF5VHlwZUlkIjoxLCJ0ZW1wbGF0ZVR5cGVJZCI6MSwidGVtcGxhdGVJZCI6MX0sImJyZWFkY3J1bWJzIjpbMSwxMiwxNCwxNSw4ODUsMjMyMiwxNiw0OTUsODEyLDk4NSw4MTMsMTcsMTgsMjE4NiwyMzY4LDIzMDAsMjM3Niw4NDYsMjI2NywyMjkxLDIzMDMsMjM3NSw4MTAsOTQ0LDIyMTEsMjQwOSwyNDk1LDEwOTAsMTA5MywyMTkxLDEwMDIsMjI0MiwyMzAxLDI0NjEsMjQ2NCwyNDY1LDI0NjIsMjQ2NiwyMjU2LDIyNTEsMjI4NywyNDMyLDI0NzgsMjM0NSw0ODQsMzk1LDIzMjgsMjQwMiwyMzMyLDQ3NCw0NzYsMTAwNiwyNDkzLDIzOTQsMjM2NiwyNDAzLDIzMTEsODA5LDkxMiw4MDYsNzg2LDc2OCw3NzUsNzY3LDc2Niw3NTEsMjQyNCwxMDM5LDIzMjcsMjQyMiwyNDY4LDkwNyw5ODQsMTEwNiwyNDA4LDIzMDcsMjE1NSwyMzcyLDExMTksMjI5NiwyMzU0LDIzNDAsOTY4LDIyMjksMjM5MiwyNDMxLDI0MTMsMjQzNCwxMDk2LDIzNTEsNzU5LDIyMjgsMjIxNCw4NDMsODQyLDIzNTIsNzU2LDc0Nyw3NDgsNTQ4LDIzNTMsMjQyNSwyNDI2LDI0NzMsMjQ5Miw3ODcsMjQ0NiwyMTYzLDgzOSw3ODMsMjQ3Nyw1MjUsMjQ4MCwyNDM5LDI0NDAsNTI0LDEwNzUsMjQxNiwxMDc0LDU0OSw5NDMsNTEyLDExMTcsMTEwMSwxMDczLDIzMTAsMjM5NywyNDYzLDI0NTIsMjM3OCwyMzg4LDIzODksMjM5NiwyNDA3LDI0MTAsMjQxMiwyNDE4LDI0MjAsMjQ3NSwyNDI4LDI0MzUsMjQ2NywyNDUxLDI0OTQsMjQyMywyMzY5LDEwNzgsMjQzNywxMTAwLDI0MzYsMjQyOSwxMDE5LDUxNSw1MjIsNzY5LDQ3NSw1NDUsODE1LDgxNywyNDU2LDQ3Nyw0OTgsOTQyLDIzMjAsMjI4OSwyMjgwLDEwODYsOTc4LDEwODQsOTg2LDIxOTcsOTkzLDk3Nyw1MzAsMjI0Myw5ODEsOTg3LDIxODIsMjI5NSwyMTU2LDIxNTcsMTA5Miw4MDQsMjIzOSwyMjIxLDk5NCw5OTksOTk4LDk5NSwxMDA3LDEwMDgsMTAxMCwxMDA1LDExMDIsMjE5OSwyMTk4LDEwMTIsMTAyMywxMDk4LDIyMDEsMTAyMiwxMDQwLDI0NzEsMjQ4OCwyMTU5LDEwODksMjE3OSwxMTIyLDEwODcsMTA0MiwxMDQzLDEwNzYsMTA3NywyMzIxLDIzNjIsMjE3MSwyNDg5LDIxNzcsMjE3NiwyNDkxLDEwODMsNTMxLDk5Miw5OTAsMjM0NywxMDQxLDIzOTgsMjIwMiwxMDE4LDI0NDQsMjQ3MiwxMDk5LDEwODIsNzg0LDU1Nyw3NzgsNzgyLDE5LDY1NiwyMjIwLDIyOTRdfQ==; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder; postback_watcher=%7B%22tag%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22pb%22%3A%22cbd748604f564b7883285a09608259ca%22%2C%22click_id%22%3A%224dee5db3523c3eff48d74c6a8ab049d9%22%7D; auid=uaJaGGjY7IDCO3bLBNHUAg==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nx-dt: 285\r\nx-time-ng: 0.020\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.093, wf-uht;dur=0.032\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-04-05T01:45:08.79788Z","times_seen":227163,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/3fbe465d90fa2cf42e3089c7b63e09fc.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/3fbe465d90fa2cf42e3089c7b63e09fc.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-895212f467057ecada0cd02672fba2f3-d9cfb7509fb19228-01\r\nlast-modified: Fri, 19 Sep 2025 12:34:47 GMT\r\netag: W/\"030d8f928e11f3038a1956b87dfde36b\"\r\ncontent-encoding: gzip\r\nexpires: Fri, 19 Sep 2025 13:58:28 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\ncache: REVALIDATED\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25487,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"030d8f928e11f3038a1956b87dfde36b","sha1":"9fe32ce43a732aa5ab0172a6353753f8932b7aab","sha256":"de4fd2aff17b8a4bf4ca979ced0feb4d18888e0d729d125a39c3ff515490c4b1","sha512":"bf2d44c68305c9bec3762f80b708d8771b17fb618d4ce9e2ba230bfcebb9fde8226e3d6a86edf5c459570f482ca0654eb236d9c0129975110c00a310f6d2bcae","ssdeep":"384:hrLr0fLPwUj+uZbC445IOhT9TYXw1LyaN1C1WjTZ5sogvllydwDcc6x0W:hvkD+yEgvO","tlshash":"c6b23b85fef40c33102f90ae95f3ba0e93d85f879d4a6c14bfac2a4d2b54519016ad7e","first_seen":"2025-09-19T12:54:23.532061Z","last_seen":"2025-09-30T08:01:23.521866Z","times_seen":283,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_base-app_0f97545e93.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_base-app_0f97545e93.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-360c561fbfcaa973a20522dd7f2d2a9e-d3ca293d589529de-01\r\nlast-modified: Sat, 27 Sep 2025 07:00:52 GMT\r\netag: W/\"6f4d800a0f28df5fb48904c1504fc345\"\r\nx-amz-meta-mtime: 1758956429.216256586\r\ncontent-encoding: gzip\r\nexpires: Sun, 28 Sep 2025 09:12:32 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 82161\r\ncache: HIT\r\nx-cached-since: 2025-09-27T09:17:04+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1478180,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (23471)","md5":"de4cad8fc137d1cca08fbb5b06a9f57c","sha1":"c0e09430bb44a8251c28e294e9674f92ca3a2ca4","sha256":"7f8c001126443a9be46108e7cf2cfe962bb2e886921a54bcd2cac7532d4ba76e","sha512":"395486a832685af36dc04e81097abadf7aa8513ef848fd6c227afcf9efc8b54f0535d9420c90c97effbb161c3970a964c75dce070d39a256caa2853fee22c937","ssdeep":"12288:IpQO3ln7dgdMb6aNDrUazKJgNE5DTCFaFIQp6t8+Pws9/m82+kg6k:qQO3ln7dgdFmUmKCE5/p6qs9/m82+nV","tlshash":"55259d44f16778123ae784e6e4771182711c566e9409ac90f2faddf8368f6a0628ff7c","first_seen":"2025-09-24T10:08:54.327026Z","last_seen":"2025-10-02T07:15:42.677289Z","times_seen":263,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 122748d2-89d7-4430-b8ff-b73aab5537eb\r\nContent-Length: 19\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder; postback_watcher=%7B%22tag%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22pb%22%3A%22cbd748604f564b7883285a09608259ca%22%2C%22click_id%22%3A%224dee5db3523c3eff48d74c6a8ab049d9%22%7D; auid=uaJaGGjY7IDCO3bLBNHUAg==; window_width=1280; che_g=a6bed356-02d8-4a11-8c89-40b4a9fec694\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nx-dt: 285\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.041, wf-uht;dur=0.013\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-04-05T01:45:08.79788Z","times_seen":227163,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"radar.cedexis.com/1/23802/radar.js","fqdn":"radar.cedexis.com","domain":"cedexis.com","tld":"com"},"ip":{"addr":"45.54.49.5","port":443,"asn":63911,"as":"NetActuate, Inc","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:35.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"radar.cedexis.com","organization":"Citrix Systems, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A2:3E:30:19:D5:41:3A:11:81:58:E3:B1:6F:F4:D2:78:0B:44:6F:D0","sha256":"BE:70:39:96:BA:51:8F:A7:6A:9D:E1:58:FB:D9:F7:6F:17:5C:DA:A9:6E:54:3F:8F:0B:3D:1E:DF:8C:44:B4:71"}}},"request":{"raw":"GET /1/23802/radar.js HTTP/1.1\r\nHost: radar.cedexis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Sun, 28 Sep 2025 08:06:35 GMT\r\nContent-Type: text/html\r\nContent-Length: 138\r\nConnection: keep-alive\r\nLocation: /1707728419/stub.js\r\nExpires: Sun, 28 Sep 2025 08:16:35 GMT\r\nCache-Control: max-age=600\r\nVary: User-Agent,DNT\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":390,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T01:47:03.978699Z","times_seen":13354468,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":56,"dns":0,"connect":26,"send":0,"wait":26,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/en/block","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-28T08:06:24.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"GET /en/block HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder; postback_watcher=%7B%22tag%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22pb%22%3A%22cbd748604f564b7883285a09608259ca%22%2C%22click_id%22%3A%224dee5db3523c3eff48d74c6a8ab049d9%22%7D; auid=uaJaGGjY7IDCO3bLBNHUAg==\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 203 Non Authoritative\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:24 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 253536\r\naccept-ranges: none\r\nserver-timing: dt_total;dur=0.003, total;dur=178;desc=\"Nuxt Server Time\"\r\nset-cookie: gw-mm=; Path=/; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Secure; SameSite=None; Partitioned\ngw-blk=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; Path=/; HttpOnly\nlng=en; Path=/\ncookies_agree_type=3; Path=/\ntzo=2; Path=/\nis12h=0; Path=/\r\nx-dt: 285\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"203","status_text":"Non Authoritative","fingerprints":[{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":253536,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (40341)","md5":"94bc73fbe12cdae54e7b51ad9c0e3bc8","sha1":"0d55a416ae17d7455f77d19e50f746315e9f4286","sha256":"b1ea5d79ea76fb48f391c2fa241a1655cdd3d489d13312b0838d68805cd2eef5","sha512":"56922fc3665056d6fc3d916af8fb65dfd44ed81adead1962008baed0ef228d148760044c06de77fb8bbad5e343eff2d3a15b7f901365345d4b70441b4cc5c0f9","ssdeep":"3072:VuSh5dFYSmuUDmKnJV0ASupVHI4fmuUwmKnJV0OtJHR/98pDuu07W54Fr:VBdOPnHZplrnPtsDN07/Fr","tlshash":"f544a52ba50c1c3e911f1fa9c54f7d4e5b7c9e2a20cb6c11dcaeae2914e7694426343f","first_seen":"2025-09-28T08:06:55.349948Z","last_seen":"2025-09-28T08:06:55.349948Z","times_seen":1,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":249,"receive":83,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/7e381af68a.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/7e381af68a.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 947\r\ntraceparent: 00-f0eb8c367504cbe91eb884f0142a1bdd-137352c01a8b7ba1-01\r\nlast-modified: Wed, 24 Sep 2025 09:22:16 GMT\r\netag: \"d6a027801db4c1d6536c15243e2d00f3\"\r\nx-amz-meta-mtime: 1758705689.752485656\r\nexpires: Thu, 25 Sep 2025 09:24:35 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 81212\r\ncache: HIT\r\nx-cached-since: 2025-09-27T09:32:53+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":947,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (944)","md5":"d6a027801db4c1d6536c15243e2d00f3","sha1":"9aaed4050d0bfe2a02b1b29664a01cf37879bed0","sha256":"3265763eaa32326200f4f271f0b9e5ec907d69eac1036426deb31607e02fb17e","sha512":"4fe4b085a93a4284a08a989bac26185fa62930a2904a96005245b8ea11782fbff08a3fadc7da95da3fcc6be3c798810accff433a21aa8c5b424c2500acfd81dc","ssdeep":"","tlshash":"ab11487830f5d054f76a58ce7d29207a537c1904370da8f2f3bd459610da096d5b7d8a","first_seen":"2025-09-24T10:08:54.306524Z","last_seen":"2025-10-02T07:15:42.690332Z","times_seen":191,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/web-api/session","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:33.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"GET /web-api/session HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/en/block\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nx-app-n: v3-nuxt2\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder; postback_watcher=%7B%22tag%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22pb%22%3A%22cbd748604f564b7883285a09608259ca%22%2C%22click_id%22%3A%224dee5db3523c3eff48d74c6a8ab049d9%22%7D; auid=uaJaGGjY7IDCO3bLBNHUAg==; window_width=1280; che_g=a6bed356-02d8-4a11-8c89-40b4a9fec694\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:33 GMT\r\ncache-control: no-cache, private\r\nserver-timing: dt_total;dur=0.007, p;dur=10.158, wf-uht;dur=0.019\r\nset-cookie: ua=deleted; expires=Thu, 01 Jan 1970 00:00:01 GMT; Max-Age=0; path=/\nSESSION=f5ec22d778f99b605e2dae1c021f2090; path=/; secure; httponly; samesite=lax\r\nx-dt: 285\r\nx-time-ng: 0.011, 0.012\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T01:47:03.978699Z","times_seen":13354468,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/captcha-api/assets/hunt-captcha.js","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:33.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"GET /captcha-api/assets/hunt-captcha.js HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/en/block\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder; postback_watcher=%7B%22tag%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22pb%22%3A%22cbd748604f564b7883285a09608259ca%22%2C%22click_id%22%3A%224dee5db3523c3eff48d74c6a8ab049d9%22%7D; auid=uaJaGGjY7IDCO3bLBNHUAg==; window_width=1280; che_g=a6bed356-02d8-4a11-8c89-40b4a9fec694; SESSION=f5ec22d778f99b605e2dae1c021f2090\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:33 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 23566\r\ncache-control: public, max-age=300\r\ncontent-encoding: gzip\r\netag: cc87b27db434ca92aea6e1a1ceb5b78c\r\nvary: Accept-Encoding\r\nx-dt: 455\r\nx-request-id: 02004d3e66cf9bbfa02dde50599c13b8\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.018, wf-uht;dur=\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":90808,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cc87b27db434ca92aea6e1a1ceb5b78c","sha1":"905e65010d66d0bba5836f44cfb27ad9cda60051","sha256":"b7c2d216440e81574ce9b359404af25382d21f6d06b31162e1d56d97e721f117","sha512":"c93461ca41050b2ed4cf5724b61293de852034eb5cd9856e5af84ca3569584db0df14c267a9350839d3fbc4b536d416a56b8b7b0cc4f67c7770660212dc99912","ssdeep":"768:mfqz/IppUgutFIIfCpFujCbsboXim9ifscjA6NecfjCdjhACLiZhT/rAztF1TP7C:xEIW0BLIS","tlshash":"0693de857de2c08793d35bd6923f4cd8e87504cb66966f488812f91bf9ae86783d4833","first_seen":"2025-09-24T12:37:05.081519Z","last_seen":"2025-10-24T09:11:09.901149Z","times_seen":1174,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:33.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:33 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63748\r\ntraceparent: 00-d92607acc0d21fc815565c51361c3a5d-6e54f20d63c6d499-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"6887b6f24414dbc612dbf42ccdc76b70\"\r\nexpires: Thu, 16 Jan 2025 10:32:14 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 3251\r\ncache: HIT\r\nx-cached-since: 2025-09-28T07:12:22+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63748, version 1.0","md5":"6887b6f24414dbc612dbf42ccdc76b70","sha1":"8068d3abfbc6cbf35b55919da45b1f4d2d136238","sha256":"fc5c015fc32518f1ed810fa84ca28941eb9d5a3c81acc8df69a4dbbeedef7b0c","sha512":"00f08f9dd648972c9571547e06172d5505dd13f577fe2e65a497d3856172807ac11c996984e4138d2eb2ac784257fe61864aee15752fe9e9e76f98db931e0c2a","ssdeep":"1536:KtdCG+Dz6RxAx457zL0ASEn091Y0H1mTOzI/OzMFOoTX4u:MMG+yRpzN091Y0VtI/pOoTt","tlshash":"8b5302485551fae2cac3073c0f7a89dbb37a776d519224cd98b69f830d37964bea2070","first_seen":"2023-06-14T19:15:49Z","last_seen":"2026-04-04T23:37:56.594898Z","times_seen":10308,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/main-static/5d6ee6fa/check-ob.js","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:24.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"GET /main-static/5d6ee6fa/check-ob.js HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/en/block\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder; postback_watcher=%7B%22tag%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22pb%22%3A%22cbd748604f564b7883285a09608259ca%22%2C%22click_id%22%3A%224dee5db3523c3eff48d74c6a8ab049d9%22%7D; auid=uaJaGGjY7IDCO3bLBNHUAg==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:24 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 219\r\nlast-modified: Fri, 26 Sep 2025 09:04:48 GMT\r\netag: \"c065700c9c8c493403359e1f2baa10d9\"\r\nx-amz-meta-mtime: 1758877487.854802259\r\nexpires: Mon, 29 Sep 2025 07:40:02 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: wf-uht;dur=\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":219,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"c065700c9c8c493403359e1f2baa10d9","sha1":"4630fe729e70bdf63fa7ba6c84ec277fd1f51030","sha256":"1e61f0c82ae82ffcf503fcd4b4c8ae27b32c11e19b882d5d13f3c44364c893f4","sha512":"b2e1c73cb94f5e3ceb35c3662bf4d72baf800a9a7c64318b1db07d50e9c885dbd94821ef3b3916d1b8b4fabb8f45cb588834b41c6a8a7f4d2c3e9c3866083ee7","ssdeep":"","tlshash":"96d0a79fb900211406939267d12f8668807724973f008182500597e069b8f4c4b37895","first_seen":"2024-07-17T14:33:52Z","last_seen":"2026-01-22T06:40:31.153166Z","times_seen":6298,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_localforage_PJNUBKRP.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_localforage_PJNUBKRP.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-2afefaca727c5ae3c3f0819932d94d37-d4168371232a1051-01\r\nlast-modified: Sat, 27 Sep 2025 07:00:49 GMT\r\netag: W/\"7e7ebd44e3a6550f862e122ab7df6409\"\r\nx-amz-meta-mtime: 1758956429.229257671\r\ncontent-encoding: gzip\r\nexpires: Sun, 28 Sep 2025 09:23:09 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 81010\r\ncache: HIT\r\nx-cached-since: 2025-09-27T09:36:15+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30277,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (30255)","md5":"7e7ebd44e3a6550f862e122ab7df6409","sha1":"384ecbc3ab0f65e6b0f88c1e68ba3eb73fad4999","sha256":"138767518a09e63d24f918f6380923893a2ec3aa59a640e51c83517501823076","sha512":"e2766b50e289dc6a69fa30432a49a0b7743f15cd15a54d707959c7623f258057a821a94285c492746216cfbf815089309b6cc09b930ba7977ff9c4ffc352d76e","ssdeep":"768:wDKAOpvMewHFuM96WwZACjzz46zSTKsBE1OvFXfX1UXk:wm8uPW43zEIOvdlUU","tlshash":"a5d2b68c7799f02683bb3070907f580ef237a912594d90a0e591e5f86dbd75c822bfad","first_seen":"2025-08-22T10:11:14.535778Z","last_seen":"2026-03-04T04:00:43.425133Z","times_seen":3921,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_game/en/dictionary_e8704d06c6fa638f42adcdacf5e2fb29.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_game/en/dictionary_e8704d06c6fa638f42adcdacf5e2fb29.