GET v3.traincdn.com/sys-static/shared-assets/__shared_popper_js_EEH7JIJK.js
200 OK 21 kB URL GET v3.traincdn.com/sys-static/shared-assets/__shared_popper_js_EEH7JIJK.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (21232)
Hash 65baa1e0e10c3b0e4763d35e76999e25
a21b6807691f637324b24296803e05b64fc4c694
610516103d1262a5c7d3f5481f3f54328723386634607085bf0cfc631ad0ab3f
GET /sys-static/shared-assets/__shared_popper_js_EEH7JIJK.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:50 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-4a78cb96c174ca6dd9e5327a951195bf-34e4f91f8c0166ee-01
last-modified: Fri, 09 May 2025 08:32:04 GMT
etag: W/"65baa1e0e10c3b0e4763d35e76999e25"
x-amz-meta-mtime: 1746779387.558592013
content-encoding: gzip
expires: Sat, 10 May 2025 15:55:16 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 74410
cache: HIT
x-cached-since: 2025-05-10T15:55:40+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1-512/desktop/media_asset/8b95368c1026df71d8917c37b18d1a90.json
200 OK 241 B URL GET v3.traincdn.com/genfiles/cms/1-512/desktop/media_asset/8b95368c1026df71d8917c37b18d1a90.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash 39257fbb62736206d5245e08925d7b60
4c11e3cb6a16b884772b88acdba30a2ad98e86b8
3a3cf0f5c60899ffb49d9825516aec475fd7b78cea8ae0b5b58dfb4e658f041e
GET /genfiles/cms/1-512/desktop/media_asset/8b95368c1026df71d8917c37b18d1a90.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:50 GMT
content-type: application/json
content-length: 241
traceparent: 00-ba372d41f7fb0ecb58c7b675faccbbd2-aff4bb0c3f881969-01
last-modified: Thu, 27 Feb 2025 13:24:28 GMT
etag: "39257fbb62736206d5245e08925d7b60"
expires: Sun, 11 May 2025 13:35:50 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
cache: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/753dedb46f.js
200 OK 4.0 kB URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/753dedb46f.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (1195)
Hash 054f2c276abe0e3e4e41fa10162572ed
12ca6ac3041d4ce1a37eb62a5f5b17fd191361b9
7624afce7be3aa2aaacc896f53855c44d0f9d6dd2c6f22e03c02d7f5f206a6fa
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/753dedb46f.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:50 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-9871d8d2ab41fc0bb7bfa9d8b7c54177-52bfeaeee1ced021-01
last-modified: Wed, 30 Apr 2025 07:29:34 GMT
etag: W/"054f2c276abe0e3e4e41fa10162572ed"
x-amz-meta-mtime: 1745997847.067695148
content-encoding: gzip
expires: Thu, 01 May 2025 07:34:05 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 15912
cache: HIT
x-cached-since: 2025-05-11T08:10:38+00:00
X-Firefox-Spdy: h2
GET www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7JGWL9SV66&cid=673857539.1746966960>m=45je5571v897130004za200&aip=1&dma=1&dma_cps=syphamo&gcd=13l3lPl2l1l1&npa=1&frm=0&tag_exp=101509157~103101750~103101752~103116025~103200001~103233427~103251618~103251620~103284320~103284322~103301114~103301116&tag_exp=101509157~103101750~103101752~103116025~103200001~103233427~103251618~103251620~103284320~103284322~103301114~103301116&z=1179728278
200 OK 42 B URL GET www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7JGWL9SV66&cid=673857539.1746966960>m=45je5571v897130004za200&aip=1&dma=1&dma_cps=syphamo&gcd=13l3lPl2l1l1&npa=1&frm=0&tag_exp=101509157~103101750~103101752~103116025~103200001~103233427~103251618~103251620~103284320~103284322~103301114~103301116&tag_exp=101509157~103101750~103101752~103116025~103200001~103233427~103251618~103251620~103284320~103284322~103301114~103301116&z=1179728278
IP
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerGoogle Trust Services
Subject*.google.no
Fingerprint66:A3:1A:F5:73:DE:8E:7D:0E:AA:01:69:6B:5C:DA:3F:F8:63:CD:5F
ValidityMon, 21 Apr 2025 08:43:35 GMT - Mon, 14 Jul 2025 08:43:34 GMT
File type GIF image data, version 89a, 1 x 1
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7JGWL9SV66&cid=673857539.1746966960>m=45je5571v897130004za200&aip=1&dma=1&dma_cps=syphamo&gcd=13l3lPl2l1l1&npa=1&frm=0&tag_exp=101509157~103101750~103101752~103116025~103200001~103233427~103251618~103251620~103284320~103284322~103301114~103301116&tag_exp=101509157~103101750~103101752~103116025~103200001~103233427~103251618~103251620~103284320~103284322~103301114~103301116&z=1179728278 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-006032.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sun, 11 May 2025 12:36:00 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
POST 1xlite-006032.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json
200 OK 23 B URL POST 1xlite-006032.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json
IP
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerLet's Encrypt
Subject1xlite-006032.top
FingerprintEA:03:CD:9C:9C:D6:BF:35:76:35:F3:CA:0F:0C:2A:12:AC:60:17:58
ValidityTue, 11 Mar 2025 05:20:00 GMT - Mon, 09 Jun 2025 05:19:59 GMT
Hash a89374397b3e325d66dca5051acdfab4
924295c2daf703de60d2e6c2c1b05a29f883c39a
3b2bd386f4a36bd7680052e59e37d45b314c7375e3c93ea918a69562453c9514
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1
Host: 1xlite-006032.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Content-Type: application/json
X-Lang: en
X-Uuid: ab2dc7fd-4548-4127-ad36-6e8fad917e55
Content-Length: 109
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_38951c_%5B%5DMS%5B%5DWL1%5B%5Dsmartcpm%5B%5Dgeneral%5B%5D6307113_d28985_l35030_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_38951c_%5B%5DMS%5B%5DWL1%5B%5Dsmartcpm%5B%5Dgeneral%5B%5D6307113_d28985_l35030_clickunder; auid=1bcn1mggmaNFSl+NBM3BAg==; window_width=1280; che_g=13964025-f63d-a816-18f6-36ea5c3fcd1c; SESSION=3cf01ba86811f99a1d2d0d6aad113590; _ga_7JGWL9SV66=GS2.1.s1746966960$o1$g0$t1746966960$j60$l0$h1903222290; _ga=GA1.1.673857539.1746966960
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:36:01 GMT
content-type: application/json
content-length: 23
x-dt: 512
x-time-ng: 0.001
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.007, wf-uht;dur=0.009
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2
200 OK 64 kB URL GET v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 63748, version 1.0
Hash 6887b6f24414dbc612dbf42ccdc76b70
8068d3abfbc6cbf35b55919da45b1f4d2d136238
fc5c015fc32518f1ed810fa84ca28941eb9d5a3c81acc8df69a4dbbeedef7b0c
GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:48 GMT
content-type: font/woff2
content-length: 63748
traceparent: 00-0e1edfeeffd2bf97b70e252e0a0b4fca-f9f77c8c2a507344-01
last-modified: Wed, 14 Jun 2023 09:49:53 GMT
etag: "6887b6f24414dbc612dbf42ccdc76b70"
expires: Thu, 16 Jan 2025 10:32:14 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 428
cache: HIT
x-cached-since: 2025-05-11T12:28:40+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET v3.traincdn.com/main-static/62ddcac7/desktop/default/Betting.Core-e26aeba3.js
200 OK 2.1 kB URL GET v3.traincdn.com/main-static/62ddcac7/desktop/default/Betting.Core-e26aeba3.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (2145), with no line terminators
Hash ad8b702f43e8488b2f83d2591e11cc73
8a0fc892a4f1bb60446fdfb48474e713ab24d012
280be10eba734661bd87ecaf27c95576732e8f196db87a8b1c3402b311cd45be
GET /main-static/62ddcac7/desktop/default/Betting.Core-e26aeba3.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-006032.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:50 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-94edbf2a91f770221b4400c7ad6e8619-104d34bba9413d2e-01
last-modified: Fri, 09 May 2025 08:29:57 GMT
etag: W/"ad8b702f43e8488b2f83d2591e11cc73"
x-amz-meta-mtime: 1746779396.584324408
content-encoding: gzip
expires: Sat, 10 May 2025 09:03:19 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 12512
cache: HIT
x-cached-since: 2025-05-11T09:07:18+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/shared-assets/__shared_accept_language_parser_FZZ6RWIK.js
200 OK 1.3 kB URL GET v3.traincdn.com/sys-static/shared-assets/__shared_accept_language_parser_FZZ6RWIK.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (1265)
Hash fc1c44ae9e4954ae02c484125b7a6a1e
484eb92dd5bb166e7a06c1cf2dce2400bb3055e3
fa015c22854d009fd3436cac0b3958a3616d67d9c633c61d0ae309c114ab9f04
GET /sys-static/shared-assets/__shared_accept_language_parser_FZZ6RWIK.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:50 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-7ec47e87a7b1a23624993d03e4676f53-89e9d0616519be80-01
last-modified: Fri, 09 May 2025 08:32:04 GMT
etag: W/"fc1c44ae9e4954ae02c484125b7a6a1e"
x-amz-meta-mtime: 1746779387.556591837
content-encoding: gzip
expires: Sat, 10 May 2025 11:01:40 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 5644
cache: HIT
x-cached-since: 2025-05-11T11:01:46+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1-512/desktop/media_asset/1bf643e777feeb8d52d10b6f1bf4d8a1.json
200 OK 2.9 kB URL GET v3.traincdn.com/genfiles/cms/1-512/desktop/media_asset/1bf643e777feeb8d52d10b6f1bf4d8a1.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash b826b71c862990bb6aa34369c279c05d
f4fa59ebfff164e26c5d4329337fe2bf214f1e2a
7b6a97d18d29424b911b34ced86b0f7fad881e972fa476474a44d8e22c369490
GET /genfiles/cms/1-512/desktop/media_asset/1bf643e777feeb8d52d10b6f1bf4d8a1.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:50 GMT
content-type: application/json
traceparent: 00-6bafb0da5c3e03016a94d950eeb2fb56-5cffe73203c5a60d-01
last-modified: Thu, 08 May 2025 12:53:08 GMT
etag: W/"b826b71c862990bb6aa34369c279c05d"
content-encoding: gzip
expires: Sun, 11 May 2025 13:35:50 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
cache: MISS
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/entry-d0ce2ba8a2.js
200 OK 28 kB URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/entry-d0ce2ba8a2.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (2969)
Hash feb598e3059a193eccbaa750d5abb764
8e97a33f00c356963a11b44edccad3e720a8f286
71d4552fff174538787abc9e1070b5731e2a8911d019f7e8a143e0448826f2c5
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/entry-d0ce2ba8a2.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-006032.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:50 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-aa09f5a74c8fc2bd57887dad332cc7d8-dc012b3353f68573-01
