{"report_id":"cfd3fec5-7a4f-4928-b667-dcba13cfefaf","version":6,"status":"done","tags":[],"date":"2026-04-25T05:40:58Z","url":{"schema":"http","addr":"besolono.link/47f729d9-ae93-4f02-81e9-a448141f510d","fqdn":"besolono.link","domain":"besolono.link","tld":"link"},"ip":{"addr":"164.90.253.124","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","fqdn":"1xlite-24510.bar","domain":"1xlite-24510.bar","tld":"bar"},"title":"1xBet","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T23:57:25.058416Z","times_seen":17827247,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"besolono.link/47f729d9-ae93-4f02-81e9-a448141f510d","fqdn":"besolono.link","domain":"besolono.link","tld":"link"},"ip":{"addr":"164.90.253.124","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-30T05:40:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-25T05:40:35Z","timestamp":1777095635,"ip_dst":{"addr":"164.90.253.124","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":49154,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ETPRO INFO HTTP Request to a *.link domain","source":"{\"timestamp\":\"2026-04-25T05:40:35.361044+0000\",\"flow_id\":2081553011404527,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.27\",\"src_port\":49154,\"dest_ip\":\"164.90.253.124\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2858678,\"rev\":1,\"signature\":\"ETPRO INFO HTTP Request to a *.link domain\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2024_10_10\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_10_10\"]}},\"http\":{\"hostname\":\"besolono.link\",\"url\":\"/47f729d9-ae93-4f02-81e9-a448141f510d\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":302,\"redirect\":\"https://refpa31380.com/L?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push\u0026site=1249669\u0026ad=16307\u0026r=registration/\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":706,\"bytes_toclient\":516,\"start\":\"2026-04-25T05:40:35.159471+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"besolono.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"1xlite-24510.bar","ip":{"addr":"185.175.166.188","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2025-09-12","domain_rank":0,"first_seen":"2026-04-22T15:23:15.210153Z","last_seen":"2026-04-22T15:23:15.210153Z","alert_count":0,"request_count":13,"received_data":75337,"sent_data":10508,"comment":"","tags":null,"fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-04-19T22:38:36.404513Z","alert_count":0,"request_count":5,"received_data":2615,"sent_data":4343,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-04-19T22:24:53.213297Z","alert_count":0,"request_count":4,"received_data":1771410,"sent_data":1798,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"refpa31380.com","ip":{"addr":"91.186.207.86","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"domain_registered":"2025-07-09","domain_rank":182670,"first_seen":"2025-07-13T12:40:37.222562Z","last_seen":"2026-04-23T22:39:32.873682Z","alert_count":0,"request_count":1,"received_data":3314,"sent_data":595,"comment":"","tags":null,"fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}]},{"fqdn":"besolono.link","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2022-11-03","domain_rank":1668355,"first_seen":"2023-02-09T17:30:16Z","last_seen":"2026-04-18T13:04:06.597093Z","alert_count":4,"request_count":2,"received_data":3146,"sent_data":952,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"v3.traincdn.com","ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"domain_registered":"2022-11-10","domain_rank":256434,"first_seen":"2022-11-25T10:00:40Z","last_seen":"2026-04-23T09:38:13.388665Z","alert_count":0,"request_count":29,"received_data":3101912,"sent_data":14548,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}]},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2026-04-19T22:40:39.923967Z","alert_count":0,"request_count":2,"received_data":1680,"sent_data":2175,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.no","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-04-19T22:40:39.524002Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":695,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","fqdn":"1xlite-24510.bar","domain":"1xlite-24510.bar","tld":"bar"},"ip":{"addr":"185.175.166.188","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7f4640e98fc22bec949d9e178a9192e8","sha1":"d30bccf0137b9638332bf0f4a5841dfb565bef57","sha256":"51a7e4b8730baab580a9bb0dc571627161dcb99f023b02473ddb81140eb4f427","sha512":"19c2a207b774a8c8e8b8e3a42afaa76c3ff18607cc88b0e84b1885e904b590bd099a9cb6507f73fec5480fdcf1917e00e9c10cbe3ab3449aaa773ddc1b676434","ssdeep":"","tlshash":"3721842a1b1c8733895890aec162b3d3c4f261667502c46cd47d8c13a92f7c36ecd8d3","size":1237,"data":"","first_seen":"2026-04-22T09:07:22.444989Z","last_seen":"2026-04-29T09:10:05.188577Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","fqdn":"1xlite-24510.bar","domain":"1xlite-24510.bar","tld":"bar"},"ip":{"addr":"185.175.166.188","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"dafb343aac3fe5ca646b209532d36997","sha1":"53e7e61d359e4302e8a8a993ef87941addbdcd3a","sha256":"27054e18281f5b986021cef8efafab9b9fbf6b6dc64a0027cca8bbb3050dc6d4","sha512":"2431a1f17b00f26dd58d329f3c4bcd32aeacc95ece9d1ac6086772ba90aa32700431daabebc5431f41654b2018b3bb9638215e2c0953c16188a17ccc8673c125","ssdeep":"","tlshash":"f6e0cd969519f61b5c33681d896c8b0f95c97e75500d795dc034855c3a53456106723a","size":308,"data":"","first_seen":"2025-12-10T10:19:59.465768Z","last_seen":"2026-05-19T09:54:34.325552Z","times_seen":1816,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/5a7806382f.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"16fa585c29c3ad21392274cd6c5915db","sha1":"768fbc5b92e2ff490248667ea5d4712144d95a91","sha256":"55ba9699006bfdff90c2bd26efa0a9145a998174f6df65ef6bab602ca52eb80c","sha512":"c012d383bef76808d9e40a36fd191a9ae3b47366bd4a9229f1182439cd3cc0e18a76643f9f87d92a40f026b7e16cabd046949e9d9a8eb1835c70cf8a603cadd4","ssdeep":"","tlshash":"537186466c7472f9ba0383a93d1314f0cb0fbe5de09849d6e5f4cabc268e4951932f92","size":3709,"data":"","first_seen":"2026-04-22T09:07:22.396112Z","last_seen":"2026-04-29T09:10:05.165904Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4635c1e0b426467d90a531d0bd3b3a22","sha1":"169f341fe910f79a8ef14e3a9cbdbf720eb440da","sha256":"80a8ff597264ecb92d0a0a2f6bb6b917d99e70d361d284aaf92e0ffa3f5cc539","sha512":"00533cdc0c779b1ee54ea74fc1e38aaf51c68347b1240d811bd38988df3bd242a9143504fb09f6c68233a52f404f22e2cff7a612666c7dafd0b916cb4a26d908","ssdeep":"6144:uPiFze4lE4kYW2OguHKyoAqDUZApASTbq2bzTOb0b9:lzZkYW2dyoA2P","tlshash":"1bc409ceb3c674665296f468943f01cba97b24a3b49cc8abb1c8ccf02d3455a5167f78","size":550174,"data":"","first_seen":"2026-04-24T23:37:54.212653Z","last_seen":"2026-04-25T05:43:29.51795Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=DC-14030178\u0026cx=c\u0026gtm=4e64m2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"97210afd6d129da05d2ad0c8bf596d61","sha1":"7f49f9eefc2ae0e2f33934e773f86a29431787f9","sha256":"c39d6ebe5978b79c2e8dd3cb907a7fa92ad3c370c0f7b2b1159fe56917db0ffb","sha512":"8ed2ddbadc27369cfd3352a31a223ee5d08961788188ce1853ed0ca59b9cd77de70cbd30e507eb5e8d73b355fec37de705595b5865cc4e2ebffa83a2cb559692","ssdeep":"6144:EiFze4lEHxdMOgDo/IDjZApASTbqQ6qnJ1:7z2xdMzo/R1","tlshash":"e47418cdb3d6745653a3b478503f018ba27a7892f84cc899f186c8e42e746a94277f7c","size":368541,"data":"","first_seen":"2026-04-25T03:55:54.048949Z","last_seen":"2026-04-25T05:43:29.50538Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/e0e3a6cf1c.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b7aa3312251cddfbc6e659e02247d08","sha1":"089352bd1738fc013006b0299e5fb8734cb1a1c3","sha256":"04703b3467c27f5fada015901f094181baf46cc7245bb761c9f50f56a8348c1b","sha512":"e7ce1d0d860b8f3dbf60f2e24a60a6f3828dbd1e491460d30f5a8787b9776d95d36312dbd8daa95b69b7ee2b7692fb3e9ccb2f0309b446d98be7bef385a08337","ssdeep":"","tlshash":"7471c76e1efc28bc215d0f5a6f5368e00ea48d12d39c54b3ea460f350339045ba35aeb","size":3823,"data":"","first_seen":"2026-04-22T09:07:22.388586Z","last_seen":"2026-04-29T09:10:05.176602Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_f978b4369d.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a4af5789426796fafd3970de96371be","sha1":"ebdd29b76f8e6d20d0f1e41b17e032080872ff2b","sha256":"09adb51065cb406cb94d9809a73d3a05a29ad79ff58c1042790bee2308a88a8c","sha512":"e2a8d26c266ae1347566c938c7e1dc2944f7b228b2ac2bf0ef6dc37375edb82a348cce310a05b9a117139ca00d09ec23ec53509dbd9286b14aa8bb9a3d5f73b4","ssdeep":"","tlshash":"93e0684fb19a4c35168a78e843f5d70822d7226520473c21abac982c3964aabc417e5d","size":389,"data":"","first_seen":"2025-12-18T00:40:38.932063Z","last_seen":"2026-07-24T08:16:23.48126Z","times_seen":1789,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_1c3eaa7178.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"414e8029e21e558fd9d07bd1d919c3c4","sha1":"616aa94cb106a7684ccc214de20d5a85071f8d70","sha256":"36d14d379f6c74f3bfaf138903d6f8aa4a6e0ae6f93f45303caadb0db6c0e1fa","sha512":"1a9d8949916f0f5ad19b45dbc7804768926698fe01c32fe4b435f00294a4c2632ca1e9e79c1cb774baeb18008fe8609e374ee6d5c27e92808c41c30545ee2550","ssdeep":"","tlshash":"47f0239b38949078076e27e09373d75a7052154d744abc30f7895c5878364e6641f65c","size":449,"data":"","first_seen":"2025-12-18T05:17:53.538942Z","last_seen":"2026-08-08T12:13:41.24995Z","times_seen":1289,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","fqdn":"1xlite-24510.bar","domain":"1xlite-24510.bar","tld":"bar"},"ip":{"addr":"185.175.166.188","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1df90b63cd87136babac18cd4e1e120e","sha1":"b398a881c9c9a0db7a50f76d0d5150ff7166311e","sha256":"affcaa29f182e808194c1614e2c14979f63dcd48ed6ba906a8fd10f1a31b5789","sha512":"3786bb1e1a07a69b4c1eb0b40605ed1c9d8df8bb967c36c144b466408633e2eaae05c455624ca3f2da831e9dfc36743a540c1cd851c39e9262e70f3db16abe34","ssdeep":"","tlshash":"c46000200000002800a0280022222a002288800000000a000080820a28aa0030800080","size":15,"data":"","first_seen":"2026-03-12T22:10:14.591684Z","last_seen":"2026-07-26T07:36:09.674108Z","times_seen":1869,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_base-app_25447bf1bd.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"importedModule","is_inline":false,"md5":"5b12ebbf733049a056826174dec7d075","sha1":"823c65ac2647c08dc54018f274943fc0dc0e526e","sha256":"92cda3f04080562436d12f85a349ad751ac5181556a2627a9086e5f7103c96ec","sha512":"13b7c890e7b98a5fc4ce4322b35936ff4e4e913c63d416d7f13c8fbcff2a7064da6db3e70ecf3cb734044a0ff5c84091d79889f3eada87e9b9b0a6b0be93fae0","ssdeep":"49152:1Q/A3ErJ5NkG1vkEjBOrXg2O2qkOmdUAYjjI:vpdUM","tlshash":"86859ea1f281bc2b1fdb57d7a0630005a2ad1d6dc418f490f5daede939de884916fb2c","size":1743226,"data":"","first_seen":"2026-04-22T00:53:54.285888Z","last_seen":"2026-04-29T10:46:14.621928Z","times_seen":159,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KFGPRJ2V","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"058bd14209560a3f7da622e30293eba7","sha1":"03ebf7d12cd580b1d08d8d52944a32e46f4ddfbc","sha256":"8129ebe36da78b7e452d152e4ab2255b49fa065c451394ac1cdb291810830275","sha512":"3d32384b3a91459d496029a7e84432ba6442ef0486c1f690162a84e3baa04474e355cb90dc02ff474a527f44aa0ff442b8fc4b4f74ef8dcf33ba1d2cca003542","ssdeep":"6144:niFze4lE0aZMOguHKyoHqDUZApASTbqOqTrv+Px:uzfaZMdyoHOqO","tlshash":"149419cdb3d6746693a2f478903f018ba17a78a2b44cc895f185cce42e7469a4273f7d","size":429902,"data":"","first_seen":"2026-04-25T03:55:54.035876Z","last_seen":"2026-04-25T05:43:29.503467Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16664555628\u0026cx=c\u0026gtm=4e64m2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"26b90c807aca17193bd90ef550f71fa2","sha1":"461ca5a207d4d34c7bb8af743220eb5471e253cd","sha256":"223cb3b7e05cd6c097a58cb9210b69a7bf18f4c499a8d6cbf9923ddc735ee988","sha512":"f7d3221c7f9ae0fc01e47b985171ed929855e94f5f24f00656b7277a7d2c48c628cbfd9b3329b60518e5eddbd40de11e18f26acf7971d3729bcf016fd30c520e","ssdeep":"6144:NiFze4lEHFdMOguHKyoHqDUZApASTbqk6ZfGFF:cz2FdMdyoHk/","tlshash":"689408cdb3d674665392f478903f018ba57a38a2b44cc89af185cce42e7469a4277f7c","size":419467,"data":"","first_seen":"2026-04-25T03:55:54.053885Z","last_seen":"2026-04-25T05:43:29.530058Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","fqdn":"1xlite-24510.bar","domain":"1xlite-24510.bar","tld":"bar"},"ip":{"addr":"185.175.166.188","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0b586df631e8d6666ff04bc7191cd758","sha1":"863d1ff67fa1fad16d222718b374734c5fcee1c1","sha256":"8be332f4507bdfdcd91306f72b51067058dad275a0470b60d198d47a5c1d7bc8","sha512":"8b6bb4ed5c3d6561979b90924ee75a182762a91737ba2d186df431e0dd18d8450d4c593f6538780835832d76049c003832ecec2927dc3f990eacd59f4bca00ca","ssdeep":"","tlshash":"ff017b1f82651ebf12015d04cb079618b7cc31aa72db6150d2b80a6a678e7dbbd1a9e4","size":707,"data":"","first_seen":"2026-04-02T12:33:57.90696Z","last_seen":"2026-05-19T07:37:19.441255Z","times_seen":447,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/$_$.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"importedModule","is_inline":false,"md5":"0f52fc8c693ecafc1d77320a696ce65b","sha1":"5d5d9a13c7a17a19b0295cdc8bd3594117fe0a29","sha256":"a77313a1c518701af1f3c36dda4ab891bd2fc7c2d32025ae8ac66c7b97a3770a","sha512":"f1ce1fb5b8b1b49a30bb0950422a5c1762d72301befe8a6c51bc8af716e1148c7438bc9c9cd8a76e6ff89281c1e01a4391fc7777d03da8b07b8918d597b50d0a","ssdeep":"","tlshash":"ed900253565df52c30a004050695d64732953d6a2417712221b05109e60154a4417277","size":57,"data":"","first_seen":"2026-03-18T19:53:45.72592Z","last_seen":"2026-05-19T09:54:34.316022Z","times_seen":1235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/entry-cfa7cac9ff.