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-7ae56143444b0e9d4530596f5987582b-18f3d735d0168ef3-01\r\nlast-modified: Fri, 26 Sep 2025 16:08:25 GMT\r\netag: W/\"3bbda38b5f316113eb6f3b8519acd5c1\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Fri, 26 Sep 2025 17:36:15 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1429\r\ncache: HIT\r\nx-cached-since: 2025-09-28T07:42:36+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25867,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e76bf845c3f2666a0daf823ae64bd078","sha1":"fa188fc41dc43f0f4568f130024dac3883f9ea16","sha256":"71c97604247b57adf19ab17204412e30c1dd3cadbfd0e5835a610b2ee7401110","sha512":"c9d1e8682d1615344d118699c79a51ab2d955433bf5a540afa6ee90313a5fbc6030c012bdf57aab51bc00cdf475300efe72c18b2d54f52ca6037ef6fc356b19d","ssdeep":"384:i/B1li0v05xy4CEMt6tI0EEfqQ4O4cN86WwTCu9o9V38cdZeXiG+/jtx:YliMt6tI0EEf66WwTCV/QXiGsjtx","tlshash":"8ac2fb05285eeca6c3fb86b874e93bd672f089af5b625186fc48742e2c957c5610f40f","first_seen":"2025-09-26T17:06:36.453156Z","last_seen":"2025-09-29T05:34:13.697584Z","times_seen":95,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63920\r\ntraceparent: 00-0360972df8d5493e0d3879ffdd1e7065-fbfd7d17af695e85-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"a65527fcb58f66a7cfbc0e6b160538b4\"\r\nexpires: Sun, 10 Aug 2025 19:21:26 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2866\r\ncache: HIT\r\nx-cached-since: 2025-09-28T07:18:39+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63920,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63920, version 1.0","md5":"a65527fcb58f66a7cfbc0e6b160538b4","sha1":"45d260e7fa343401b5bb0df982a014f53e2d253b","sha256":"fb13c3a1cbac60649b76f7d7f85c1645d35ac69b85ce5f4eb0692505ecc2cd45","sha512":"8448e96abe326f43285b2d8b0d75beaf0e9c9e051e8754841d907b30eb303ae24c447011306da6a1703b9192d02aeff76a4517bdf94ec6e7dc360ce3538802af","ssdeep":"1536:UIG3hJMkJeK8ic5iZGnJ4URj9vqXOQ6UqYdbuA5RVK1:UL31hcLlRjDQ6Uq4W1","tlshash":"7f5302df8de32a148ff78772668885f4f4927c68898c8e7345526a8907f07d6b96c04f","first_seen":"2023-05-07T18:04:27Z","last_seen":"2026-04-04T23:37:56.597245Z","times_seen":10186,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/5d6ee6fa/desktop/default/vendors/plugins.vue-notification-9169c5f6.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/5d6ee6fa/desktop/default/vendors/plugins.vue-notification-9169c5f6.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-13be2d9aaae291d4ea9a0168c8f5ab8a-7bffbb29ea17c4e8-01\r\nlast-modified: Fri, 26 Sep 2025 09:02:37 GMT\r\netag: W/\"a6663530ba08abb2004a37d340cee1c4\"\r\nx-amz-meta-mtime: 1758877356.95615686\r\ncontent-encoding: gzip\r\nexpires: Sat, 27 Sep 2025 09:15:47 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 81972\r\ncache: HIT\r\nx-cached-since: 2025-09-27T09:20:13+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12563,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12563), with no line terminators","md5":"a6663530ba08abb2004a37d340cee1c4","sha1":"2453c8212ed3c6d276fdb0222a84bccbdc581b4b","sha256":"563798db19c6b62f2df4cac7ebc788db1341d0c31fff579e97836f8231ad354e","sha512":"87ad02a2832b8f2a4f39e312edfc0550d2584856c5c8399c511751acadd6944c08823690717a9cccf030290c801834a6c35e282d3088deab77a90368440088f8","ssdeep":"192:VU1hQXHv3CbfKpqEVwhSIkrReP+SdHtfGA2D3ow5EE9bJ52bFZLy2mp4ilVk:Vn3CmpcDkAP+S/fGAWf5VbWbLy2mmijk","tlshash":"2842a6ceb2c2b4650be760b6402f110af136a96879ab54d4f3b1d4f2adb564c413bf39","first_seen":"2025-09-26T11:18:04.571288Z","last_seen":"2025-10-09T08:36:47.218974Z","times_seen":280,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_coupon/en/dictionary_ae861f5f20233158a270b9bf1f124dba.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_coupon/en/dictionary_ae861f5f20233158a270b9bf1f124dba.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-7d5f0e61b1ae5636215977bf74b9cffc-0b0af1fc99d03daf-01\r\nlast-modified: Mon, 25 Aug 2025 18:06:58 GMT\r\netag: W/\"0093e9f87ceceddf08223faa66e803cf\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Thu, 11 Sep 2025 19:52:28 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1199\r\ncache: HIT\r\nx-cached-since: 2025-09-28T07:46:26+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28327,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0093e9f87ceceddf08223faa66e803cf","sha1":"5290778a9922cc6d08c985f290b39916d0865c2c","sha256":"ebc90f649e7f412597bb67732393a4ee5c42fc0e253dac74a8f75ecf56540c9b","sha512":"0225ccbe4659084c28e725c37ad1139444a86f424ac7b32d965eb54a190ea9fbdb1d04b4eccfff661c655358da4b5ea2e5ffc325dcb786b5c2597fe77c593471","ssdeep":"384:1lq4j/8i+GZCH6CqyXLbhU8QnBehe6pjfsE6oCNhWxB5gVInt5DQHirGqT:nq4HKeSjIodhg4t5DQ+zT","tlshash":"25d2723eb403fcbbf58600c4ae6abda361b40098d3a9ce5b88df481e21e71de5157847","first_seen":"2025-08-25T18:36:05.084487Z","last_seen":"2025-10-15T12:55:10.63877Z","times_seen":1233,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 122748d2-89d7-4430-b8ff-b73aab5537eb\r\nContent-Length: 98\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder; postback_watcher=%7B%22tag%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22pb%22%3A%22cbd748604f564b7883285a09608259ca%22%2C%22click_id%22%3A%224dee5db3523c3eff48d74c6a8ab049d9%22%7D; auid=uaJaGGjY7IDCO3bLBNHUAg==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\nx-dt: 285\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.094, wf-uht;dur=0.010\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c8fa6663953dfde12cbf151676b29295","sha1":"1e16ade70049ecc661c849f4377274cffd999b08","sha256":"2083f16bfc70c67440784e7bafba4c5aa07cc710f961b46a535d4ac02d3a5ed2","sha512":"cb9f364ea685e1dcec317c76351582804e1350885a967bd97b7efae93779f895456a16b4c00a07a801d1db7160509bc2e15df315e1aaa7e3a36fd7f50974b05b","ssdeep":"","tlshash":"bf70000088800200a0c222308208280800208880082080a02280c03802a8aacca8e002","first_seen":"2025-09-28T08:06:55.404008Z","last_seen":"2025-09-28T08:06:55.404008Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/792ed53757.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.568Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/792ed53757.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-8a8df43de58f1456c5278f66b1d2fa1f-c4075962d7525fe8-01\r\nlast-modified: Wed, 24 Sep 2025 09:22:16 GMT\r\netag: W/\"f6056e830277be5c82779b6fe03d9e4e\"\r\nx-amz-meta-mtime: 1758705689.751485634\r\ncontent-encoding: gzip\r\nexpires: Thu, 25 Sep 2025 09:24:36 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 81212\r\ncache: HIT\r\nx-cached-since: 2025-09-27T09:32:53+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3205,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3204)","md5":"f6056e830277be5c82779b6fe03d9e4e","sha1":"6f9b1c2f40091dbc71ba4d671adbf12d6e0cfd73","sha256":"14241f6033a8bd3219707f87df1af25202b099a44e9b68b3e834838f67fe5668","sha512":"a2772723fb3c2bbc5d5c6ce4d476b0a31c69bd64000987f8554c41873d89a205cfbc847a88433d9578d4bd06f15ae597ded183807776441180f5ff3bfe4eb3ba","ssdeep":"","tlshash":"6261c6c578b960f9790741cd3d927070e39a1db9139c05b1f2f9888823bd6c45b2f69b","first_seen":"2025-09-24T10:08:54.342793Z","last_seen":"2025-09-30T08:01:23.58765Z","times_seen":136,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:33.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:33 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63920\r\ntraceparent: 00-4448fc592849ff3cdc0e341a35e26a49-ca355ceb320b295a-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"a65527fcb58f66a7cfbc0e6b160538b4\"\r\nexpires: Sun, 10 Aug 2025 19:21:26 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2874\r\ncache: HIT\r\nx-cached-since: 2025-09-28T07:18:39+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63920,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63920, version 1.0","md5":"a65527fcb58f66a7cfbc0e6b160538b4","sha1":"45d260e7fa343401b5bb0df982a014f53e2d253b","sha256":"fb13c3a1cbac60649b76f7d7f85c1645d35ac69b85ce5f4eb0692505ecc2cd45","sha512":"8448e96abe326f43285b2d8b0d75beaf0e9c9e051e8754841d907b30eb303ae24c447011306da6a1703b9192d02aeff76a4517bdf94ec6e7dc360ce3538802af","ssdeep":"1536:UIG3hJMkJeK8ic5iZGnJ4URj9vqXOQ6UqYdbuA5RVK1:UL31hcLlRjDQ6Uq4W1","tlshash":"7f5302df8de32a148ff78772668885f4f4927c68898c8e7345526a8907f07d6b96c04f","first_seen":"2023-05-07T18:04:27Z","last_seen":"2026-04-04T23:37:56.597245Z","times_seen":10186,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/5d6ee6fa/desktop/default/analytics-65909e6d.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:35.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/5d6ee6fa/desktop/default/analytics-65909e6d.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:35 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-122727ba3c6d3b26cba80bfb70e7c296-db5148afea52c5f1-01\r\nlast-modified: Fri, 26 Sep 2025 09:02:37 GMT\r\netag: W/\"ef421eb72520707cfae3915d5df2f7eb\"\r\nx-amz-meta-mtime: 1758877356.93615679\r\ncontent-encoding: gzip\r\nexpires: Sat, 27 Sep 2025 09:16:02 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 81969\r\ncache: HIT\r\nx-cached-since: 2025-09-27T09:20:26+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8845,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8845), with no line terminators","md5":"ef421eb72520707cfae3915d5df2f7eb","sha1":"fbc692955c25be960cdbf8efcf25adebd30f5b47","sha256":"ddf4c6b519af133c0030a908d150425f2ab04a64c15622f06d7c887d60608693","sha512":"bcbdb916bc0c251123218f663c7b21b79df3d48657c4544184b4fc63d27d64d7464faf5909d915b3d3c260d96f5f7ebe6e8c71b48f3bf26d897df931a6f23f23","ssdeep":"192:MvO+jPZxnEW5+vfj33Veo9Pshu7WapwQWJ3vQ9Om0PQzpVvOSRxGj2km:QjPZxnEW52z3VeoJb7WapwQWFQ9F0Piv","tlshash":"e102a68dbcc9e43007fa19b8e67b9a0ae07617173405c451caead8c43d7ea8f111be9d","first_seen":"2025-09-26T11:18:04.47832Z","last_seen":"2025-09-29T05:34:13.689489Z","times_seen":72,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/site-admin/css_vars/29b5cda95fa390c124de39b6aeca6d24.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:24.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/site-admin/css_vars/29b5cda95fa390c124de39b6aeca6d24.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: text/css\r\ncontent-length: 46\r\ntraceparent: 00-e8b644008de31113b7dcf6608704b5e2-0980b50c47e16e5b-01\r\nlast-modified: Thu, 20 Mar 2025 13:29:31 GMT\r\netag: \"29b5cda95fa390c124de39b6aeca6d24\"\r\ncache-control: max-age=3600\r\nexpires: Fri, 26 Sep 2025 20:51:22 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2113\r\ncache: HIT\r\nx-cached-since: 2025-09-28T07:31:12+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"29b5cda95fa390c124de39b6aeca6d24","sha1":"46f68f69533c1fdc737eb36e8e7af7672178e610","sha256":"6021ec0aede22eadcb8401fe945d345202320437c7be01b157f0cb282ebe7c88","sha512":"8a62d0b23596f91ed5dbd111fce75e940b4b6fe542716d9fad76d610eb9a90f67bad145f3dcfd977b5a7a6d414d66e94c0abcaf6cabce2310d94af56cdf0e13b","ssdeep":"","tlshash":"54900294a50c22502025c656109c48d0119412566621255851533451b4438405960188","first_seen":"2025-03-20T19:27:14.305804Z","last_seen":"2025-11-18T11:41:52.983768Z","times_seen":4852,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":79,"dns":0,"connect":2,"send":0,"wait":1,"receive":0,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/hd-api/external/verify","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:34.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"POST /hd-api/external/verify HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/en/block\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 191529\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder; postback_watcher=%7B%22tag%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22pb%22%3A%22cbd748604f564b7883285a09608259ca%22%2C%22click_id%22%3A%224dee5db3523c3eff48d74c6a8ab049d9%22%7D; auid=uaJaGGjY7IDCO3bLBNHUAg==; window_width=1280; che_g=a6bed356-02d8-4a11-8c89-40b4a9fec694; SESSION=f5ec22d778f99b605e2dae1c021f2090\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:34 GMT\r\ncontent-type: application/json\r\ncontent-length: 818\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-dt: 285\r\nx-request-guid: 105b6cba5aef47f780766e3be343c8af\r\nx-time-ng: 0.005\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.069, wf-uht;dur=0.035\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1035,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"da2612fff49cae0c7c2176b3d98bce7f","sha1":"880da6f39bc86d9f2bf13b26ffd3d7f4e96b077d","sha256":"72508a1cc2d43b532a3bcb984bce82bda1a45996e30cf5be16a667f0c8dad6ea","sha512":"c2206e3dba3a7112eb9b5b9df2fbd8437a849b0b316eb12e84ca4f0f867d1162798c55811489f4ab2ad094d391d8807f7dc9219996d9796af9c97446de186313","ssdeep":"","tlshash":"bf11d8ac7a842fff1dd25811c5295a2e61c21aa2016525a5e870df7219711c4e5c30f3","first_seen":"2025-09-28T08:06:55.415456Z","last_seen":"2025-09-28T08:06:55.415456Z","times_seen":1,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":0,"dns":0,"connect":0,"send":41,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/hd-api/external/assets/hdf.js","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:33.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"GET /hd-api/external/assets/hdf.js HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/en/block\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder; postback_watcher=%7B%22tag%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22pb%22%3A%22cbd748604f564b7883285a09608259ca%22%2C%22click_id%22%3A%224dee5db3523c3eff48d74c6a8ab049d9%22%7D; auid=uaJaGGjY7IDCO3bLBNHUAg==; window_width=1280; che_g=a6bed356-02d8-4a11-8c89-40b4a9fec694; SESSION=f5ec22d778f99b605e2dae1c021f2090\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:33 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 1687\r\ncache-control: public, max-age=300\r\ncontent-encoding: gzip\r\netag: 0009b06af6892358f6c573335f102046\r\nvary: Accept-Encoding\r\nx-dt: 455\r\nx-request-guid: 1451fb58d7c8d7919b8fe9e9e00aba50\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.006, wf-uht;dur=\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4203,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"C++ source, ASCII text, with very long lines (874)","md5":"0009b06af6892358f6c573335f102046","sha1":"cb899ce5fb6756d389a12e5049f2180dec2366ed","sha256":"540a50ce4665aa5a15e6afcdf7a260860e1896e77955c7ed128d1e6489bedac3","sha512":"83e9ce72ca4725bf501fe711538455aaa2fb278095d4d3938615b1907416446b8a8ed1f4f34fb296ea4c9a6d6b6e0fecbe31afa240305e7d23baa4145b2cd1c8","ssdeep":"48:Pen1yuqKi6649JoXznZwhU6fINwld0mPr6eC5/F6ALWBl/NR3vMNNeEcxHb8JiTP:Y1yuqKioolwHgObfENerHbkiTgRx05","tlshash":"d581323660ee2d3153639052d53fe5e9f229a8073968ec4831fc588a0f40f6189b2e3b","first_seen":"2025-07-24T09:34:40.995531Z","last_seen":"2025-10-16T23:35:31.258248Z","times_seen":2029,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/bff-api/config/group/get?groups=d.technical\u0026lang=en","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"GET /bff-api/config/group/get?groups=d.technical\u0026lang=en HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/en/block\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nis-srv: false\r\nx-svc-source: __TECHNICAL_PAGES_APP__\r\nx-app-n: __TECHNICAL_PAGES_APP__\r\nx-geoip2-country-code: ru\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJkYXRhIjp7ImlkIjoyMjk0LCJkaXNwbGF5VHlwZUlkIjoxLCJ0ZW1wbGF0ZVR5cGVJZCI6MSwidGVtcGxhdGVJZCI6MX0sImJyZWFkY3J1bWJzIjpbMSwxMiwxNCwxNSw4ODUsMjMyMiwxNiw0OTUsODEyLDk4NSw4MTMsMTcsMTgsMjE4NiwyMzY4LDIzMDAsMjM3Niw4NDYsMjI2NywyMjkxLDIzMDMsMjM3NSw4MTAsOTQ0LDIyMTEsMjQwOSwyNDk1LDEwOTAsMTA5MywyMTkxLDEwMDIsMjI0MiwyMzAxLDI0NjEsMjQ2NCwyNDY1LDI0NjIsMjQ2NiwyMjU2LDIyNTEsMjI4NywyNDMyLDI0NzgsMjM0NSw0ODQsMzk1LDIzMjgsMjQwMiwyMzMyLDQ3NCw0NzYsMTAwNiwyNDkzLDIzOTQsMjM2NiwyNDAzLDIzMTEsODA5LDkxMiw4MDYsNzg2LDc2OCw3NzUsNzY3LDc2Niw3NTEsMjQyNCwxMDM5LDIzMjcsMjQyMiwyNDY4LDkwNyw5ODQsMTEwNiwyNDA4LDIzMDcsMjE1NSwyMzcyLDExMTksMjI5NiwyMzU0LDIzNDAsOTY4LDIyMjksMjM5MiwyNDMxLDI0MTMsMjQzNCwxMDk2LDIzNTEsNzU5LDIyMjgsMjIxNCw4NDMsODQyLDIzNTIsNzU2LDc0Nyw3NDgsNTQ4LDIzNTMsMjQyNSwyNDI2LDI0NzMsMjQ5Miw3ODcsMjQ0NiwyMTYzLDgzOSw3ODMsMjQ3Nyw1MjUsMjQ4MCwyNDM5LDI0NDAsNTI0LDEwNzUsMjQxNiwxMDc0LDU0OSw5NDMsNTEyLDExMTcsMTEwMSwxMDczLDIzMTAsMjM5NywyNDYzLDI0NTIsMjM3OCwyMzg4LDIzODksMjM5NiwyNDA3LDI0MTAsMjQxMiwyNDE4LDI0MjAsMjQ3NSwyNDI4LDI0MzUsMjQ2NywyNDUxLDI0OTQsMjQyMywyMzY5LDEwNzgsMjQzNywxMTAwLDI0MzYsMjQyOSwxMDE5LDUxNSw1MjIsNzY5LDQ3NSw1NDUsODE1LDgxNywyNDU2LDQ3Nyw0OTgsOTQyLDIzMjAsMjI4OSwyMjgwLDEwODYsOTc4LDEwODQsOTg2LDIxOTcsOTkzLDk3Nyw1MzAsMjI0Myw5ODEsOTg3LDIxODIsMjI5NSwyMTU2LDIxNTcsMTA5Miw4MDQsMjIzOSwyMjIxLDk5NCw5OTksOTk4LDk5NSwxMDA3LDEwMDgsMTAxMCwxMDA1LDExMDIsMjE5OSwyMTk4LDEwMTIsMTAyMywxMDk4LDIyMDEsMTAyMiwxMDQwLDI0NzEsMjQ4OCwyMTU5LDEwODksMjE3OSwxMTIyLDEwODcsMTA0MiwxMDQzLDEwNzYsMTA3NywyMzIxLDIzNjIsMjE3MSwyNDg5LDIxNzcsMjE3NiwyNDkxLDEwODMsNTMxLDk5Miw5OTAsMjM0NywxMDQxLDIzOTgsMjIwMiwxMDE4LDI0NDQsMjQ3MiwxMDk5LDEwODIsNzg0LDU1Nyw3NzgsNzgyLDE5LDY1NiwyMjIwLDIyOTRdfQ==; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder; postback_watcher=%7B%22tag%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22pb%22%3A%22cbd748604f564b7883285a09608259ca%22%2C%22click_id%22%3A%224dee5db3523c3eff48d74c6a8ab049d9%22%7D; auid=uaJaGGjY7IDCO3bLBNHUAg==; window_width=1920; che_g=a6bed356-02d8-4a11-8c89-40b4a9fec694\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: application/json\r\ncontent-length: 742\r\ncache-control: no-cache, private\r\nserver-timing: dt_total;dur=0.120, bff;dur=11.97, wf-uht;dur=0.025\r\nx-dt: 285\r\nx-pod: R-cfdrq\r\nx-time-ng: 0.015\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":742,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4eb311659e468207be5833d01806a6bc","sha1":"5470741fa048379479314630596a5491a24baa52","sha256":"614a8b74dbb5809ee856b8f0d67ef11d72c7b5d7180d3a9929915e02f5254c76","sha512":"95bbe62d24bbf459cf43f18c530ac8ad75d53fa70c368d05efbca987c19d2f6a0e0b7f5bf74e91800a90617a01e5bda9642b5da3841f47842b87aefe26a9df52","ssdeep":"","tlshash":"c501845e00a5ca3d706c063adb865e109eed502b3284b851fe0cacac60d6ddef95680f","first_seen":"2025-07-18T16:37:04.833261Z","last_seen":"2025-11-06T09:03:00.039673Z","times_seen":977,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:33.