last-modified: Wed, 30 Apr 2025 07:29:34 GMT
etag: W/"feb598e3059a193eccbaa750d5abb764"
x-amz-meta-mtime: 1745997847.069695279
content-encoding: gzip
expires: Thu, 01 May 2025 07:34:04 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 15913
cache: HIT
x-cached-since: 2025-05-11T08:10:37+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/5a5f890255.js
200 OK 1.3 kB URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/5a5f890255.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type ASCII text, with very long lines (542)
Hash 203e1eb567b6bf51d10aaad1a9dff7b3
d4fd718108c9c573b15464a563978f76a0f26288
4002b63ec36a11d32ef5fc9774702157a2c1c82acb17429c1b42cfb165714399
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/5a5f890255.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:50 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-6e223f0e180324dd0131bd4adda1f771-56ab03dc78ee9b92-01
last-modified: Wed, 30 Apr 2025 07:29:34 GMT
etag: W/"203e1eb567b6bf51d10aaad1a9dff7b3"
x-amz-meta-mtime: 1745997847.067695148
content-encoding: gzip
expires: Fri, 02 May 2025 18:31:20 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 64310
cache: HIT
x-cached-since: 2025-05-10T18:44:00+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/main-static/62ddcac7/desktop/default/analytics-2a8f5225.js
200 OK 7.8 kB URL GET v3.traincdn.com/main-static/62ddcac7/desktop/default/analytics-2a8f5225.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (7765), with no line terminators
Hash a7ab0d3478efff4a7b6dc95b95fd78d0
29fd58ecfad589b7e2324789051fd93f883e8fb1
7952f5f889f4544c562bb59148eb55d0a212f7826843c2c622be04eda26aa490
GET /main-static/62ddcac7/desktop/default/analytics-2a8f5225.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-006032.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:36:00 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-68c943104c6f9883d9baec6884863e3e-d86cf26e02d8cebf-01
last-modified: Fri, 09 May 2025 08:29:57 GMT
etag: W/"a7ab0d3478efff4a7b6dc95b95fd78d0"
x-amz-meta-mtime: 1746779396.588324419
content-encoding: gzip
expires: Sat, 10 May 2025 09:03:26 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 12512
cache: HIT
x-cached-since: 2025-05-11T09:07:28+00:00
X-Firefox-Spdy: h2
POST region1.analytics.google.com/g/collect?v=2&tid=G-7JGWL9SV66>m=45je5571v897130004za200&_p=1746966960108&gcd=13l3lPl2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509157~103101750~103101752~103116025~103200001~103233427~103251618~103251620~103284320~103284322~103301114~103301116&cid=673857539.1746966960&ecid=1903222290&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_eu=AEAAAAQ&_s=1&sid=1746966960&sct=1&seg=0&dl=https%3A%2F%2F1xlite-006032.top%2Fen%2Fblock%3FredirectedFrom%3D5b63b43810086835f8b2b8111b74c271&dt=1xBet&en=scroll&ep.optimize_id=GTM-5R4MT54&epn.percent_scrolled=90&upn.ref_id=1&tfd=14323
204 No Content 0 B URL POST region1.analytics.google.com/g/collect?v=2&tid=G-7JGWL9SV66>m=45je5571v897130004za200&_p=1746966960108&gcd=13l3lPl2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509157~103101750~103101752~103116025~103200001~103233427~103251618~103251620~103284320~103284322~103301114~103301116&cid=673857539.1746966960&ecid=1903222290&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_eu=AEAAAAQ&_s=1&sid=1746966960&sct=1&seg=0&dl=https%3A%2F%2F1xlite-006032.top%2Fen%2Fblock%3FredirectedFrom%3D5b63b43810086835f8b2b8111b74c271&dt=1xBet&en=scroll&ep.optimize_id=GTM-5R4MT54&epn.percent_scrolled=90&upn.ref_id=1&tfd=14323
IP
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint02:7D:56:C0:B9:20:0C:27:A4:AC:B9:8F:9D:45:1D:85:2A:30:50:AD
ValidityMon, 21 Apr 2025 08:40:41 GMT - Mon, 14 Jul 2025 08:40:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-7JGWL9SV66>m=45je5571v897130004za200&_p=1746966960108&gcd=13l3lPl2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509157~103101750~103101752~103116025~103200001~103233427~103251618~103251620~103284320~103284322~103301114~103301116&cid=673857539.1746966960&ecid=1903222290&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_eu=AEAAAAQ&_s=1&sid=1746966960&sct=1&seg=0&dl=https%3A%2F%2F1xlite-006032.top%2Fen%2Fblock%3FredirectedFrom%3D5b63b43810086835f8b2b8111b74c271&dt=1xBet&en=scroll&ep.optimize_id=GTM-5R4MT54&epn.percent_scrolled=90&upn.ref_id=1&tfd=14323 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://1xlite-006032.top
date: Sun, 11 May 2025 12:36:00 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:153:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:153:0
report-to: {"group":"ascnsrsggc:153:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:153:0"}],}
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/shared-assets/__shared_chunk_KSBWA3N2.js
200 OK 610 B URL GET v3.traincdn.com/sys-static/shared-assets/__shared_chunk_KSBWA3N2.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (609)
Hash 464c50409850b3095783d5b3b9a1b00d
7d5c3f49bd0689d72dddceee68afd229f4168ed5
71cbc8847b4abb3782fe515be3e9e1f3fb639f801b337a2a3612616151ec250d
GET /sys-static/shared-assets/__shared_chunk_KSBWA3N2.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:50 GMT
content-type: text/javascript; charset=utf-8
content-length: 610
traceparent: 00-ddec1bc81c9f0db39f2b4b5853b96c13-b1700f8689f77020-01
last-modified: Fri, 09 May 2025 08:32:04 GMT
etag: "464c50409850b3095783d5b3b9a1b00d"
x-amz-meta-mtime: 1746779387.557591925
expires: Sat, 10 May 2025 10:58:57 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 5608
cache: HIT
x-cached-since: 2025-05-11T11:02:22+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1-512/desktop/media_asset/3bda3a44a691bc93071f25a2d6092ae5.json
200 OK 3.6 kB URL GET v3.traincdn.com/genfiles/cms/1-512/desktop/media_asset/3bda3a44a691bc93071f25a2d6092ae5.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash 4b08975411699bcd7464f49777e866bf
2a9b0a0f3eadf5f3e1ef688bacd9560dd59c73d2
b6208d18413f8988db2e0040ff72516c0cb5e06d3d9692b5b098808ab46fc378
GET /genfiles/cms/1-512/desktop/media_asset/3bda3a44a691bc93071f25a2d6092ae5.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:50 GMT
content-type: application/json
traceparent: 00-1ca38fd5209e34c810700c35b0d2bce1-ec25ab9c78e81beb-01
last-modified: Thu, 27 Feb 2025 09:06:16 GMT
etag: W/"4b08975411699bcd7464f49777e866bf"
content-encoding: gzip
expires: Sun, 11 May 2025 13:35:50 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
cache: MISS
X-Firefox-Spdy: h2
GET 1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
203 Non Authoritative 260 kB URL User Request GET 1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
IP
Certificate IssuerLet's Encrypt
Subject1xlite-006032.top
FingerprintEA:03:CD:9C:9C:D6:BF:35:76:35:F3:CA:0F:0C:2A:12:AC:60:17:58
ValidityTue, 11 Mar 2025 05:20:00 GMT - Mon, 09 Jun 2025 05:19:59 GMT
File type HTML document, ASCII text, with very long lines (57799)
Size 260 kB (260374 bytes)
Hash c919778b9fe253b1bae211b4ebea0014
cbf21739f41183b80ce2bf17efc7df8534761381
0bad1be622e19e5d82fe32bcb238b3dc0e7f3c9e6cabaa88bdd83ab0d998fbff
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271 HTTP/1.1
Host: 1xlite-006032.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_38951c_%5B%5DMS%5B%5DWL1%5B%5Dsmartcpm%5B%5Dgeneral%5B%5D6307113_d28985_l35030_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_38951c_%5B%5DMS%5B%5DWL1%5B%5Dsmartcpm%5B%5Dgeneral%5B%5D6307113_d28985_l35030_clickunder; postback_watcher=; auid=1bcn1mggmaNFSl+NBM3BAg==
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 203 Non Authoritative
server: nginx
date: Sun, 11 May 2025 12:35:47 GMT
content-type: text/html; charset=utf-8
content-length: 260374
accept-ranges: none
link: <https://v3.traincdn.com/sys-ui/2.3.169/Desktop/Default/client.css>; rel=preload; as=style; crossorigin=anonymous
server-timing: dt_total;dur=0.004, total;dur=103;desc="Nuxt Server Time"
set-cookie: gw-mm=; Path=/; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Secure; SameSite=None; Partitioned
lng=en; Path=/
cookies_agree_type=3; Path=/
tzo=2; Path=/
is12h=0; Path=/
x-dt: 512
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
GET v3.traincdn.com/main-static/62ddcac7/desktop/default/css/684d7545.css
200 OK 14 kB URL GET v3.traincdn.com/main-static/62ddcac7/desktop/default/css/684d7545.css
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type ASCII text, with very long lines (14391), with no line terminators
Hash a552d5db890b7f16e370b33cc587e807
a9dc47737b3e1d8ef6fcbb48c7c0b026c6fda545
0d7e00204297499711ae1da574d4635b31d8238ab4a663b382c44d850d24f3ec
GET /main-static/62ddcac7/desktop/default/css/684d7545.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-006032.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:48 GMT
content-type: text/css; charset=utf-8
traceparent: 00-4e3ae4e5a95902998ae638cdd4f3fc9d-088b0b167b6a80d8-01
last-modified: Fri, 09 May 2025 08:29:58 GMT
etag: W/"a552d5db890b7f16e370b33cc587e807"
x-amz-meta-mtime: 1746779396.592324431
content-encoding: gzip
expires: Sat, 10 May 2025 09:03:11 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 12512
cache: HIT
x-cached-since: 2025-05-11T09:07:16+00:00
X-Firefox-Spdy: h2
POST 1xlite-006032.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json
200 OK 2 B URL POST 1xlite-006032.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json
IP
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerLet's Encrypt
Subject1xlite-006032.top
FingerprintEA:03:CD:9C:9C:D6:BF:35:76:35:F3:CA:0F:0C:2A:12:AC:60:17:58
ValidityTue, 11 Mar 2025 05:20:00 GMT - Mon, 09 Jun 2025 05:19:59 GMT
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json HTTP/1.1
Host: 1xlite-006032.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Content-Type: application/json
X-Lang: en
X-Uuid: ab2dc7fd-4548-4127-ad36-6e8fad917e55
Content-Length: 19
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_38951c_%5B%5DMS%5B%5DWL1%5B%5Dsmartcpm%5B%5Dgeneral%5B%5D6307113_d28985_l35030_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_38951c_%5B%5DMS%5B%5DWL1%5B%5Dsmartcpm%5B%5Dgeneral%5B%5D6307113_d28985_l35030_clickunder; postback_watcher=; auid=1bcn1mggmaNFSl+NBM3BAg==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:49 GMT