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae331fea1ab9d347f1f563a23f211258","sha1":"3745bfc83a5f8835e4689eb377ab91db3b38c062","sha256":"57b5711b09492d6139d06d45057bc9f7ef293257a38e74ef8c8c74c6a4dd4668","sha512":"48ac7fbd0fdff6ba8e60270dd99b6afb3a58bbebd58e1e1dd1d1dfefab6088f63992e0265fd7b6aa7c5e13422e33ab3f1bc51ffd228a5db51ab4f94e40ac9726","ssdeep":"384:HY3EwUMs5dKo0CzA4e/y/Vr4LcD7KbnwcjQ/HsT+oUE0zHaMdGLV6hcYIjRCs:Hixo0CzA4eYVr4LcD7KbnwcE/Y+oUdzO","tlshash":"38921f78219cf0b530cb449937f6bc9266886d1ff98afcc65197c9dc03da14cc9267aa","size":20269,"data":"","first_seen":"2026-04-22T09:07:22.398556Z","last_seen":"2026-04-29T09:10:05.161694Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/bb19a99848.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"scriptElement","is_inline":false,"md5":"a05e3f4a0e58eeee090170ae6d798a67","sha1":"3ee142428d511fd5115ca44d9df5baf985f88772","sha256":"805df7a373d388578056d9de32add53af794772a23aca18920e164a8134de48c","sha512":"39a59c2f0f77a2448634b23bf8a5f94bc00ff9dc925a2454d4b04e6c8e7ad57752fed160d670b90fd76573b50805d9f882901aebdb0292c37e7c19b5e17a2862","ssdeep":"","tlshash":"492163be6db4e030ab501aee3d35253243c93d93954ad0972acc439513970199f39fbb","size":1178,"data":"","first_seen":"2026-04-22T09:07:22.403451Z","last_seen":"2026-04-29T09:10:05.154527Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/894a65eee2.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"introduction_type":"importedModule","is_inline":false,"md5":"4af6b5d5e830a36f69bb6a96c522dde2","sha1":"10ab563ba086c0ac2eeeb59d37e052a77c3f35b2","sha256":"80e9e5abe92bd4465e2789351da1f5f15c704469f322e8157705dd25ae4dec33","sha512":"7e0e6f5a62a116461c7a86a6eee948a0597d54d8f9fabcb4479b6a98ad057ed131a893c4faa18f221f6c7d6784ecff81edb08c57ca302db4f92052479f4cbb6d","ssdeep":"192:FhcoQfDblu7WteQsNyRTF5Lk55h/WZ57Xh3PfuMuvzXeuv5xOzHl0Ue/jud:HhQrblu7WteQsoRJFQH/WZ5XhfWn7uuS","tlshash":"cc12c8d42df860779b638399bc2290b19b0a4a54a14d44dbf9f84f1c059e4cc6dbbb73","size":9051,"data":"","first_seen":"2026-04-22T09:07:22.397301Z","last_seen":"2026-04-29T09:10:05.152148Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"1xlite-24510.bar/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-24510.bar","domain":"1xlite-24510.bar","tld":"bar"},"ip":{"addr":"185.175.166.188","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:37.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-24510.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 05:20:41 GMT","end":"Mon, 11 May 2026 05:20:40 GMT"},"fingerprint":{"sha1":"6D:61:37:98:93:02:72:45:D5:2B:95:E8:44:62:A5:12:A4:F3:FF:F6","sha256":"A7:BC:70:63:BF:6D:B3:6F:13:30:19:D4:BC:F7:A8:C0:05:8C:3D:F7:44:4C:7C:46:70:61:16:FB:5F:E4:41:74"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-24510.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nContent-Length: 98\r\nOrigin: https://1xlite-24510.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=ua+mvGnsU9NUG1n4Az1jAg==; lng=en; cookies_agree_type=3; tzo=3; is12h=0; window_width=1920; fatman_uuid=070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":98,"data":"{\"w\":55,\"sw\":1280,\"sh\":1024,\"e\":11054,\"m\":{\"s1\":\"9d5b7f3b-61f3-42ac-a18b-e15d676aab7a\"},\"sids\":[]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sat, 25 Apr 2026 05:40:37 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\nvary: origin, access-control-request-method, access-control-request-headers\r\nx-dt: 285\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.109, wf-uht;dur=0.010\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a58575cd944c1faa179dc28faa1fba93","sha1":"8835ce2f4ab8cb89515da9a76528b1694b2b9819","sha256":"f87bc73b8e8c5100c2893d05a257821b96f9072d53ef44e76aabdbe950b2a1b9","sha512":"60569f836bc99f63548167af855673ce46f380d9000e496f0b69063e55cbcb762ef0374ee5c037c3568b84aef29af0545058ce556ae380a420132ee0de621305","ssdeep":"","tlshash":"597000082200800000820002023c8a0000288022c282002a00a00020c2f0aa03c0f822","first_seen":"2026-04-25T05:41:04.909065Z","last_seen":"2026-04-25T05:41:04.909065Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/5a7806382f.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:37.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/5a7806382f.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-24510.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 05:40:37 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Apr 2026 06:53:52 GMT\r\netag: W/\"16fa585c29c3ad21392274cd6c5915db\"\r\nx-amz-meta-mtime: 1776840780.57821\r\ncontent-encoding: gzip\r\nexpires: Thu, 23 Apr 2026 07:14:55 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: arig-hw-edge-gc86\r\nage: 80029\r\ncache: HIT\r\nx-cached-since: 2026-04-24T07:26:48+00:00\r\ntraceparent: 00-4fe5172c2c534e2af3941f8ab4006eff-5c29d6fbed9fa671-01\r\nx-shard: arig-shard0-default_443\r\nx-id-fe: arig-hw-edge-gc85.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":3709,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3708)","md5":"16fa585c29c3ad21392274cd6c5915db","sha1":"768fbc5b92e2ff490248667ea5d4712144d95a91","sha256":"55ba9699006bfdff90c2bd26efa0a9145a998174f6df65ef6bab602ca52eb80c","sha512":"c012d383bef76808d9e40a36fd191a9ae3b47366bd4a9229f1182439cd3cc0e18a76643f9f87d92a40f026b7e16cabd046949e9d9a8eb1835c70cf8a603cadd4","ssdeep":"","tlshash":"537186466c7472f9ba0383a93d1314f0cb0fbe5de09849d6e5f4cabc268e4951932f92","first_seen":"2026-04-22T09:07:22.396112Z","last_seen":"2026-04-29T09:10:05.165904Z","times_seen":103,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-24510.bar/bff-api/config/v2/contacts.json?lang=en\u0026country=137","fqdn":"1xlite-24510.bar","domain":"1xlite-24510.bar","tld":"bar"},"ip":{"addr":"185.175.166.188","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:38.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-24510.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 05:20:41 GMT","end":"Mon, 11 May 2026 05:20:40 GMT"},"fingerprint":{"sha1":"6D:61:37:98:93:02:72:45:D5:2B:95:E8:44:62:A5:12:A4:F3:FF:F6","sha256":"A7:BC:70:63:BF:6D:B3:6F:13:30:19:D4:BC:F7:A8:C0:05:8C:3D:F7:44:4C:7C:46:70:61:16:FB:5F:E4:41:74"}}},"request":{"raw":"GET /bff-api/config/v2/contacts.json?lang=en\u0026country=137 HTTP/1.1\r\nHost: 1xlite-24510.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nis-srv: false\r\nx-svc-source: __TECHNICAL_PAGES_APP__\r\nx-app-n: __TECHNICAL_PAGES_APP__\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=ua+mvGnsU9NUG1n4Az1jAg==; lng=en; cookies_agree_type=3; tzo=3; is12h=0; window_width=1280; fatman_uuid=070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sat, 25 Apr 2026 05:40:38 GMT\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ncontent-encoding: br\r\nserver-timing: dt_total;dur=0.008, bff;dur=7.21, wf-uht;dur=0.017\r\nvary: Accept-Encoding\r\nx-dt: 285\r\nx-pod: R-4mpbh\r\nx-time-ng: 0.008\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":5626,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"03b5e27e4c83077175695441c2103b6c","sha1":"7439bbf5d8dd2ec86661c91eba40c8817e789e57","sha256":"2c822e1f32c7b6a3b3472abba6074c0b2fdf9008c10be75075bb22c847fe45f6","sha512":"720a90b6a21768558b57b9e2376d8903c4a6be4beb5fa8076f9c2b1f04261b7b4e49638e8e528f5eae3149c556496e8613c2c14fa832a59b7442435d639d5cfc","ssdeep":"48:Y7QycemDQaVeJ7xQy9VeD7jQyGVerWCer5QVQy51ns2sVAdeR1HRaDeeDQyBJNQL:cPA4xFSYrL","tlshash":"a7c14d197131ce79b319025558874c8e61f541921ffcacd2c8becef8a5f0f90927a69b","first_seen":"2026-04-22T15:23:20.56623Z","last_seen":"2026-05-07T11:39:08.728778Z","times_seen":146,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je64m2v897130004za200zd897130004\u0026_p=1777095647562\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=285636517\u0026_eu=AEAAAGQ\u0026ae=a\u0026cid=1828040499.1777095648\u0026frm=0\u0026pscdl=noapi\u0026rcb=3\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=2\u0026tag_exp=0~115616986~115938465~115938469~117266400~117384405~117512543~118463262\u0026sid=1777095647\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-24510.bar%2Fen%2Fblock%3Ftag%3Dd_1249669m_16307c_%5B%5DMS%5B%5Dnull%5B%5Dreg%5B%5Dgeneral%5B%5D17300_d60291_l61383_push\u0026dt=1xBet\u0026_tu=KA\u0026en=scroll\u0026ep.optimize_id=GTM-5R4MT54\u0026epn.percent_scrolled=90\u0026tfd=17921","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:53.072Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je64m2v897130004za200zd897130004\u0026_p=1777095647562\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=285636517\u0026_eu=AEAAAGQ\u0026ae=a\u0026cid=1828040499.1777095648\u0026frm=0\u0026pscdl=noapi\u0026rcb=3\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=2\u0026tag_exp=0~115616986~115938465~115938469~117266400~117384405~117512543~118463262\u0026sid=1777095647\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-24510.bar%2Fen%2Fblock%3Ftag%3Dd_1249669m_16307c_%5B%5DMS%5B%5Dnull%5B%5Dreg%5B%5Dgeneral%5B%5D17300_d60291_l61383_push\u0026dt=1xBet\u0026_tu=KA\u0026en=scroll\u0026ep.optimize_id=GTM-5R4MT54\u0026epn.percent_scrolled=90\u0026tfd=17921 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-24510.bar/\r\nOrigin: https://1xlite-24510.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://1xlite-24510.bar\r\ndate: Sat, 25 Apr 2026 05:40:53 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:196:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:196:0\r\nreport-to: {\"group\":\"ascnsrsggc:196:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:196:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T23:57:25.058416Z","times_seen":17827247,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-24510.bar/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json","fqdn":"1xlite-24510.bar","domain":"1xlite-24510.bar","tld":"bar"},"ip":{"addr":"185.175.166.188","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:37.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-24510.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 05:20:41 GMT","end":"Mon, 11 May 2026 05:20:40 GMT"},"fingerprint":{"sha1":"6D:61:37:98:93:02:72:45:D5:2B:95:E8:44:62:A5:12:A4:F3:FF:F6","sha256":"A7:BC:70:63:BF:6D:B3:6F:13:30:19:D4:BC:F7:A8:C0:05:8C:3D:F7:44:4C:7C:46:70:61:16:FB:5F:E4:41:74"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json HTTP/1.1\r\nHost: 1xlite-24510.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nContent-Length: 19\r\nOrigin: https://1xlite-24510.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=ua+mvGnsU9NUG1n4Az1jAg==; lng=en; cookies_agree_type=3; tzo=3; is12h=0; window_width=1920; fatman_uuid=070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":19,"data":"{\"w\":55,\"state\":[]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sat, 25 Apr 2026 05:40:37 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nx-dt: 285\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.117, wf-uht;dur=0.010\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-08-10T23:55:04.777105Z","times_seen":315751,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_block_pages/en/dictionary_092441fd9e119a0aa627b127d0943689.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:37.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_block_pages/en/dictionary_092441fd9e119a0aa627b127d0943689.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-24510.bar/\r\nOrigin: https://1xlite-24510.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 05:40:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\nlast-modified: Thu, 09 Apr 2026 14:08:33 GMT\r\netag: W/\"3e8249ef245b150101de2ecd74adf142\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Tue, 21 Apr 2026 13:32:50 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: arig-hw-edge-gc85\r\nage: 2398\r\ncache: HIT\r\nx-cached-since: 2026-04-25T05:00:39+00:00\r\ntraceparent: 00-966f25567ab909cf4b9b1eef63b696cc-d58a51fc957461c3-01\r\nx-shard: arig-shard0-default_443\r\nx-id-fe: arig-hw-edge-gc85.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4831,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3e8249ef245b150101de2ecd74adf142","sha1":"a6c167a8f33157278b166d46bd7c6715463c0c37","sha256":"2a962c496b9bf3de25419285f7c0751f078502ee1c4321a47591b50bf1be4902","sha512":"17dc7ad1f51008d1c7810cfd2b71d2bdf4dc7d25537cfb80e0df62e41d2b1f6e328fd93e6c0be2ceedccb0db8381cab16d9115e2a37c26165482f8770989fdbc","ssdeep":"48:YDXkR16tcWpROgwcyU/VcyRRyD4HxSixS0t2ltM/L9J9bpcyLlpcy5xp7EqzCe4R:lYcbOo00aL9xJiXMWhH/jHxL81L5m","tlshash":"11a16f0f733c14e53a2941803d0e6e6e7b1202683e626295fa8dd8ad377e5dae13711f","first_seen":"2026-04-09T15:38:38.413902Z","last_seen":"2026-05-13T14:11:32.403018Z","times_seen":593,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/fa36f18490059c800e6ca1639950a75e.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:37.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/fa36f18490059c800e6ca1639950a75e.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-24510.bar/\r\nOrigin: https://1xlite-24510.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 05:40:37 GMT\r\ncontent-type: application/json\r\nlast-modified: Wed, 08 Apr 2026 06:43:37 GMT\r\netag: W/\"1f0fd46179810824aa9d7c6e088cb430\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 14 Apr 2026 09:15:57 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: arig-hw-edge-gc85\r\nage: 1810\r\ncache: HIT\r\nx-cached-since: 2026-04-25T05:10:27+00:00\r\ntraceparent: 00-45215534daad6d979d834ac5b5f49064-f0e915b71916aaf5-01\r\nx-shard: arig-shard0-default_443\r\nx-id-fe: arig-hw-edge-gc85.