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:33 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63748\r\ntraceparent: 00-c2360ba01f4663e030a00fd066b27fe9-c0c9b7e747a19af2-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"6887b6f24414dbc612dbf42ccdc76b70\"\r\nexpires: Thu, 16 Jan 2025 10:32:14 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 3251\r\ncache: HIT\r\nx-cached-since: 2025-09-28T07:12:22+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63748, version 1.0","md5":"6887b6f24414dbc612dbf42ccdc76b70","sha1":"8068d3abfbc6cbf35b55919da45b1f4d2d136238","sha256":"fc5c015fc32518f1ed810fa84ca28941eb9d5a3c81acc8df69a4dbbeedef7b0c","sha512":"00f08f9dd648972c9571547e06172d5505dd13f577fe2e65a497d3856172807ac11c996984e4138d2eb2ac784257fe61864aee15752fe9e9e76f98db931e0c2a","ssdeep":"1536:KtdCG+Dz6RxAx457zL0ASEn091Y0H1mTOzI/OzMFOoTX4u:MMG+yRpzN091Y0VtI/pOoTt","tlshash":"8b5302485551fae2cac3073c0f7a89dbb37a776d519224cd98b69f830d37964bea2070","first_seen":"2023-06-14T19:15:49Z","last_seen":"2026-04-04T23:37:56.594898Z","times_seen":10308,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16664555628\u0026cx=c\u0026gtm=4e59n2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:35.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /gtag/destination?id=AW-16664555628\u0026cx=c\u0026gtm=4e59n2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 28 Sep 2025 08:06:35 GMT\r\nexpires: Sun, 28 Sep 2025 08:06:35 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 28 Sep 2025 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:72:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:72:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:72:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:72:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 125917\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":367760,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"0a7b9a4998854b326c1fd06eb3391f35","sha1":"6ffa9632a48661a85f2af8381d257082ad970aab","sha256":"4e4e4613a94878af15742371f43611bf9356d2b01244b787d67dd5b1292b87ee","sha512":"f674ad98abf05a7a055404d02eb171cf896fae4a42b6a13993f88d8270e7af8437445961ad67169565329b3a635dfda8c580235166de1e4e8cef7f91a7fc6b63","ssdeep":"3072:wFLz52Qu/D62GmMgZepV0RP18YqkLPW8RthKUfgHwa6z0CZzu0B/uuxtA/O/G1SE:+pmMgZepxYqkD1gIuq/RPG1SvuVcxUt","tlshash":"ed7419cd73d674265393a478903f018ba5bb68a2f44cc899f185dce42e74a9a4237f7c","first_seen":"2025-09-28T03:54:14.525044Z","last_seen":"2025-09-28T23:37:00.891941Z","times_seen":11,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je59n2h1v897130004za200zd897130004\u0026_p=1759046795359\u0026em=tv.1~em.ODS1igyfeIhzOTHENqwIfH1sb8t0oxg8FT6iY2YCmeo\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=528375423.1759046796\u0026ecid=1111371433\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026ec_mode=a\u0026_s=2\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~115480709~115691065\u0026sid=1759046795\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-93399.world%2Fen%2Fblock\u0026dt=1xBet\u0026_tu=KA\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026ep.optimize_id=GTM-5R4MT54\u0026tfd=11298","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:35.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je59n2h1v897130004za200zd897130004\u0026_p=1759046795359\u0026em=tv.1~em.ODS1igyfeIhzOTHENqwIfH1sb8t0oxg8FT6iY2YCmeo\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=528375423.1759046796\u0026ecid=1111371433\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026ec_mode=a\u0026_s=2\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~115480709~115691065\u0026sid=1759046795\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-93399.world%2Fen%2Fblock\u0026dt=1xBet\u0026_tu=KA\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026ep.optimize_id=GTM-5R4MT54\u0026tfd=11298 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://1xlite-93399.world\r\ndate: Sun, 28 Sep 2025 08:06:35 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:158:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:158:0\r\nreport-to: {\"group\":\"ascnsrsggc:158:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:158:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T01:47:03.978699Z","times_seen":13354468,"resource_available":true,"data":null}},"time_used":78,"timings":{"blocked":29,"dns":0,"connect":9,"send":0,"wait":19,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_css_542ed6.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:24.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_css_542ed6.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-0382f9ce7a370d719681d1ef9d169c6e-ca751a1370d8f5ad-01\r\nlast-modified: Sat, 27 Sep 2025 07:00:52 GMT\r\netag: W/\"7eb4f3d4c97ec66a32269ae3b07d7653\"\r\nx-amz-meta-mtime: 1758956429.218256752\r\ncontent-encoding: gzip\r\nexpires: Sun, 28 Sep 2025 08:02:07 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 155\r\ncache: HIT\r\nx-cached-since: 2025-09-28T08:03:50+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11025,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (11024)","md5":"7eb4f3d4c97ec66a32269ae3b07d7653","sha1":"e31f7fc270a78d455c90a57d8c365bccf6ebdfb0","sha256":"542ed6b44d2771468d5e5d4c77dfddaab1f7d4169bf692a087c56f024d9813dc","sha512":"02195935d732af0ae4dceecb4677bcb4ad90d284dfbd27a707ee927fc587fb3a9bacc8bd8cf315ee025b67d1a53b33fb0e9ced17d24ea019deb2a0be9765ec37","ssdeep":"192:mLhA5ZO73iyDDW7qE/eVgnmnh8RbxJEU4PuiPBvDDQ7qOtIZ4Io:QAXOLisDUqE/Y8RbxUuwBLDCqOt24v","tlshash":"cc3226adc9e495231d26b5216388be7c85f0f06aee314e55f80ec6104ad3f9f15e0e79","first_seen":"2025-08-13T23:36:01.800779Z","last_seen":"2026-03-04T04:00:43.402045Z","times_seen":3922,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":78,"dns":0,"connect":1,"send":0,"wait":2,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-ui/3.3.424/Desktop/Default/merged.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:24.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-ui/3.3.424/Desktop/Default/merged.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-949ae867f7ba76e8b9e8d0c9b0b158a2-b1c4feffbdc4115b-01\r\nlast-modified: Fri, 26 Sep 2025 15:36:45 GMT\r\netag: W/\"4c6e846c5f867b53e4596512d6d501f6\"\r\nx-amz-meta-mtime: 1758900972.306165281\r\ncontent-encoding: gzip\r\nexpires: Sat, 27 Sep 2025 15:46:14 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 58743\r\ncache: HIT\r\nx-cached-since: 2025-09-27T15:47:22+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":834549,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"4c6e846c5f867b53e4596512d6d501f6","sha1":"47838b704c934581c0e0f1355f9d1a06b9e80e96","sha256":"3ad48958069a09cf582202266d5de2bf380219c9e79b3b52b529c36838c1dbd4","sha512":"9dbbe1fa4e9cc54476e6347cdf1b13a112ffe437e171d61ee146efb03bf5985d25852489c941d79884ec31e4ef88f345fe6d6c661515ddfb0a8868db8a793d81","ssdeep":"6144:a94Rf4/xuH6Cfe2wZliaFv4r6enhWLOEUJv1inLjkLGOlzeaL50KrKG:wXD4r6enhWLOEUJv1inLja50KrKG","tlshash":"0605521cf29ea1393e37e52462945ffc6620b7179b231c6ff499024a0ec394361a6db7","first_seen":"2025-09-26T16:06:37.885323Z","last_seen":"2025-09-30T09:48:19.664678Z","times_seen":132,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":79,"dns":0,"connect":1,"send":0,"wait":2,"receive":0,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/5d6ee6fa/desktop/default/css/b19ccea5.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:24.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/5d6ee6fa/desktop/default/css/b19ccea5.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-d20b3473227cbb23d75cf55792789b6b-5f7142284040ddff-01\r\nlast-modified: Fri, 26 Sep 2025 09:02:38 GMT\r\netag: W/\"9d6ce822f4da1863fa29fd993db460e8\"\r\nx-amz-meta-mtime: 1758877356.951156842\r\ncontent-encoding: gzip\r\nexpires: Sat, 27 Sep 2025 09:15:44 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 82095\r\ncache: HIT\r\nx-cached-since: 2025-09-27T09:18:10+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15191,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (15191), with no line terminators","md5":"9d6ce822f4da1863fa29fd993db460e8","sha1":"4c92312270347c980ed977bca3798a2f08f69ba8","sha256":"572dacbec65881a30fe44951c74aebf8ff81fe01a6a28feb79b7a7018246291e","sha512":"5f394602c6f1661c61cc15500417b4ba7ed37d835160076efabbd63e1773d5f8a55a66a27133c5f8b778b3469e82a90ecb82ddfcb632939954f85e0ad42a69a1","ssdeep":"192:HONOH7nvxxxY4lctZLJh6N0dtu8yvrs9lvhvuvoQwltoQrNTC4cjWnk3LbBQ:HvJxxY4MJJqJQr9C4GWk3PBQ","tlshash":"be62b61fd53692b21d238c51728ebf383539722628a65735f44e26488ddbb9703d0fa8","first_seen":"2025-09-10T15:54:14.303814Z","last_seen":"2025-09-30T09:48:19.797993Z","times_seen":515,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/5d6ee6fa/desktop/default/Page.Block-5311acb2.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/5d6ee6fa/desktop/default/Page.Block-5311acb2.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 476\r\ntraceparent: 00-f2a9db7f635797a58b9b0c3e7fcc8d23-9b8009adb8080844-01\r\nlast-modified: Fri, 26 Sep 2025 09:02:37 GMT\r\netag: \"97bcc1ef9d4b849e15b25694fb241a08\"\r\nx-amz-meta-mtime: 1758877356.935156787\r\nexpires: Sat, 27 Sep 2025 09:16:13 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 82095\r\ncache: HIT\r\nx-cached-since: 2025-09-27T09:18:10+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":476,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (476), with no line terminators","md5":"97bcc1ef9d4b849e15b25694fb241a08","sha1":"b34ab3597a21c13f06af055c3c00cc140f1d75e6","sha256":"ff0b2c14b1d90cf3d9d4f1035bffc3c35b80762d7f9369aa32cbab005cd1211f","sha512":"e801a7cbc8c2467d37b552658cb1bdbb847a5cb9a4d9e261c3843668934a6f990c261b80dccd92a1a317f12bdd4561457b74c75e11b45831cf424265b78f7db7","ssdeep":"","tlshash":"80f09e9f5472fc8d95e610d343b6d1f7b48c7a7a0649596046a1c8b532f686a4c2124f","first_seen":"2025-09-26T11:18:04.459121Z","last_seen":"2025-09-29T05:34:13.628342Z","times_seen":76,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/5d6ee6fa/desktop/default/vendors/plugins.v-tooltip-b91a2521.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/5d6ee6fa/desktop/default/vendors/plugins.v-tooltip-b91a2521.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-245d8a6a071b63c1ec830d42c75a26e0-f4f13e5724379dca-01\r\nlast-modified: Fri, 26 Sep 2025 09:02:37 GMT\r\netag: W/\"f4f1ab82911ce3164d66e67d37b36e2d\"\r\nx-amz-meta-mtime: 1758877356.95615686\r\ncontent-encoding: gzip\r\nexpires: Sat, 27 Sep 2025 09:15:47 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 81972\r\ncache: HIT\r\nx-cached-since: 2025-09-27T09:20:13+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":76824,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65476)","md5":"f4f1ab82911ce3164d66e67d37b36e2d","sha1":"313e4be41775adf6b6310148999a67c8084073a0","sha256":"4a60aa9f1bbcb80558b3c6718626dd2a844cc8d085441ec684c313385a75c439","sha512":"7cabd406cece957e75463d0a02f19609b72a7ef98e194074d358130b01032c6584ebc7161e89ee349b2716dc2994fb6da75f53dbb69348bf47de325b1b6eeefa","ssdeep":"1536:2tbnDD3jvHT7/E0bITPRSCv1MHxWdRfm5d5:6b/bz7XITP8w0WRfmR","tlshash":"5473d88e72d0f0b603e7b1b5403f620fb2776518b40ad454b2b1e6d4ac3da59a267e3d","first_seen":"2025-09-26T11:18:04.439176Z","last_seen":"2025-09-29T05:34:13.629403Z","times_seen":78,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/46fe3f96f4140750e81ded48911f3e30.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/46fe3f96f4140750e81ded48911f3e30.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: application/json\r\ncontent-length: 747\r\ntraceparent: 00-f0a796b2a4916255e94435998730176b-7f8c5dbcdfda858a-01\r\nlast-modified: Thu, 27 Feb 2025 13:26:35 GMT\r\netag: \"f4e90636ec9cff061c4301b3cefdd0d6\"\r\nexpires: Thu, 28 Aug 2025 18:20:59 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\ncache: REVALIDATED\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":747,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f4e90636ec9cff061c4301b3cefdd0d6","sha1":"c506efe9c3672c58434ea10021dab0ad81b1ad98","sha256":"30666f138ccc12735e2f8a6405ddce4a3d8756b9445e3b2732fa2970f14dbcea","sha512":"2db1a1a4419db47b4256906f9c660b85479bb83d2ab0757d1b1c24cdf94d97bdc4a7140d5d8ea31cbf612a77ba1ae6ef46bbd77eb42d24b6d83afebbc46c9216","ssdeep":"","tlshash":"2a012d94bde4083719374ca981a2595d63844b0398297c087adf3d4c5b2096d056e9be","first_seen":"2025-03-01T06:06:39.041672Z","last_seen":"2025-12-04T11:53:51.978889Z","times_seen":4943,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/d9c2365ca58e0fb54268fd4914d751b9.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/d9c2365ca58e0fb54268fd4914d751b9.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-1148417fa073faaa4893b63d6851f3a8-ac6a16260d3e14e6-01\r\nlast-modified: Mon, 16 Jun 2025 11:25:45 GMT\r\netag: W/\"1a7ec72aad44f9540cb604d7cde5ff38\"\r\ncontent-encoding: gzip\r\nexpires: Mon, 11 Aug 2025 05:01:25 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\ncache: REVALIDATED\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14466,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1a7ec72aad44f9540cb604d7cde5ff38","sha1":"65e5851d652e0471c213282efb5eeee31ae813db","sha256":"94d4bf6bc00a09b766ea0ba441e860dc40ee6d398be80e89016dd0ee662869d6","sha512":"05c4574c3785992daed7bb3616a938d1d04dc9679132ee8997147a21c32d2dab5537e51060ecce9969c4e2ea5c4ba97299c5f2622a3f6fb097c066e189d37f79","ssdeep":"96:75b7Ba79eu4QWGAdryCiQFpzLJLJeHZVZYpH3UGHSTSSbbGiJinHs:u7kJ2VK3UsyinHs","tlshash":"935246d9bae41c33112b60bdd5f7f91aa3dc1f439d4aa8287eac6d4c1b6050500aed7e","first_seen":"2025-06-17T07:58:23.417687Z","last_seen":"2025-11-14T10:22:49.434452Z","times_seen":2557,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 122748d2-89d7-4430-b8ff-b73aab5537eb\r\nContent-Length: 72\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder; postback_watcher=%7B%22tag%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22pb%22%3A%22cbd748604f564b7883285a09608259ca%22%2C%22click_id%22%3A%224dee5db3523c3eff48d74c6a8ab049d9%22%7D; auid=uaJaGGjY7IDCO3bLBNHUAg==; window_width=1280; che_g=a6bed356-02d8-4a11-8c89-40b4a9fec694\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\nx-dt: 285\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.005, wf-uht;dur=0.018\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3252f021ab4740fac7fd85e55a0a295a","sha1":"2d61c7f7cf84c9a5335cf59e46a3cf2db4fd3a0f","sha256":"6f07ecae5a131135f7a580063e1a6a98eab13b2b0c08c4a5ce9f607dfd893904","sha512":"672fbd8b54403744b822fee6c099a4c03c94b499954e69fa72c609e559cbf17caecde1ba39c9bc6113e8fd4133490069699ab8b15da5039779c0bda73b212863","ssdeep":"","tlshash":"f2700000a8c002002880a028020828080028800a008080a02080f83000b0aa8ca0a202","first_seen":"2025-09-28T08:06:55.485841Z","last_seen":"2025-09-28T08:06:55.485841Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refpa32010.com/L?tag=d_131637m_32273c_[]MS[]null[]pb[]general[]106819985_d27082_l191016_clickunder\u0026pb=cbd748604f564b7883285a09608259ca\u0026click_id=4dee5db3523c3eff48d74c6a8ab049d9","fqdn":"refpa32010.com","domain":"refpa32010.com","tld":"com"},"ip":{"addr":"178.253.46.211","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-28T08:06:24.