content-type: application/json
content-length: 2
x-dt: 512
x-time-ng: 0.001
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.132, wf-uht;dur=0.014
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_auth/en/dictionary_40c95d7df5bb4b44db14e1193de6c643.json
200 OK 9.7 kB URL GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_auth/en/dictionary_40c95d7df5bb4b44db14e1193de6c643.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash 64c38aa3bf35c1488e63e7c3511af9b0
106f0948d8e3ee6c10526d6b6860d79210a7021b
9bc0749be81f39d2d0aeac92347acc4863f64074382e8819a35b666754eeaf38
GET /genfiles/web-app-v2/dictionary2/v3_auth/en/dictionary_40c95d7df5bb4b44db14e1193de6c643.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:49 GMT
content-type: application/json; charset=utf-8
traceparent: 00-d93ed1f575b7f2693600ec1282bb7088-6d007e4f0a710630-01
last-modified: Wed, 07 May 2025 14:06:27 GMT
etag: W/"64c38aa3bf35c1488e63e7c3511af9b0"
cache-control: max-age=3600
content-encoding: gzip
expires: Wed, 07 May 2025 15:17:42 GMT
x-time-ng: 0.001
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 3193
cache: HIT
x-cached-since: 2025-05-11T11:42:36+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1-512/desktop/media_asset/026bae75f550b141eced6878aa9d54a4.json
200 OK 7.3 kB URL GET v3.traincdn.com/genfiles/cms/1-512/desktop/media_asset/026bae75f550b141eced6878aa9d54a4.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash 0614058b667e6dfa1cdecc6e0e53131c
4f20f88c436fb5cbd82cf1dcfeaa14e52195a369
be16474b0f19b7536ebdd3d0f8867b151eaa4638411ddb46845f887a5d51a653
GET /genfiles/cms/1-512/desktop/media_asset/026bae75f550b141eced6878aa9d54a4.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:49 GMT
content-type: application/json
traceparent: 00-2b86072c419c9f549213b321d0bf33b4-63c35105b570e3b0-01
last-modified: Thu, 23 Jan 2025 13:19:18 GMT
etag: W/"0614058b667e6dfa1cdecc6e0e53131c"
content-encoding: gzip
expires: Sun, 11 May 2025 13:35:49 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
cache: MISS
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_base-app_210b6fa8a8.js
200 OK 799 kB URL GET v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_base-app_210b6fa8a8.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (22765)
Size 799 kB (798806 bytes)
Hash b388efb9d1e0486ae5f4eefc048c6f92
312d9a68daac4023901700e92fd94786348c6926
8c5a3904a9ea820b8dc76874370cd5f6b773885167b63b2ed97d39ff33aaaa12
GET /sys-static/shared-assets/Desktop/__shared_base-app_210b6fa8a8.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:50 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-29d72df9e65d1ce34e7943c5e416579d-de8d5be200b4b78a-01
last-modified: Wed, 07 May 2025 13:34:00 GMT
etag: W/"b388efb9d1e0486ae5f4eefc048c6f92"
x-amz-meta-mtime: 1746624743.201927296
content-encoding: gzip
expires: Fri, 09 May 2025 10:12:58 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 7976
cache: HIT
x-cached-since: 2025-05-11T10:22:54+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/4b4d8dc118.js
200 OK 2.5 kB URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/4b4d8dc118.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type ASCII text, with very long lines (1064)
Hash 0b0bfa4e985d164cc8daea3a5d6ba08f
ff5a04a41e2e72112766ccbc72878afc6eaa9f79
98bc37db78480c22fbe53878ba6a1c4feb09758f2e98394026e2de232124ddf0
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/4b4d8dc118.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:50 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-402caa4ea7369b389f8fceb575c66bd0-eea26c2042a03d4c-01
last-modified: Wed, 30 Apr 2025 07:29:34 GMT
etag: W/"0b0bfa4e985d164cc8daea3a5d6ba08f"
x-amz-meta-mtime: 1745997847.066695082
content-encoding: gzip
expires: Thu, 01 May 2025 07:34:05 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 15912
cache: HIT
x-cached-since: 2025-05-11T08:10:38+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2
200 OK 64 kB URL GET v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 63920, version 1.0
Hash a65527fcb58f66a7cfbc0e6b160538b4
45d260e7fa343401b5bb0df982a014f53e2d253b
fb13c3a1cbac60649b76f7d7f85c1645d35ac69b85ce5f4eb0692505ecc2cd45
GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:48 GMT
content-type: font/woff2
content-length: 63920
traceparent: 00-ab2740c3f4c7745614e2e4a67703d7db-4c3886d8b7514f82-01
last-modified: Wed, 14 Jun 2023 09:49:53 GMT
etag: "a65527fcb58f66a7cfbc0e6b160538b4"
expires: Thu, 16 Jan 2025 10:45:34 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 3526
cache: HIT
x-cached-since: 2025-05-11T11:37:02+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_registration/en/dictionary_a43bac30ab8d58daed30a965e5b4dcb8.json
200 OK 21 kB URL GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_registration/en/dictionary_a43bac30ab8d58daed30a965e5b4dcb8.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (20013), with no line terminators
Hash 3ea158caa42388288a5a2fdc71d7792a
2bc27c4a5312408320e8335499d0e149a871b0f9
c6f91e5dcb957ec38709a6d3eee30ab404f474030364be4f7e5e576a2c8453af
GET /genfiles/web-app-v2/dictionary2/v3_registration/en/dictionary_a43bac30ab8d58daed30a965e5b4dcb8.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:49 GMT
content-type: application/json; charset=utf-8
traceparent: 00-cdccc0d31a82e2f3a1267773e5aa0446-b0e494f88e5d18c9-01
last-modified: Fri, 09 May 2025 08:06:11 GMT
etag: W/"46973699a05a1c24f569f550be848554"
cache-control: max-age=3600
content-encoding: gzip
expires: Fri, 09 May 2025 09:17:45 GMT
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 552
cache: HIT
x-cached-since: 2025-05-11T12:26:37+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1-512/desktop/media_asset/c0fc5307a94eeb35eb82fe42b00ac50b.json
200 OK 182 B URL GET v3.traincdn.com/genfiles/cms/1-512/desktop/media_asset/c0fc5307a94eeb35eb82fe42b00ac50b.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash 0a64a07e9a34e8a5b5e97e80a10888c5
82545cbc39b7dcc031dd10dea841a0b3698243d6
7201497e7e8cdf9d35bf6998e43dcde5feea535f9828ce3ee98785781016126c
GET /genfiles/cms/1-512/desktop/media_asset/c0fc5307a94eeb35eb82fe42b00ac50b.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:49 GMT
content-type: application/json
content-length: 182
traceparent: 00-7c5975f56aca54ec75400cd2c685b97d-31e2aacb017de890-01
last-modified: Thu, 27 Feb 2025 08:55:29 GMT
etag: "0a64a07e9a34e8a5b5e97e80a10888c5"
expires: Sun, 11 May 2025 13:35:49 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
cache: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_block_pages/en/dictionary_bc0570f08a28537dc724f4764ecf77e4.json
200 OK 2.3 kB URL GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_block_pages/en/dictionary_bc0570f08a28537dc724f4764ecf77e4.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash 7c12ae6fc08684f50822b3eb56779e29
036c726b8b7b2d24f987391101f3e8d1a2a183cf
a2eac45353675c82733192916712b8876c6b038b7bdbddc24df464e38b67cbfd
GET /genfiles/web-app-v2/dictionary2/v3_block_pages/en/dictionary_bc0570f08a28537dc724f4764ecf77e4.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:50 GMT
content-type: application/json; charset=utf-8
traceparent: 00-55c13689a559f4b1e528b55cb5ee157e-40763db895d34a56-01
last-modified: Tue, 22 Apr 2025 08:06:29 GMT
etag: W/"7c12ae6fc08684f50822b3eb56779e29"
cache-control: max-age=3600
content-encoding: gzip
expires: Tue, 22 Apr 2025 09:26:34 GMT
x-time-ng: 0.001
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 537
cache: HIT
x-cached-since: 2025-05-11T12:26:53+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1-512/desktop/media_asset/fb276a321b4bae62df75a4db8788b592.json
200 OK 328 B URL GET v3.traincdn.com/genfiles/cms/1-512/desktop/media_asset/fb276a321b4bae62df75a4db8788b592.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash 4347fc050ebe622e30a7bf78a213b5a0
c05b3b571980b01ff9f07e6adc1c29c58be70bd1
ed1b1193a248bf273141c31b7f74dd1224416b3757e5a71f2e7d579c50d65d57
GET /genfiles/cms/1-512/desktop/media_asset/fb276a321b4bae62df75a4db8788b592.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:50 GMT
content-type: application/json
content-length: 328
traceparent: 00-986269a4a51a0ac59069fba47d832990-4661e1196ca9ddca-01
last-modified: Thu, 27 Feb 2025 10:53:00 GMT
etag: "4347fc050ebe622e30a7bf78a213b5a0"
expires: Sun, 11 May 2025 13:35:50 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
cache: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
GET radar.cedexis.com/1/23802/radar.js
302 Moved Temporarily 390 B URL GET radar.cedexis.com/1/23802/radar.js
IP
ASN #63911 NetActuate, Inc
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerDigiCert Inc
Subjectradar.cedexis.com
FingerprintA2:3E:30:19:D5:41:3A:11:81:58:E3:B1:6F:F4:D2:78:0B:44:6F:D0
ValidityFri, 07 Mar 2025 00:00:00 GMT - Fri, 06 Mar 2026 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/23802/radar.js HTTP/1.1
Host: radar.cedexis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-006032.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Sun, 11 May 2025 12:36:00 GMT
Content-Type: text/html
Content-Length: 138
Connection: keep-alive
Location: /1707728419/stub.js
Expires: Sun, 11 May 2025 12:46:00 GMT
Cache-Control: max-age=600
Vary: User-Agent,DNT
GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/cc4c02ced1.js
200 OK 1.2 kB URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/cc4c02ced1.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type ASCII text, with very long lines (839)
Hash 83d01b7d33bd0cecde4dc75bf7168e0b
924cbadc9f0e2d2de7acdeb219fbba16d5dc728a
415861cbe374571907cede8755b222563576bc289fdbd0772798d73c6c39238d
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/cc4c02ced1.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:50 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-6c84633d0ce376e4968795c696231ef4-05df326a69d7f4f2-01
last-modified: Wed, 30 Apr 2025 07:29:34 GMT
etag: W/"83d01b7d33bd0cecde4dc75bf7168e0b"
x-amz-meta-mtime: 1745997847.069695279