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5243,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1f0fd46179810824aa9d7c6e088cb430","sha1":"67e2764c0d1a11bf3eaa439f162c9979b1308e60","sha256":"a8059b7aa09cef46e5ad90c445ac16c0f982b414c0a6d05b061060da27aa0417","sha512":"5df53f7a19621edcb930505de48e22d57bdae7e8ceb9b7dd162eb33d1aac10abd4e8bc987d0c2ea68506de2bdd515f1b4c15067a8c6d3f5563e9d9100b3ea1e5","ssdeep":"48:TzABItkABwgABCNU8ABAHAB0EABzzuFABIIv4ABBxS/sABYEwABOt73ABBidABJj:9t4ljvL33lxyiBLH","tlshash":"52b12b88fff09863001f94b8e9f7ba4aa7c40f07a85a99287fdd35091f546054466ebe","first_seen":"2026-04-08T07:38:45.302136Z","last_seen":"2026-06-09T11:30:02.073284Z","times_seen":1017,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=7\u0026frm=0\u0026ae=g\u0026en=page_view\u0026dl=https%3A%2F%2F1xlite-24510.bar%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026rnd=1250706099.1777095648\u0026dt=1xBet\u0026auid=2564738.1777095648\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He64m2v9180563600za200zd9180563600xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938469~117266400\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1777095648039\u0026tfd=12892","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:48.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:37:36 GMT","end":"Mon, 22 Jun 2026 08:37:35 GMT"},"fingerprint":{"sha1":"08:79:9D:7F:DB:8C:0A:9F:3E:E2:C7:8A:F2:4D:E4:E2:5B:36:28:22","sha256":"07:42:F0:13:40:B6:A1:62:31:62:8E:96:2F:96:8C:7C:C0:5B:F0:8A:DB:0B:A6:E2:44:14:41:7D:B2:7C:B9:74"}}},"request":{"raw":"GET /ccm/collect?rcb=7\u0026frm=0\u0026ae=g\u0026en=page_view\u0026dl=https%3A%2F%2F1xlite-24510.bar%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026rnd=1250706099.1777095648\u0026dt=1xBet\u0026auid=2564738.1777095648\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He64m2v9180563600za200zd9180563600xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938469~117266400\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1777095648039\u0026tfd=12892 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-24510.bar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/plain\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 25 Apr 2026 05:40:48 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T23:57:25.058416Z","times_seen":17827247,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_f4fe64372144c7e3357a64d4ad703465.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:37.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_f4fe64372144c7e3357a64d4ad703465.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-24510.bar/\r\nOrigin: https://1xlite-24510.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 05:40:37 GMT\r\ncontent-type: application/json; charset=utf-8\r\nlast-modified: Fri, 24 Apr 2026 18:08:57 GMT\r\netag: W/\"9546acb8ebf48a10ebba775dfab50691\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Fri, 24 Apr 2026 19:37:04 GMT\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: arig-hw-edge-gc84\r\nage: 61\r\ncache: HIT\r\nx-cached-since: 2026-04-25T05:39:36+00:00\r\ntraceparent: 00-b54bd13bfa7251aadfa56b660bacd4a0-b987a53c7b072349-01\r\nx-shard: arig-shard0-default_443\r\nx-id-fe: arig-hw-edge-gc85.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":155509,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9546acb8ebf48a10ebba775dfab50691","sha1":"9a7e0faefec33e5956980b0cf8a9c815667a3d11","sha256":"552a714c24844ac4ffad3260cca77809b7e241842c05c99ff9e8a055a333fc9d","sha512":"8c9968ce1646d18f7308440699e4e83a9761a200443a6b59d049718c240f70fc949799f4c42fa21f622434870fe3d5c76e95472836fc2c9c8088e815429680a3","ssdeep":"3072:Il+H5L8iZcIkZPePfxxlRrPoVijyLuWkc6WrsbMf7JmcpcZv:IfQXlRrPoVi2uW2bMf7JmcGN","tlshash":"96e3d80a194c6e7b0bda12edf98fdf4962b00045aab2c822d8eec51e7157fd2917714f","first_seen":"2026-04-24T23:07:37.746909Z","last_seen":"2026-04-28T08:09:03.480826Z","times_seen":88,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_css_0fcc3a.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:36.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_css_0fcc3a.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-24510.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-24510.bar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 05:40:36 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Fri, 24 Apr 2026 06:08:33 GMT\r\netag: W/\"bc81edf98a9e03145e7995a357f97beb\"\r\nx-amz-meta-mtime: 1777010869.626402169\r\ncontent-encoding: gzip\r\nexpires: Sat, 25 Apr 2026 09:10:28 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: arig-hw-edge-gc86\r\nage: 73783\r\ncache: HIT\r\nx-cached-since: 2026-04-24T09:10:53+00:00\r\ntraceparent: 00-79c02542cdf37e11d82976b854fedc72-2e8b6fd44d6ee01d-01\r\nx-shard: arig-shard0-default_443\r\nx-id-fe: arig-hw-edge-gc85.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23439,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (13051)","md5":"bc81edf98a9e03145e7995a357f97beb","sha1":"f76d3bbcea31441811616faea48b0a8a2281b78f","sha256":"0fcc3ab8d2686a54418e74aa8a9972b304d9ada6efd821d643a04cdabfc93c01","sha512":"5c2e4999d835fb3663e6886d438b9023cb3e0a4ff32ab908adf381033185cf0757b0546d25b2fa80a7d346a4a893f9d07fd0ade14a28a79ce83aef8f06f20112","ssdeep":"384:jBEY441c8VRTnhnmb8oas+5CxsscvdfAXjCaVYe8+rxdYAktm4r:joas+7","tlshash":"19b2431dece495736e27a521538cbe7c15f4f42bee320e59f81e832016c3baa14e1d69","first_seen":"2026-04-09T10:33:51.203793Z","last_seen":"2026-05-27T09:27:36.508614Z","times_seen":1100,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":178,"dns":39,"connect":29,"send":0,"wait":31,"receive":0,"ssl":108},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-ui/4.0.11/Desktop/Default/client.l.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:37.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-ui/4.0.11/Desktop/Default/client.l.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-24510.bar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 05:40:37 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Thu, 16 Apr 2026 07:28:24 GMT\r\netag: W/\"a1a9bc6c1fd8b87462cb31ed267babf2\"\r\nx-amz-meta-mtime: 1776324499.795563323\r\ncontent-encoding: gzip\r\nexpires: Wed, 22 Apr 2026 13:14:30 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.003\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: arig-hw-edge-gc86\r\nage: 59163\r\ncache: HIT\r\nx-cached-since: 2026-04-24T13:14:34+00:00\r\ntraceparent: 00-c6476c753daa4eab91f8f51f71e95c52-f919c4872cce1d1f-01\r\nx-shard: arig-shard0-default_443\r\nx-id-fe: arig-hw-edge-gc84.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":629191,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (32117)","md5":"a1a9bc6c1fd8b87462cb31ed267babf2","sha1":"0f7886dec15e6be917dd94283d03fa892f694a1a","sha256":"3f66cfcf9021f1d5564c38b000a953d353cb15307edcf423cdb56c8cd00bff24","sha512":"14139b596ce80cde1b3e9dcaa3ea0c61800d09fad50d6de7cd26f45b3619a792afdbb5670e82c134a6cf2f848830bb73b38057c4721e8fd011c710d8e77094f6","ssdeep":"12288:p0Qug6sZB+DgRqplNY5OmaycMQk1t/APV87vAS3:yYB+qy87vAS3","tlshash":"edd4841cf19d96393e37e52142989efc2630f357db221d6ff45d02890ac366361a2ea7","first_seen":"2026-04-22T00:53:54.251059Z","last_seen":"2026-04-29T10:46:14.505892Z","times_seen":150,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-24510.bar/bff-api/config/group/get?groups=d.customize\u0026lang=en","fqdn":"1xlite-24510.bar","domain":"1xlite-24510.bar","tld":"bar"},"ip":{"addr":"185.175.166.188","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:37.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-24510.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 05:20:41 GMT","end":"Mon, 11 May 2026 05:20:40 GMT"},"fingerprint":{"sha1":"6D:61:37:98:93:02:72:45:D5:2B:95:E8:44:62:A5:12:A4:F3:FF:F6","sha256":"A7:BC:70:63:BF:6D:B3:6F:13:30:19:D4:BC:F7:A8:C0:05:8C:3D:F7:44:4C:7C:46:70:61:16:FB:5F:E4:41:74"}}},"request":{"raw":"GET /bff-api/config/group/get?groups=d.customize\u0026lang=en HTTP/1.1\r\nHost: 1xlite-24510.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nis-srv: false\r\nx-svc-source: __TECHNICAL_PAGES_APP__\r\nx-app-n: __TECHNICAL_PAGES_APP__\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=ua+mvGnsU9NUG1n4Az1jAg==; lng=en; cookies_agree_type=3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sat, 25 Apr 2026 05:40:37 GMT\r\ncontent-type: application/json\r\ncontent-length: 968\r\ncache-control: no-cache, private\r\nserver-timing: dt_total;dur=0.088, bff;dur=6.34, wf-uht;dur=0.017\r\nx-dt: 285\r\nx-pod: R-bd99c\r\nx-time-ng: 0.007\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":968,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0e3ab3a0c22c85c098069a460fa61c53","sha1":"7fc7f989a0633350bca14f23e11cfa6b2b15ef02","sha256":"aa5205cb3d8c118409d0436ea676abc71985fa4172827e52e1a4b7760f99ce29","sha512":"92f8de2d03ca8c6437c379474c5d245d7c8bc48c4c9df8744d4beff615495d49a90fc8aa2f83e6dcd129ca72fe1d3f8ea54c029ba251a40d6514b0e2ab2e7635","ssdeep":"","tlshash":"2c11044e91e0623cd6a047d9d8823f189ff990a738497905ec198dda33e39e7d1b1303","first_seen":"2026-04-24T23:37:54.232467Z","last_seen":"2026-05-04T08:38:17.11446Z","times_seen":94,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-24510.bar/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-24510.bar","domain":"1xlite-24510.bar","tld":"bar"},"ip":{"addr":"185.175.166.188","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:37.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-24510.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 05:20:41 GMT","end":"Mon, 11 May 2026 05:20:40 GMT"},"fingerprint":{"sha1":"6D:61:37:98:93:02:72:45:D5:2B:95:E8:44:62:A5:12:A4:F3:FF:F6","sha256":"A7:BC:70:63:BF:6D:B3:6F:13:30:19:D4:BC:F7:A8:C0:05:8C:3D:F7:44:4C:7C:46:70:61:16:FB:5F:E4:41:74"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-24510.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nContent-Length: 48\r\nOrigin: https://1xlite-24510.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=ua+mvGnsU9NUG1n4Az1jAg==; lng=en; cookies_agree_type=3; tzo=3; is12h=0; window_width=1920; fatman_uuid=070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":48,"data":"{\"w\":55,\"sw\":1280,\"sh\":1024,\"e\":10273,\"sids\":[]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sat, 25 Apr 2026 05:40:37 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\nvary: origin, access-control-request-method, access-control-request-headers\r\nx-dt: 285\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.008, wf-uht;dur=0.014\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"76868da7d336ca6d3f3438b3ad1b59c9","sha1":"399a1de3b09a4771b7881bd8aa9fa4fa129e9380","sha256":"1208338f06b2e16071917dd9d9d7d734163cf65bd112bcfc8f1b51450919e0b0","sha512":"12365417a7f3c90b4610bb1994823bbe0720e238dc152be06d65e3db60749b9851b4e860a6ba339fe517ec57cd4e17272feaad8f2331b4cdb010ca1493179c64","ssdeep":"","tlshash":"64700008a200820020c2002202280a00202080328888022320a0022880e0aa0e80f822","first_seen":"2026-04-25T05:41:04.916076Z","last_seen":"2026-04-25T05:41:04.916076Z","times_seen":1,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/3083a20a3f73c30fce38710d7ada9cbb.svg","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:37.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/3083a20a3f73c30fce38710d7ada9cbb.svg HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-24510.bar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 05:40:37 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 19 Apr 2023 11:51:30 GMT\r\netag: W/\"3ae81b002dca46d3b732ce3e03ae35c6\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 07 Apr 2026 21:28:42 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: arig-hw-edge-gc85\r\nage: 581\r\ncache: HIT\r\nx-cached-since: 2026-04-25T05:30:56+00:00\r\ntraceparent: 00-3ab782e2b909e01d7062708b9537ee38-aff558fbeda9d853-01\r\nx-shard: arig-shard0-default_443\r\nx-id-fe: arig-hw-edge-gc84.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1228,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3ae81b002dca46d3b732ce3e03ae35c6","sha1":"388d37b5f714937677de74330a8daab0a0d1196b","sha256":"1c76b93f07c6a861c4ad9529059ea99ae69f2451788da7cab1f17fa94d54382e","sha512":"48887848044da3a9a54b72a1f15a39ac0b30ea8ad7ddc3d4c69e51bb0479f39631d4b9098d289eecdaa9648db4118ddfa38cf76ef1a58718c67d70efc80a67a8","ssdeep":"","tlshash":"e72124be434d5bfb60025fd8967802513abaf0c2f29926ed55d674227903cf4d074955","first_seen":"2023-04-05T22:56:35Z","last_seen":"2026-07-21T05:23:56.658926Z","times_seen":2468,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/non-embedded.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:36.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/non-embedded.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-24510.bar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 05:40:36 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Wed, 22 Apr 2026 06:53:53 GMT\r\netag: W/\"03bfd404aedaaa744bda3e5b186a43db\"\r\nx-amz-meta-mtime: 1776840780.583210115\r\ncontent-encoding: gzip\r\nexpires: Thu, 23 Apr 2026 23:51:19 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: arig-hw-edge-gc85\r\nage: 20193\r\ncache: HIT\r\nx-cached-since: 2026-04-25T00:04:03+00:00\r\ntraceparent: 00-f8f21210a5809c4103953fcf65b968ae-79a91e8820b0a4ee-01\r\nx-shard: arig-shard0-default_443\r\nx-id-fe: arig-hw-edge-gc84.