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refpa32010.com","organization":""},"issuer":{"commonName":"E5","organization":"Let's Encrypt"},"validity":{"start":"Thu, 10 Jul 2025 09:25:35 GMT","end":"Wed, 08 Oct 2025 09:25:34 GMT"},"fingerprint":{"sha1":"B0:02:61:D0:27:47:FA:D9:15:61:1B:E3:52:D8:73:98:E8:2A:4F:6D","sha256":"32:08:B4:83:25:B0:37:91:49:F5:2D:4D:A9:19:6E:D2:B1:37:FD:74:4A:9E:79:74:84:4B:CB:29:C7:2C:98:F2"}}},"request":{"raw":"GET /L?tag=d_131637m_32273c_[]MS[]null[]pb[]general[]106819985_d27082_l191016_clickunder\u0026pb=cbd748604f564b7883285a09608259ca\u0026click_id=4dee5db3523c3eff48d74c6a8ab049d9 HTTP/1.1\r\nHost: refpa32010.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 303 See Other\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:24 GMT\r\nlocation: https://1xlite-93399.world:443/en?tag=d_131637m_32273c_[]MS[]null[]pb[]general[]106819985_d27082_l191016_clickunder\u0026pb=cbd748604f564b7883285a09608259ca\u0026click_id=4dee5db3523c3eff48d74c6a8ab049d9\r\nset-cookie: A_32273_v=0; expires=Mon, 29 Sep 2025 08:06:24 GMT; path=/; secure\nA_32273_c=1; expires=Mon, 29 Sep 2025 08:06:24 GMT; path=/; secure\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: wf-uht;dur=0.011\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"303","status_text":"See Other","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":253536,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T01:47:03.978699Z","times_seen":13354468,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":78,"dns":0,"connect":25,"send":0,"wait":35,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:37.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 122748d2-89d7-4430-b8ff-b73aab5537eb\r\nContent-Length: 108\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder; postback_watcher=%7B%22tag%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22pb%22%3A%22cbd748604f564b7883285a09608259ca%22%2C%22click_id%22%3A%224dee5db3523c3eff48d74c6a8ab049d9%22%7D; auid=uaJaGGjY7IDCO3bLBNHUAg==; window_width=1280; che_g=a6bed356-02d8-4a11-8c89-40b4a9fec694; SESSION=f5ec22d778f99b605e2dae1c021f2090; _gcl_au=1.1.2071193410.1759046796; _ga_7JGWL9SV66=GS2.1.s1759046795$o1$g0$t1759046795$j60$l0$h1111371433; _ga=GA1.1.528375423.1759046796\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:37 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\nx-dt: 285\r\nx-time-ng: 0.012\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.009, wf-uht;dur=0.024\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"22d9bf81cbca96d95f9d204350c1e934","sha1":"95878e3960afc10ac79fc022b331ed3bc837dad5","sha256":"94360abc88d6fdbf366c78c55aba203e7d98de6840de5956015303fec364e40f","sha512":"c738b609172428de6963e6ef0c94dd8b96de0d776d00af5d02b070fd14e069ce6c48f6fcfae3259b70167c01255b80cd079aebf0ead47c02b2ec0ff2c2533ed2","ssdeep":"","tlshash":"90700080820a032020008200220028080a20880a80a008a030a0c0220020be88e8b002","first_seen":"2025-09-28T08:06:55.493452Z","last_seen":"2025-09-28T08:06:55.493452Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je59n2h1v897130004za200zd897130004\u0026_p=1759046795359\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=528375423.1759046796\u0026ecid=1111371433\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AEAAAAQ\u0026_s=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~115480709~115691065\u0026sid=1759046795\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-93399.world%2Fen%2Fblock\u0026dt=1xBet\u0026en=scroll\u0026ep.optimize_id=GTM-5R4MT54\u0026epn.percent_scrolled=90\u0026upn.ref_id=1\u0026tfd=11298","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:35.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je59n2h1v897130004za200zd897130004\u0026_p=1759046795359\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=528375423.1759046796\u0026ecid=1111371433\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AEAAAAQ\u0026_s=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~115480709~115691065\u0026sid=1759046795\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-93399.world%2Fen%2Fblock\u0026dt=1xBet\u0026en=scroll\u0026ep.optimize_id=GTM-5R4MT54\u0026epn.percent_scrolled=90\u0026upn.ref_id=1\u0026tfd=11298 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://1xlite-93399.world\r\ndate: Sun, 28 Sep 2025 08:06:35 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:158:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:158:0\r\nreport-to: {\"group\":\"ascnsrsggc:158:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:158:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T01:47:03.978699Z","times_seen":13354468,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":30,"dns":0,"connect":8,"send":0,"wait":19,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/67921119830732f2181733ba7e9bf02f.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/67921119830732f2181733ba7e9bf02f.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-5c200a22ae0211a734d92c1d02d75604-b5e238b0d2e8ab0a-01\r\nlast-modified: Fri, 01 Aug 2025 06:34:40 GMT\r\netag: W/\"b255cc6c6ca667c6f42f2d9ab151b21e\"\r\ncontent-encoding: gzip\r\nexpires: Fri, 01 Aug 2025 08:07:27 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\ncache: REVALIDATED\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7481,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b255cc6c6ca667c6f42f2d9ab151b21e","sha1":"a0c241d3c2fa56d392cc204f2d386046a5273a9b","sha256":"9c347db4287a13bf6e86c34baa07bf255437a85566ba14a77199a753b73a400b","sha512":"62bb36631dfa4cd6790efcf39ff920a0b11741cd1b5ecd936ecce083090c0336cb216eb28f838e05e27fff2509a6b8724d0f6c61349da57506e6eca112c8a294","ssdeep":"48:TzABBABGkABjABFygABCN/ABCNYN8ABWHABaEABzzEFABIIX4ABBxSHsABYiwABp:lFbClXCL3cblP+XyLO5GIM","tlshash":"e7f11784fff04c33112f94ad98b37a89a7884f07a95a7d1c7f9d294c1f1451a04aadbe","first_seen":"2025-08-01T12:24:56.656253Z","last_seen":"2025-11-07T10:46:34.805118Z","times_seen":2150,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_registration/en/dictionary_cd2be805e68aeb4993fe6fb6fe90f69d.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_registration/en/dictionary_cd2be805e68aeb4993fe6fb6fe90f69d.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-c62fc310c0af089b2165f9a80b1898c2-be6b09858885f99e-01\r\nlast-modified: Mon, 22 Sep 2025 16:08:00 GMT\r\netag: W/\"698ffa45d5b6c8831b2e1746291c7122\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Mon, 22 Sep 2025 17:25:38 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1091\r\ncache: HIT\r\nx-cached-since: 2025-09-28T07:48:14+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23575,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"07cee6abb91255814c24472a1879f3ea","sha1":"74cfa000316aa6071374347fab34225c00c6350e","sha256":"892b55b9af328fac0b7e6a206737d66c13df3993ffb73f83d570e9108c6be06d","sha512":"2008ebb6416024a50cecb5ca75adc04ed74bb1c9731cd784f88953faf18c8f6d59dc73be5965089405200803cda95d7106ed35c00a9a48ef4520f094d3c89dbd","ssdeep":"384:JSUsZ6LlTYvzH5W8qD8bqBSxkhx+/Y5egwZwcWyP/vZHyTqC:HqLHuDDsxkP++3rg4TqC","tlshash":"97b2a54f9f688c7307c3060b7d8b6b9a26fe416876920819cfbd8a6d1375b91933349d","first_seen":"2025-09-22T17:37:21.085968Z","last_seen":"2025-09-30T16:18:02.506685Z","times_seen":234,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/5d6ee6fa/desktop/default/vendors/app-851b1992.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/5d6ee6fa/desktop/default/vendors/app-851b1992.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-d275efcf81a8dd40c48df5737feb4137-8070f04f9df15d0d-01\r\nlast-modified: Fri, 26 Sep 2025 09:02:37 GMT\r\netag: W/\"bea69619a1af7c453e472538ef8dde24\"\r\nx-amz-meta-mtime: 1758877356.955156856\r\ncontent-encoding: gzip\r\nexpires: Sat, 27 Sep 2025 09:15:44 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 82095\r\ncache: HIT\r\nx-cached-since: 2025-09-27T09:18:10+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":946383,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64882)","md5":"bea69619a1af7c453e472538ef8dde24","sha1":"83044c53c2601822db0cfc257fb07b20fe77d2e4","sha256":"d60c31cc3ce5f3e1d4b643ea980342b68a8a83b7dd50b802989e1c7cb00a7497","sha512":"9b9b554fb7dfd2258e659c5887d25a6e72227549543d587b704819ffe2ece51dc28ed408a88608972b2b33cb3cf1c5c93761c7c38ed86a9b6ba4c88ccbabc6b0","ssdeep":"12288:VbdQhOyvNhOgY4g104bmicRIQclrz3t/h1dYoW:chOyvNhOgY4g1nnuPW3RrdlW","tlshash":"1a154ba9b581f2560aa36ba9d06b0017e33d5e5ebc0ce444f2e7cdd53a59804713af2f","first_seen":"2025-09-26T11:18:04.524495Z","last_seen":"2025-09-29T05:34:13.663764Z","times_seen":78,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/b5cd9a5e87d930de856c92da15aa121e.png","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/b5cd9a5e87d930de856c92da15aa121e.png HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 653\r\ntraceparent: 00-faba199db7d5adb07184337a9f68bc44-625411313cc2562b-01\r\nlast-modified: Wed, 26 Jun 2024 08:18:02 GMT\r\netag: \"e6f0766cbd95db33da44e7a9140648f2\"\r\nexpires: Thu, 16 Jan 2025 10:46:36 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2587\r\ncache: HIT\r\nx-cached-since: 2025-09-28T07:23:18+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":653,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"e6f0766cbd95db33da44e7a9140648f2","sha1":"5f196b1bfe8c3f92bd2ebcd67124e72e81ae6aaf","sha256":"c0399d478788d5d483f104a2e8cb7c32f41cb40e9df0c22e831b2bfa2db63ec0","sha512":"249da39baba03408de98c7fa9a9342ef120436037ab6245b3b4a5f1a206291caaf67481c6ed67064544576697d41ab82499abffec998d837812292a050bf826a","ssdeep":"","tlshash":"90f083e032254a855c02ac7fc33414448fb226cc3682bb09e012887119d24a79dd1368","first_seen":"2023-04-05T22:56:35Z","last_seen":"2026-04-03T12:07:45.643999Z","times_seen":6597,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_cf05c2049f987d7268276708686e4bd0.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_cf05c2049f987d7268276708686e4bd0.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-1a74526bce92c04ba9c4b7a3c102b898-051cc932e7130e9d-01\r\nlast-modified: Wed, 24 Sep 2025 08:07:32 GMT\r\netag: W/\"d30b972ec91959f6fadcabe45e33d6ad\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Wed, 24 Sep 2025 09:25:34 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1429\r\ncache: HIT\r\nx-cached-since: 2025-09-28T07:42:36+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":142251,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d30b972ec91959f6fadcabe45e33d6ad","sha1":"30c09d49ecdeb51ceff7f24164722b5a51ea60f1","sha256":"26c2ecf14ff123c7d961acc1ad3e5931b57c1d8c30c4256b4fb76fb1089b6a0e","sha512":"74c85316f6dd34a8175c064b5ecee686b82e1c8b159c6e6ee39a3963bc8e47179cf99512daace4e2ebec477fe38a8f8a2e7168f0c3d7872fd7c1e62c06b6005f","ssdeep":"3072:vsSMI9Z0rkk7etAfRxxlRXPGj9AgLAnSc6WrsqfuJm9p1Zl:vCIsoJ2fVlRXPGj9/An0qfuJm977","tlshash":"8cd3e70a194c6e7f0fda22ddf94edf4962b40055aab2c822d8eec11e7197fd2817714b","first_seen":"2025-09-24T09:23:18.586005Z","last_seen":"2025-09-30T16:18:02.536541Z","times_seen":201,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_reset_password/en/dictionary_612c6e919ca15d39cc751a619a3952c7.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_reset_password/en/dictionary_612c6e919ca15d39cc751a619a3952c7.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 765\r\ntraceparent: 00-df70fe7a3f614336ef9a36872c21ed8f-27bebeb73ad119d2-01\r\nlast-modified: Wed, 11 Oct 2023 12:52:53 GMT\r\netag: \"00f980f23f1b4c1ccee99ed49e0a8feb\"\r\ncache-control: max-age=3600\r\nexpires: Thu, 16 Jan 2025 10:53:47 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 870\r\ncache: HIT\r\nx-cached-since: 2025-09-28T07:51:55+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":765,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"00f980f23f1b4c1ccee99ed49e0a8feb","sha1":"4cb07094de9bffff1bf81d94446280b91013b660","sha256":"bb3be3377fbb8e66a4b5a8a3866dfd865a37cb4a96482ab2f439981e03b57cea","sha512":"45587feec47804731eb344682dd7465959a50f2f47e114e332e875097a9e2009d6fe41e8ff684fb287d935fd9c4d12a5b83e1fe310f3ceca6061d569502ac1de","ssdeep":"","tlshash":"80015701129f0ef21b4bc65a940b1c71b2a0c043936b8c8757baeb8f73bbd8b009584f","first_seen":"2023-09-28T10:29:17Z","last_seen":"2026-04-04T22:05:16.602633Z","times_seen":5047,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/bfa3e9fd30e7d63c0906602f42c13468.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/bfa3e9fd30e7d63c0906602f42c13468.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: application/json\r\ncontent-length: 182\r\ntraceparent: 00-8940ba96d5c87ff3d3c4f61844897e4d-52931e42e3be4537-01\r\nlast-modified: Thu, 27 Feb 2025 08:55:26 GMT\r\netag: \"0a64a07e9a34e8a5b5e97e80a10888c5\"\r\nexpires: Thu, 11 Sep 2025 22:52:26 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\ncache: REVALIDATED\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":182,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0a64a07e9a34e8a5b5e97e80a10888c5","sha1":"82545cbc39b7dcc031dd10dea841a0b3698243d6","sha256":"7201497e7e8cdf9d35bf6998e43dcde5feea535f9828ce3ee98785781016126c","sha512":"fd619b94af18c7082a4f18556f1443081c8dc650b263c49c56f2514184d4f62e253ad87a220baa9396d7a06bc9ec3cc8ec75eee829a6c1016c4a3af2c1afa5ae","ssdeep":"","tlshash":"f0c02220e5f88823012b68bc80eaa55417504b2339021c20374c0a884b6162400149b8","first_seen":"2025-02-27T19:55:38.982186Z","last_seen":"2026-03-31T06:06:31.551304Z","times_seen":4136,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_popper_js_WZJKYEQD.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_popper_js_WZJKYEQD.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-5b240b8e3c1c57bf3b2de83c04a2a7b0-27d6e6cd8bb3506a-01\r\nlast-modified: Sat, 27 Sep 2025 07:00:49 GMT\r\netag: W/\"bea5b052c307601192270938523fa030\"\r\nx-amz-meta-mtime: 1758956429.229257671\r\ncontent-encoding: gzip\r\nexpires: Sun, 28 Sep 2025 11:04:12 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 75733\r\ncache: HIT\r\nx-cached-since: 2025-09-27T11:04:12+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21252,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21232)","md5":"bea5b052c307601192270938523fa030","sha1":"937f7094c67f5a92c1032a7bc3f21ee94bec66ef","sha256":"f41290374ba615854ebb4b28a07de775581707f3b6427bcc01c0529c62476f64","sha512":"b9bff7f7d9b518ec76898a732114873c01206378c2a840c62062f05487ef773716ce841d7a5bafe3f0c65fbfdf05509852571a3a6b381661cb6f4984d6bc23a9","ssdeep":"384:ZP7iayBuR9vu3z1JXvykd2+LaqHdC6RjVnTGm/7piCXmH8kCCcvJTCyCu+meAxiZ:piZwO3XvO+NMSJt3XmckXcv4nxJAxiH5","tlshash":"7b92a28c7684b0a287a7a2a7a07f860f71376865650e9004f59cf6ec3c35dba507bc7d","first_seen":"2025-08-22T10:11:14.555802Z","last_seen":"2026-03-04T04:00:43.408775Z","times_seen":3920,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=DC-14030178\u0026cx=c\u0026gtm=4e59n2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:35.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /gtag/destination?id=DC-14030178\u0026cx=c\u0026gtm=4e59n2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 28 Sep 2025 08:06:35 GMT\r\nexpires: Sun, 28 Sep 2025 08:06:35 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 28 Sep 2025 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:72:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:72:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:72:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:72:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 112918\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":321108,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"611d203f7322fb759eb22ec1deda0a48","sha1":"12c5f162c07d0ef907b4f64832008b1c7951a964","sha256":"102d5e3a5c6276798cf8f2e8196cc89f0905262df7f0257a5c8e5ee20f5ffbea","sha512":"be9a2a050d29fed8f3978544200e7424974eb765eff1d1f82c2018eff7b936619b41364ff6c41f9e3cd75eec7965dd61294a920778d3604175e592d384ebbb2f","ssdeep":"3072:ydjmu/D62GmMgZOp90RP18YqkLPW8RthKUfgHwa6z0CZzm/uuxB/G1SvuV8fA3KU:jpmMgZOppYqkD1gAm/9G1SvuVcq+CR","tlshash":"566407cdb3d674664393a478503f004bb1bb6992f84cc895f186d8e42e74aaa4277f7c","first_seen":"2025-09-28T03:54:14.49164Z","last_seen":"2025-09-28T23:37:00.815987Z","times_seen":8,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/site-admin/colors/15c32f1803fbd0a6da261b23605b8b5a.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:24.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/site-admin/colors/15c32f1803fbd0a6da261b23605b8b5a.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: text/css\r\ntraceparent: 00-ea90b8efb6517451555049e4d95771a0-225177ffce92b0b1-01\r\nlast-modified: Thu, 11 Sep 2025 11:33:01 GMT\r\netag: W/\"15c32f1803fbd0a6da261b23605b8b5a\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Thu, 11 Sep 2025 12:34:54 GMT\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2714\r\ncache: HIT\r\nx-cached-since: 2025-09-28T07:21:11+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40933,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (40933), with no line terminators","md5":"15c32f1803fbd0a6da261b23605b8b5a","sha1":"0934ae808e076735c5ba5bdcf58347c6c6062042","sha256":"6b7eaa3011a067f85fa704698ef5cfa6c92ebaf41f53f410ab288d6d9240eba3","sha512":"7089884204b364d81d4971c39be2db616849bbd6b042b2d003c4ab7a3faa1063b3209ddee148a28bca895307def451e1f676fbeb1e72fd4665cf432160e2ed3e","ssdeep":"384:+EO1mFSK75xWt5JkyunibMhS43eIIc+7rpeN:+EO1mFSK75xWt5JkyunibMhS4uIypeN","tlshash":"7d037b7ded91c1712a591931911c677b3d36e9ceae240f8fd02c63e630c1b022be5a7a","first_seen":"2025-09-11T12:33:13.092106Z","last_seen":"2025-10-01T07:27:26.239983Z","times_seen":415,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":31,"dns":0,"connect":1,"send":0,"wait":1,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/5d6ee6fa/desktop/default/css/1a1d900b.