content-encoding: gzip
expires: Thu, 01 May 2025 10:12:31 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 6713
cache: HIT
x-cached-since: 2025-05-11T10:43:57+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/e3ac97c990.js
200 OK 2.0 kB URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/e3ac97c990.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type ASCII text, with very long lines (1435)
Hash 633a23ac8f2994574a7c8d19f46eee33
70865c9a4e87ef719dfbfb98063b831f92b09994
fb0d2c002aff9eabf98e91ef9b237795503911ddfa40fce737a0dc851d385d8d
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/e3ac97c990.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:50 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-3464d3042709d6bd17717eb8ade17019-28a006ffdae7e683-01
last-modified: Wed, 30 Apr 2025 07:29:34 GMT
etag: W/"633a23ac8f2994574a7c8d19f46eee33"
x-amz-meta-mtime: 1745997847.071695411
content-encoding: gzip
expires: Thu, 01 May 2025 07:34:05 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 15912
cache: HIT
x-cached-since: 2025-05-11T08:10:38+00:00
X-Firefox-Spdy: h2
GET 1xlite-006032.top/bff-api/config/group/get?groups=d.technical&lang=en
200 OK 754 B URL GET 1xlite-006032.top/bff-api/config/group/get?groups=d.technical&lang=en
IP
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerLet's Encrypt
Subject1xlite-006032.top
FingerprintEA:03:CD:9C:9C:D6:BF:35:76:35:F3:CA:0F:0C:2A:12:AC:60:17:58
ValidityTue, 11 Mar 2025 05:20:00 GMT - Mon, 09 Jun 2025 05:19:59 GMT
Hash 4d40a4e2cc2054599e15677a2471eba3
5483a8e8c82607e3a6890c2f9cd40ff344076624
18f61e83201a920042d3507947260b890c500e8388f164e54bfc96ab157db896
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /bff-api/config/group/get?groups=d.technical&lang=en HTTP/1.1
Host: 1xlite-006032.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
content-type: application/json
x-requested-with: XMLHttpRequest
is-srv: false
x-svc-source: __TECHNICAL_PAGES_APP__
x-app-n: __TECHNICAL_PAGES_APP__
x-geoip2-country-code: ru
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_38951c_%5B%5DMS%5B%5DWL1%5B%5Dsmartcpm%5B%5Dgeneral%5B%5D6307113_d28985_l35030_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_38951c_%5B%5DMS%5B%5DWL1%5B%5Dsmartcpm%5B%5Dgeneral%5B%5D6307113_d28985_l35030_clickunder; postback_watcher=; auid=1bcn1mggmaNFSl+NBM3BAg==; window_width=1920; che_g=13964025-f63d-a816-18f6-36ea5c3fcd1c
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:50 GMT
content-type: application/json
content-length: 754
cache-control: no-cache, private
server-timing: dt_total;dur=0.107, bff;dur=9.31, wf-uht;dur=0.018
x-dt: 512
x-pod: R-b8tx4
x-time-ng: 0.010
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
GET v3.traincdn.com/main-static/62ddcac7/desktop/default/vendors/plugins.v-tooltip-b5cb60af.js
200 OK 77 kB URL GET v3.traincdn.com/main-static/62ddcac7/desktop/default/vendors/plugins.v-tooltip-b5cb60af.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65476)
Hash d202605644cb1a962c2ea9edfa17418b
ad3743f9070fdb9ea7bf2b3b32458ff4a7b45b35
645c7eda5803dd79632d37d9e9ded3b5462329a57ebe4a7c9bbdc471deb9d41d
GET /main-static/62ddcac7/desktop/default/vendors/plugins.v-tooltip-b5cb60af.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-006032.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:49 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-bacb854bba9bf07d7aa8c704fc5e042d-0826700fb1f4a4fa-01
last-modified: Fri, 09 May 2025 08:29:57 GMT
etag: W/"d202605644cb1a962c2ea9edfa17418b"
x-amz-meta-mtime: 1746779396.604324466
content-encoding: gzip
expires: Sat, 10 May 2025 09:03:15 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 12512
cache: HIT
x-cached-since: 2025-05-11T09:07:17+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_coupon/en/dictionary_22c581700f9009d3aa46609a4ffa61d6.json
200 OK 24 kB URL GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_coupon/en/dictionary_22c581700f9009d3aa46609a4ffa61d6.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash 3a36df93e63e0dd00a4ad628c20f495a
b2005e9725612a2c33530627966d1827f5c3fe8d
0425b9e7cdd4c8f1049dd240ad2a23a45bfa9fb86f95f4790b3e286afe527b40
GET /genfiles/web-app-v2/dictionary2/v3_coupon/en/dictionary_22c581700f9009d3aa46609a4ffa61d6.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:49 GMT
content-type: application/json; charset=utf-8
traceparent: 00-9d5e5edb4119afb97f72c6c2afab67c4-7121be0bedf80cc7-01
last-modified: Tue, 22 Apr 2025 12:06:05 GMT
etag: W/"3a36df93e63e0dd00a4ad628c20f495a"
cache-control: max-age=3600
content-encoding: gzip
expires: Tue, 22 Apr 2025 13:25:43 GMT
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 825
cache: HIT
x-cached-since: 2025-05-11T12:22:04+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1-512/desktop/media_asset/975773af1816f03bb7c5654bf57f53a1.json
200 OK 9.3 kB URL GET v3.traincdn.com/genfiles/cms/1-512/desktop/media_asset/975773af1816f03bb7c5654bf57f53a1.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash 81ff9954ff9459575697ecee95ed405f
32d40b5ba8d6944a0966cdf50234ce163f960eac
594e4b8f929a732598fb2ae98cee40825d036aebf5e8eaef345ca9050357b5c1
GET /genfiles/cms/1-512/desktop/media_asset/975773af1816f03bb7c5654bf57f53a1.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:49 GMT
content-type: application/json
traceparent: 00-258a274bb24d90bae61f59f104adbab6-e3e65b1a5923e4d2-01
last-modified: Wed, 20 Nov 2024 09:20:11 GMT
etag: W/"81ff9954ff9459575697ecee95ed405f"
content-encoding: gzip
expires: Sun, 11 May 2025 13:35:49 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
cache: MISS
X-Firefox-Spdy: h2
POST 1xlite-006032.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json
200 OK 23 B URL POST 1xlite-006032.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json
IP
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerLet's Encrypt
Subject1xlite-006032.top
FingerprintEA:03:CD:9C:9C:D6:BF:35:76:35:F3:CA:0F:0C:2A:12:AC:60:17:58
ValidityTue, 11 Mar 2025 05:20:00 GMT - Mon, 09 Jun 2025 05:19:59 GMT
Hash 77a102ace7373d5c5c8584303e0e1fb4
d5e9ebeef4653c34fa903e853cb8cb6ad7092a4e
cedbbbe7a6a793946c960cb1c43ecd8e98afc4a00edba53b1211f77dd567f299
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1
Host: 1xlite-006032.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Content-Type: application/json
X-Lang: en
X-Uuid: ab2dc7fd-4548-4127-ad36-6e8fad917e55
Content-Length: 48
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_38951c_%5B%5DMS%5B%5DWL1%5B%5Dsmartcpm%5B%5Dgeneral%5B%5D6307113_d28985_l35030_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_38951c_%5B%5DMS%5B%5DWL1%5B%5Dsmartcpm%5B%5Dgeneral%5B%5D6307113_d28985_l35030_clickunder; postback_watcher=; auid=1bcn1mggmaNFSl+NBM3BAg==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:49 GMT
content-type: application/json
content-length: 23
x-dt: 512
x-time-ng: 0.000
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.122, wf-uht;dur=0.009
X-Firefox-Spdy: h2
POST 1xlite-006032.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json
200 OK 23 B URL POST 1xlite-006032.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json
IP
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerLet's Encrypt
Subject1xlite-006032.top
FingerprintEA:03:CD:9C:9C:D6:BF:35:76:35:F3:CA:0F:0C:2A:12:AC:60:17:58
ValidityTue, 11 Mar 2025 05:20:00 GMT - Mon, 09 Jun 2025 05:19:59 GMT
Hash 24dab6c0ca88f6bc9fb2ef0ae15c4ece
921d83b180e0fd0749f78fa09c71264d21cd2df3
3fbfd3c0216c4a3d85940c63a90479fda0a859faac7078012c9ab053e3bfeafb
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1
Host: 1xlite-006032.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Content-Type: application/json
X-Lang: en
X-Uuid: ab2dc7fd-4548-4127-ad36-6e8fad917e55
Content-Length: 90
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_38951c_%5B%5DMS%5B%5DWL1%5B%5Dsmartcpm%5B%5Dgeneral%5B%5D6307113_d28985_l35030_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_38951c_%5B%5DMS%5B%5DWL1%5B%5Dsmartcpm%5B%5Dgeneral%5B%5D6307113_d28985_l35030_clickunder; postback_watcher=; auid=1bcn1mggmaNFSl+NBM3BAg==; window_width=1280; che_g=13964025-f63d-a816-18f6-36ea5c3fcd1c
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:50 GMT
content-type: application/json
content-length: 23
x-dt: 512
x-time-ng: 0.000
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.094, wf-uht;dur=0.035
X-Firefox-Spdy: h2
GET 1xlite-006032.top/hd-api/external/0196bf58-506b-7994-b36e-2a1e2b1a1dee.js
200 OK 356 kB URL GET 1xlite-006032.top/hd-api/external/0196bf58-506b-7994-b36e-2a1e2b1a1dee.js
IP
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerLet's Encrypt
Subject1xlite-006032.top
FingerprintEA:03:CD:9C:9C:D6:BF:35:76:35:F3:CA:0F:0C:2A:12:AC:60:17:58
ValidityTue, 11 Mar 2025 05:20:00 GMT - Mon, 09 Jun 2025 05:19:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 356 kB (356179 bytes)
Hash 6d65f1a4549099d7323ad651e1b439a1
2ab6e578b071803f21faac0f2072c7e3fa56af85
78eef2fb36c823ef0b9b28a550c462e625309427de12850e397a17c222f890de
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /hd-api/external/0196bf58-506b-7994-b36e-2a1e2b1a1dee.js HTTP/1.1
Host: 1xlite-006032.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_38951c_%5B%5DMS%5B%5DWL1%5B%5Dsmartcpm%5B%5Dgeneral%5B%5D6307113_d28985_l35030_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_38951c_%5B%5DMS%5B%5DWL1%5B%5Dsmartcpm%5B%5Dgeneral%5B%5D6307113_d28985_l35030_clickunder; auid=1bcn1mggmaNFSl+NBM3BAg==; window_width=1280; che_g=13964025-f63d-a816-18f6-36ea5c3fcd1c; SESSION=3cf01ba86811f99a1d2d0d6aad113590
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:58 GMT
content-type: text/javascript; charset=utf-8
cache-control: private, max-age=0, must-revalidate
content-encoding: gzip
vary: Accept-Encoding
x-dt: 512
x-hd-trace-id: 70793548-6ec8-41be-b12d-3732649a9917
x-request-guid: 3f85a469c2421c89b81f6fbbd99fe046
x-time-ng: 0.002
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.080, wf-uht;dur=0.017
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2
200 OK 64 kB URL GET v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 63920, version 1.0