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35002,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (35001)","md5":"03bfd404aedaaa744bda3e5b186a43db","sha1":"ecb39c6fe35e96b364e60dbb252d7dc10b80784b","sha256":"5b16f2191f8ec6ada107664d08dcf2971b0ce55de16813dca484f18576b10bb7","sha512":"d3eee8e1eb1f1275b8e83f7b9d383129bb2af12181e4894792312dc186b12477925af2e53539f170ec2a0ea1b98473aa39d45c2953cd414567eda3fffb858bb6","ssdeep":"384:Nm2Ixar8n5rz0f0uL/FrLrw+++Tj1jRpO54FZsa6XvKc:Q2xqgHc+++rpOOAic","tlshash":"28f27316da401667f9278a2a29d8fb0c75e8e107ed730e2df019d1188fd7f9f1aa0794","first_seen":"2026-04-09T20:38:49.80371Z","last_seen":"2026-08-08T12:13:41.290768Z","times_seen":1519,"resource_available":false,"data":null}},"time_used":391,"timings":{"blocked":175,"dns":35,"connect":38,"send":0,"wait":36,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_base-app_25447bf1bd.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:36.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_base-app_25447bf1bd.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-24510.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 05:40:36 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Fri, 24 Apr 2026 12:40:52 GMT\r\netag: W/\"5b12ebbf733049a056826174dec7d075\"\r\nx-amz-meta-mtime: 1777034380.310329381\r\ncontent-encoding: gzip\r\nexpires: Sat, 25 Apr 2026 13:14:34 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.003\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: arig-hw-edge-gc85\r\nage: 59158\r\ncache: HIT\r\nx-cached-since: 2026-04-24T13:14:38+00:00\r\ntraceparent: 00-e813bbcb343125172384a13fc2f54b88-c5a9413087c2e938-01\r\nx-shard: arig-shard0-default_443\r\nx-id-fe: arig-hw-edge-gc85.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1743226,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (24159)","md5":"2f107adf701a22aa9c81ea2bdc748647","sha1":"61d77506dd10b3f7130a3feaa1b6eb307029d274","sha256":"f1a7d32fc8ba5fb7230f795b68357cddb5638bdd7482fd7107977c1488e9884b","sha512":"32deeb4e8fc08bc48d70161b47b72ad033baed19375bf0db07929df7496aae05eaff9145dfb17fe7d91e0a086afb69770d475ec8e6f3f95a6f4e9ade91a51716","ssdeep":"24576:1Q/A3yfrJ5djkG1vkEjBOrXg2O2qkOmd0nLQ:1Q/A3ErJ5NkG1vkEjBOrXg2O2qkOmdUQ","tlshash":"12258e61f281bd2f2adb6bd750230046a2ed1d6dc428f490f5d7dde93ace850916eb2c","first_seen":"2026-04-22T09:07:22.380707Z","last_seen":"2026-04-29T10:46:14.597108Z","times_seen":153,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/site-admin/colors/e7bf6f5853492ee600f09fd1dee51cf5.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:37.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/site-admin/colors/e7bf6f5853492ee600f09fd1dee51cf5.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-24510.bar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 05:40:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 22 Apr 2026 08:31:32 GMT\r\netag: W/\"e7bf6f5853492ee600f09fd1dee51cf5\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Wed, 22 Apr 2026 09:50:00 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: arig-hw-edge-gc84\r\nage: 1563\r\ncache: HIT\r\nx-cached-since: 2026-04-25T05:14:34+00:00\r\ntraceparent: 00-9c77d8295c32f569db6c9a79bb192637-59ae271485c3a890-01\r\nx-shard: arig-shard0-default_443\r\nx-id-fe: arig-hw-edge-gc84.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":45272,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (45272), with no line terminators","md5":"e7bf6f5853492ee600f09fd1dee51cf5","sha1":"22f10024618e2b96aa3076032cfe658df7d043af","sha256":"1cbd584d07a713f01fab99e27a1837dc1cb06fb273a11ecaa46e3987c6fdb137","sha512":"8d54e3967b64713aa55bf59ca6cea499548ae790221ed3910783d5e8867237b5f60161338ade731ea9352e41d643651ecb4878b3853552fd2ee572ab57fbdc36","ssdeep":"768:+EO1mFS775xWt5JkyunibZhpNeInQ+ACA:+EO1mFI75xWt5JkyunibZhyInQ+AB","tlshash":"f3139d3dee91c1752a591931912c6b7b3d36e9deaa240f8fd02c23e530c5a011be5e7e","first_seen":"2026-03-27T16:38:23.079287Z","last_seen":"2026-04-27T02:35:57.075071Z","times_seen":449,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KFGPRJ2V","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:47.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"GET /gtm.js?id=GTM-KFGPRJ2V HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-24510.bar/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 25 Apr 2026 05:40:47 GMT\r\nexpires: Sat, 25 Apr 2026 05:40:47 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 25 Apr 2026 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 146111\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":429902,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7836)","md5":"058bd14209560a3f7da622e30293eba7","sha1":"03ebf7d12cd580b1d08d8d52944a32e46f4ddfbc","sha256":"8129ebe36da78b7e452d152e4ab2255b49fa065c451394ac1cdb291810830275","sha512":"3d32384b3a91459d496029a7e84432ba6442ef0486c1f690162a84e3baa04474e355cb90dc02ff474a527f44aa0ff442b8fc4b4f74ef8dcf33ba1d2cca003542","ssdeep":"6144:niFze4lE0aZMOguHKyoHqDUZApASTbqOqTrv+Px:uzfaZMdyoHOqO","tlshash":"149419cdb3d6746693a2f478903f018ba17a78a2b44cc895f185cce42e7469a4273f7d","first_seen":"2026-04-25T03:55:54.035876Z","last_seen":"2026-04-25T05:43:29.503467Z","times_seen":4,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":134,"dns":5,"connect":7,"send":0,"wait":19,"receive":22,"ssl":123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-7JGWL9SV66\u0026cid=1828040499.1777095648\u0026gtm=45je64m2v897130004za200zd897130004\u0026rcb=3\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=0~115616986~115938465~115938469~117266400~117384405~117512543~118463262\u0026z=1543713209","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:48.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:38:45 GMT","end":"Mon, 22 Jun 2026 08:38:44 GMT"},"fingerprint":{"sha1":"40:14:E1:F8:74:56:B2:7D:6E:D3:BF:C7:4E:77:43:11:E6:87:81:4E","sha256":"35:7F:49:70:D2:BC:7D:FE:79:8E:19:92:69:C9:80:66:F5:6C:AA:B0:F1:4E:86:C3:37:6E:3D:DC:BD:81:25:29"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-7JGWL9SV66\u0026cid=1828040499.1777095648\u0026gtm=45je64m2v897130004za200zd897130004\u0026rcb=3\u0026aip=1\u0026dma=1\u0026dma_cps=a\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=0~115616986~115938465~115938469~117266400~117384405~117512543~118463262\u0026z=1543713209 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-24510.bar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 25 Apr 2026 05:40:48 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-10T23:58:01.778337Z","times_seen":1026797,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":76,"dns":2,"connect":16,"send":0,"wait":106,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refpa31380.com/L?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push\u0026site=1249669\u0026ad=16307\u0026r=registration/","fqdn":"refpa31380.com","domain":"refpa31380.com","tld":"com"},"ip":{"addr":"91.186.207.86","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-25T05:40:35.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refpa31380.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Feb 2026 05:23:44 GMT","end":"Sun, 24 May 2026 05:23:43 GMT"},"fingerprint":{"sha1":"83:DC:5B:41:CF:BE:3D:56:A6:DC:4F:B8:FF:28:14:22:DF:F6:7B:94","sha256":"85:94:76:D7:44:A2:CF:62:38:4B:04:08:3E:7E:0A:78:87:C7:FF:60:89:4C:FF:C0:3A:99:C4:67:98:18:25:CC"}}},"request":{"raw":"GET /L?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push\u0026site=1249669\u0026ad=16307\u0026r=registration/ HTTP/1.1\r\nHost: refpa31380.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 303 See Other\r\nserver: Angie\r\ndate: Sat, 25 Apr 2026 05:40:35 GMT\r\nlocation: https://1xlite-24510.bar:443/en/registration?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push\r\nset-cookie: A_16307_v=0; expires=Sun, 26 Apr 2026 05:40:35 GMT; path=/; secure\nA_16307_c=1; expires=Sun, 26 Apr 2026 05:40:35 GMT; path=/; secure\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: wf-uht;dur=0.072\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"303","status_text":"See Other","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":2836,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T23:57:25.058416Z","times_seen":17827247,"resource_available":true,"data":null}},"time_used":312,"timings":{"blocked":106,"dns":14,"connect":28,"send":0,"wait":100,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=3\u0026frm=0\u0026ae=g\u0026dl=https%3A%2F%2F1xlite-24510.bar%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026rnd=1250706099.1777095648\u0026dt=1xBet\u0026auid=2564738.1777095648\u0026navt=n\u0026npa=1\u0026_tu=KA\u0026gtm=45be64m2v9192592245z89180563600za20gzb9180563600zd9180563600xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938469~117266400~118128923\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-16664555628\u0026tid=AW-16664555628\u0026tft=1777095648319\u0026tfd=13172","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:48.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"GET /ccm/collect?rcb=3\u0026frm=0\u0026ae=g\u0026dl=https%3A%2F%2F1xlite-24510.bar%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026rnd=1250706099.1777095648\u0026dt=1xBet\u0026auid=2564738.1777095648\u0026navt=n\u0026npa=1\u0026_tu=KA\u0026gtm=45be64m2v9192592245z89180563600za20gzb9180563600zd9180563600xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938469~117266400~118128923\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-16664555628\u0026tid=AW-16664555628\u0026tft=1777095648319\u0026tfd=13172 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-24510.bar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 25 Apr 2026 05:40:48 GMT\r\ncontent-type: text/plain\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T23:57:25.058416Z","times_seen":17827247,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-24510.bar/en/registration?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","fqdn":"1xlite-24510.bar","domain":"1xlite-24510.bar","tld":"bar"},"ip":{"addr":"185.175.166.188","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-25T05:40:35.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-24510.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 05:20:41 GMT","end":"Mon, 11 May 2026 05:20:40 GMT"},"fingerprint":{"sha1":"6D:61:37:98:93:02:72:45:D5:2B:95:E8:44:62:A5:12:A4:F3:FF:F6","sha256":"A7:BC:70:63:BF:6D:B3:6F:13:30:19:D4:BC:F7:A8:C0:05:8C:3D:F7:44:4C:7C:46:70:61:16:FB:5F:E4:41:74"}}},"request":{"raw":"GET /en/registration?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push HTTP/1.1\r\nHost: 1xlite-24510.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Sat, 25 Apr 2026 05:40:35 GMT\r\ncontent-length: 0\r\nlocation: /en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push\r\nset-cookie: platform_type=desktop; Path=/; Expires=Tue, 28 Apr 2026 05:40:35 GMT; Secure; SameSite=None; Partitioned\ngw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; Path=/; Expires=Tue, 28 Apr 2026 05:40:35 GMT; Secure\nauid=ua+mvGnsU9NUG1n4Az1jAg==; path=/; secure; httponly; samesite=lax\r\nx-dt: 285\r\nx-gw-blk-redirect-reason: block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.010, wf-uht;dur=0.011\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":2836,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T23:57:25.058416Z","times_seen":17827247,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":104,"dns":11,"connect":29,"send":0,"wait":41,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/1d86bacd346788d5890a8f6b4d1852c8.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:37.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/1d86bacd346788d5890a8f6b4d1852c8.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-24510.bar/\r\nOrigin: https://1xlite-24510.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 05:40:37 GMT\r\ncontent-type: application/json\r\nlast-modified: Thu, 19 Mar 2026 13:55:16 GMT\r\netag: W/\"f0d0d45b0722fdcf0f9c860ab1146448\"\r\ncontent-encoding: gzip\r\nexpires: Wed, 08 Apr 2026 00:11:32 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: arig-hw-edge-gc84\r\nage: 2273\r\ncache: HIT\r\nx-cached-since: 2026-04-25T05:02:44+00:00\r\ntraceparent: 00-eaa5dc3e395d3894e2b140a2c8804b12-f692b357ac5c2501-01\r\nx-shard: arig-shard0-default_443\r\nx-id-fe: arig-hw-edge-gc85.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":2125,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"f0d0d45b0722fdcf0f9c860ab1146448","sha1":"76bffcd574e7043cf73ac663de939a8813ee7e59","sha256":"e6c255539cc2ce6e23132d1f3e5d84cc8095e2c1414fb44c06799ba783a5b6be","sha512":"51a05b3bc8dc387a3274d18b48a6a2389151b074eef86015edcf783382df7c1a5459f967daab6b299996303c3a1997e625899c3d7306af5cf1820e3058962563","ssdeep":"","tlshash":"cd41a998f7f02df3301f90b899b7a64997c80f1ba895ada4ba9d745c2f1441a0037d7e","first_seen":"2026-03-31T08:36:21.22196Z","last_seen":"2026-08-08T12:13:41.296939Z","times_seen":1128,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/desktop/media_asset/2109bdcab2eeeb5f8b317407c150d526.png","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:37.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/desktop/media_asset/2109bdcab2eeeb5f8b317407c150d526.png HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-24510.bar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T23:57:25.058416Z","times_seen":17827247,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/version.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:36.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /version.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-24510.bar/\r\nOrigin: https://1xlite-24510.