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:24.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/5d6ee6fa/desktop/default/css/1a1d900b.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-cb725fdabf6ff9a009a68ce0a1a38b02-1e79cb6e76fafec4-01\r\nlast-modified: Fri, 26 Sep 2025 09:02:37 GMT\r\netag: W/\"2d28623565c5d1ed62f69d11232df70c\"\r\nx-amz-meta-mtime: 1758877356.948156832\r\ncontent-encoding: gzip\r\nexpires: Sat, 27 Sep 2025 20:09:23 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 42929\r\ncache: HIT\r\nx-cached-since: 2025-09-27T20:10:56+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40728,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (40728), with no line terminators","md5":"2d28623565c5d1ed62f69d11232df70c","sha1":"e0c5bdc19f3c14ba2e4476ba4fd10953b57a8eed","sha256":"ea0c15a3a8d1755ca663aeef7883c12d8c82a34c5375b467419cbb81c2997160","sha512":"0feeede77bf37ffc7dc9d97a6c6b718d6cfcc932dcec699a32d90c07b4d76b7899c6f4c1cf38930cb5517a876d2d6000120e22f80765e2eb50d65401ac8ce35d","ssdeep":"768:SnraTC/9ApQze5i/aWVXuNVuvLh0TEkhZMsl9ILXb:erMC/9ApQzOi/aWN","tlshash":"6c030f5dfca8c5760d27f521a288be3c01b0f42ade314d96f90e57a518c3f9b15e0ea9","first_seen":"2025-09-24T10:08:54.318424Z","last_seen":"2025-09-30T08:01:23.610052Z","times_seen":139,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":27,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63748\r\ntraceparent: 00-6c15b3ee8ce53a3ff1350489e616e9f7-ce7dee8076696362-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"6887b6f24414dbc612dbf42ccdc76b70\"\r\nexpires: Thu, 16 Jan 2025 10:32:14 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 3243\r\ncache: HIT\r\nx-cached-since: 2025-09-28T07:12:22+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63748, version 1.0","md5":"6887b6f24414dbc612dbf42ccdc76b70","sha1":"8068d3abfbc6cbf35b55919da45b1f4d2d136238","sha256":"fc5c015fc32518f1ed810fa84ca28941eb9d5a3c81acc8df69a4dbbeedef7b0c","sha512":"00f08f9dd648972c9571547e06172d5505dd13f577fe2e65a497d3856172807ac11c996984e4138d2eb2ac784257fe61864aee15752fe9e9e76f98db931e0c2a","ssdeep":"1536:KtdCG+Dz6RxAx457zL0ASEn091Y0H1mTOzI/OzMFOoTX4u:MMG+yRpzN091Y0VtI/pOoTt","tlshash":"8b5302485551fae2cac3073c0f7a89dbb37a776d519224cd98b69f830d37964bea2070","first_seen":"2023-06-14T19:15:49Z","last_seen":"2026-04-04T23:37:56.594898Z","times_seen":10308,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/5d6ee6fa/desktop/default/app-da9c3409.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/5d6ee6fa/desktop/default/app-da9c3409.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-8b9a1b47dc2d48c5230fbea6312dfa9b-474bfccb2922f9ca-01\r\nlast-modified: Fri, 26 Sep 2025 09:02:37 GMT\r\netag: W/\"39b8e4a066559191eb41aea315529a05\"\r\nx-amz-meta-mtime: 1758877356.937156794\r\ncontent-encoding: gzip\r\nexpires: Sat, 27 Sep 2025 09:15:44 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 82095\r\ncache: HIT\r\nx-cached-since: 2025-09-27T09:18:10+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":485870,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"39b8e4a066559191eb41aea315529a05","sha1":"7824c796edbc82c88a6d25962daa07dc0062ec9f","sha256":"f8cc9ec30178b320a0ed73d0336cb057d6b35a74f00365739a3e4b1a796fe45a","sha512":"bd64d3c4d2c8265b65e20eccdf31defa35953df374459e914311577c25ea3d71a9695958c50a281c96651fc4fff52f118a8f0b4b6ec3c4fbfb80192185d67a68","ssdeep":"12288:1/WpKEunZGKN6+i4gF7jcupM/7mkkjbGy:1/s3AZGQgF7jcupM/7U9","tlshash":"76a44ca5b5c8f48a02f34bdae03b0061e33916a9780dd064f779fdca359bc05916a67f","first_seen":"2025-09-26T11:18:04.531943Z","last_seen":"2025-09-29T05:34:13.695521Z","times_seen":78,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_block_pages/en/dictionary_9b848ba427b59305d3df2cf0bc5dd080.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_block_pages/en/dictionary_9b848ba427b59305d3df2cf0bc5dd080.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-cdbd760874547e17bdcdba89a8db6b4c-93abbbba3981979b-01\r\nlast-modified: Fri, 18 Jul 2025 16:06:55 GMT\r\netag: W/\"c557f8f9061794bef4f6b3a5f96cbbb5\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Fri, 18 Jul 2025 17:34:19 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 3409\r\ncache: HIT\r\nx-cached-since: 2025-09-28T07:09:36+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2352,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"c557f8f9061794bef4f6b3a5f96cbbb5","sha1":"11add862eba30ce83a5f5c71ba4c53b305fd1774","sha256":"bf6a49d0686075ed43f0babe55f6b983cd8a2db79da3f31cc36c9f4d192130d5","sha512":"fe4bcb92b635b15ad1dfe2fed7b19c5bc14523a435815bb2cd572b20cf4b27150293acdee78753bcefa52eb6505124e20a4b46465fa161f0ad7841716909cc9e","ssdeep":"","tlshash":"b941745b733c55e5392841403d0d6d6a7b520168be9161c8fa8cdc9d332f8cae23b62f","first_seen":"2025-07-18T16:37:04.820544Z","last_seen":"2025-10-30T11:47:43.214083Z","times_seen":2348,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:33.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:33 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63920\r\ntraceparent: 00-e6e72a295a58bd5680087bdcdc960d92-63e5eff41f7c3e53-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"a65527fcb58f66a7cfbc0e6b160538b4\"\r\nexpires: Sun, 10 Aug 2025 19:21:26 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2874\r\ncache: HIT\r\nx-cached-since: 2025-09-28T07:18:39+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63920,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63920, version 1.0","md5":"a65527fcb58f66a7cfbc0e6b160538b4","sha1":"45d260e7fa343401b5bb0df982a014f53e2d253b","sha256":"fb13c3a1cbac60649b76f7d7f85c1645d35ac69b85ce5f4eb0692505ecc2cd45","sha512":"8448e96abe326f43285b2d8b0d75beaf0e9c9e051e8754841d907b30eb303ae24c447011306da6a1703b9192d02aeff76a4517bdf94ec6e7dc360ce3538802af","ssdeep":"1536:UIG3hJMkJeK8ic5iZGnJ4URj9vqXOQ6UqYdbuA5RVK1:UL31hcLlRjDQ6Uq4W1","tlshash":"7f5302df8de32a148ff78772668885f4f4927c68898c8e7345526a8907f07d6b96c04f","first_seen":"2023-05-07T18:04:27Z","last_seen":"2026-04-04T23:37:56.597245Z","times_seen":10186,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/f3f09a899e.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:24.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/f3f09a899e.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 691\r\ntraceparent: 00-057545766a2883e80300a2b3a5d670ca-27a43909c3df3367-01\r\nlast-modified: Wed, 24 Sep 2025 09:22:16 GMT\r\netag: \"66d9547b2e8b21b9cc566ffd2da94221\"\r\nx-amz-meta-mtime: 1758705689.759485807\r\nexpires: Sat, 27 Sep 2025 20:33:15 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 41577\r\ncache: HIT\r\nx-cached-since: 2025-09-27T20:33:28+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":691,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (690)","md5":"66d9547b2e8b21b9cc566ffd2da94221","sha1":"2334880db1e87c5f5c541abe181c930c76fb7246","sha256":"4a0efa233ab948edbc63842d56fd883bbe937e6ee81c75f87451de265e16abce","sha512":"ebf4510bf5bd211ec43e2ba7ee1bcc4cf43454d57a183afb90981ef94db20ccdfa077553219fc37b845ee2791a00f76f80b485d1514e80a947aab06623ae2e30","ssdeep":"","tlshash":"1101d81d3d2d51984977c3c02e984b850023f23b828a30e8b9fbc2187d8a6035a961bf","first_seen":"2025-08-22T10:11:14.566856Z","last_seen":"2025-10-30T09:36:52.111968Z","times_seen":2058,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/5d6ee6fa/desktop/default/css/7fe5f71b.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/5d6ee6fa/desktop/default/css/7fe5f71b.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-bd0a873add47f0f6d16ff2da5b6e18ac-4d49c7bf8911fafe-01\r\nlast-modified: Fri, 26 Sep 2025 09:02:37 GMT\r\netag: W/\"c610b8710368de3bf2f1c5bb581b6a3a\"\r\nx-amz-meta-mtime: 1758877356.950156839\r\ncontent-encoding: gzip\r\nexpires: Sat, 27 Sep 2025 09:15:47 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 81972\r\ncache: HIT\r\nx-cached-since: 2025-09-27T09:20:13+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3313,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3313), with no line terminators","md5":"c610b8710368de3bf2f1c5bb581b6a3a","sha1":"f67bc86785d434adb2e81a356a7926b8818ac567","sha256":"fad7111846310042401990719146401178f22e2618abf2b058e641b6495e8eba","sha512":"2dfecbd28b59bcf4b361736ce304f33792631b766506b80767f23033cbd37c1a83371af59b833032390f647b69824e9eeeb1f99530e18047f74cd30ffda0e5b1","ssdeep":"","tlshash":"0161c13e9cbc24359e7f472b7053ce84e199a39092030f8afdbb755a4c8b21d3895176","first_seen":"2024-05-14T21:30:49Z","last_seen":"2026-01-22T06:40:31.190981Z","times_seen":5786,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:33.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:33 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63748\r\ntraceparent: 00-dab126712d60f0f8987b9c7725fb7189-ca3be81c81f4aaea-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"6887b6f24414dbc612dbf42ccdc76b70\"\r\nexpires: Thu, 16 Jan 2025 10:32:14 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 3251\r\ncache: HIT\r\nx-cached-since: 2025-09-28T07:12:22+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":63748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63748, version 1.0","md5":"6887b6f24414dbc612dbf42ccdc76b70","sha1":"8068d3abfbc6cbf35b55919da45b1f4d2d136238","sha256":"fc5c015fc32518f1ed810fa84ca28941eb9d5a3c81acc8df69a4dbbeedef7b0c","sha512":"00f08f9dd648972c9571547e06172d5505dd13f577fe2e65a497d3856172807ac11c996984e4138d2eb2ac784257fe61864aee15752fe9e9e76f98db931e0c2a","ssdeep":"1536:KtdCG+Dz6RxAx457zL0ASEn091Y0H1mTOzI/OzMFOoTX4u:MMG+yRpzN091Y0VtI/pOoTt","tlshash":"8b5302485551fae2cac3073c0f7a89dbb37a776d519224cd98b69f830d37964bea2070","first_seen":"2023-06-14T19:15:49Z","last_seen":"2026-04-04T23:37:56.594898Z","times_seen":10308,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?en=page_view\u0026dl=https%3A%2F%2F1xlite-93399.world%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=366188442.1759046796\u0026dt=1xBet\u0026auid=2071193410.1759046796\u0026navt=n\u0026npa=1\u0026gtm=45He59n2v9180563600za200zd9180563600xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~115480709\u0026tft=1759046795622\u0026tfd=11259\u0026apve=1\u0026apvf=f\u0026img=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:35.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:37:54 GMT","end":"Mon, 01 Dec 2025 08:37:53 GMT"},"fingerprint":{"sha1":"28:1C:E7:95:EC:8D:32:9E:63:9A:72:B2:8D:47:E5:13:F7:CA:5E:18","sha256":"52:99:CC:AA:BC:C4:15:12:9C:2B:FA:D7:97:2A:C4:D3:7D:B0:5C:E0:02:26:3C:8D:B2:4B:BE:89:1A:70:D6:31"}}},"request":{"raw":"GET /ccm/collect?en=page_view\u0026dl=https%3A%2F%2F1xlite-93399.world%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=366188442.1759046796\u0026dt=1xBet\u0026auid=2071193410.1759046796\u0026navt=n\u0026npa=1\u0026gtm=45He59n2v9180563600za200zd9180563600xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~115480709\u0026tft=1759046795622\u0026tfd=11259\u0026apve=1\u0026apvf=f\u0026img=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\ndate: Sun, 28 Sep 2025 08:06:35 GMT\r\ncontent-type: text/plain\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T01:47:03.978699Z","times_seen":13354468,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/5d6ee6fa/desktop/default/runtime-477f39f4.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/5d6ee6fa/desktop/default/runtime-477f39f4.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-decf04305be96837131039f032be31f2-603e867576ae1d63-01\r\nlast-modified: Fri, 26 Sep 2025 09:02:37 GMT\r\netag: W/\"8ba1d12e5db790dfec73c5330d7ecc04\"\r\nx-amz-meta-mtime: 1758877356.947156828\r\ncontent-encoding: gzip\r\nexpires: Sat, 27 Sep 2025 09:15:44 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 82095\r\ncache: HIT\r\nx-cached-since: 2025-09-27T09:18:10+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17477,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (17477), with no line terminators","md5":"8ba1d12e5db790dfec73c5330d7ecc04","sha1":"7ba9e49599e840e1ddcff1d7fa12ca98e2b144d1","sha256":"dcc2f5fc6d2912d8a50989c31647c6daad945a5e2dab2175fa3c1ee55c987548","sha512":"59bc687f03e68e7a54008bed543397a8962a7be99875b9b4778ed23260c435016192666d7ecfd11c730fae86ebf4f4077a060e419398cd896a78aec9044d6ba7","ssdeep":"384:xe2xBMWItnjn6hy4sQr/BMWItnjngGFGs034VCbtsy/xoWw:06RItT6hy4sQr/RItTHsVoVCp0j","tlshash":"fb722e5daf1acd675d22dcc33c213d25586824335c460bece6fee2198018e6865afe6f","first_seen":"2025-09-26T11:18:04.417213Z","last_seen":"2025-09-29T05:34:13.694791Z","times_seen":78,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/version.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:24.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /version.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: application/json\r\ncontent-length: 11\r\ntraceparent: 00-84882daf4fcc91174d1a7ad26a955458-925daece9fafcd68-01\r\nlast-modified: Fri, 26 Sep 2025 09:04:48 GMT\r\netag: \"298bb6e85482c2c191dea38e8c4be43d\"\r\nx-amz-meta-mtime: 1758877488.347806674\r\nexpires: Fri, 26 Sep 2025 09:09:01 GMT\r\ncache-control: max-age=60\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 38\r\ncache: HIT\r\nx-cached-since: 2025-09-28T08:05:47+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text","md5":"298bb6e85482c2c191dea38e8c4be43d","sha1":"cc3d5051954b1b2494a3be7c7cb8c04d346c7a21","sha256":"a3f6e873a7820a2a3ea6bb142c1efeb7c13341430a848d945a0d5897c57069a5","sha512":"691109dcb38e783ba998ac0fd9a7127c0de57c22d94e5f523c6d6cd052d05ba1e476f4c47588f5a8ad84d46fa77a761d5fb601ed5c95958b996cdf694288dafd","ssdeep":"","tlshash":"fe5000ccc0300000000000300c3c000c0000000c00300c000000300000033c0000c003","first_seen":"2025-09-26T09:55:54.354571Z","last_seen":"2025-09-29T05:35:12.117082Z","times_seen":121,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":27,"dns":0,"connect":2,"send":0,"wait":1,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_express_day/en/dictionary_84e511afe97bad68fa98353e8037b65e.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_express_day/en/dictionary_84e511afe97bad68fa98353e8037b65e.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-40b33798f96c630b90a248bd92b98e6d-df6e460aa7ee3ec2-01\r\nlast-modified: Mon, 30 Jun 2025 14:06:32 GMT\r\netag: W/\"26f10f416f0a3743c3362a51dd558a4b\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Mon, 11 Aug 2025 05:59:51 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1228\r\ncache: HIT\r\nx-cached-since: 2025-09-28T07:45:57+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1202,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"26f10f416f0a3743c3362a51dd558a4b","sha1":"6b458c43b5e31fc0515de1eb1a0e535855a3e936","sha256":"8374658000ae2d2747471b9535397e6de0c036d4e1a767a2a523047f8d06cb73","sha512":"1a6b1e740800f48106a46ff15b36fdeaec72cb4fa2e7a06957a52609f7b5481f1c0bca9e6a07a4112e0a1dbc75918e78fd5085517dd0051b4546b84338715321","ssdeep":"","tlshash":"d7210aa71034073e9d132b2bad3f929006c0485052e8b487379f39fb37ccd949e6d6aa","first_seen":"2025-06-30T16:12:32.415153Z","last_seen":"2025-10-15T02:35:25.221046Z","times_seen":2212,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_forgot_password/en/dictionary_776c0b6a6ae43ea4503f983fa859981a.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_forgot_password/en/dictionary_776c0b6a6ae43ea4503f983fa859981a.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-bdf6f65d751b4ed6d73f884c6a586c98-8d1e1306e9aba95e-01\r\nlast-modified: Thu, 26 Jun 2025 16:06:49 GMT\r\netag: W/\"9e075dc2a068d12162e260d49c92f233\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Thu, 26 Jun 2025 17:12:47 GMT\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 3325\r\ncache: HIT\r\nx-cached-since: 2025-09-28T07:11:00+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4086,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9e075dc2a068d12162e260d49c92f233","sha1":"9c748240ee9aeeb922f9998005c557517763a979","sha256":"81b3796da635e227e36b1a44c3224d8e0ccda902293beb08f84d870ed3bcee99","sha512":"6572c0bd8d55d4edc9ff8f263ef021d454593330e2f09759a2a26153870083e1d2cc308575d01196919d60a86170bd6b24436163427692b99eed38d0643eac9e","ssdeep":"","tlshash":"13819e0959831ef21abf8e90705e88663be5d06bde1764140fb5c30f3377e93668284a","first_seen":"2025-06-26T22:02:08.124583Z","last_seen":"2025-12-10T17:51:01.422955Z","times_seen":3966,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/ac02f639a86763a884adc5615fe65e72.