Hash a65527fcb58f66a7cfbc0e6b160538b4
45d260e7fa343401b5bb0df982a014f53e2d253b
fb13c3a1cbac60649b76f7d7f85c1645d35ac69b85ce5f4eb0692505ecc2cd45
GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:58 GMT
content-type: font/woff2
content-length: 63920
traceparent: 00-fd9021e1be26e7108c02e82db0e61905-7bb7bcd1640ccea2-01
last-modified: Wed, 14 Jun 2023 09:49:53 GMT
etag: "a65527fcb58f66a7cfbc0e6b160538b4"
expires: Thu, 16 Jan 2025 10:45:34 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 3536
cache: HIT
x-cached-since: 2025-05-11T11:37:02+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
POST region1.analytics.google.com/g/collect?v=2&tid=G-7JGWL9SV66>m=45je5571v897130004za200&_p=1746966960108&em=tv.1~em.ODS1igyfeIhzOTHENqwIfH1sb8t0oxg8FT6iY2YCmeo&_gaz=1&gcd=13l3lPl2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509157~103101750~103101752~103116025~103200001~103233427~103251618~103251620~103284320~103284322~103301114~103301116&cid=673857539.1746966960&ecid=1903222290&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&ec_mode=a&_s=2&sid=1746966960&sct=1&seg=0&dl=https%3A%2F%2F1xlite-006032.top%2Fen%2Fblock%3FredirectedFrom%3D5b63b43810086835f8b2b8111b74c271&dt=1xBet&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.optimize_id=GTM-5R4MT54&tfd=14323
204 No Content 0 B URL POST region1.analytics.google.com/g/collect?v=2&tid=G-7JGWL9SV66>m=45je5571v897130004za200&_p=1746966960108&em=tv.1~em.ODS1igyfeIhzOTHENqwIfH1sb8t0oxg8FT6iY2YCmeo&_gaz=1&gcd=13l3lPl2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509157~103101750~103101752~103116025~103200001~103233427~103251618~103251620~103284320~103284322~103301114~103301116&cid=673857539.1746966960&ecid=1903222290&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&ec_mode=a&_s=2&sid=1746966960&sct=1&seg=0&dl=https%3A%2F%2F1xlite-006032.top%2Fen%2Fblock%3FredirectedFrom%3D5b63b43810086835f8b2b8111b74c271&dt=1xBet&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.optimize_id=GTM-5R4MT54&tfd=14323
IP
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint02:7D:56:C0:B9:20:0C:27:A4:AC:B9:8F:9D:45:1D:85:2A:30:50:AD
ValidityMon, 21 Apr 2025 08:40:41 GMT - Mon, 14 Jul 2025 08:40:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-7JGWL9SV66>m=45je5571v897130004za200&_p=1746966960108&em=tv.1~em.ODS1igyfeIhzOTHENqwIfH1sb8t0oxg8FT6iY2YCmeo&_gaz=1&gcd=13l3lPl2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=101509157~103101750~103101752~103116025~103200001~103233427~103251618~103251620~103284320~103284322~103301114~103301116&cid=673857539.1746966960&ecid=1903222290&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&ec_mode=a&_s=2&sid=1746966960&sct=1&seg=0&dl=https%3A%2F%2F1xlite-006032.top%2Fen%2Fblock%3FredirectedFrom%3D5b63b43810086835f8b2b8111b74c271&dt=1xBet&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.optimize_id=GTM-5R4MT54&tfd=14323 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://1xlite-006032.top
date: Sun, 11 May 2025 12:36:00 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:153:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:153:0
report-to: {"group":"ascnsrsggc:153:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:153:0"}],}
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET v3.traincdn.com/main-static/62ddcac7/desktop/default/css/f5139760.css
200 OK 65 kB URL GET v3.traincdn.com/main-static/62ddcac7/desktop/default/css/f5139760.css
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type ASCII text, with very long lines (65410), with no line terminators
Hash 24ff919a1d261e01ae64676be91308e4
63df3a51e799735627656792c7c8eae29a4863b8
d86444b0f59d973c348e465740cc02a7c1814aeaff09e354eaf9e49132ceb790
GET /main-static/62ddcac7/desktop/default/css/f5139760.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-006032.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:48 GMT
content-type: text/css; charset=utf-8
traceparent: 00-c9c19c5758645223a6e07244f0236ed9-e1d261ed1658bee3-01
last-modified: Fri, 09 May 2025 08:29:58 GMT
etag: W/"24ff919a1d261e01ae64676be91308e4"
x-amz-meta-mtime: 1746779396.596324443
content-encoding: gzip
expires: Sat, 10 May 2025 09:03:11 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 12512
cache: HIT
x-cached-since: 2025-05-11T09:07:16+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_9e28d5a25826cadfe09af4e9b1545502.json
200 OK 136 kB URL GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_9e28d5a25826cadfe09af4e9b1545502.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Size 136 kB (135698 bytes)
Hash b308faa236c024a35a835d31092c05c9
fe3c36036a037207842c64add7939cb7feb45059
f818aac589866a5df2e70bc59bfd76685bba1a80cb83591ab38e000573caa071
GET /genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_9e28d5a25826cadfe09af4e9b1545502.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:49 GMT
content-type: application/json; charset=utf-8
traceparent: 00-b4a75ba7f05b7de49bb977b0d68aa01c-5bb278c4a4394dc9-01
last-modified: Thu, 08 May 2025 10:06:13 GMT
etag: W/"b308faa236c024a35a835d31092c05c9"
cache-control: max-age=3600
content-encoding: gzip
expires: Thu, 08 May 2025 11:17:40 GMT
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1265
cache: HIT
x-cached-since: 2025-05-11T12:14:44+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_game/en/dictionary_633badab13286d149e2e53ba9cddcd56.json
200 OK 22 kB URL GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_game/en/dictionary_633badab13286d149e2e53ba9cddcd56.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (21943), with no line terminators
Hash f8e38c106493e25c8d998abca3adbfad
e512c42df5c9eb5704ed7791d70b2ffe1f81a93e
6c63846ee5fc0545cad9e70c5428d69ee73bfcfe4e2670e6963002aacb911909
GET /genfiles/web-app-v2/dictionary2/v3_game/en/dictionary_633badab13286d149e2e53ba9cddcd56.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:49 GMT
content-type: application/json; charset=utf-8
traceparent: 00-bdcd51fda9ec38aa49fd3f64510eb3ad-336134cd9631378f-01
last-modified: Wed, 07 May 2025 16:06:34 GMT
etag: W/"895da097d39231b34332842ef0092651"
cache-control: max-age=3600
content-encoding: gzip
expires: Wed, 07 May 2025 17:17:40 GMT
x-time-ng: 0.001
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 825
cache: HIT
x-cached-since: 2025-05-11T12:22:04+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_reset_password/en/dictionary_612c6e919ca15d39cc751a619a3952c7.json
200 OK 765 B URL GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_reset_password/en/dictionary_612c6e919ca15d39cc751a619a3952c7.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash 00f980f23f1b4c1ccee99ed49e0a8feb
4cb07094de9bffff1bf81d94446280b91013b660
bb3be3377fbb8e66a4b5a8a3866dfd865a37cb4a96482ab2f439981e03b57cea
GET /genfiles/web-app-v2/dictionary2/v3_reset_password/en/dictionary_612c6e919ca15d39cc751a619a3952c7.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:49 GMT
content-type: application/json; charset=utf-8
content-length: 765
traceparent: 00-94e551e3ec46baf1d16e8f5518adf5f5-cb30aed603e1d9e9-01
last-modified: Wed, 11 Oct 2023 12:52:53 GMT
etag: "00f980f23f1b4c1ccee99ed49e0a8feb"
cache-control: max-age=3600
expires: Thu, 16 Jan 2025 10:53:47 GMT
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1631
cache: HIT
x-cached-since: 2025-05-11T12:08:38+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET 1xlite-006032.top/checker/redirect/stat/run/
200 OK 14 B URL GET 1xlite-006032.top/checker/redirect/stat/run/
IP
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerLet's Encrypt
Subject1xlite-006032.top
FingerprintEA:03:CD:9C:9C:D6:BF:35:76:35:F3:CA:0F:0C:2A:12:AC:60:17:58
ValidityTue, 11 Mar 2025 05:20:00 GMT - Mon, 09 Jun 2025 05:19:59 GMT
Hash 2de0d0acfd684235f066bd0ec0c9e3df
68d0cb64805a42d7e40f43e8e198986b43dd6b69
9682f312f23e078bb135f23ea5a178b178e75c02d33672f20044d18c6d258928
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /checker/redirect/stat/run/ HTTP/1.1
Host: 1xlite-006032.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
content-type: application/json
x-requested-with: XMLHttpRequest
x-app-n: v3-nuxt2
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_38951c_%5B%5DMS%5B%5DWL1%5B%5Dsmartcpm%5B%5Dgeneral%5B%5D6307113_d28985_l35030_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_38951c_%5B%5DMS%5B%5DWL1%5B%5Dsmartcpm%5B%5Dgeneral%5B%5D6307113_d28985_l35030_clickunder; postback_watcher=; auid=1bcn1mggmaNFSl+NBM3BAg==; window_width=1280; che_g=13964025-f63d-a816-18f6-36ea5c3fcd1c
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:50 GMT
content-type: application/json
content-length: 14
x-time-ng: 0.000
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.014
X-Firefox-Spdy: h2
POST 1xlite-006032.top/hd-api/external/verify
200 OK 715 B URL POST 1xlite-006032.top/hd-api/external/verify
IP
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerLet's Encrypt
Subject1xlite-006032.top
FingerprintEA:03:CD:9C:9C:D6:BF:35:76:35:F3:CA:0F:0C:2A:12:AC:60:17:58
ValidityTue, 11 Mar 2025 05:20:00 GMT - Mon, 09 Jun 2025 05:19:59 GMT
Hash ce093b5b04226deb136174026cc4e884
22f82e355f3f6baef5b55ff580a8460343827328
a786bd258d0ecd8bec86109330aa6bb374eca7c66f33d76a24e26e45538e2f9d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /hd-api/external/verify HTTP/1.1
Host: 1xlite-006032.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Content-Type: text/plain;charset=UTF-8
Content-Length: 108741
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_38951c_%5B%5DMS%5B%5DWL1%5B%5Dsmartcpm%5B%5Dgeneral%5B%5D6307113_d28985_l35030_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_38951c_%5B%5DMS%5B%5DWL1%5B%5Dsmartcpm%5B%5Dgeneral%5B%5D6307113_d28985_l35030_clickunder; auid=1bcn1mggmaNFSl+NBM3BAg==; window_width=1280; che_g=13964025-f63d-a816-18f6-36ea5c3fcd1c; SESSION=3cf01ba86811f99a1d2d0d6aad113590
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:59 GMT
content-type: application/json
content-length: 585
content-encoding: gzip
vary: Accept-Encoding
x-dt: 512
x-request-guid: 76da3e59be9cf1685afc6a6f2f9b8b25
x-time-ng: 0.010
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.007, wf-uht;dur=0.036