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 05:40:36 GMT\r\ncontent-type: application/json\r\ncontent-length: 11\r\nlast-modified: Fri, 24 Apr 2026 13:27:22 GMT\r\netag: \"ab34908b1d79d387aac283295dac110a\"\r\nx-amz-meta-mtime: 1777037172.768269991\r\nexpires: Fri, 24 Apr 2026 13:30:48 GMT\r\ncache-control: max-age=60\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: arig-hw-edge-gc84\r\nage: 46\r\ncache: HIT\r\nx-cached-since: 2026-04-25T05:39:50+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-c21b0abc427249c2b5c74fba2b6f3c56-55079356d7864fa9-01\r\nx-shard: arig-shard0-default_443\r\nx-id-fe: arig-hw-edge-gc85.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text","md5":"ab34908b1d79d387aac283295dac110a","sha1":"52b81d3086150ecdc019fc76ca81ad528af6d7ac","sha256":"5eace19047fd9eadc721c4e818de56a07891e0bf14142b3a7bd465b573db990c","sha512":"b6069c395ba0657419f243f2dfe2448cc7184a79525e1426c6d7c6e07e6a12e1ce3741de82cfbf98a5642133754b8b6db4c0dcc90b88a142aee0d402fa1d1afe","ssdeep":"","tlshash":"ab5000000cc000000300c0300c0c0000c00c00f00c0000000c0c000f00c00000000300","first_seen":"2026-03-18T06:25:42.866074Z","last_seen":"2026-08-08T12:13:41.333761Z","times_seen":1929,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":172,"dns":30,"connect":29,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/desktop/media_asset/e6baed4eecf4ba7f9a5c2fcf97aad110.webp","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:38.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/desktop/media_asset/e6baed4eecf4ba7f9a5c2fcf97aad110.webp HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-24510.bar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 05:40:38 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6642\r\nlast-modified: Tue, 28 Oct 2025 08:17:54 GMT\r\netag: \"f2a90faef41c53fb4af747c8cbf25485\"\r\nexpires: Thu, 16 Apr 2026 20:19:02 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: arig-hw-edge-gc85\r\nage: 2273\r\ncache: HIT\r\nx-cached-since: 2026-04-25T05:02:45+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-5bbe686c21206886efa85d2ead2ba163-5f7ebeb84b848bd8-01\r\nx-shard: arig-shard0-default_443\r\nx-id-fe: arig-hw-edge-gc84.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6642,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 960x278, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f2a90faef41c53fb4af747c8cbf25485","sha1":"54855a9fb307c4ecc9afea135838328cf439162e","sha256":"993540582d4cab4dc40ba13392f7460f30f0b656ff1e413abe9c20387000cc92","sha512":"c6f5e9a6238a864affd37952ba241b4e5a01dbfad9a18e22b53ea00e6f3acbbf114a5752f0b5faecd89efa6d24990df365113d7321543d0d44cfab1987f123a8","ssdeep":"96:MdOd7t6i+bJODeMN38LbY5gZQpRDH/ij1TgpEV6iuRjxNY4wos4RWNFCjMzlAm92:MduSOXsv6DfiR8fisNk9X3qUhpg","tlshash":"d7d1b074a2c81a958a299e763e763dab6e81039c31bcb6d674b5d5c8c50843fede7030","first_seen":"2025-11-13T15:27:51.525317Z","last_seen":"2026-07-21T05:23:56.637678Z","times_seen":2171,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"besolono.link/47f729d9-ae93-4f02-81e9-a448141f510d","fqdn":"besolono.link","domain":"besolono.link","tld":"link"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-25T05:40:34.693Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /47f729d9-ae93-4f02-81e9-a448141f510d HTTP/1.1\r\nHost: besolono.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T23:57:25.058416Z","times_seen":17827247,"resource_available":true,"data":null}},"time_used":241,"timings":{"blocked":241,"dns":0,"connect":99,"send":0,"wait":0,"receive":0,"ssl":111},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-25T05:40:35Z","timestamp":1777095635,"ip_dst":{"addr":"164.90.253.124","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.27","port":49154,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ETPRO INFO HTTP Request to a *.link domain","source":"{\"timestamp\":\"2026-04-25T05:40:35.361044+0000\",\"flow_id\":2081553011404527,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.27\",\"src_port\":49154,\"dest_ip\":\"164.90.253.124\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2858678,\"rev\":1,\"signature\":\"ETPRO INFO HTTP Request to a *.link domain\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2024_10_10\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_10_10\"]}},\"http\":{\"hostname\":\"besolono.link\",\"url\":\"/47f729d9-ae93-4f02-81e9-a448141f510d\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":302,\"redirect\":\"https://refpa31380.com/L?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push\u0026site=1249669\u0026ad=16307\u0026r=registration/\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":706,\"bytes_toclient\":516,\"start\":\"2026-04-25T05:40:35.159471+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"besolono.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/RobotoVariable/RobotoVariable.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:36.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/RobotoVariable/RobotoVariable.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-24510.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 05:40:36 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 147664\r\nlast-modified: Mon, 02 Mar 2026 14:14:17 GMT\r\netag: \"41b28e1bd72ac670c2ee83ad0ea538da\"\r\nexpires: Thu, 09 Apr 2026 10:29:49 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: arig-hw-edge-gc84\r\nage: 1563\r\ncache: HIT\r\nx-cached-since: 2026-04-25T05:14:33+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-8c018efcc4e42da76ad66b0e735714b9-d2597c252d277897-01\r\nx-shard: arig-shard0-default_443\r\nx-id-fe: arig-hw-edge-gc85.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":147664,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 147664, version 3.983","md5":"41b28e1bd72ac670c2ee83ad0ea538da","sha1":"c1292620ead9a033a7b327322216949db358ada0","sha256":"a54eb5cfffedfd09c478b7d8d991e6b353fd1972706a2b91e7176b79e03c415d","sha512":"868f9f44cf7666b07b637b8b0afe2031530db26a4b0748d5dfacdcef0ea34bffd0da482986c2f91e85a7d0fa3bbf674b874d822b4a87e343ba121a45000f3cc6","ssdeep":"3072:NQFAi+ZiSPWfR5V/J9EbkjFL8BQJdj6mSUYlmLerzCSIfz4EVTS:q1CPWbV/Egx8BqdsJlmSrzmzjVe","tlshash":"1ee313c6a0e2d9c856761ffda1152ea248dd3a28de0f6f66344331345ffaea4107dc26","first_seen":"2026-04-09T09:37:58.836007Z","last_seen":"2026-08-08T12:13:41.254111Z","times_seen":1622,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/d4f0604a809ff3fb1de74783a4a03afe.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:37.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/d4f0604a809ff3fb1de74783a4a03afe.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-24510.bar/\r\nOrigin: https://1xlite-24510.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 05:40:37 GMT\r\ncontent-type: application/json\r\nlast-modified: Mon, 06 Apr 2026 09:07:32 GMT\r\netag: W/\"fcb239cf6ab1d2cc022b0f70fd521a76\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 07 Apr 2026 21:30:04 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: arig-hw-edge-gc86\r\nage: 2724\r\ncache: HIT\r\nx-cached-since: 2026-04-25T04:55:13+00:00\r\ntraceparent: 00-6f7f483d4cfacd2ae531bccd64311e41-02bb80f986ea0de8-01\r\nx-shard: arig-shard0-default_443\r\nx-id-fe: arig-hw-edge-gc85.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11209,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fcb239cf6ab1d2cc022b0f70fd521a76","sha1":"fbe60a2f060d59a69622d3117bddcf85716d981c","sha256":"c04d61f2f4c9c2796e9c6fa1ed4d739c27323d5be8fd057705906100c4e7a960","sha512":"f4dad8317f48671ebc01b0d560dceb32cb1ceaac68c827c730ea05bd18f4afc2b1ec154813165478856e0c081618acd8748c6d23baa7f227418903e23f35e23c","ssdeep":"96:7tQJa1XQCVfA12ycvItJJBsCSMRyfiNWIz0ubdx:z1SXCUyfiNWIzrj","tlshash":"f132e6e8baf95c73021634bce5fbf91be3d81f978d49a8647a5c7c0c1f2011114aaa79","first_seen":"2026-04-06T11:38:50.615758Z","last_seen":"2026-07-21T05:23:56.605495Z","times_seen":912,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-24510.bar/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/fc","fqdn":"1xlite-24510.bar","domain":"1xlite-24510.bar","tld":"bar"},"ip":{"addr":"185.175.166.188","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:37.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-24510.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 05:20:41 GMT","end":"Mon, 11 May 2026 05:20:40 GMT"},"fingerprint":{"sha1":"6D:61:37:98:93:02:72:45:D5:2B:95:E8:44:62:A5:12:A4:F3:FF:F6","sha256":"A7:BC:70:63:BF:6D:B3:6F:13:30:19:D4:BC:F7:A8:C0:05:8C:3D:F7:44:4C:7C:46:70:61:16:FB:5F:E4:41:74"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/fc HTTP/1.1\r\nHost: 1xlite-24510.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push\r\nX-Fc: bf5383e14dd845a2502d668a43c9fa310c8ebd46e38c7a767b68fb7db0ff7e28\r\nOrigin: https://1xlite-24510.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=ua+mvGnsU9NUG1n4Az1jAg==; lng=en; cookies_agree_type=3; tzo=3; is12h=0\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: Angie\r\ndate: Sat, 25 Apr 2026 05:40:37 GMT\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\nvary: origin, access-control-request-method, access-control-request-headers\r\nx-dt: 285\r\nx-time-ng: 0.001\r\nx-uuid: 070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.068, wf-uht;dur=0.010\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T23:57:25.058416Z","times_seen":17827247,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:47.573Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"GET /gtag/js?id=G-7JGWL9SV66 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-24510.bar/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ndate: Sat, 25 Apr 2026 05:40:47 GMT\r\nexpires: Sat, 25 Apr 2026 05:40:47 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 177481\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":550174,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12571)","md5":"4635c1e0b426467d90a531d0bd3b3a22","sha1":"169f341fe910f79a8ef14e3a9cbdbf720eb440da","sha256":"80a8ff597264ecb92d0a0a2f6bb6b917d99e70d361d284aaf92e0ffa3f5cc539","sha512":"00533cdc0c779b1ee54ea74fc1e38aaf51c68347b1240d811bd38988df3bd242a9143504fb09f6c68233a52f404f22e2cff7a612666c7dafd0b916cb4a26d908","ssdeep":"6144:uPiFze4lE4kYW2OguHKyoAqDUZApASTbq2bzTOb0b9:lzZkYW2dyoA2P","tlshash":"1bc409ceb3c674665296f468943f01cba97b24a3b49cc8abb1c8ccf02d3455a5167f78","first_seen":"2026-04-24T23:37:54.212653Z","last_seen":"2026-04-25T05:43:29.51795Z","times_seen":5,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":110,"dns":1,"connect":7,"send":0,"wait":20,"receive":26,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/gmp/conversion;src=14030178;type=xbet;cat=uniqu0;rcb=10;ord=1;num=158684443664;npa=1;auiddc=2564738.1777095648;pscdl=noapi;frm=0;_tu=KJA;gtm=45fe64m2v9190735530z89180563600za20gzb9180563600zd9180563600xea;gcd=13l3l3l2l1l1;dma_cps=a;dma=1;dc_fmt=4;tag_exp=0~115938465~115938468~117266401~117384405;epver=2;dc_random=1777095648_qNYass0Y9Sl3v8mQRUX9w9-G52_gxH4vng;~oref=https%3A%2F%2F1xlite-24510.bar%2Fen%2Fblock%3Ftag%3Dd_1249669m_16307c_%5B%5DMS%5B%5Dnull%5B%5Dreg%5B%5Dgeneral%5B%5D17300_d60291_l61383_push?","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:48.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"POST /gmp/conversion;src=14030178;type=xbet;cat=uniqu0;rcb=10;ord=1;num=158684443664;npa=1;auiddc=2564738.1777095648;pscdl=noapi;frm=0;_tu=KJA;gtm=45fe64m2v9190735530z89180563600za20gzb9180563600zd9180563600xea;gcd=13l3l3l2l1l1;dma_cps=a;dma=1;dc_fmt=4;tag_exp=0~115938465~115938468~117266401~117384405;epver=2;dc_random=1777095648_qNYass0Y9Sl3v8mQRUX9w9-G52_gxH4vng;~oref=https%3A%2F%2F1xlite-24510.bar%2Fen%2Fblock%3Ftag%3Dd_1249669m_16307c_%5B%5DMS%5B%5Dnull%5B%5Dreg%5B%5Dgeneral%5B%5D17300_d60291_l61383_push? HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-24510.bar/\r\nOrigin: https://1xlite-24510.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sat, 25 Apr 2026 05:40:48 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://1xlite-24510.bar\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-08-10T23:58:01.778337Z","times_seen":1026797,"resource_available":true,"data":null}},"time_used":231,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/entry-cfa7cac9ff.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:36.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/entry-cfa7cac9ff.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-24510.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-24510.bar/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 05:40:36 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Apr 2026 06:53:52 GMT\r\netag: W/\"ae331fea1ab9d347f1f563a23f211258\"\r\nx-amz-meta-mtime: 1776840780.583210115\r\ncontent-encoding: gzip\r\nexpires: Thu, 23 Apr 2026 07:14:41 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: arig-hw-edge-gc85\r\nage: 80578\r\ncache: HIT\r\nx-cached-since: 2026-04-24T07:17:38+00:00\r\ntraceparent: 00-b9e5199ec5302775dafca29cca60b6ff-1b347716d30e2de3-01\r\nx-shard: arig-shard0-default_443\r\nx-id-fe: arig-hw-edge-gc85.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20269,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19898)","md5":"ae331fea1ab9d347f1f563a23f211258","sha1":"3745bfc83a5f8835e4689eb377ab91db3b38c062","sha256":"57b5711b09492d6139d06d45057bc9f7ef293257a38e74ef8c8c74c6a4dd4668","sha512":"48ac7fbd0fdff6ba8e60270dd99b6afb3a58bbebd58e1e1dd1d1dfefab6088f63992e0265fd7b6aa7c5e13422e33ab3f1bc51ffd228a5db51ab4f94e40ac9726","ssdeep":"384:HY3EwUMs5dKo0CzA4e/y/Vr4LcD7KbnwcjQ/HsT+oUE0zHaMdGLV6hcYIjRCs:Hixo0CzA4eYVr4LcD7KbnwcE/Y+oUdzO","tlshash":"38921f78219cf0b530cb449937f6bc9266886d1ff98afcc65197c9dc03da14cc9267aa","first_seen":"2026-04-22T09:07:22.398556Z","last_seen":"2026-04-29T09:10:05.161694Z","times_seen":103,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=DC-14030178\u0026cx=c\u0026gtm=4e64m2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:48.