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/ac02f639a86763a884adc5615fe65e72.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-422c16143d08caa868680a81b7db1665-0e4e2ed2b8561475-01\r\nlast-modified: Thu, 27 Feb 2025 09:04:01 GMT\r\netag: W/\"811ce3b7877d19901e45430cb6523d62\"\r\ncontent-encoding: gzip\r\nexpires: Fri, 08 Aug 2025 21:17:18 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\ncache: REVALIDATED\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14232,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"811ce3b7877d19901e45430cb6523d62","sha1":"16a905115a678fdef3923f91c6f76cbab613e84d","sha256":"10fbb74dbac63abfe9c4f5a77abc03757ef3527a479d4ae70dc977b515eec8cb","sha512":"21a43d793bd4200ff9972a793442fe492b6a1699f20053c4f01695f69f918685bf30f03f778346c2f61bac40d2e51bb25360d0ffc15448200c666ab4edf38e65","ssdeep":"96:BDkGHVTSY15XWGsQfGJo/JamRKkmP9kDeD3LzwCyi8TunZh:bVTS1KXR9RKkekDGoCyXOD","tlshash":"59523d65f6f40c33113b98ae65f76a8953948f07aa6d7c293b9c2b4c1f1462e0076d3e","first_seen":"2025-02-27T19:55:39.119779Z","last_seen":"2026-01-05T12:50:32.841809Z","times_seen":4543,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 122748d2-89d7-4430-b8ff-b73aab5537eb\r\nContent-Length: 88\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder; postback_watcher=%7B%22tag%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22pb%22%3A%22cbd748604f564b7883285a09608259ca%22%2C%22click_id%22%3A%224dee5db3523c3eff48d74c6a8ab049d9%22%7D; auid=uaJaGGjY7IDCO3bLBNHUAg==; window_width=1920\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\nx-dt: 285\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.092, wf-uht;dur=0.013\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"78b400dc81b06e92e287327eb1c22051","sha1":"20806b14e427415a5f091be2a41dbdd18d19c29e","sha256":"7426b2cae6fc506a62c6670372205fae6c05c69a98ae41076d0a918cb72480b7","sha512":"41ff40e54fb050f642005adad1c50242be37baefce5021189c205f41d2ae24e8a8f09beea6e93c39a62b2038b81045632701295c587d88f6d36288c529a6d89d","ssdeep":"","tlshash":"6270000880000200208020282a082a2c80208200880080a220aac83820a0ba8cb2a002","first_seen":"2025-09-28T08:06:55.570193Z","last_seen":"2025-09-28T08:06:55.570193Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/5d6ee6fa/desktop/default/Betting.Core-eda663f6.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/5d6ee6fa/desktop/default/Betting.Core-eda663f6.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-12461b96a50607f385a2dcf2065923c8-c2c822ac9dd7025e-01\r\nlast-modified: Fri, 26 Sep 2025 09:02:37 GMT\r\netag: W/\"c9a797c3b89bf15336330cb65375dd9e\"\r\nx-amz-meta-mtime: 1758877356.934156783\r\ncontent-encoding: gzip\r\nexpires: Sat, 27 Sep 2025 09:15:48 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 81971\r\ncache: HIT\r\nx-cached-since: 2025-09-27T09:20:14+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1953,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1953), with no line terminators","md5":"c9a797c3b89bf15336330cb65375dd9e","sha1":"adca70a03cfa40f604cfc03063da9fa69b194623","sha256":"a8b375a8fd1d0ba2a43584326a4805b89cbf377df35a24aa5b2423a0bf415169","sha512":"5e2adcb4eaba788cb532e9125d6070b8bb33fb0ac68d694ba0da1d381d14c803ae3552f49573fb156c0cf06c05712a4d9076695f215ce14ca8618548549d5766","ssdeep":"","tlshash":"8c41c88535d274440bbe019541ef0ab6b0686e993d5f04b9a543ead074a489ac1f7f8b","first_seen":"2025-09-26T11:18:04.554741Z","last_seen":"2025-09-29T05:34:13.659064Z","times_seen":78,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/$_$.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/$_$.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 69\r\ntraceparent: 00-4976c4e94ca81de3ce6b600d3d3cc0df-3031f8d58ea95ca7-01\r\nlast-modified: Wed, 24 Sep 2025 09:22:16 GMT\r\netag: \"2cdaa92927f02e0b628f1ef4d7dd8caf\"\r\nx-amz-meta-mtime: 1758705689.745485504\r\nexpires: Thu, 25 Sep 2025 21:21:46 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 38116\r\ncache: HIT\r\nx-cached-since: 2025-09-27T21:31:09+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"2cdaa92927f02e0b628f1ef4d7dd8caf","sha1":"9104a2e16ed080b80a42588b8aeb52ebec47ab7a","sha256":"ef8101ffea52addcdcfcc3a83f96ff2d4613fb3ae6d1c16bbe4852387b73a9db","sha512":"31da80bc1b17aa708fef74b0211af91fce1b4a5f518f11e5caa80f50e9a7791b6e94924e381f550fc44a02f4c1d785e5b95fa2464e7968b5cab079612d70d839","ssdeep":"","tlshash":"1ba002935a5ef66c209044860696e74733823d6a3477b1d625bc5509e6061474817257","first_seen":"2025-05-14T05:06:37.199299Z","last_seen":"2026-03-18T19:40:26.76398Z","times_seen":5502,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/en?tag=d_131637m_32273c_[]MS[]null[]pb[]general[]106819985_d27082_l191016_clickunder\u0026pb=cbd748604f564b7883285a09608259ca\u0026click_id=4dee5db3523c3eff48d74c6a8ab049d9","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-28T08:06:24.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"GET /en?tag=d_131637m_32273c_[]MS[]null[]pb[]general[]106819985_d27082_l191016_clickunder\u0026pb=cbd748604f564b7883285a09608259ca\u0026click_id=4dee5db3523c3eff48d74c6a8ab049d9 HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:24 GMT\r\nlocation: https://1xlite-93399.world/en/block\r\nserver-timing: dt_total;dur=0.010, total;dur=24;desc=\"Nuxt Server Time\", wf-uht;dur=0.034\r\nset-cookie: platform_type=desktop; Path=/; Expires=Wed, 01 Oct 2025 08:06:24 GMT; Secure; SameSite=None; Partitioned\ngw-mm=; Path=/; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Secure; SameSite=None; Partitioned\ngw-blk=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; Path=/; HttpOnly\nlng=en; Path=/\ncookies_agree_type=3; Path=/\ntzo=2; Path=/\nis12h=0; Path=/\nreferral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; Path=/; Expires=Thu, 27 Nov 2025 08:06:24 GMT\nreflinkid=d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder; Path=/; Expires=Sun, 28 Sep 2025 09:06:24 GMT\npostback_watcher=%7B%22tag%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22pb%22%3A%22cbd748604f564b7883285a09608259ca%22%2C%22click_id%22%3A%224dee5db3523c3eff48d74c6a8ab049d9%22%7D; Path=/; Expires=Tue, 28 Oct 2025 08:06:24 GMT\nauid=uaJaGGjY7IDCO3bLBNHUAg==; path=/; secure; httponly; samesite=lax\r\nx-dt: 285\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":253536,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T01:47:03.978699Z","times_seen":13354468,"resource_available":true,"data":null}},"time_used":223,"timings":{"blocked":82,"dns":4,"connect":25,"send":0,"wait":58,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?en=page_view\u0026dl=https%3A%2F%2F1xlite-93399.world%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=366188442.1759046796\u0026dt=1xBet\u0026auid=2071193410.1759046796\u0026navt=n\u0026npa=1\u0026gtm=45He59n2v9180563600za200zd9180563600xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~115480709\u0026tft=1759046795622\u0026tfd=11259\u0026apve=1\u0026apvf=f","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:35.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:37:54 GMT","end":"Mon, 01 Dec 2025 08:37:53 GMT"},"fingerprint":{"sha1":"28:1C:E7:95:EC:8D:32:9E:63:9A:72:B2:8D:47:E5:13:F7:CA:5E:18","sha256":"52:99:CC:AA:BC:C4:15:12:9C:2B:FA:D7:97:2A:C4:D3:7D:B0:5C:E0:02:26:3C:8D:B2:4B:BE:89:1A:70:D6:31"}}},"request":{"raw":"POST /ccm/collect?en=page_view\u0026dl=https%3A%2F%2F1xlite-93399.world%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=366188442.1759046796\u0026dt=1xBet\u0026auid=2071193410.1759046796\u0026navt=n\u0026npa=1\u0026gtm=45He59n2v9180563600za200zd9180563600xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~115480709\u0026tft=1759046795622\u0026tfd=11259\u0026apve=1\u0026apvf=f HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/plain\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 28 Sep 2025 08:06:35 GMT\r\npragma: no-cache\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://1xlite-93399.world\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T01:47:03.978699Z","times_seen":13354468,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":83,"dns":0,"connect":16,"send":0,"wait":31,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-7JGWL9SV66\u0026cid=528375423.1759046796\u0026gtm=45je59n2h1v897130004za200zd897130004\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~115480709~115691065\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~115480709~115691065\u0026z=1659768764","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:35.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:39:23 GMT","end":"Mon, 01 Dec 2025 08:39:22 GMT"},"fingerprint":{"sha1":"42:CA:DF:AC:84:77:2A:0C:CC:0B:0C:7D:2C:7F:F7:A4:90:1B:05:F3","sha256":"4E:E3:F5:47:6B:82:78:8F:EB:24:48:87:45:0A:2B:B2:1C:6C:5C:89:6A:E4:47:C7:0C:F5:35:47:93:B2:F2:BE"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-7JGWL9SV66\u0026cid=528375423.1759046796\u0026gtm=45je59n2h1v897130004za200zd897130004\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~115480709~115691065\u0026tag_exp=101509157~103116026~103200004~103233427~104527907~104528501~104684208~104684211~104948813~115480709~115691065\u0026z=1659768764 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 28 Sep 2025 08:06:35 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-05T01:45:32.043005Z","times_seen":764437,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":83,"dns":1,"connect":16,"send":0,"wait":37,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"radar.cedexis.com/1707728419/stub.js","fqdn":"radar.cedexis.com","domain":"cedexis.com","tld":"com"},"ip":{"addr":"45.54.49.5","port":443,"asn":63911,"as":"NetActuate, Inc","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:35.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"radar.cedexis.com","organization":"Citrix Systems, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 07 Mar 2025 00:00:00 GMT","end":"Fri, 06 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A2:3E:30:19:D5:41:3A:11:81:58:E3:B1:6F:F4:D2:78:0B:44:6F:D0","sha256":"BE:70:39:96:BA:51:8F:A7:6A:9D:E1:58:FB:D9:F7:6F:17:5C:DA:A9:6E:54:3F:8F:0B:3D:1E:DF:8C:44:B4:71"}}},"request":{"raw":"GET /1707728419/stub.js HTTP/1.1\r\nHost: radar.cedexis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 28 Sep 2025 08:06:35 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Mon, 12 Feb 2024 09:51:14 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"65c9ea12-186\"\r\nExpires: Sun, 12 Oct 2025 08:06:35 GMT\r\nCache-Control: max-age=1209600, public\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":390,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"82dec77fd0353c7c71ce053b8601387e","sha1":"fbbca95419e1d0c042e0a5fdf10f380aca66188c","sha256":"39f2b7b0fa78d37d0c84d2d6618bd635d86fd683d9bcdd5729850cb2a62522f7","sha512":"6872c895cb44711405e57a436dfbe15d094f9159e11ee2b89983c63b1f18f6acbdfaf0ccbb5e48b2bf24f366f16584c660bca4b6b14c048a134bb77a60f6563e","ssdeep":"","tlshash":"02e068ae9391a318537a2dbacc4e060ba0f6114888e5e4e029f5c2c00461bae072bfb4","first_seen":"2024-02-13T14:23:26Z","last_seen":"2026-01-15T12:01:08.184588Z","times_seen":7496,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/gmp/conversion;src=14030178;type=xbet;cat=uniqu0;ord=1;num=9759677952217;npa=1;auiddc=2071193410.1759046796;pscdl=noapi;frm=0;_tu=KJA;gtm=45fe59n2v9190735530z89180563600za200zb9180563600zd9180563600xea;gcd=13l3l3l2l1l1;dma_cps=syphamo;dma=1;dc_fmt=4;tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~115480710;epver=2;dc_random=3s4WNVoZyQncKhfV0ix1g62WZogA6eP3hQ;~oref=https%3A%2F%2F1xlite-93399.world%2Fen%2Fblock?","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.178.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:35.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:37:54 GMT","end":"Mon, 01 Dec 2025 08:37:53 GMT"},"fingerprint":{"sha1":"28:1C:E7:95:EC:8D:32:9E:63:9A:72:B2:8D:47:E5:13:F7:CA:5E:18","sha256":"52:99:CC:AA:BC:C4:15:12:9C:2B:FA:D7:97:2A:C4:D3:7D:B0:5C:E0:02:26:3C:8D:B2:4B:BE:89:1A:70:D6:31"}}},"request":{"raw":"POST /gmp/conversion;src=14030178;type=xbet;cat=uniqu0;ord=1;num=9759677952217;npa=1;auiddc=2071193410.1759046796;pscdl=noapi;frm=0;_tu=KJA;gtm=45fe59n2v9190735530z89180563600za200zb9180563600zd9180563600xea;gcd=13l3l3l2l1l1;dma_cps=syphamo;dma=1;dc_fmt=4;tag_exp=101509157~103116026~103200004~103233427~104527907~104528500~104684208~104684211~104948813~115480710;epver=2;dc_random=3s4WNVoZyQncKhfV0ix1g62WZogA6eP3hQ;~oref=https%3A%2F%2F1xlite-93399.world%2Fen%2Fblock? HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 28 Sep 2025 08:06:36 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://1xlite-93399.world\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-05T01:45:32.043005Z","times_seen":764437,"resource_available":true,"data":null}},"time_used":435,"timings":{"blocked":42,"dns":0,"connect":15,"send":0,"wait":351,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KFGPRJ2V","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:35.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /gtm.js?id=GTM-KFGPRJ2V HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 28 Sep 2025 08:06:35 GMT\r\nexpires: Sun, 28 Sep 2025 08:06:35 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 28 Sep 2025 06:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 124862\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":358019,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4828)","md5":"6a444a4129f80bd143264ec87c8e5a93","sha1":"42403e154de748b8c877c1872776f5989cc30545","sha256":"3c86bf5dc3c69cc636e2294130e7c3d1fecbbe9ccedddd85989fec80cf99ad34","sha512":"14571ece564fea91100c03afdaf77d51640781f8d8ac992c2efd76451c18a06546851fd859b4bee4e365d4b6f1d4a810b723023fba80ef4e10e3a06bb4f58324","ssdeep":"6144:UpmMgZQpZYqkD1gIuq/RPG1SvuVce3CLq:KmWYlJ/Dm","tlshash":"cd742bcdb3c674664392a478903f014bb1bb69a2f44cd854f186d8e42db4aae4277f7c","first_seen":"2025-09-28T04:22:09.202239Z","last_seen":"2025-09-28T23:37:00.885398Z","times_seen":9,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":105,"dns":2,"connect":16,"send":0,"wait":51,"receive":42,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/5d6ee6fa/desktop/default/DC-788e2912.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/5d6ee6fa/desktop/default/DC-788e2912.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-dff90e5c3535f2d3b807b0398133f093-783780bf9687893f-01\r\nlast-modified: Fri, 26 Sep 2025 09:02:37 GMT\r\netag: W/\"7c02a131b63154996e7d0bca0d25dc39\"\r\nx-amz-meta-mtime: 1758877356.934156783\r\ncontent-encoding: gzip\r\nexpires: Sat, 27 Sep 2025 09:15:47 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 81971\r\ncache: HIT\r\nx-cached-since: 2025-09-27T09:20:14+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2201,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2201), with no line terminators","md5":"7c02a131b63154996e7d0bca0d25dc39","sha1":"8576dc09b6ffb5b2c40db830f755ec9094358775","sha256":"2b56586d53c4ae06c7180ab581fc4e002b1042ae792c57467b07c19a77e2228f","sha512":"89ccb81b3658ac1bd9d873924201b828fcb653049a51fdbc0f949a751946502658bc1d15eca03e9ca2b76b6e612ec49b502773bed710c8644fec87bff7f5fd97","ssdeep":"","tlshash":"a141a40931a4fc11d7f90cd869ff72061027f076a48dc9b4d3a36a8b08b7f6aa217916","first_seen":"2025-09-26T11:18:04.427515Z","last_seen":"2025-10-09T08:36:47.24483Z","times_seen":280,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_accept_language_parser_LEQ4UAP5.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_accept_language_parser_LEQ4UAP5.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-44c2716a492bcf3998e59cf12495a249-8f6378f29f06a341-01\r\nlast-modified: Sat, 27 Sep 2025 07:00:49 GMT\r\netag: W/\"83e311eb8e222d229b6177bd007ce9eb\"\r\nx-amz-meta-mtime: 1758956429.228257587\r\ncontent-encoding: gzip\r\nexpires: Sun, 28 Sep 2025 09:23:16 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 81170\r\ncache: HIT\r\nx-cached-since: 2025-09-27T09:33:35+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1297,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1265)","md5":"83e311eb8e222d229b6177bd007ce9eb","sha1":"96b851ffda0eab794c2bb637255a48ae25770144","sha256":"d0ff62de588e1c47eedbd91a89dcf394e2ec5bd09392ea556b9a34108077e9ad","sha512":"fd2e1bfb6588598e356ddc08724c2e6f602b89626b30eeca2c25b8f60340f25e28a761b8e13b75d1627172530abf7dd0e586e792f53759d08bda626145f65b0d","ssdeep":"","tlshash":"202112debed2b5908394188c4e2ec055f23a2957641ce6fcd765e7827c403a186f3c1d","first_seen":"2025-08-22T10:11:14.559442Z","last_seen":"2026-03-04T04:00:43.42063Z","times_seen":3921,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_chunk_LNU73JEK.