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/346ba7cb7f.css
200 OK 650 B URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/346ba7cb7f.css
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type ASCII text, with very long lines (649)
Hash d1fd527117bc7f6ab34dfb21f73eff21
3cd449f00b04eaf0e19ace8e68cd5ca39b43cfa8
4aa6713aa401bfab91d607e5d75483215ae8c34f840d55b2e7bef9cc3cc0cd28
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/346ba7cb7f.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-006032.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:48 GMT
content-type: text/css; charset=utf-8
content-length: 650
traceparent: 00-1def19136274b4f8fb8d3a67c1f00fcc-ea03ad2f74c189aa-01
last-modified: Wed, 30 Apr 2025 07:29:34 GMT
etag: "d1fd527117bc7f6ab34dfb21f73eff21"
x-amz-meta-mtime: 1745997847.066695082
expires: Thu, 01 May 2025 09:21:56 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 10194
cache: HIT
x-cached-since: 2025-05-11T09:45:54+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_express_day/en/dictionary_1971e4038469f37ec9a819d99d5b8f4a.json
200 OK 1.1 kB URL GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_express_day/en/dictionary_1971e4038469f37ec9a819d99d5b8f4a.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash a3810b04fc93c6b4f295ceb812f9f212
6cff2c69f8e43259380952d6c0df7ba563b7da8d
c1afcca19f61498f21aab6c0ca6b1992f5c8b4baf281dfa14b780ed780035c54
GET /genfiles/web-app-v2/dictionary2/v3_express_day/en/dictionary_1971e4038469f37ec9a819d99d5b8f4a.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:49 GMT
content-type: application/json; charset=utf-8
traceparent: 00-56bc9ca95a2bb4a330f3274da5d7b41f-c6f0217bbae3b472-01
last-modified: Fri, 09 May 2025 16:06:27 GMT
etag: W/"a3810b04fc93c6b4f295ceb812f9f212"
cache-control: max-age=3600
content-encoding: gzip
expires: Fri, 09 May 2025 17:11:01 GMT
x-time-ng: 0.001
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 552
cache: HIT
x-cached-since: 2025-05-11T12:26:37+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1-512/desktop/media_asset/dfcff82355167a34dcf5c04e2d93d028.json
200 OK 13 kB URL GET v3.traincdn.com/genfiles/cms/1-512/desktop/media_asset/dfcff82355167a34dcf5c04e2d93d028.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash 2b474bcc2f009b70e64e2b5a95dd50a4
1fd5ee2d54da7dfbf61e67efd938a89c548fc866
f86d880575f3f65ddaaf9e8a0e3746bbbefcefe7e6c0c4441e9e20ceffdca237
GET /genfiles/cms/1-512/desktop/media_asset/dfcff82355167a34dcf5c04e2d93d028.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:50 GMT
content-type: application/json
traceparent: 00-1072520a78fed4128c5ce897a4d40c12-693a6590750f0e66-01
last-modified: Wed, 12 Mar 2025 09:35:26 GMT
etag: W/"2b474bcc2f009b70e64e2b5a95dd50a4"
content-encoding: gzip
expires: Sun, 11 May 2025 13:35:50 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
cache: MISS
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/20c4fa5118.js
200 OK 5.3 kB URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/20c4fa5118.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type ASCII text, with very long lines (2176)
Hash 8b0f099a7e76b4c927fd26cb53407364
9f6d3e740fc38b6414dba6d949443e6660f00089
d733afd40054ce8437c2bd1c0a72a80cc936d6d85b259228ae7d6378235e87eb
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/20c4fa5118.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:50 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-39bffdbb9ed3bc9eb99ba744c8dfd9c2-6e2bf5317bc8524a-01
last-modified: Wed, 30 Apr 2025 07:29:34 GMT
etag: W/"8b0f099a7e76b4c927fd26cb53407364"
x-amz-meta-mtime: 1745997847.067695148
content-encoding: gzip
expires: Thu, 01 May 2025 07:34:05 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 15912
cache: HIT
x-cached-since: 2025-05-11T08:10:38+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/a572c043a1.js
200 OK 27 kB URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/a572c043a1.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type ASCII text, with very long lines (12766)
Hash 4616600346817a146fab20f3b48d685b
190b06fd9f4b417a26294e440238478e0d305225
9ef9a9d41db770d6ac0f1c385fb3d17688446216b56067099208691afe6640f8
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/a572c043a1.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:50 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-961a64ff9560eaeefe7edbf3af38bb28-5ee79f3dd945d6aa-01
last-modified: Wed, 30 Apr 2025 07:29:34 GMT
etag: W/"4616600346817a146fab20f3b48d685b"
x-amz-meta-mtime: 1745997847.068695213
content-encoding: gzip
expires: Thu, 01 May 2025 07:34:05 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 15912
cache: HIT
x-cached-since: 2025-05-11T08:10:38+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/version.json
200 OK 11 B URL GET v3.traincdn.com/version.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash bb3b12105b9a19184b25b451221e7e0e
7f0dc34279b2d5a157311be115dceb4541c23b6d
bec63e9b4ac563a097b3b6051f77d45932de1970f0cd622d3bdd22e75d8f213f
GET /version.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-006032.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:48 GMT
content-type: application/json
content-length: 11
traceparent: 00-903a8efd7cde32e8439213b89a0885d9-11166a581b373398-01
last-modified: Fri, 09 May 2025 10:29:25 GMT
etag: "bb3b12105b9a19184b25b451221e7e0e"
x-amz-meta-mtime: 1746786565.917534976
expires: Fri, 09 May 2025 10:32:00 GMT
cache-control: max-age=60
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 35
cache: HIT
x-cached-since: 2025-05-11T12:35:13+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-ui/2.3.169/Desktop/Default/client.css
200 OK 614 kB URL GET v3.traincdn.com/sys-ui/2.3.169/Desktop/Default/client.css
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 614 kB (614076 bytes)
Hash 3dc0ea77b73ab7ceb45dbb0e929b0c78
3a2932dec7166620ab3cce1d365a9b5a0f4907ab
aaf46b531e51d699b6ebb91838be288e7267c82d397b66ed47e694c6f1acace5
GET /sys-ui/2.3.169/Desktop/Default/client.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-006032.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:48 GMT
content-type: text/css; charset=utf-8
traceparent: 00-742ca541250e1526156665bda594ec0b-7f33fa1a011bb12b-01
last-modified: Thu, 17 Apr 2025 08:46:48 GMT
etag: W/"3dc0ea77b73ab7ceb45dbb0e929b0c78"
x-amz-meta-mtime: 1744879605.570763771
content-encoding: gzip
expires: Sat, 03 May 2025 08:44:45 GMT
cache-control: max-age=86400
x-time-ng: 0.003
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 13620
cache: HIT
x-cached-since: 2025-05-11T08:48:48+00:00
X-Firefox-Spdy: h2
GET 1xlite-006032.top/seo-module-api/api/public/v1/analytics-counters?project[id]=512&domain[host]=1xlite-006032.top
200 OK 72 B URL GET 1xlite-006032.top/seo-module-api/api/public/v1/analytics-counters?project[id]=512&domain[host]=1xlite-006032.top
IP
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerLet's Encrypt
Subject1xlite-006032.top
FingerprintEA:03:CD:9C:9C:D6:BF:35:76:35:F3:CA:0F:0C:2A:12:AC:60:17:58
ValidityTue, 11 Mar 2025 05:20:00 GMT - Mon, 09 Jun 2025 05:19:59 GMT
Hash fedbfc7fb759a8adebb96ea652eebb6f
a40befad0302b78886b94a50b1432d8bd7f17da1
6562371a012f47275ec54d0b0632302303cafab42210faba994cdf82ed185760
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /seo-module-api/api/public/v1/analytics-counters?project[id]=512&domain[host]=1xlite-006032.top HTTP/1.1
Host: 1xlite-006032.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
content-type: application/json
x-requested-with: XMLHttpRequest
x-app-n: v3-nuxt2
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_38951c_%5B%5DMS%5B%5DWL1%5B%5Dsmartcpm%5B%5Dgeneral%5B%5D6307113_d28985_l35030_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_38951c_%5B%5DMS%5B%5DWL1%5B%5Dsmartcpm%5B%5Dgeneral%5B%5D6307113_d28985_l35030_clickunder; postback_watcher=; auid=1bcn1mggmaNFSl+NBM3BAg==; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:50 GMT
content-type: application/json
content-length: 76
cache-control: max-age=1200, must-revalidate, public, s-maxage=1800, stale-if-error=86400, stale-while-revalidate=300
x-content-digest: en1beec4979e7cc7021995fd46e9a53556
age: 542
x-request-id: 3598a1295cba5833309dc03e2412096f
x-request-guid: 3598a1295cba5833309dc03e2412096f
content-encoding: br
x-time-ng: 0.002
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: p;dur=1.4770030975342, wf-uht;dur=
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1-512/desktop/media_asset/c81bfda21a3889790f9c43eec66e1ecc.json
200 OK 473 B URL GET v3.traincdn.com/genfiles/cms/1-512/desktop/media_asset/c81bfda21a3889790f9c43eec66e1ecc.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash e67aa19ef00fd2285c7b4ecbb6018306
5b01d4786d6fbfbd5de7901eb4359a55466f434a
135c1042c31e3674d8a1b3b9e7179f4f36868048ca6058ea458ff291b8880b5e
GET /genfiles/cms/1-512/desktop/media_asset/c81bfda21a3889790f9c43eec66e1ecc.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:50 GMT
content-type: application/json
content-length: 473
traceparent: 00-4fd1f7bac2ea2274d1b27156f42ce5f1-ea5cf7eebe0c458d-01
last-modified: Thu, 16 May 2024 20:42:03 GMT
etag: "e67aa19ef00fd2285c7b4ecbb6018306"
expires: Sun, 11 May 2025 13:35:50 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
cache: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
POST 1xlite-006032.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json
200 OK 2 B URL POST 1xlite-006032.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json
IP
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerLet's Encrypt
Subject1xlite-006032.top
FingerprintEA:03:CD:9C:9C:D6:BF:35:76:35:F3:CA:0F:0C:2A:12:AC:60:17:58
ValidityTue, 11 Mar 2025 05:20:00 GMT - Mon, 09 Jun 2025 05:19:59 GMT
Hash d751713988987e9331980363e24189ce
97d170e1550eee4afc0af065b78cda302a97674c
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json HTTP/1.1
Host: 1xlite-006032.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Content-Type: application/json
X-Lang: en
X-Uuid: ab2dc7fd-4548-4127-ad36-6e8fad917e55
Content-Length: 19