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"GET /gtag/destination?id=DC-14030178\u0026cx=c\u0026gtm=4e64m2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-24510.bar/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 25 Apr 2026 05:40:48 GMT\r\nexpires: Sat, 25 Apr 2026 05:40:48 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 25 Apr 2026 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:71:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:71:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:71:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:71:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 128864\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":368541,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5929)","md5":"97210afd6d129da05d2ad0c8bf596d61","sha1":"7f49f9eefc2ae0e2f33934e773f86a29431787f9","sha256":"c39d6ebe5978b79c2e8dd3cb907a7fa92ad3c370c0f7b2b1159fe56917db0ffb","sha512":"8ed2ddbadc27369cfd3352a31a223ee5d08961788188ce1853ed0ca59b9cd77de70cbd30e507eb5e8d73b355fec37de705595b5865cc4e2ebffa83a2cb559692","ssdeep":"6144:EiFze4lEHxdMOgDo/IDjZApASTbqQ6qnJ1:7z2xdMzo/R1","tlshash":"e47418cdb3d6745653a3b478503f018ba27a7892f84cc899f186c8e42e746a94277f7c","first_seen":"2026-04-25T03:55:54.048949Z","last_seen":"2026-04-25T05:43:29.50538Z","times_seen":4,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je64m2v897130004za200zd897130004\u0026_p=1777095647562\u0026em=tv.1~em.ODS1igyfeIhzOTHENqwIfH1sb8t0oxg8FT6iY2YCmeo\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=285636517\u0026_eu=AAAAAGA\u0026cid=1828040499.1777095648\u0026ec_mode=a\u0026frm=0\u0026pscdl=noapi\u0026rcb=3\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=1\u0026tag_exp=0~115616986~115938465~115938469~117266400~117384405~117512543~118463262\u0026sid=1777095647\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-24510.bar%2Fen%2Fblock%3Ftag%3Dd_1249669m_16307c_%5B%5DMS%5B%5Dnull%5B%5Dreg%5B%5Dgeneral%5B%5D17300_d60291_l61383_push\u0026dt=1xBet\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026ep.optimize_id=GTM-5R4MT54\u0026upn.ref_id=1\u0026tfd=12897","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:48.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je64m2v897130004za200zd897130004\u0026_p=1777095647562\u0026em=tv.1~em.ODS1igyfeIhzOTHENqwIfH1sb8t0oxg8FT6iY2YCmeo\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=a\u0026dma=1\u0026ecid=285636517\u0026_eu=AAAAAGA\u0026cid=1828040499.1777095648\u0026ec_mode=a\u0026frm=0\u0026pscdl=noapi\u0026rcb=3\u0026sr=1280x1024\u0026ul=en-us\u0026gaf=2\u0026_s=1\u0026tag_exp=0~115616986~115938465~115938469~117266400~117384405~117512543~118463262\u0026sid=1777095647\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-24510.bar%2Fen%2Fblock%3Ftag%3Dd_1249669m_16307c_%5B%5DMS%5B%5Dnull%5B%5Dreg%5B%5Dgeneral%5B%5D17300_d60291_l61383_push\u0026dt=1xBet\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026ep.optimize_id=GTM-5R4MT54\u0026upn.ref_id=1\u0026tfd=12897 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-24510.bar/\r\nOrigin: https://1xlite-24510.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://1xlite-24510.bar\r\ndate: Sat, 25 Apr 2026 05:40:48 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:196:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:196:0\r\nreport-to: {\"group\":\"ascnsrsggc:196:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:196:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T23:57:25.058416Z","times_seen":17827247,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":36,"dns":0,"connect":11,"send":0,"wait":19,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","fqdn":"1xlite-24510.bar","domain":"1xlite-24510.bar","tld":"bar"},"ip":{"addr":"185.175.166.188","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-25T05:40:35.737Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-24510.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 05:20:41 GMT","end":"Mon, 11 May 2026 05:20:40 GMT"},"fingerprint":{"sha1":"6D:61:37:98:93:02:72:45:D5:2B:95:E8:44:62:A5:12:A4:F3:FF:F6","sha256":"A7:BC:70:63:BF:6D:B3:6F:13:30:19:D4:BC:F7:A8:C0:05:8C:3D:F7:44:4C:7C:46:70:61:16:FB:5F:E4:41:74"}}},"request":{"raw":"GET /en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push HTTP/1.1\r\nHost: 1xlite-24510.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=ua+mvGnsU9NUG1n4Az1jAg==\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 203 Non Authoritative\r\nserver: Angie\r\ndate: Sat, 25 Apr 2026 05:40:35 GMT\r\ncontent-type: text/html;charset=utf-8\r\ncontent-length: 2836\r\ncache-control: no-store, no-cache, must-revalidate\r\nserver-timing: dt_total;dur=0.129, dt_total;dur=0.012, total;dur=1;desc=\"MF\"\r\nset-cookie: gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; Path=/; Expires=Tue, 28 Apr 2026 05:40:35 GMT; Secure\r\nvary: Accept-Encoding\r\nx-dt: 285, 285\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"203","status_text":"Non Authoritative","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":2836,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1305)","md5":"6a0c671f43be4b569427944e29e29786","sha1":"d4c1c828ca5979d7b51d59fbe4289a4b2a4ad44d","sha256":"5988bebd57f10eb5af4c9c88cbedd34db535b466a26fea1ebbc9e1be5d07b339","sha512":"4794d502b7dbfdbf634739421c0937410565cafae364b01ef19e5904abe8f65fdfd2ee7ac721dfc80375e7db8fa5bfc834e30f918ccffef18c00be41d5d94e57","ssdeep":"","tlshash":"a751b62b5a18ce3f05106458c627e39ae5cd71bb714be498c0b84d292b8e3d3ac4f8e5","first_seen":"2026-04-22T15:23:20.578104Z","last_seen":"2026-04-29T09:10:05.144241Z","times_seen":72,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":50,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/$_$.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:36.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/$_$.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-24510.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 05:40:36 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 57\r\nlast-modified: Wed, 22 Apr 2026 06:53:53 GMT\r\netag: \"0f52fc8c693ecafc1d77320a696ce65b\"\r\nx-amz-meta-mtime: 1776840780.573209886\r\nexpires: Thu, 23 Apr 2026 21:13:36 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: arig-hw-edge-gc84\r\nage: 30018\r\ncache: HIT\r\nx-cached-since: 2026-04-24T21:20:18+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-2366505a29f9fd0b3baa6a2919164031-ee816b7dcd2b3194-01\r\nx-shard: arig-shard0-default_443\r\nx-id-fe: arig-hw-edge-gc85.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with no line terminators","md5":"0f52fc8c693ecafc1d77320a696ce65b","sha1":"5d5d9a13c7a17a19b0295cdc8bd3594117fe0a29","sha256":"a77313a1c518701af1f3c36dda4ab891bd2fc7c2d32025ae8ac66c7b97a3770a","sha512":"f1ce1fb5b8b1b49a30bb0950422a5c1762d72301befe8a6c51bc8af716e1148c7438bc9c9cd8a76e6ff89281c1e01a4391fc7777d03da8b07b8918d597b50d0a","ssdeep":"","tlshash":"ed900253565df52c30a004050695d64732953d6a2417712221b05109e60154a4417277","first_seen":"2026-03-18T19:53:45.72592Z","last_seen":"2026-05-19T09:54:34.316022Z","times_seen":1235,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":94,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-24510.bar/favicon.ico","fqdn":"1xlite-24510.bar","domain":"1xlite-24510.bar","tld":"bar"},"ip":{"addr":"185.175.166.188","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:36.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-24510.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 05:20:41 GMT","end":"Mon, 11 May 2026 05:20:40 GMT"},"fingerprint":{"sha1":"6D:61:37:98:93:02:72:45:D5:2B:95:E8:44:62:A5:12:A4:F3:FF:F6","sha256":"A7:BC:70:63:BF:6D:B3:6F:13:30:19:D4:BC:F7:A8:C0:05:8C:3D:F7:44:4C:7C:46:70:61:16:FB:5F:E4:41:74"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 1xlite-24510.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=ua+mvGnsU9NUG1n4Az1jAg==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Sat, 25 Apr 2026 05:40:36 GMT\r\ncontent-length: 0\r\nlocation: /en/block\r\nset-cookie: gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; Path=/; Expires=Tue, 28 Apr 2026 05:40:36 GMT; Secure\r\nx-dt: 285\r\nx-gw-blk-redirect-reason: block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.005, wf-uht;dur=0.011\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2836,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T23:57:25.058416Z","times_seen":17827247,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-24510.bar/analytics-module-api/v1/analytics?projectId=285\u0026domain=1xlite-24510.bar","fqdn":"1xlite-24510.bar","domain":"1xlite-24510.bar","tld":"bar"},"ip":{"addr":"185.175.166.188","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:37.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-24510.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 05:20:41 GMT","end":"Mon, 11 May 2026 05:20:40 GMT"},"fingerprint":{"sha1":"6D:61:37:98:93:02:72:45:D5:2B:95:E8:44:62:A5:12:A4:F3:FF:F6","sha256":"A7:BC:70:63:BF:6D:B3:6F:13:30:19:D4:BC:F7:A8:C0:05:8C:3D:F7:44:4C:7C:46:70:61:16:FB:5F:E4:41:74"}}},"request":{"raw":"GET /analytics-module-api/v1/analytics?projectId=285\u0026domain=1xlite-24510.bar HTTP/1.1\r\nHost: 1xlite-24510.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nis-srv: false\r\nx-svc-source: __TECHNICAL_PAGES_APP__\r\nx-app-n: __TECHNICAL_PAGES_APP__\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=ua+mvGnsU9NUG1n4Az1jAg==; lng=en; cookies_agree_type=3; tzo=3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sat, 25 Apr 2026 05:40:37 GMT\r\ncontent-type: application/json\r\ncontent-length: 200\r\nx-request-id: 75de406908a77e56ae6519ab13dd7f1e\r\nx-request-guid: 75de406908a77e56ae6519ab13dd7f1e\r\nx-server-name: Analytics\r\ncache-control: public, max-age=300, stale-while-revalidate=60\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: p;dur=0, wf-uht;dur=\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":200,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"fa76cb7ac4a154dcda01b4f5834af3de","sha1":"5f67f1947e3f4fffae5973ee93dc9b65a979fe22","sha256":"1c42fecbfa69632d40b6a9f8da0f8f92f47234e33b125ec4862579690709a668","sha512":"d636b04dd956f45d2d55408cfbe9445f44b611e30c8578769c45da6411f613ea21efb91aa4e1cc98f77e1783eb164169ac1ea206677dcb91fae18cd4018186f5","ssdeep":"","tlshash":"afd01212d185eeec944395d0509eae2a93ee60335da715c14a50db31d1fd8783020f5f","first_seen":"2026-03-31T08:13:38.467056Z","last_seen":"2026-05-13T08:38:45.947255Z","times_seen":408,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/8a7c4eed7bb220bd1ef3acc3293e6318.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:37.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/8a7c4eed7bb220bd1ef3acc3293e6318.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-24510.bar/\r\nOrigin: https://1xlite-24510.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 05:40:37 GMT\r\ncontent-type: application/json\r\nlast-modified: Sun, 11 Jan 2026 03:45:37 GMT\r\netag: W/\"677a4ece3382ef2d011629b8df407544\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 07 Apr 2026 21:31:10 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: arig-hw-edge-gc86\r\nage: 2633\r\ncache: HIT\r\nx-cached-since: 2026-04-25T04:56:44+00:00\r\ntraceparent: 00-3137bba1a549c6bf71f91cd2f1da7a8e-b9b928b68364bfad-01\r\nx-shard: arig-shard0-default_443\r\nx-id-fe: arig-hw-edge-gc85.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2268,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"677a4ece3382ef2d011629b8df407544","sha1":"db65fa524058f62f4dd41f81549dc3e7009ed70f","sha256":"f5d023b35116dc2ff09da730c56f2d41b18e77a9ae63d69816c06d7ac0452b7b","sha512":"592a894ab168c6872c47c6bc8c15781d74ddc17eff909e29fe30c8ba0ca4204279d8ab8d33630405fd5193c1da2506437d1b37263e0f17578544612659e6ab51","ssdeep":"","tlshash":"3741389ef3e41cb3000b29bcd0f7aa2993d40f5f689aac383a9d7c0e2bd4511409697d","first_seen":"2026-03-31T08:36:21.232936Z","last_seen":"2026-06-05T14:14:12.165316Z","times_seen":974,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/87d85cf941.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:37.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/87d85cf941.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-24510.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-24510.bar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 05:40:37 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Wed, 22 Apr 2026 06:53:53 GMT\r\netag: W/\"166a33fdde3212c99a3650b2bd84a031\"\r\nx-amz-meta-mtime: 1776840780.580210046\r\ncontent-encoding: gzip\r\nexpires: Fri, 24 Apr 2026 00:36:03 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: arig-hw-edge-gc85\r\nage: 18139\r\ncache: HIT\r\nx-cached-since: 2026-04-25T00:38:18+00:00\r\ntraceparent: 00-59bba34ad95a5cd32860830ba7a422fb-49c624b284dc6d92-01\r\nx-shard: arig-shard0-default_443\r\nx-id-fe: arig-hw-edge-gc85.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":3147,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3147), with no line terminators","md5":"166a33fdde3212c99a3650b2bd84a031","sha1":"ed1ea9972b60b03ee2683a49971471d2c43214d3","sha256":"1b142a730444fde6e3764c1e083c053aea96ff7c5bc2f02225438e7e76ed101f","sha512":"33fd7490cb34a836846838e8cb5aa6d5d2526225966c4f83e39e1ebfce1a3ada00cc5bab41e18dbbda241cab9321e7873707983224bbc9e5749408069155feb5","ssdeep":"","tlshash":"4b51685e742a50ae10379c054bd14f1d235ff20eda1a13b8f406d62878cba9326ed4ab","first_seen":"2026-04-09T09:37:58.829205Z","last_seen":"2026-07-21T05:23:56.642213Z","times_seen":994,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/site-admin/css_vars/06c9b68c4f5819c83cc220a9024bbee1.