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_chunk_LNU73JEK.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-c380c7266b7a1fd29283421674235541-8f872f4bbc628a0b-01\r\nlast-modified: Sat, 27 Sep 2025 07:00:49 GMT\r\netag: W/\"d96d317966512ab8915a90670ca5a5af\"\r\nx-amz-meta-mtime: 1758956429.228257587\r\ncontent-encoding: gzip\r\nexpires: Sun, 28 Sep 2025 09:33:34 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 81171\r\ncache: HIT\r\nx-cached-since: 2025-09-27T09:33:34+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1232,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1231)","md5":"d96d317966512ab8915a90670ca5a5af","sha1":"a810be1c3e515adb49804e8d976250deb16fd77d","sha256":"f125201d62c452efba070d856821885c7cfd539a31d55846caa6ae3a7522d3cf","sha512":"460b29966e6f5ac4d34ccc714217d29686d7aff42efa92a102729d40aa36dd4fbb87116178b2f9fdece5fdb09cb2bf2024312d3f1b86abb69644f695c76aca2d","ssdeep":"","tlshash":"a521f1e56fbc7ba362be2ae4a02e0041e001d53752f4f1d4f294dfb4a4e949d035b5b6","first_seen":"2025-08-22T10:11:14.554562Z","last_seen":"2026-03-04T04:00:43.411503Z","times_seen":3921,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/593f1a6d4223015f3145bf447897f4f2.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/593f1a6d4223015f3145bf447897f4f2.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: application/json\r\ncontent-length: 241\r\ntraceparent: 00-575de0d8c3000df066a9204d48c4eadf-895606ffc817e276-01\r\nlast-modified: Thu, 27 Feb 2025 13:24:25 GMT\r\netag: \"39257fbb62736206d5245e08925d7b60\"\r\nexpires: Thu, 27 Feb 2025 14:48:35 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\ncache: REVALIDATED\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":241,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"39257fbb62736206d5245e08925d7b60","sha1":"4c11e3cb6a16b884772b88acdba30a2ad98e86b8","sha256":"3a3cf0f5c60899ffb49d9825516aec475fd7b78cea8ae0b5b58dfb4e658f041e","sha512":"e9b44ac92bbad9c54e500f735f553154c92897c80700709b61b39443f76edbd1d3d38d0d6014e6052cc5f5931b78c55194e308c86336f809de1541efa1e0ac8f","ssdeep":"","tlshash":"58d02e40f2e01833201f94f981b5a109e74b0b03e402a808fa0c21881bac8252426c3a","first_seen":"2025-03-01T06:06:39.04916Z","last_seen":"2025-10-28T05:34:45.039411Z","times_seen":3826,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/hd-api/external/01998f5b-f8e7-7ee0-83f4-37769ec2ec33.js","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:33.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"GET /hd-api/external/01998f5b-f8e7-7ee0-83f4-37769ec2ec33.js HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/en/block\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder; postback_watcher=%7B%22tag%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22pb%22%3A%22cbd748604f564b7883285a09608259ca%22%2C%22click_id%22%3A%224dee5db3523c3eff48d74c6a8ab049d9%22%7D; auid=uaJaGGjY7IDCO3bLBNHUAg==; window_width=1280; che_g=a6bed356-02d8-4a11-8c89-40b4a9fec694; SESSION=f5ec22d778f99b605e2dae1c021f2090\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:33 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 101491\r\ncache-control: private, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-dt: 285\r\nx-hd-trace-id: a1cAawlFRhgxuqeuuHAeBYj6kxW1XOdAQohNP8ycKGZn7P+Q7qYj9aHHbsMcgTZsVQlNDvHWQgN8mwYMI9GezFYZIYXO92HR1IiocA1QA+gH2LVBTK9hhu/dQh9Ed4aiKJ62m6WpVrYL6UG562uwzD/4rhLagFbzJ+RCQCN03zawNj5PSgmjS7Ei7+tiSDtMYSo=\r\nx-request-guid: fe4119377587d604350b287f9d07ec89\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.092, wf-uht;dur=0.046\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":353090,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b8d59da6b97581ca5d3acca0ffcc8967","sha1":"0bd99049d066a5f33b7c67fdb644fe57fb8d00e8","sha256":"3acc11abe388c23e1ce821de857ab4262cae8ba224cb4fb831b8102e88f293c7","sha512":"c7d7e78e9a60c8cda7dbd76fa05e603b59c0cac4cdaec25d25bbe131b8ab5204f151fc3cf9aa90e07d6d092268e480418f67d9cbbfedcc9c0ef825df7704ceb3","ssdeep":"6144:7qTr+hURVifOnT0ten2YQSKhlupeSU45FzgLZ60DpkvYvXe08YcAvM:7qTBAFBEeSU45FzkDamXe0cAU","tlshash":"cc7451895dc1e8b0f58e3d1e11ff1e5f600e1ce4719e8cbaab08e9299f965357d2290c","first_seen":"2025-09-28T08:06:55.610324Z","last_seen":"2025-09-28T08:06:55.610324Z","times_seen":1,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/5d6ee6fa/desktop/default/vendors/plugins.vue-js-modal-b32f2a92.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/5d6ee6fa/desktop/default/vendors/plugins.vue-js-modal-b32f2a92.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-1831a3bfbab23e2b76d80c6835496822-b0da2669b785c231-01\r\nlast-modified: Fri, 26 Sep 2025 09:02:37 GMT\r\netag: W/\"aa99bfb4e71c5abb534e73587ed5b260\"\r\nx-amz-meta-mtime: 1758877356.95615686\r\ncontent-encoding: gzip\r\nexpires: Sat, 27 Sep 2025 09:15:47 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 81972\r\ncache: HIT\r\nx-cached-since: 2025-09-27T09:20:13+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26667,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (26667), with no line terminators","md5":"aa99bfb4e71c5abb534e73587ed5b260","sha1":"5bc9fc1e4ee17870f1dbb1a415895e1dd8453c53","sha256":"e9b0d1416246d29a12324feeda815355a79d539619da300e082a7fd47c316fc8","sha512":"c30eddb7d49b96cbc81a3a237cdca70c190241e1758d34e0602014b32f0f2ad40153340d7a2e10514bdefd65154e18d249754a18e115ba01656331d82232418b","ssdeep":"384:CBy0a9vOeCGAZIXfK2rVsAdm00uow4HQEjacGXGQVe6ubqA:tHyIXfPt4wE9GXGQcbqA","tlshash":"59c2288977d8307442db5573627f2b0ab23e295474269888f772e8e65cb864d206ff3c","first_seen":"2025-09-26T11:18:04.508852Z","last_seen":"2025-09-29T05:34:13.623202Z","times_seen":78,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_fast_deep_equal_RNYYWXHZ.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_fast_deep_equal_RNYYWXHZ.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 865\r\ntraceparent: 00-2aa54a304f10517e1229d9ce8ff338f3-5101a0e62c1a41c2-01\r\nlast-modified: Sat, 27 Sep 2025 07:00:49 GMT\r\netag: \"00e44cad05af09626c2b10aeee7de5a3\"\r\nx-amz-meta-mtime: 1758956429.228257587\r\nexpires: Sun, 28 Sep 2025 09:33:34 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 81171\r\ncache: HIT\r\nx-cached-since: 2025-09-27T09:33:34+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":865,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (840)","md5":"00e44cad05af09626c2b10aeee7de5a3","sha1":"4461fd05cdd85255f4ab24edd5ac80e7b6dec92e","sha256":"5277a86b8db312b1e34318cb994829e113d8204c3a2e88ab594e5135b2bbfb2a","sha512":"548bf615b1118881d21a0cfd2d530b3f0ce1e14cc93cb6afce662b30ac70877fa152fd71b5d786bb2e43e31a1980e00b83106b1f4b3ae12fbb2ddbedf6c81841","ssdeep":"","tlshash":"901159c232e3a0d183e058cd1001d906f23969e9a4bca0c9c757e6b93cb2a53d87672a","first_seen":"2025-08-22T10:11:14.567955Z","last_seen":"2026-03-04T04:00:43.420123Z","times_seen":3921,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/6afa6df928.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/6afa6df928.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 614\r\ntraceparent: 00-76e0a29e86798c8b0bd4f768385fd880-fe757e6dce6a65b4-01\r\nlast-modified: Wed, 24 Sep 2025 09:22:16 GMT\r\netag: \"f07d1a740a9a1b3f5b0167d0bf44e4d2\"\r\nx-amz-meta-mtime: 1758705689.753485677\r\nexpires: Thu, 25 Sep 2025 09:24:35 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 81212\r\ncache: HIT\r\nx-cached-since: 2025-09-27T09:32:53+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":614,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (613)","md5":"f07d1a740a9a1b3f5b0167d0bf44e4d2","sha1":"7ef2209143f924410b0cc7ccb9867704b1af329f","sha256":"ce4b70d82ecefb017a88749072769e6c11eff89a36e3574a1b9f906a80a0c54f","sha512":"f28d311f859508d50873860d4057947db4ed23b7b7864740d9ad292fefdea3dfe6a6e214000d52a65c0036774fda3da02159d7d7619417db40646b1e00196964","ssdeep":"","tlshash":"b1f002beed31a160a10244d95d5aa422c6c43d67075a74e481e94653b31209795065c7","first_seen":"2025-09-24T10:08:54.297813Z","last_seen":"2025-09-30T08:01:23.511669Z","times_seen":136,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/metadata.json","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"GET /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/metadata.json HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 122748d2-89d7-4430-b8ff-b73aab5537eb\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJkYXRhIjp7ImlkIjoyMjk0LCJkaXNwbGF5VHlwZUlkIjoxLCJ0ZW1wbGF0ZVR5cGVJZCI6MSwidGVtcGxhdGVJZCI6MX0sImJyZWFkY3J1bWJzIjpbMSwxMiwxNCwxNSw4ODUsMjMyMiwxNiw0OTUsODEyLDk4NSw4MTMsMTcsMTgsMjE4NiwyMzY4LDIzMDAsMjM3Niw4NDYsMjI2NywyMjkxLDIzMDMsMjM3NSw4MTAsOTQ0LDIyMTEsMjQwOSwyNDk1LDEwOTAsMTA5MywyMTkxLDEwMDIsMjI0MiwyMzAxLDI0NjEsMjQ2NCwyNDY1LDI0NjIsMjQ2NiwyMjU2LDIyNTEsMjI4NywyNDMyLDI0NzgsMjM0NSw0ODQsMzk1LDIzMjgsMjQwMiwyMzMyLDQ3NCw0NzYsMTAwNiwyNDkzLDIzOTQsMjM2NiwyNDAzLDIzMTEsODA5LDkxMiw4MDYsNzg2LDc2OCw3NzUsNzY3LDc2Niw3NTEsMjQyNCwxMDM5LDIzMjcsMjQyMiwyNDY4LDkwNyw5ODQsMTEwNiwyNDA4LDIzMDcsMjE1NSwyMzcyLDExMTksMjI5NiwyMzU0LDIzNDAsOTY4LDIyMjksMjM5MiwyNDMxLDI0MTMsMjQzNCwxMDk2LDIzNTEsNzU5LDIyMjgsMjIxNCw4NDMsODQyLDIzNTIsNzU2LDc0Nyw3NDgsNTQ4LDIzNTMsMjQyNSwyNDI2LDI0NzMsMjQ5Miw3ODcsMjQ0NiwyMTYzLDgzOSw3ODMsMjQ3Nyw1MjUsMjQ4MCwyNDM5LDI0NDAsNTI0LDEwNzUsMjQxNiwxMDc0LDU0OSw5NDMsNTEyLDExMTcsMTEwMSwxMDczLDIzMTAsMjM5NywyNDYzLDI0NTIsMjM3OCwyMzg4LDIzODksMjM5NiwyNDA3LDI0MTAsMjQxMiwyNDE4LDI0MjAsMjQ3NSwyNDI4LDI0MzUsMjQ2NywyNDUxLDI0OTQsMjQyMywyMzY5LDEwNzgsMjQzNywxMTAwLDI0MzYsMjQyOSwxMDE5LDUxNSw1MjIsNzY5LDQ3NSw1NDUsODE1LDgxNywyNDU2LDQ3Nyw0OTgsOTQyLDIzMjAsMjI4OSwyMjgwLDEwODYsOTc4LDEwODQsOTg2LDIxOTcsOTkzLDk3Nyw1MzAsMjI0Myw5ODEsOTg3LDIxODIsMjI5NSwyMTU2LDIxNTcsMTA5Miw4MDQsMjIzOSwyMjIxLDk5NCw5OTksOTk4LDk5NSwxMDA3LDEwMDgsMTAxMCwxMDA1LDExMDIsMjE5OSwyMTk4LDEwMTIsMTAyMywxMDk4LDIyMDEsMTAyMiwxMDQwLDI0NzEsMjQ4OCwyMTU5LDEwODksMjE3OSwxMTIyLDEwODcsMTA0MiwxMDQzLDEwNzYsMTA3NywyMzIxLDIzNjIsMjE3MSwyNDg5LDIxNzcsMjE3NiwyNDkxLDEwODMsNTMxLDk5Miw5OTAsMjM0NywxMDQxLDIzOTgsMjIwMiwxMDE4LDI0NDQsMjQ3MiwxMDk5LDEwODIsNzg0LDU1Nyw3NzgsNzgyLDE5LDY1NiwyMjIwLDIyOTRdfQ==; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder; postback_watcher=%7B%22tag%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22pb%22%3A%22cbd748604f564b7883285a09608259ca%22%2C%22click_id%22%3A%224dee5db3523c3eff48d74c6a8ab049d9%22%7D; auid=uaJaGGjY7IDCO3bLBNHUAg==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: application/json\r\ncontent-length: 42\r\nx-dt: 285\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.074, wf-uht;dur=0.012\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"e56fa1481b92b594be68a6ea248ca5f9","sha1":"af9d27c5e3fa54f6f364e4e5ab82838a55eaddd0","sha256":"fe3314f0ec739c6c6c72457dcacac6b13e432f3d4ccb175cbcc09c5e71d2a67a","sha512":"8003e98ddc0d24e46b2bf260700b81b4e8bd2b7c7fdf226e979fb37917956b374757afaf3a168ec70acfac5085bdce2a92a3883809a570ef510897c4292b701a","ssdeep":"","tlshash":"d1900444c1440134f0c05010410f3d4d053c011311c1d44c7045dc3113fddd5d515003","first_seen":"2025-09-28T08:06:55.622045Z","last_seen":"2025-09-28T08:06:55.622045Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/5d6ee6fa/desktop/default/commons/app-7783ccb1.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/5d6ee6fa/desktop/default/commons/app-7783ccb1.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-447ccc3ec9faa8fc5365a61caf1512ad-0b9172906d25c13f-01\r\nlast-modified: Fri, 26 Sep 2025 09:02:37 GMT\r\netag: W/\"09308d446ae2c99aeba67630bf50e2f5\"\r\nx-amz-meta-mtime: 1758877356.947156828\r\ncontent-encoding: gzip\r\nexpires: Sat, 27 Sep 2025 09:15:44 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 82095\r\ncache: HIT\r\nx-cached-since: 2025-09-27T09:18:10+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":137774,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65476)","md5":"09308d446ae2c99aeba67630bf50e2f5","sha1":"f33b40206cdc2f548f9e72885a2d09024f3339f1","sha256":"53b204b32d4350219ef2d8903d54525e4f78c144a02810a7c1691358ca347170","sha512":"35975b8a394610855cec42df98d164cf035b1bf163b3d43ebdbbf69e7a6b30f17ad9071d8e302fb823cd8e2e45396558da8f76991a2bf3eec0b2e29b9f01cd95","ssdeep":"1536:o0UiXH2DHJjIAG3wvvjE+gjmZVB8Crmh6G5YGf7BMr3y6MP0+PWK5GFBtF:HXHUp0qXjE+gjmZDmXYGNMra+B7","tlshash":"29d3d5dcf695b03117e721b5407f150bf23a7898680ac0a4f266e8d53db888ea167f7d","first_seen":"2025-09-26T11:18:04.460936Z","last_seen":"2025-09-29T05:34:13.616319Z","times_seen":78,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 122748d2-89d7-4430-b8ff-b73aab5537eb\r\nContent-Length: 48\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder; postback_watcher=%7B%22tag%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22pb%22%3A%22cbd748604f564b7883285a09608259ca%22%2C%22click_id%22%3A%224dee5db3523c3eff48d74c6a8ab049d9%22%7D; auid=uaJaGGjY7IDCO3bLBNHUAg==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\nx-dt: 285\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.075, wf-uht;dur=0.009\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7184c0a0a93a9d487105b66f1874cbab","sha1":"053c685ab27458e0972ed91f0af6812a2ee270b0","sha256":"76a1ea002eacb98864eca735aff90aa8073a280a7aed502b21cd14b86ad9dcf8","sha512":"6595d862f95ce51d376cdc26db1bcf45590b2eed41933185b327b4b5d0943f16e5574a0a93b7f4f248f85906d188849cbafa8d315ee87ea15039b9948a34fc70","ssdeep":"","tlshash":"1e700008880802002c80e0320208280880308000080000b02388e23800b0aa8ca0a002","first_seen":"2025-09-28T08:06:55.630348Z","last_seen":"2025-09-28T08:06:55.630348Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/8192228305b202797f207eeb6842287c.png","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/8192228305b202797f207eeb6842287c.png HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 5202\r\ntraceparent: 00-bdc6735aa06d41bf2a48d75d95b8e02a-b4ef6ec2e91fa973-01\r\nlast-modified: Wed, 26 Jun 2024 08:22:59 GMT\r\netag: \"b9a636eef54b2844b571fe7de49184a7\"\r\nexpires: Mon, 11 Aug 2025 06:46:57 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 766\r\ncache: HIT\r\nx-cached-since: 2025-09-28T07:53:39+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5202,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 514 x 514, 8-bit colormap, non-interlaced","md5":"b9a636eef54b2844b571fe7de49184a7","sha1":"bf653690790ced40eb3189da075a275d951d1607","sha256":"001bfcdd52b658d46543a1aec889d35b73b3909b47097cc011b95e96fc9e3743","sha512":"7b288a27a69c91697042ebb6f80f48cf25e0c6260620ee8f4b0e7afa75430b95c394c3f284445e0628b347341b89480e2e7098510bc07f4db43ecc46d893c38f","ssdeep":"96:561aQaPXOi0Ui/+kgrJtv72TgGuDG9JAsXgQrjQ:470T0PEnv7Sgc9vPQ","tlshash":"56b19e22d46fe4a53230c81b67c1820a1df839c6e72c29d0e8ed4db5e2c8b7f84883c4","first_seen":"2023-11-17T17:46:27Z","last_seen":"2026-01-13T06:38:33.673472Z","times_seen":5260,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/abd0b27824599374449ac53dfc5a97e2.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/abd0b27824599374449ac53dfc5a97e2.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-74b4394d8112352186c31051be0b6a38-34a6d877ed3fa48d-01\r\nlast-modified: Fri, 19 Sep 2025 14:21:23 GMT\r\netag: W/\"b5a6dbdf3f12e11d0c5275b2ca6dc739\"\r\ncontent-encoding: gzip\r\nexpires: Fri, 19 Sep 2025 15:28:35 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.043\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\ncache: REVALIDATED\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3091,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"b5a6dbdf3f12e11d0c5275b2ca6dc739","sha1":"a8495df42a8f1e18c12dc1723660d062bbc8fb6b","sha256":"8febfd79d9b9b1298af34575340a4288d6d5b01ee4e50c57f5a5509d602412f2","sha512":"813327003eefeef8e9772adc05530b46f52fc044d76f5ed1393854052836ae2f89a0118697367681afbab9084b4e215c3120bf09ea2713553a7e8286ca9afe2d","ssdeep":"","tlshash":"85514b4df6e41c33012f19bdc0f76a6993d84f4f694a7c283a9d6c4d1bd451900aad3e","first_seen":"2025-07-21T03:11:29.13175Z","last_seen":"2026-01-11T03:06:49.449217Z","times_seen":2816,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/77b401ad5c.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/77b401ad5c.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-11dc96b91d6b203625bfd7bec989f73a-a10c89ea42a61dd7-01\r\nlast-modified: Wed, 24 Sep 2025 09:22:16 GMT\r\netag: W/\"670fa8e5c6b227843fb8d3ff8114d346\"\r\nx-amz-meta-mtime: 1758705689.751485634\r\ncontent-encoding: gzip\r\nexpires: Thu, 25 Sep 2025 09:24:35 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 81212\r\ncache: HIT\r\nx-cached-since: 2025-09-27T09:32:53+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1164,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1163)","md5":"670fa8e5c6b227843fb8d3ff8114d346","sha1":"f071e3dd1eb20508fc9dbc44ec023b620c0d0cb9","sha256":"23c5a22a417e9ce45446413ee45fa5098ffccca9859047e8ee08f227677ffd8c","sha512":"b1c49452665cfbc1e493f4cb0e8ad32305f881b54a162668b38073108d5606ed3fed0236d34d98a143b24300a0b95ce937884aef81a2a77c5774fafdef3ace2c","ssdeep":"","tlshash":"a42167703034e52b4bfb1bd888671451f72c3258672671d177cc6ea142a9506926e767","first_seen":"2025-09-24T10:08:54.271062Z","last_seen":"2025-10-02T07:15:42.634839Z","times_seen":193,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:35.