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_38951c_%5B%5DMS%5B%5DWL1%5B%5Dsmartcpm%5B%5Dgeneral%5B%5D6307113_d28985_l35030_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_38951c_%5B%5DMS%5B%5DWL1%5B%5Dsmartcpm%5B%5Dgeneral%5B%5D6307113_d28985_l35030_clickunder; postback_watcher=; auid=1bcn1mggmaNFSl+NBM3BAg==; window_width=1280; che_g=13964025-f63d-a816-18f6-36ea5c3fcd1c
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:50 GMT
content-type: application/json
content-length: 2
x-dt: 512
x-time-ng: 0.000
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.113, wf-uht;dur=0.008
X-Firefox-Spdy: h2
GET radar.cedexis.com/1707728419/stub.js
200 OK 390 B URL GET radar.cedexis.com/1707728419/stub.js
IP
ASN #63911 NetActuate, Inc
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerDigiCert Inc
Subjectradar.cedexis.com
FingerprintA2:3E:30:19:D5:41:3A:11:81:58:E3:B1:6F:F4:D2:78:0B:44:6F:D0
ValidityFri, 07 Mar 2025 00:00:00 GMT - Fri, 06 Mar 2026 23:59:59 GMT
File type JavaScript source, ASCII text
Hash 82dec77fd0353c7c71ce053b8601387e
fbbca95419e1d0c042e0a5fdf10f380aca66188c
39f2b7b0fa78d37d0c84d2d6618bd635d86fd683d9bcdd5729850cb2a62522f7
GET /1707728419/stub.js HTTP/1.1
Host: radar.cedexis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 11 May 2025 12:36:00 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 12 Feb 2024 09:51:01 GMT
Vary: Accept-Encoding
ETag: W/"65c9ea05-186"
Expires: Sun, 25 May 2025 12:36:00 GMT
Cache-Control: max-age=1209600, public
Content-Encoding: gzip
GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/dcaabc3ceb.js
200 OK 1.4 kB URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/dcaabc3ceb.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type ASCII text, with very long lines (454)
Hash 591d7722db1b5815dd0d05ae7ad107de
15b9a49d4409c9e572501ef6310a5d2a898b8965
482f8c939facba54f795ae64b55d1861aff8e237817b2c9145b229d4f86cfb29
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/dcaabc3ceb.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:50 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-7f86eaf38859d3cbab529ff2adbe402b-6e01d5ce7efb7809-01
last-modified: Wed, 30 Apr 2025 07:29:34 GMT
etag: W/"591d7722db1b5815dd0d05ae7ad107de"
x-amz-meta-mtime: 1745997847.071695411
content-encoding: gzip
expires: Thu, 01 May 2025 07:34:05 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 15912
cache: HIT
x-cached-since: 2025-05-11T08:10:38+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_css_fd9561.css
200 OK 5.0 kB URL GET v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_css_fd9561.css
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type ASCII text, with very long lines (4607)
Hash 5498f16be4b5e31fc69b105bd2e086e0
7c3cebacccaaf7d8dd7e3337d96602fba2e6db47
fd95617b284e0e75b0aac92febea4f5fc279fee6281a4dd5e04c053bad2e048e
GET /sys-static/shared-assets/Desktop/__shared_css_fd9561.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-006032.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:48 GMT
content-type: text/css; charset=utf-8
traceparent: 00-6684c9745bc7bf47cb70d3a929c75dbd-29f2d76be2b3138f-01
last-modified: Fri, 09 May 2025 08:32:05 GMT
etag: W/"5498f16be4b5e31fc69b105bd2e086e0"
x-amz-meta-mtime: 1746779387.504587261
content-encoding: gzip
expires: Sat, 10 May 2025 08:49:47 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 13458
cache: HIT
x-cached-since: 2025-05-11T08:51:30+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/main-static/62ddcac7/desktop/default/vendors/plugins.vue-js-modal-aaff7d67.js
200 OK 27 kB URL GET v3.traincdn.com/main-static/62ddcac7/desktop/default/vendors/plugins.vue-js-modal-aaff7d67.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (26667), with no line terminators
Hash 75d1d62e02e06c6b8faedd0408117b2c
1ba582191d375b69b70cb623dda679433026f665
9b4fd88e9862002a4c5b5221a9cce532eea7a8ef98e624784e566445d77930f6
GET /main-static/62ddcac7/desktop/default/vendors/plugins.vue-js-modal-aaff7d67.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-006032.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:49 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-672936dc3f974ec58d082b741424ba6f-6f96cb75e2fcbfdf-01
last-modified: Fri, 09 May 2025 08:29:57 GMT
etag: W/"75d1d62e02e06c6b8faedd0408117b2c"
x-amz-meta-mtime: 1746779396.604324466
content-encoding: gzip
expires: Sat, 10 May 2025 09:03:15 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 12512
cache: HIT
x-cached-since: 2025-05-11T09:07:17+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/site-admin/css_vars/29b5cda95fa390c124de39b6aeca6d24.css
200 OK 46 B URL GET v3.traincdn.com/genfiles/site-admin/css_vars/29b5cda95fa390c124de39b6aeca6d24.css
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 29b5cda95fa390c124de39b6aeca6d24
46f68f69533c1fdc737eb36e8e7af7672178e610
6021ec0aede22eadcb8401fe945d345202320437c7be01b157f0cb282ebe7c88
GET /genfiles/site-admin/css_vars/29b5cda95fa390c124de39b6aeca6d24.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-006032.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:49 GMT
content-type: text/css
content-length: 46
traceparent: 00-8fa704b60fc7af1dfa402265751e0a60-92912c8fa3b6a42a-01
last-modified: Thu, 20 Mar 2025 13:29:31 GMT
etag: "29b5cda95fa390c124de39b6aeca6d24"
cache-control: max-age=3600
expires: Thu, 20 Mar 2025 14:32:37 GMT
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 249
cache: HIT
x-cached-since: 2025-05-11T12:31:40+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_forgot_password/en/dictionary_28cb4e6b9a8be3afbcbc2a6b22ab3393.json
200 OK 3.5 kB URL GET v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_forgot_password/en/dictionary_28cb4e6b9a8be3afbcbc2a6b22ab3393.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash 273bec90c875f74d2f5ef70f9e32db45
f46d2fe53dbb25c9b9ddc3cabb5731ca38f8f1e7
cd0f959ce14dedb8fd75b1844e40ba237d747c2bb83a87dcabd0d71564eaed21
GET /genfiles/web-app-v2/dictionary2/v3_forgot_password/en/dictionary_28cb4e6b9a8be3afbcbc2a6b22ab3393.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:49 GMT
content-type: application/json; charset=utf-8
traceparent: 00-ace30b48a0b1afae4f979b4fa9c272ab-409bd2a6deca6932-01
last-modified: Tue, 03 Dec 2024 08:05:32 GMT
etag: W/"273bec90c875f74d2f5ef70f9e32db45"
cache-control: max-age=3600
content-encoding: gzip
expires: Thu, 16 Jan 2025 10:56:28 GMT
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 552
cache: HIT
x-cached-since: 2025-05-11T12:26:37+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/main-static/62ddcac7/desktop/default/DC-38482302.js
200 OK 2.7 kB URL GET v3.traincdn.com/main-static/62ddcac7/desktop/default/DC-38482302.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (2654), with no line terminators
Hash da38502ad32bc4d042da722f9a083729
5bdc412d09b4cac6348defd5f831903df935bf12
2a0bd746cb4256fc0bf147cf7d1de47011ba12cb22c7ecfdbf7a2472c6371825
GET /main-static/62ddcac7/desktop/default/DC-38482302.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-006032.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:49 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-761dfcc7a77918dd2ac789a0222b972e-0186cd89b7b4f1a4-01
last-modified: Fri, 09 May 2025 08:29:57 GMT
etag: W/"da38502ad32bc4d042da722f9a083729"
x-amz-meta-mtime: 1746779396.584324408
content-encoding: gzip
expires: Sat, 10 May 2025 09:03:19 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 12511
cache: HIT
x-cached-since: 2025-05-11T09:07:18+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/shared-assets/__shared_vue_deps_SVMMEEZF.js
200 OK 21 kB URL GET v3.traincdn.com/sys-static/shared-assets/__shared_vue_deps_SVMMEEZF.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (20436)
Hash b3ce9215487c615dbe0e474955e1dd39
64d50e6020e3cdfe3156bf52d46c176dfd098fd9
e3c9c6a51511916a872d65993ad41d579fd580f3dd688335924153613e295d43
GET /sys-static/shared-assets/__shared_vue_deps_SVMMEEZF.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:50 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-95c1d0543a80a3f4f36450caf249543e-bfc866bc9316cca2-01
last-modified: Fri, 09 May 2025 08:32:04 GMT
etag: W/"b3ce9215487c615dbe0e474955e1dd39"
x-amz-meta-mtime: 1746779387.558592013
content-encoding: gzip
expires: Sat, 10 May 2025 10:44:32 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 6354
cache: HIT
x-cached-since: 2025-05-11T10:49:56+00:00
X-Firefox-Spdy: h2
GET 1xlite-006032.top/en?tag=d_224327m_38951c_[]MS[]WL1[]smartcpm[]general[]6307113_d28985_l35030_clickunder
302 Found 260 kB URL User Request GET 1xlite-006032.top/en?tag=d_224327m_38951c_[]MS[]WL1[]smartcpm[]general[]6307113_d28985_l35030_clickunder
IP
Certificate IssuerLet's Encrypt
Subject1xlite-006032.top
FingerprintEA:03:CD:9C:9C:D6:BF:35:76:35:F3:CA:0F:0C:2A:12:AC:60:17:58
ValidityTue, 11 Mar 2025 05:20:00 GMT - Mon, 09 Jun 2025 05:19:59 GMT
Size 260 kB (260374 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /en?tag=d_224327m_38951c_[]MS[]WL1[]smartcpm[]general[]6307113_d28985_l35030_clickunder HTTP/1.1
Host: 1xlite-006032.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Sun, 11 May 2025 12:35:47 GMT
location: https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
link: <https://v3.traincdn.com/sys-ui/2.3.169/Desktop/Default/client.css>; rel=preload; as=style; crossorigin=anonymous
server-timing: dt_total;dur=0.012, total;dur=219;desc="Nuxt Server Time", wf-uht;dur=0.236
set-cookie: platform_type=desktop; Path=/; Expires=Wed, 14 May 2025 12:35:47 GMT; Secure; SameSite=None; Partitioned
gw-mm=; Path=/; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Secure; SameSite=None; Partitioned
lng=en; Path=/
cookies_agree_type=3; Path=/
tzo=2; Path=/
is12h=0; Path=/
referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_38951c_%5B%5DMS%5B%5DWL1%5B%5Dsmartcpm%5B%5Dgeneral%5B%5D6307113_d28985_l35030_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; Path=/; Expires=Thu, 10 Jul 2025 12:35:47 GMT
reflinkid=d_224327m_38951c_%5B%5DMS%5B%5DWL1%5B%5Dsmartcpm%5B%5Dgeneral%5B%5D6307113_d28985_l35030_clickunder; Path=/; Expires=Sun, 11 May 2025 13:35:47 GMT
postback_watcher=; Path=/; Expires=Sun, 11 May 2025 12:35:51 GMT
auid=1bcn1mggmaNFSl+NBM3BAg==; path=/; secure; httponly; samesite=lax