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:37.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/site-admin/css_vars/06c9b68c4f5819c83cc220a9024bbee1.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-24510.bar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 05:40:37 GMT\r\ncontent-type: text/css\r\ncontent-length: 54\r\nlast-modified: Thu, 26 Mar 2026 13:23:36 GMT\r\netag: \"06c9b68c4f5819c83cc220a9024bbee1\"\r\ncache-control: max-age=3600\r\nexpires: Sat, 18 Apr 2026 18:57:34 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: arig-hw-edge-gc85\r\nage: 460\r\ncache: HIT\r\nx-cached-since: 2026-04-25T05:32:57+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-eada2f25e6f1f7eb61a644c2ee003e0f-3c2876b10a444c9d-01\r\nx-shard: arig-shard0-default_443\r\nx-id-fe: arig-hw-edge-gc84.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"06c9b68c4f5819c83cc220a9024bbee1","sha1":"72061d9a7ff428838a3ffbeea37f5b239685d24d","sha256":"b78dcd52b6ad0b04c4e35350f6bfc45cdf407c55b71f49ac5e201bb403213450","sha512":"f75445453afaa7b628853122e9ca4dd668545de13331ee0d3b10d1f59429293f7a324464bfbae5eb4bc31a25968d4c0142fad5f42dd0d1053e27f5762e72629a","ssdeep":"","tlshash":"76900299a50822502669c666519d48d12184125b4511369ce5527911f446c819950689","first_seen":"2026-03-26T08:31:53.670846Z","last_seen":"2026-08-08T12:13:41.229133Z","times_seen":1923,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/894a65eee2.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:37.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/894a65eee2.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-24510.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 05:40:37 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Apr 2026 06:53:52 GMT\r\netag: W/\"4af6b5d5e830a36f69bb6a96c522dde2\"\r\nx-amz-meta-mtime: 1776840780.580210046\r\ncontent-encoding: gzip\r\nexpires: Thu, 23 Apr 2026 07:14:47 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: arig-hw-edge-gc86\r\nage: 80509\r\ncache: HIT\r\nx-cached-since: 2026-04-24T07:18:48+00:00\r\ntraceparent: 00-810320b22731413555f4585722105ade-e40c0b8bd5c4aa51-01\r\nx-shard: arig-shard0-default_443\r\nx-id-fe: arig-hw-edge-gc85.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9051,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8867)","md5":"4af6b5d5e830a36f69bb6a96c522dde2","sha1":"10ab563ba086c0ac2eeeb59d37e052a77c3f35b2","sha256":"80e9e5abe92bd4465e2789351da1f5f15c704469f322e8157705dd25ae4dec33","sha512":"7e0e6f5a62a116461c7a86a6eee948a0597d54d8f9fabcb4479b6a98ad057ed131a893c4faa18f221f6c7d6784ecff81edb08c57ca302db4f92052479f4cbb6d","ssdeep":"192:FhcoQfDblu7WteQsNyRTF5Lk55h/WZ57Xh3PfuMuvzXeuv5xOzHl0Ue/jud:HhQrblu7WteQsoRJFQH/WZ5XhfWn7uuS","tlshash":"cc12c8d42df860779b638399bc2290b19b0a4a54a14d44dbf9f84f1c059e4cc6dbbb73","first_seen":"2026-04-22T09:07:22.397301Z","last_seen":"2026-04-29T09:10:05.152148Z","times_seen":103,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-24510.bar/en/block","fqdn":"1xlite-24510.bar","domain":"1xlite-24510.bar","tld":"bar"},"ip":{"addr":"185.175.166.188","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:36.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-24510.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 05:20:41 GMT","end":"Mon, 11 May 2026 05:20:40 GMT"},"fingerprint":{"sha1":"6D:61:37:98:93:02:72:45:D5:2B:95:E8:44:62:A5:12:A4:F3:FF:F6","sha256":"A7:BC:70:63:BF:6D:B3:6F:13:30:19:D4:BC:F7:A8:C0:05:8C:3D:F7:44:4C:7C:46:70:61:16:FB:5F:E4:41:74"}}},"request":{"raw":"GET /en/block HTTP/1.1\r\nHost: 1xlite-24510.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=ua+mvGnsU9NUG1n4Az1jAg==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 203 Non Authoritative\r\nserver: Angie\r\ndate: Sat, 25 Apr 2026 05:40:36 GMT\r\ncontent-type: text/html;charset=utf-8\r\ncontent-length: 2836\r\ncache-control: no-store, no-cache, must-revalidate\r\nserver-timing: dt_total;dur=0.061, dt_total;dur=0.005, total;dur=1;desc=\"MF\"\r\nset-cookie: gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; Path=/; Expires=Tue, 28 Apr 2026 05:40:36 GMT; Secure\r\nvary: Accept-Encoding\r\nx-dt: 285, 285\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"203","status_text":"Non Authoritative","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":2836,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1305)","md5":"6a0c671f43be4b569427944e29e29786","sha1":"d4c1c828ca5979d7b51d59fbe4289a4b2a4ad44d","sha256":"5988bebd57f10eb5af4c9c88cbedd34db535b466a26fea1ebbc9e1be5d07b339","sha512":"4794d502b7dbfdbf634739421c0937410565cafae364b01ef19e5904abe8f65fdfd2ee7ac721dfc80375e7db8fa5bfc834e30f918ccffef18c00be41d5d94e57","ssdeep":"","tlshash":"a751b62b5a18ce3f05106458c627e39ae5cd71bb714be498c0b84d292b8e3d3ac4f8e5","first_seen":"2026-04-22T15:23:20.578104Z","last_seen":"2026-04-29T09:10:05.144241Z","times_seen":72,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_1c3eaa7178.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:47.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_1c3eaa7178.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-24510.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 05:40:47 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 449\r\nlast-modified: Fri, 24 Apr 2026 14:13:32 GMT\r\netag: \"414e8029e21e558fd9d07bd1d919c3c4\"\r\nx-amz-meta-mtime: 1777039813.951033892\r\nexpires: Sat, 25 Apr 2026 20:52:52 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: arig-hw-edge-gc84\r\nage: 31675\r\ncache: HIT\r\nx-cached-since: 2026-04-24T20:52:52+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-adac0d53488c9d778e0f255271e85ed0-12236c664e7211f7-01\r\nx-shard: arig-shard0-default_443\r\nx-id-fe: arig-hw-edge-gc85.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":449,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (448)","md5":"414e8029e21e558fd9d07bd1d919c3c4","sha1":"616aa94cb106a7684ccc214de20d5a85071f8d70","sha256":"36d14d379f6c74f3bfaf138903d6f8aa4a6e0ae6f93f45303caadb0db6c0e1fa","sha512":"1a9d8949916f0f5ad19b45dbc7804768926698fe01c32fe4b435f00294a4c2632ca1e9e79c1cb774baeb18008fe8609e374ee6d5c27e92808c41c30545ee2550","ssdeep":"","tlshash":"47f0239b38949078076e27e09373d75a7052154d744abc30f7895c5878364e6641f65c","first_seen":"2025-12-18T05:17:53.538942Z","last_seen":"2026-08-08T12:13:41.24995Z","times_seen":1289,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-icons/1.0.1010/285/country.svg","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:38.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-icons/1.0.1010/285/country.svg HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-24510.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-24510.bar/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 05:40:38 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 24 Apr 2026 11:41:36 GMT\r\netag: W/\"e755054847ccc09de8ac9bdf2c4326d6\"\r\nx-amz-meta-mtime: 1777030885.413846271\r\ncontent-encoding: gzip\r\nexpires: Sat, 25 Apr 2026 11:47:19 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: arig-hw-edge-gc85\r\nage: 64398\r\ncache: HIT\r\nx-cached-since: 2026-04-24T11:47:20+00:00\r\ntraceparent: 00-4e04f2e75442d0381aa3402f82db7710-6a1d62ad95d228cc-01\r\nx-shard: arig-shard0-default_443\r\nx-id-fe: arig-hw-edge-gc85.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":217418,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e755054847ccc09de8ac9bdf2c4326d6","sha1":"1461e05caf5c7bfda69a9a45127a8f78dc37a9ec","sha256":"d03bc4c7e0d2d128ba647df7ef393f9e856ff0b98b09d6d2849bdaaaded8e7b9","sha512":"2a6e1617fe4b5f4039431564fdb2d90f8a4a930ea555e10133b9d07809ebe56f64cfc9000de709289b2cb9143664bb8e334cabf2d49c7c20dac9ba8ed0eee9ce","ssdeep":"3072:hgvO+igz5Wy8EjUskAnA3ZJ9QeVCLpE74OWuhgwlKqjk71xhbXVjGYLGS/suV1SM:uqCLpPOWuq5vaSueoO7","tlshash":"08245554b099b14c2a8363e8c7afa5e1133e61db71da419938e993d8520e3dffe83950","first_seen":"2025-08-28T01:30:48.467208Z","last_seen":"2026-05-07T11:42:09.284783Z","times_seen":1871,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_f978b4369d.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:47.569Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_f978b4369d.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-24510.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 05:40:47 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 389\r\nlast-modified: Fri, 24 Apr 2026 14:13:32 GMT\r\netag: \"3a4af5789426796fafd3970de96371be\"\r\nx-amz-meta-mtime: 1777039813.965035064\r\nexpires: Sat, 25 Apr 2026 20:55:52 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: arig-hw-edge-gc85\r\nage: 31495\r\ncache: HIT\r\nx-cached-since: 2026-04-24T20:55:52+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-2ef8ab1b002979905da818c6a3ecb208-fa6727477c691656-01\r\nx-shard: arig-shard0-default_443\r\nx-id-fe: arig-hw-edge-gc85.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":389,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (388)","md5":"3a4af5789426796fafd3970de96371be","sha1":"ebdd29b76f8e6d20d0f1e41b17e032080872ff2b","sha256":"09adb51065cb406cb94d9809a73d3a05a29ad79ff58c1042790bee2308a88a8c","sha512":"e2a8d26c266ae1347566c938c7e1dc2944f7b228b2ac2bf0ef6dc37375edb82a348cce310a05b9a117139ca00d09ec23ec53509dbd9286b14aa8bb9a3d5f73b4","ssdeep":"","tlshash":"93e0684fb19a4c35168a78e843f5d70822d7226520473c21abac982c3964aabc417e5d","first_seen":"2025-12-18T00:40:38.932063Z","last_seen":"2026-07-24T08:16:23.48126Z","times_seen":1789,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16664555628\u0026cx=c\u0026gtm=4e64m2","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:48.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"GET /gtag/destination?id=AW-16664555628\u0026cx=c\u0026gtm=4e64m2 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-24510.bar/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 25 Apr 2026 05:40:48 GMT\r\nexpires: Sat, 25 Apr 2026 05:40:48 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sat, 25 Apr 2026 03:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:71:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:71:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:71:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:71:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 142945\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":419467,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5929)","md5":"26b90c807aca17193bd90ef550f71fa2","sha1":"461ca5a207d4d34c7bb8af743220eb5471e253cd","sha256":"223cb3b7e05cd6c097a58cb9210b69a7bf18f4c499a8d6cbf9923ddc735ee988","sha512":"f7d3221c7f9ae0fc01e47b985171ed929855e94f5f24f00656b7277a7d2c48c628cbfd9b3329b60518e5eddbd40de11e18f26acf7971d3729bcf016fd30c520e","ssdeep":"6144:NiFze4lEHFdMOguHKyoHqDUZApASTbqk6ZfGFF:cz2FdMdyoHk/","tlshash":"689408cdb3d674665392f478903f018ba57a38a2b44cc89af185cce42e7469a4277f7c","first_seen":"2026-04-25T03:55:54.053885Z","last_seen":"2026-04-25T05:43:29.530058Z","times_seen":4,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=7\u0026frm=0\u0026ae=g\u0026en=page_view\u0026dl=https%3A%2F%2F1xlite-24510.bar%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026rnd=1250706099.1777095648\u0026dt=1xBet\u0026auid=2564738.1777095648\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He64m2v9180563600za200zd9180563600xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938469~117266400\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1777095648039\u0026tfd=12892","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:48.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:37:36 GMT","end":"Mon, 22 Jun 2026 08:37:35 GMT"},"fingerprint":{"sha1":"08:79:9D:7F:DB:8C:0A:9F:3E:E2:C7:8A:F2:4D:E4:E2:5B:36:28:22","sha256":"07:42:F0:13:40:B6:A1:62:31:62:8E:96:2F:96:8C:7C:C0:5B:F0:8A:DB:0B:A6:E2:44:14:41:7D:B2:7C:B9:74"}}},"request":{"raw":"POST /ccm/collect?rcb=7\u0026frm=0\u0026ae=g\u0026en=page_view\u0026dl=https%3A%2F%2F1xlite-24510.bar%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026rnd=1250706099.1777095648\u0026dt=1xBet\u0026auid=2564738.1777095648\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He64m2v9180563600za200zd9180563600xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938469~117266400\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1777095648039\u0026tfd=12892 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-24510.bar/\r\nOrigin: https://1xlite-24510.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/plain\r\npragma: no-cache\r\ndate: Sat, 25 Apr 2026 05:40:48 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://1xlite-24510.bar\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T23:57:25.058416Z","times_seen":17827247,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":58,"dns":0,"connect":7,"send":0,"wait":18,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"besolono.link/47f729d9-ae93-4f02-81e9-a448141f510d","fqdn":"besolono.link","domain":"besolono.link","tld":"link"},"ip":{"addr":"164.90.253.124","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-25T05:40:35.162Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /47f729d9-ae93-4f02-81e9-a448141f510d HTTP/1.1\r\nHost: besolono.link\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 05:40:35 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 0\r\nlocation: https://refpa31380.com/L?