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:34:53 GMT","end":"Mon, 01 Dec 2025 08:34:52 GMT"},"fingerprint":{"sha1":"DF:7E:8A:F9:1C:B5:DC:9E:90:E3:71:A7:92:85:2C:8F:2B:B4:42:8E","sha256":"3A:65:11:10:B9:58:2F:E1:BF:38:98:8D:2E:3E:A2:01:9D:C6:BE:69:5B:AD:F7:99:53:F9:AB:A6:6B:82:47:F1"}}},"request":{"raw":"GET /gtag/js?id=G-7JGWL9SV66 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 28 Sep 2025 08:06:35 GMT\r\nexpires: Sun, 28 Sep 2025 08:06:35 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 157660\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":492757,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12571)","md5":"bdf2b31a85d877996513823aa69f2088","sha1":"e70e75e819c8382fc9ed9fd0ba49c82007002d3b","sha256":"4df651e059f5eadfcbe28c2431f6cc015b3f91a1cf91bb1657f5d889ef69ef2f","sha512":"1e45ba9dc67418a4422dc2b116e13159e7beed18791d9a67950c0da0c4c1dcc9687951000ca37667498f663e61bd0c8c643e71060c107dc455b5f5f00cabb29c","ssdeep":"6144:PB5pmM2/0NpXYqkD1gIui/RPG1SvuVcUGq3W6D:5jmL2YlX/Dli","tlshash":"d8a4f98e73c674265396f478906f01cba9bb24a2b49cc8a6b1c9dcf02d7459a4137f7c","first_seen":"2025-09-28T08:06:55.64187Z","last_seen":"2025-09-28T22:31:40.716382Z","times_seen":3,"resource_available":true,"data":null}},"time_used":314,"timings":{"blocked":103,"dns":0,"connect":16,"send":0,"wait":51,"receive":57,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/6147dc85b9.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:24.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/6147dc85b9.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-d26329de9002f02c0cc5a37e1fa357f4-7db836adb42c996a-01\r\nlast-modified: Wed, 24 Sep 2025 09:22:16 GMT\r\netag: W/\"b73bed50181c012f133f6aae4a69da3f\"\r\nx-amz-meta-mtime: 1758705689.751485634\r\ncontent-encoding: gzip\r\nexpires: Fri, 26 Sep 2025 10:42:48 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 76926\r\ncache: HIT\r\nx-cached-since: 2025-09-27T10:44:19+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2285,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2284)","md5":"b73bed50181c012f133f6aae4a69da3f","sha1":"1826d3b1ec485876a8240d3250ef43fa0dbf7658","sha256":"6eec44c2601e34ffede82c0f79f5a1cc80ec4aec63ed4960e9260f757dd4798f","sha512":"01dccd364919af69cc280e3dae45ddfac2c9dd07f64e5cc4d45f9c28ca1ee944d7c61c23a6c95182f0827c083f0665638eb097c3e3d64daa41cee2086a3f45c8","ssdeep":"","tlshash":"ef417bdef8b9a5712d33e012d60c5ef95470b627c5214982f4cdd3a226c3a922db1dae","first_seen":"2025-08-22T10:11:14.526935Z","last_seen":"2025-11-12T13:10:30.998735Z","times_seen":2470,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_685e35cb01.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:24.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_685e35cb01.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-259a8418e6b23c615b8a857320878e5e-e70e27e4202f58be-01\r\nlast-modified: Sat, 27 Sep 2025 07:00:52 GMT\r\netag: W/\"f20b654f71d35e62521b615e5875425a\"\r\nx-amz-meta-mtime: 1758956429.214256419\r\ncontent-encoding: gzip\r\nexpires: Sun, 28 Sep 2025 18:29:33 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 49012\r\ncache: HIT\r\nx-cached-since: 2025-09-27T18:29:33+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3728,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3727)","md5":"f20b654f71d35e62521b615e5875425a","sha1":"9d109128b806af8d91912b7dd2364bb4842c6040","sha256":"8bb3aa44b7496967b1992da34d899ed1fdd440a304104a133368e9bd0295b3db","sha512":"ad4e932c950cc47da9f45c60dab693a4cd8d1f44cad21161d28ee9fc8ba7fadd7b26332953af2e639ed4e737e99cf6328a7b0f465ca23f41a9d6209b812f19d9","ssdeep":"","tlshash":"1671649abcb4c1398933f812128c8e7d0631f9abd9251c9ef6dd872654c3a970190af9","first_seen":"2025-08-22T10:11:14.531592Z","last_seen":"2025-10-31T01:18:46.263466Z","times_seen":1176,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":30,"dns":3,"connect":2,"send":0,"wait":1,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_auth/en/dictionary_9c42170abd51c2bb1db6c73483b578d0.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_auth/en/dictionary_9c42170abd51c2bb1db6c73483b578d0.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-48bca4adceee33bc2e360a1a14bf7204-09d7d352ca851664-01\r\nlast-modified: Fri, 22 Aug 2025 14:07:15 GMT\r\netag: W/\"91fb0d433be68bd4948def279aac5011\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Fri, 22 Aug 2025 15:15:32 GMT\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 39\r\ncache: HIT\r\nx-cached-since: 2025-09-28T08:05:46+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9611,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"91fb0d433be68bd4948def279aac5011","sha1":"24c344e621bb5b47a97b2782e6536312a55b190b","sha256":"fda453e9cb0c5070d8f8494de3d851761e79f31c28c9e91a769549941971de2c","sha512":"298cc31abb3b80932a4e646cbd2ad0ffa5c750d5d6c4120ddb3d4ca18228ad4f937c635c43570a157d9705533e816495d3ea0f91a019738d0c096f97cb4ff5d8","ssdeep":"192:HvhX8mmq4spyU7SKi5mD8jrUoIOFJM1YABslAByZhqV+2p+QvM9pKTp:HvhX8mmqdsU7ziUWJM1YABsOByZh4nMM","tlshash":"f012f01a817a0c57cfdbca827c495b5ce3a409b446b84cad8cf9c23e07a2765d6af354","first_seen":"2025-08-22T17:50:07.861297Z","last_seen":"2025-09-29T05:35:12.396705Z","times_seen":799,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/seo-module-api/api/public/v1/analytics-counters?project[id]=285\u0026domain[host]=1xlite-93399.world","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.325Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"GET /seo-module-api/api/public/v1/analytics-counters?project[id]=285\u0026domain[host]=1xlite-93399.world HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-93399.world/en/block\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nx-app-n: v3-nuxt2\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder; postback_watcher=%7B%22tag%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22pb%22%3A%22cbd748604f564b7883285a09608259ca%22%2C%22click_id%22%3A%224dee5db3523c3eff48d74c6a8ab049d9%22%7D; auid=uaJaGGjY7IDCO3bLBNHUAg==; window_width=1920\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: application/json\r\ncontent-length: 107\r\ncontent-encoding: br\r\ncache-control: max-age=1200, must-revalidate, public, s-maxage=1800, stale-if-error=86400, stale-while-revalidate=300\r\nx-content-digest: en6d0e5d6e0146a49c358c0eaad1d2ef38\r\nage: 403\r\nx-request-id: d340918e88901e71eb480e3860307dbd\r\nx-request-guid: d340918e88901e71eb480e3860307dbd\r\nx-time-ng: 0.003\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: p;dur=1.3079643249512, wf-uht;dur=\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":105,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6abfe5f6641fddde82c2ca29cf5c6a7a","sha1":"958379bc84073d266358a27b3cf86b15484f5f6d","sha256":"ede01772dfd8da2cc82f245e454ce360b2ceb13b7d1c330bbc1d68fe41255c19","sha512":"ecbaa34447669af053d49cc9b252812fc653923247f4b9e3629a55ba0cd919810e81b0f8be8f11a74401e0ed9c889bc7e6b02587b289c3b41142505b6a8fb42a","ssdeep":"","tlshash":"1db092219588ecb825036880409e1813d47870658ea616404d10c772806c1143421b7f","first_seen":"2024-05-18T12:55:24Z","last_seen":"2026-03-30T04:38:43.789364Z","times_seen":2956,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/entry-20da4d518d.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/entry-20da4d518d.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-920589d9bbb19be686a63a23f20bd9ad-7b4dbe4361b64ba7-01\r\nlast-modified: Wed, 24 Sep 2025 09:22:16 GMT\r\netag: W/\"8d108058058de66245a8ee542525803b\"\r\nx-amz-meta-mtime: 1758705689.759485807\r\ncontent-encoding: gzip\r\nexpires: Thu, 25 Sep 2025 09:24:25 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 81213\r\ncache: HIT\r\nx-cached-since: 2025-09-27T09:32:52+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28560,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27969)","md5":"8d108058058de66245a8ee542525803b","sha1":"fcbb66885410e09d3333846fc3ef1da5efb01444","sha256":"5ff9dbafe7d7e6485c1ffd410778755a77e543c54d2d60f97e393c9604edbacc","sha512":"c99a841f9a29917f11ecff3c45a9ae3f250ae080cc2218c786c085778157def1bbfc7b9d327c971b6bfe45cb6e69094308ab5bf83108660c3ace5b26830f0000","ssdeep":"768:HpKJtdVXvHtm6ijJl2og1RExitQcSdW4nfd9Zig9NYVH/NK44vu3rLBLNqb6jMJD:wFVEbFg16Vf97u3rLBLNqhaq","tlshash":"93d2a37834a7b4b561da99986734bd5396c80f5fe88afcd242cb8caa13d314880527f7","first_seen":"2025-09-24T10:08:54.265846Z","last_seen":"2025-09-30T08:01:23.522694Z","times_seen":136,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_vue_deps_IMSSW3CC.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_vue_deps_IMSSW3CC.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-12ceb4c062d2ee4a7acb74b47668a71b-47b45912e1248c84-01\r\nlast-modified: Sat, 27 Sep 2025 07:00:49 GMT\r\netag: W/\"88a6fb60a16266cbe3ecb52fd8b93126\"\r\nx-amz-meta-mtime: 1758956429.229257671\r\ncontent-encoding: gzip\r\nexpires: Sun, 28 Sep 2025 08:59:48 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 83089\r\ncache: HIT\r\nx-cached-since: 2025-09-27T09:01:36+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29933,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (29792)","md5":"88a6fb60a16266cbe3ecb52fd8b93126","sha1":"eb542aa1fa7c81175d735276bc982753baa7a969","sha256":"992b792506b7364dbca69a628101f8ca3c278b1e3f5551e898d84d1537637b90","sha512":"3d9ccbd74fd0ca647ee3413cd66daadc156e03254f11feaf32e8786a9084734e36450753868cadf7a2c1fc8d59064a3bc047c0474ce46bce43566bfe758fea56","ssdeep":"768:GwZ1yyQBxrKWnaIlIO+jKr4R5Vx3zt7RH8PocaFz12c:GwWBxrKWaIlIO+jKrYVhZ7RH8PpaJ12c","tlshash":"e5d24c94b73abc62339d908990370713b27659e7484d9020f7e59ea231b5a43c2fbb7d","first_seen":"2025-09-10T10:32:48.528015Z","last_seen":"2025-10-09T08:36:47.172805Z","times_seen":768,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/1c99cd8ddb.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.461Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/1c99cd8ddb.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-e5f8485c3fb3b51942be2b11d56803b9-b295ba013d59b1d4-01\r\nlast-modified: Wed, 24 Sep 2025 09:22:16 GMT\r\netag: W/\"dd40552dfc1f96b11eee0e93bed8e11e\"\r\nx-amz-meta-mtime: 1758705689.747485548\r\ncontent-encoding: gzip\r\nexpires: Thu, 25 Sep 2025 09:24:34 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 81212\r\ncache: HIT\r\nx-cached-since: 2025-09-27T09:32:53+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2980,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2642)","md5":"dd40552dfc1f96b11eee0e93bed8e11e","sha1":"ea3d9191b850b52efd0fca9a483775a0e4391c69","sha256":"6978d2c2ba3b967b6d19039366cf78da45b0ea320d48ba7c00bcafab3af3cea7","sha512":"0a0f4eb8fabb069d65a1d6200544c02c16c96363b17d761df477563b2569bc670da5e900972879e95b6c435baee02cf89d05d047a123f17220c72550b345adc6","ssdeep":"","tlshash":"0a51d7dc6ef878b8280d8e5af41630619b481c5b36ade8e5f68d8f940320298e251e41","first_seen":"2025-09-24T10:08:54.350242Z","last_seen":"2025-09-30T08:01:23.622101Z","times_seen":136,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/99f79ba341.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:25.572Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/99f79ba341.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-93399.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-f79047fa3c3a5e5b4b34ed1cd1a508de-40ced6de133a3c2c-01\r\nlast-modified: Wed, 24 Sep 2025 09:22:16 GMT\r\netag: W/\"22c9a2eb8969ba132021966eafeaaf05\"\r\nx-amz-meta-mtime: 1758705689.754485699\r\ncontent-encoding: gzip\r\nexpires: Thu, 25 Sep 2025 09:24:36 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 81212\r\ncache: HIT\r\nx-cached-since: 2025-09-27T09:32:53+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1973,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1972)","md5":"22c9a2eb8969ba132021966eafeaaf05","sha1":"cce396fa70db1059e082c20ce6f892bcc096a4dc","sha256":"8ab830a034124318bace4f95e8d578a319730e4e6f09b6681e9c7d7d6af526b6","sha512":"18946c49a97ad078e628bdba7205fbb4ef1e9f224b23d5004674b4aa3f01301b9df4e3e2c536296733a7dc3c070fb6803fdfa2ab301210c940faec8e0a91dfa3","ssdeep":"","tlshash":"fb41a6dab2b035f7e677519ebd0660f0c2082b9d132f10e8dee9884e210d9d22767793","first_seen":"2025-09-24T10:08:54.344059Z","last_seen":"2025-09-30T08:01:23.630025Z","times_seen":136,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-ui/2.3.383/Desktop/Default/client.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:24.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-ui/2.3.383/Desktop/Default/client.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:25 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-784270b9b89ddf3075adc660e4a86ebd-abe934068f759902-01\r\nlast-modified: Thu, 04 Sep 2025 08:07:24 GMT\r\netag: W/\"7df1cf6a64ac46a18fa264f133c67557\"\r\nx-amz-meta-mtime: 1756973241.868664097\r\ncontent-encoding: gzip\r\nexpires: Thu, 25 Sep 2025 09:59:04 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.003\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 79410\r\ncache: HIT\r\nx-cached-since: 2025-09-27T10:02:55+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":598603,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7df1cf6a64ac46a18fa264f133c67557","sha1":"4a93db01563540a052cd3e7007ab27a2eb96bc7e","sha256":"a132801d4daba56c41d70cd4a0913f849c625bf657fb9b43d4d6825d2d259877","sha512":"6bfb12489d3c00cb569178ea4df5ca1440bd6ee8200679f851ee5ec3e172ea84313bb2d25ab7c855b566ce26e49821106fa57489720dfbef789a230546609523","ssdeep":"6144:5cwRQ+kLi+LaBcLbaO0Tv9yOkrOvOEkR1I8rRH0B6NEL:YCvFJZvOEkR1I8h0B6NEL","tlshash":"b9d4961cf19d92393e37d62462844ffc6a21b7179b231c6ff85a014a0ec355371a6eab","first_seen":"2025-09-24T10:08:54.346757Z","last_seen":"2025-10-09T08:36:47.257951Z","times_seen":448,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":79,"dns":1,"connect":2,"send":0,"wait":1,"receive":0,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-93399.world/hd-api/external/apps/c5e31d5915661de4393e3f1489b00ebc4497dd48/api.js","fqdn":"1xlite-93399.world","domain":"1xlite-93399.world","tld":"world"},"ip":{"addr":"185.162.90.24","port":443,"asn":0,"as":"","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-93399.world/en/block","date":"2025-09-28T08:06:33.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-93399.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Mon, 01 Sep 2025 05:20:46 GMT","end":"Sun, 30 Nov 2025 05:20:45 GMT"},"fingerprint":{"sha1":"81:C1:18:44:2F:F5:43:8E:9E:E1:3C:0F:E4:A0:72:79:06:37:6C:99","sha256":"2B:86:B6:31:CB:82:7C:AF:52:27:4D:DB:0D:01:8D:9B:91:6A:5D:BB:EB:2C:E3:9B:91:BB:8D:18:6D:77:6B:EC"}}},"request":{"raw":"GET /hd-api/external/apps/c5e31d5915661de4393e3f1489b00ebc4497dd48/api.js HTTP/1.1\r\nHost: 1xlite-93399.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-93399.world/en/block\r\nCookie: platform_type=desktop; gw-blk=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; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder; postback_watcher=%7B%22tag%22%3A%22d_131637m_32273c_%5B%5DMS%5B%5Dnull%5B%5Dpb%5B%5Dgeneral%5B%5D106819985_d27082_l191016_clickunder%22%2C%22pb%22%3A%22cbd748604f564b7883285a09608259ca%22%2C%22click_id%22%3A%224dee5db3523c3eff48d74c6a8ab049d9%22%7D; auid=uaJaGGjY7IDCO3bLBNHUAg==; window_width=1280; che_g=a6bed356-02d8-4a11-8c89-40b4a9fec694; SESSION=f5ec22d778f99b605e2dae1c021f2090\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 28 Sep 2025 08:06:33 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 615\r\ncache-control: public, max-age=300\r\ncontent-encoding: gzip\r\netag: 32053c9c355cf85427a5cc3f07de0b09\r\nvary: Accept-Encoding\r\nx-dt: 455\r\nx-request-guid: 3f290012fd6a58f5b8ab161e69065b99\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.062, wf-uht;dur=\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1024,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1023)","md5":"32053c9c355cf85427a5cc3f07de0b09","sha1":"f3c13d6a657ffa2ca8997f54f4779f0c02f1600a","sha256":"0ec410318f3ecc3a3aef3de68e99190845248bcc12282aa15eb9acc87f8837d3","sha512":"cbb8c7ef0bbed264989bf5b4af7d216cdeacc5684641c37d429e5ceca7dc04e55254e81f319cd856e7b4f447565bf5abf4e9915f5725eb57cfb142f113362078","ssdeep":"","tlshash":"2211756e18ed58291a9275c402b7ccfc642036363219d4c495ede9e1072ff990032f5c","first_seen":"2025-07-24T09:34:41.13762Z","last_seen":"2026-04-04T22:05:16.639307Z","times_seen":3852,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-09-28","alert":"Sinkholed","trigger":"1xlite-93399.world","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}