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push\u0026site=1249669\u0026ad=16307\u0026r=registration/\r\nreferrer-policy: no-referrer\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2836,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T23:57:25.058416Z","times_seen":17827247,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":97,"dns":1,"connect":100,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-25T05:40:35Z","timestamp":1777095635,"ip_dst":{"addr":"164.90.253.124","port":80,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"ip_src":{"addr":"172.18.0.27","port":49154,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ETPRO INFO HTTP Request to a *.link domain","source":"{\"timestamp\":\"2026-04-25T05:40:35.361044+0000\",\"flow_id\":2081553011404527,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.27\",\"src_port\":49154,\"dest_ip\":\"164.90.253.124\",\"dest_port\":80,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.SuspExeTLDs\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2858678,\"rev\":1,\"signature\":\"ETPRO INFO HTTP Request to a *.link domain\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2024_10_10\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_10_10\"]}},\"http\":{\"hostname\":\"besolono.link\",\"url\":\"/47f729d9-ae93-4f02-81e9-a448141f510d\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":302,\"redirect\":\"https://refpa31380.com/L?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push\u0026site=1249669\u0026ad=16307\u0026r=registration/\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":706,\"bytes_toclient\":516,\"start\":\"2026-04-25T05:40:35.159471+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-25","alert":"Sinkholed","trigger":"besolono.link","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/bb19a99848.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:37.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/bb19a99848.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-24510.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 05:40:37 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Apr 2026 06:53:52 GMT\r\netag: W/\"a05e3f4a0e58eeee090170ae6d798a67\"\r\nx-amz-meta-mtime: 1776840780.581210069\r\ncontent-encoding: gzip\r\nexpires: Thu, 23 Apr 2026 07:14:55 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: arig-hw-edge-gc85\r\nage: 80029\r\ncache: HIT\r\nx-cached-since: 2026-04-24T07:26:48+00:00\r\ntraceparent: 00-8fd345639f5795e4e3bda1a2608f9ea3-5a8cce3515e4cd28-01\r\nx-shard: arig-shard0-default_443\r\nx-id-fe: arig-hw-edge-gc85.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1178,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1177)","md5":"a05e3f4a0e58eeee090170ae6d798a67","sha1":"3ee142428d511fd5115ca44d9df5baf985f88772","sha256":"805df7a373d388578056d9de32add53af794772a23aca18920e164a8134de48c","sha512":"39a59c2f0f77a2448634b23bf8a5f94bc00ff9dc925a2454d4b04e6c8e7ad57752fed160d670b90fd76573b50805d9f882901aebdb0292c37e7c19b5e17a2862","ssdeep":"","tlshash":"492163be6db4e030ab501aee3d35253243c93d93954ad0972acc439513970199f39fbb","first_seen":"2026-04-22T09:07:22.403451Z","last_seen":"2026-04-29T09:10:05.154527Z","times_seen":103,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/12256f33914d5a00e117534984161a0a.png","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:38.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/12256f33914d5a00e117534984161a0a.png HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-24510.bar/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 05:40:38 GMT\r\ncontent-type: image/png\r\ncontent-length: 6344\r\nlast-modified: Mon, 06 Apr 2026 08:19:03 GMT\r\netag: \"5cb10800cb3db105ba581c986b07cba3\"\r\nexpires: Tue, 07 Apr 2026 21:27:06 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: arig-hw-edge-gc86\r\nage: 2168\r\ncache: HIT\r\nx-cached-since: 2026-04-25T05:04:30+00:00\r\naccept-ranges: bytes\r\ntraceparent: 00-7411b46134ad51bd689c5c69e6f1a67b-464d99c4830ec355-01\r\nx-shard: arig-shard0-default_443\r\nx-id-fe: arig-hw-edge-gc84.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6344,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"5cb10800cb3db105ba581c986b07cba3","sha1":"79087f7bbb90a4ee817512efc77fa654def26001","sha256":"4597147951bfdca71934f51079ff15f7933843487923b1d20d8704a7a3ac225e","sha512":"1140391b11b16134e17239d87aec5e8144a9683932771ae167ee9ee4a1a255569fb06c6380da49b6cd83ee23be2b067e9994e7f3ed560c46289133d5893044f7","ssdeep":"192:1SMld686sOsozPYix9Cv75fSAxyg1N2zlt:UI686sOFzI7Mg1N0lt","tlshash":"93d1aed662da0c41c6021a29501e1e85bb14a8d68c6e810d2fd35761bff74d3724e6ed","first_seen":"2026-04-06T11:38:50.603521Z","last_seen":"2026-08-08T12:13:41.321464Z","times_seen":1098,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=3\u0026frm=0\u0026ae=g\u0026dl=https%3A%2F%2F1xlite-24510.bar%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026rnd=1250706099.1777095648\u0026dt=1xBet\u0026auid=2564738.1777095648\u0026navt=n\u0026npa=1\u0026_tu=KA\u0026gtm=45be64m2v9192592245z89180563600za20gzb9180563600zd9180563600xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938469~117266400~118128923\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-16664555628\u0026tid=AW-16664555628\u0026tft=1777095648319\u0026tfd=13172","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.150.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:48.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"02:11:B2:1D:09:0D:9E:4E:5B:DC:0A:6C:D5:4B:C6:4A:5B:50:C8:26","sha256":"99:E1:4B:50:60:0E:C3:94:CB:2C:15:85:8E:68:FF:F1:9C:B7:0C:9E:E0:8C:B7:29:52:18:12:81:67:C4:38:23"}}},"request":{"raw":"POST /ccm/collect?rcb=3\u0026frm=0\u0026ae=g\u0026dl=https%3A%2F%2F1xlite-24510.bar%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026rnd=1250706099.1777095648\u0026dt=1xBet\u0026auid=2564738.1777095648\u0026navt=n\u0026npa=1\u0026_tu=KA\u0026gtm=45be64m2v9192592245z89180563600za20gzb9180563600zd9180563600xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=0~115938465~115938469~117266400~118128923\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-16664555628\u0026tid=AW-16664555628\u0026tft=1777095648319\u0026tfd=13172 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-24510.bar/\r\nOrigin: https://1xlite-24510.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain\r\ndate: Sat, 25 Apr 2026 05:40:48 GMT\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://1xlite-24510.bar\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T23:57:25.058416Z","times_seen":17827247,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/e0e3a6cf1c.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:36.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/e0e3a6cf1c.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-24510.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 05:40:36 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Wed, 22 Apr 2026 06:53:52 GMT\r\netag: W/\"7b7aa3312251cddfbc6e659e02247d08\"\r\nx-amz-meta-mtime: 1776840780.583210115\r\ncontent-encoding: gzip\r\nexpires: Thu, 23 Apr 2026 07:14:42 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: arig-hw-edge-gc84\r\nage: 80199\r\ncache: HIT\r\nx-cached-since: 2026-04-24T07:23:57+00:00\r\ntraceparent: 00-9521f99c02f472d4634d2e386c56804b-7421cc58f47274a4-01\r\nx-shard: arig-shard0-default_443\r\nx-id-fe: arig-hw-edge-gc85.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":3823,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3354)","md5":"7b7aa3312251cddfbc6e659e02247d08","sha1":"089352bd1738fc013006b0299e5fb8734cb1a1c3","sha256":"04703b3467c27f5fada015901f094181baf46cc7245bb761c9f50f56a8348c1b","sha512":"e7ce1d0d860b8f3dbf60f2e24a60a6f3828dbd1e491460d30f5a8787b9776d95d36312dbd8daa95b69b7ee2b7692fb3e9ccb2f0309b446d98be7bef385a08337","ssdeep":"","tlshash":"7471c76e1efc28bc215d0f5a6f5368e00ea48d12d39c54b3ea460f350339045ba35aeb","first_seen":"2026-04-22T09:07:22.388586Z","last_seen":"2026-04-29T09:10:05.176602Z","times_seen":103,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-24510.bar/bff-api/config/group/get?groups=d.technical,d.global\u0026lang=en","fqdn":"1xlite-24510.bar","domain":"1xlite-24510.bar","tld":"bar"},"ip":{"addr":"185.175.166.188","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:37.607Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-24510.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 05:20:41 GMT","end":"Mon, 11 May 2026 05:20:40 GMT"},"fingerprint":{"sha1":"6D:61:37:98:93:02:72:45:D5:2B:95:E8:44:62:A5:12:A4:F3:FF:F6","sha256":"A7:BC:70:63:BF:6D:B3:6F:13:30:19:D4:BC:F7:A8:C0:05:8C:3D:F7:44:4C:7C:46:70:61:16:FB:5F:E4:41:74"}}},"request":{"raw":"GET /bff-api/config/group/get?groups=d.technical,d.global\u0026lang=en HTTP/1.1\r\nHost: 1xlite-24510.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nis-srv: false\r\nx-svc-source: __TECHNICAL_PAGES_APP__\r\nx-app-n: __TECHNICAL_PAGES_APP__\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=ua+mvGnsU9NUG1n4Az1jAg==; lng=en; cookies_agree_type=3; tzo=3; is12h=0; window_width=1920; fatman_uuid=070b9905-5195-88a7-cbf1-90e26b3c2b99\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sat, 25 Apr 2026 05:40:37 GMT\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ncontent-encoding: br\r\nserver-timing: dt_total;dur=0.080, bff;dur=6.78, wf-uht;dur=0.017\r\nvary: Accept-Encoding\r\nx-dt: 285\r\nx-pod: R-vp4l8\r\nx-time-ng: 0.008\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":1595,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"12ea9bef30fbf17a098c1ff382edc52a","sha1":"481eb877b6841cf0498a2c0cc551366aedca798e","sha256":"2bbd56f0e4fd4e977c6308d288d70da8799e7ec3d7f1adeed7171552de00cf45","sha512":"e4ca70dde7f276da6cf797527d379ae6652f572dc06a46a216561d2e75fd13c50bd9a812ad69b5a968fc0ddab4e67ade4bc8557ef6c7858ca60a249485ed2ada","ssdeep":"","tlshash":"1a31675d60b1893c60680576db82be449ffd405f35847685fe0c9d9c60e2ceefa2260b","first_seen":"2026-04-22T00:53:54.27276Z","last_seen":"2026-05-18T08:38:26.105104Z","times_seen":179,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-24510.bar/bff-api/config/group/get?groups=b.core,d.core\u0026lang=en","fqdn":"1xlite-24510.bar","domain":"1xlite-24510.bar","tld":"bar"},"ip":{"addr":"185.175.166.188","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:36.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-24510.bar","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Feb 2026 05:20:41 GMT","end":"Mon, 11 May 2026 05:20:40 GMT"},"fingerprint":{"sha1":"6D:61:37:98:93:02:72:45:D5:2B:95:E8:44:62:A5:12:A4:F3:FF:F6","sha256":"A7:BC:70:63:BF:6D:B3:6F:13:30:19:D4:BC:F7:A8:C0:05:8C:3D:F7:44:4C:7C:46:70:61:16:FB:5F:E4:41:74"}}},"request":{"raw":"GET /bff-api/config/group/get?groups=b.core,d.core\u0026lang=en HTTP/1.1\r\nHost: 1xlite-24510.bar\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nis-srv: false\r\nx-svc-source: __TECHNICAL_PAGES_APP__\r\nx-app-n: __TECHNICAL_PAGES_APP__\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=ua+mvGnsU9NUG1n4Az1jAg==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sat, 25 Apr 2026 05:40:37 GMT\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ncontent-encoding: br\r\nserver-timing: dt_total;dur=0.108, bff;dur=19.91, wf-uht;dur=0.034\r\nvary: Accept-Encoding\r\nx-dt: 285\r\nx-pod: R-hpgxv\r\nx-time-ng: 0.021\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":49854,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"7af5c30b2e00dd5e5553c7bed9340761","sha1":"9b74b45d9a16d832ef54318680711897632bd45c","sha256":"927ea11c5fe5c96b26c3304f42aec7a94dd2fcac5364870bed669ce5b3c7c100","sha512":"533dff0fbd38d7293eba84ccbd4497c81c7462f983592be79e7e67f77ea8123d8dd1ab281810e2368d79c56864528a79c5264a9f75ba64fd3e20430c84df2c94","ssdeep":"768:s3JtcsYVvG6Ofxv7FAcJrgOcbzs+0v4FXDO0lgdUQ36:sZtRYVvG6OfxZAcJrtyzs+0vaXC/dF6","tlshash":"5c23fe5a75d05a3a401f1ebacc63ed0e57e80f1b1c93e46699e3bd8a28b291444e347f","first_seen":"2026-04-24T23:37:54.217707Z","last_seen":"2026-04-25T08:12:19.108019Z","times_seen":7,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/4aafa3c312.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"103.151.135.62","port":443,"asn":140671,"as":"Arriga International Limited","country":"Hong Kong","country_code":"HK"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-24510.bar/en/block?tag=d_1249669m_16307c_[]MS[]null[]reg[]general[]17300_d60291_l61383_push","date":"2026-04-25T05:40:37.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/4aafa3c312.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-24510.bar\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-24510.bar/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 25 Apr 2026 05:40:37 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Wed, 22 Apr 2026 06:53:53 GMT\r\netag: W/\"53077468a10951cf995f7719a555f1be\"\r\nx-amz-meta-mtime: 1776840780.57821\r\ncontent-encoding: gzip\r\nexpires: Thu, 23 Apr 2026 13:44:16 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: arig-hw-edge-gc86\r\nage: 57174\r\ncache: HIT\r\nx-cached-since: 2026-04-24T13:47:43+00:00\r\ntraceparent: 00-a55f579fb391e5d577b032fec756acbd-2773e7b95357d945-01\r\nx-shard: arig-shard0-default_443\r\nx-id-fe: arig-hw-edge-gc85.fe.gc.onl\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":3994,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3994), with no line terminators","md5":"53077468a10951cf995f7719a555f1be","sha1":"8c4467476b31f0ab221aaa37df579ee68339afbd","sha256":"381b21eac86b13e291fb8aeb15803e5cabb1340a6dd9e385addaaff85432b64c","sha512":"2d044da0d6ea8871ea8a6682d5593f30d9295a10919a2ddbc3d7418adc37ea1b2439d0f9796a4ce5e194c0b5fa00cadfe5c1534e0afb002f70e2d67d620dd816","ssdeep":"","tlshash":"8481a9bebcb898320537e021a6596e7d0a71f51bd6200f85e00d93681cc36d36df2da8","first_seen":"2026-04-22T00:53:54.245766Z","last_seen":"2026-06-25T05:48:36.640279Z","times_seen":1117,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}