x-dt: 512
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
GET v3.traincdn.com/main-static/62ddcac7/desktop/default/vendors/app-9a795df8.js
200 OK 1.4 MB URL GET v3.traincdn.com/main-static/62ddcac7/desktop/default/vendors/app-9a795df8.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (63296)
Size 1.4 MB (1389446 bytes)
Hash 285c266c7f9d7053d81dc349efcc5564
565528e5e0147f7bc3024427acd093fe10fb3653
5219100382262de7b72e661866c8aa901c679a268057aec0d9bb9f9918153376
GET /main-static/62ddcac7/desktop/default/vendors/app-9a795df8.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-006032.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:48 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-d77a1a673059cf2ca5f114e27d8e8a83-2b3cc385ed7ad398-01
last-modified: Fri, 09 May 2025 08:29:57 GMT
etag: W/"285c266c7f9d7053d81dc349efcc5564"
x-amz-meta-mtime: 1746779396.600324455
content-encoding: gzip
expires: Sat, 10 May 2025 09:03:12 GMT
cache-control: max-age=86400
x-time-ng: 0.004
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 12511
cache: HIT
x-cached-since: 2025-05-11T09:07:17+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/shared-assets/__shared_localforage_H7M2CI7V.js
200 OK 30 kB URL GET v3.traincdn.com/sys-static/shared-assets/__shared_localforage_H7M2CI7V.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (30255)
Hash 8c858b7ed9e89233e182c6824388b15d
72b5da96c3735591317ee5d7a77733f3ee2e4f5b
ff626e5d8a3bf634c1577b920a448b6da177e7e0e164a3cce4d270ff78bb7d23
GET /sys-static/shared-assets/__shared_localforage_H7M2CI7V.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:50 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-0bbb0ebcb313682c24b2773e7f3be858-b809e70ff661e27e-01
last-modified: Fri, 09 May 2025 08:32:04 GMT
etag: W/"8c858b7ed9e89233e182c6824388b15d"
x-amz-meta-mtime: 1746779387.558592013
content-encoding: gzip
expires: Sat, 10 May 2025 10:58:29 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 5644
cache: HIT
x-cached-since: 2025-05-11T11:01:46+00:00
X-Firefox-Spdy: h2
GET 1xlite-006032.top/hd-api/external/assets/hdf.js
200 OK 4.1 kB URL GET 1xlite-006032.top/hd-api/external/assets/hdf.js
IP
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerLet's Encrypt
Subject1xlite-006032.top
FingerprintEA:03:CD:9C:9C:D6:BF:35:76:35:F3:CA:0F:0C:2A:12:AC:60:17:58
ValidityTue, 11 Mar 2025 05:20:00 GMT - Mon, 09 Jun 2025 05:19:59 GMT
File type C++ source, ASCII text, with very long lines (874)
Hash 2f26a679e9d54a65e6578e947cc5bdf2
1b984864aa7b3e28231ac7cea3c199435dbdc6bf
1e3c4bd81a1cd9ee02e42a42802d5c18cbdb3f3a11c0b2732eb11bd12263020c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /hd-api/external/assets/hdf.js HTTP/1.1
Host: 1xlite-006032.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_38951c_%5B%5DMS%5B%5DWL1%5B%5Dsmartcpm%5B%5Dgeneral%5B%5D6307113_d28985_l35030_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_38951c_%5B%5DMS%5B%5DWL1%5B%5Dsmartcpm%5B%5Dgeneral%5B%5D6307113_d28985_l35030_clickunder; auid=1bcn1mggmaNFSl+NBM3BAg==; window_width=1280; che_g=13964025-f63d-a816-18f6-36ea5c3fcd1c; SESSION=3cf01ba86811f99a1d2d0d6aad113590
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:58 GMT
content-type: text/javascript; charset=utf-8
content-length: 1622
cache-control: public, max-age=300
content-encoding: gzip
etag: 2f26a679e9d54a65e6578e947cc5bdf2
vary: Accept-Encoding
x-dt: 706
x-request-guid: 869734cd0ce4b95a4c839b67f498ba86
x-time-ng: 0.010
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.186, wf-uht;dur=
accept-ranges: bytes
X-Firefox-Spdy: h2
GET 1xlite-006032.top/captcha-api/assets/hunt-captcha.js
200 OK 84 kB URL GET 1xlite-006032.top/captcha-api/assets/hunt-captcha.js
IP
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerLet's Encrypt
Subject1xlite-006032.top
FingerprintEA:03:CD:9C:9C:D6:BF:35:76:35:F3:CA:0F:0C:2A:12:AC:60:17:58
ValidityTue, 11 Mar 2025 05:20:00 GMT - Mon, 09 Jun 2025 05:19:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Hash be79c7224b26aecc4360524e88e8b1c8
83823bfb5014be1ff5fd565c182ce625f216a655
82f66c5a82eac3b54409b44f787da4e66a8c0cae1ad18c9685cc75cf604713f4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /captcha-api/assets/hunt-captcha.js HTTP/1.1
Host: 1xlite-006032.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_38951c_%5B%5DMS%5B%5DWL1%5B%5Dsmartcpm%5B%5Dgeneral%5B%5D6307113_d28985_l35030_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_38951c_%5B%5DMS%5B%5DWL1%5B%5Dsmartcpm%5B%5Dgeneral%5B%5D6307113_d28985_l35030_clickunder; auid=1bcn1mggmaNFSl+NBM3BAg==; window_width=1280; che_g=13964025-f63d-a816-18f6-36ea5c3fcd1c; SESSION=3cf01ba86811f99a1d2d0d6aad113590
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:58 GMT
content-type: text/javascript; charset=utf-8
cache-control: public, max-age=300
content-encoding: br
vary: Accept-Encoding
x-dt: 706
x-request-id: 90d5f32f4e55f17499d269e905a41407
x-time-ng: 0.001
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.014, wf-uht;dur=
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-ui/2.3.169/Desktop/Default/client.css
200 OK 614 kB URL GET v3.traincdn.com/sys-ui/2.3.169/Desktop/Default/client.css
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 614 kB (614076 bytes)
Hash 3dc0ea77b73ab7ceb45dbb0e929b0c78
3a2932dec7166620ab3cce1d365a9b5a0f4907ab
aaf46b531e51d699b6ebb91838be288e7267c82d397b66ed47e694c6f1acace5
GET /sys-ui/2.3.169/Desktop/Default/client.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-006032.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:48 GMT
content-type: text/css; charset=utf-8
traceparent: 00-6121dda116052588d8b749b4fa87ab1f-d850d9bfe630569a-01
last-modified: Thu, 17 Apr 2025 08:46:48 GMT
etag: W/"3dc0ea77b73ab7ceb45dbb0e929b0c78"
x-amz-meta-mtime: 1744879605.570763771
content-encoding: gzip
expires: Sat, 03 May 2025 08:44:45 GMT
cache-control: max-age=86400
x-time-ng: 0.003
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 13620
cache: HIT
x-cached-since: 2025-05-11T08:48:48+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/main-static/62ddcac7/desktop/default/vendors/plugins.vue-notification-82d2bba4.js
200 OK 13 kB URL GET v3.traincdn.com/main-static/62ddcac7/desktop/default/vendors/plugins.vue-notification-82d2bba4.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (12563), with no line terminators
Hash 80675449a00476e14a2a7d4b74c8fe46
0defece3fd48323a940faeff429b4826ed027b48
dfafa0bbf8b911f1be89941425c7fa9d570e6f4532e8bd4a0192d07696924f33
GET /main-static/62ddcac7/desktop/default/vendors/plugins.vue-notification-82d2bba4.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-006032.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:49 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-f9852b5338b3a9000e0558e34706819d-efca3ded856b9220-01
last-modified: Fri, 09 May 2025 08:29:57 GMT
etag: W/"80675449a00476e14a2a7d4b74c8fe46"
x-amz-meta-mtime: 1746779396.604324466
content-encoding: gzip
expires: Sat, 10 May 2025 09:03:15 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 12512
cache: HIT
x-cached-since: 2025-05-11T09:07:17+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/main-static/62ddcac7/desktop/default/css/7fe5f71b.css
200 OK 3.3 kB URL GET v3.traincdn.com/main-static/62ddcac7/desktop/default/css/7fe5f71b.css
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type ASCII text, with very long lines (3313), with no line terminators
Hash c610b8710368de3bf2f1c5bb581b6a3a
f67bc86785d434adb2e81a356a7926b8818ac567
fad7111846310042401990719146401178f22e2618abf2b058e641b6495e8eba
GET /main-static/62ddcac7/desktop/default/css/7fe5f71b.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-006032.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:49 GMT
content-type: text/css; charset=utf-8
traceparent: 00-0c018e7cd023c92017acb1e63b43e544-5c74f278be4443a9-01
last-modified: Fri, 09 May 2025 08:29:58 GMT
etag: W/"c610b8710368de3bf2f1c5bb581b6a3a"
x-amz-meta-mtime: 1746779396.592324431
content-encoding: gzip
expires: Sat, 10 May 2025 09:03:15 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 12512
cache: HIT
x-cached-since: 2025-05-11T09:07:17+00:00
X-Firefox-Spdy: h2
POST 1xlite-006032.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json
200 OK 23 B URL POST 1xlite-006032.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json
IP
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerLet's Encrypt
Subject1xlite-006032.top
FingerprintEA:03:CD:9C:9C:D6:BF:35:76:35:F3:CA:0F:0C:2A:12:AC:60:17:58
ValidityTue, 11 Mar 2025 05:20:00 GMT - Mon, 09 Jun 2025 05:19:59 GMT
Hash 378f3dcb62dde70a769abb7cf900f96a
989517c5d088c302fd41e392504017d45bd46a67
7f40c47800cfc3b4100872dbb37df89059ab3e5dbdc7c2e93b7d0918be1215d4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1
Host: 1xlite-006032.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Content-Type: application/json
X-Lang: en
X-Uuid: ab2dc7fd-4548-4127-ad36-6e8fad917e55
Content-Length: 72
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_38951c_%5B%5DMS%5B%5DWL1%5B%5Dsmartcpm%5B%5Dgeneral%5B%5D6307113_d28985_l35030_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_38951c_%5B%5DMS%5B%5DWL1%5B%5Dsmartcpm%5B%5Dgeneral%5B%5D6307113_d28985_l35030_clickunder; postback_watcher=; auid=1bcn1mggmaNFSl+NBM3BAg==; window_width=1280; che_g=13964025-f63d-a816-18f6-36ea5c3fcd1c
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:50 GMT
content-type: application/json
content-length: 23
x-dt: 512
x-time-ng: 0.000
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.005, wf-uht;dur=0.008
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=G-5671CMJ6T4
200 OK 455 kB URL GET www.googletagmanager.com/gtag/js?id=G-5671CMJ6T4
IP
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerGoogle Trust Services
Subject*.google-analytics.com
Fingerprint02:7D:56:C0:B9:20:0C:27:A4:AC:B9:8F:9D:45:1D:85:2A:30:50:AD
ValidityMon, 21 Apr 2025 08:40:41 GMT - Mon, 14 Jul 2025 08:40:40 GMT
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (12571)
Size 455 kB (454641 bytes)
Hash ff76eea0203a3600e4bba714d7ebfbd6
54cdc7a9e86f6df9d0c93f6f2fba5431b82a1e7b
dc2ee60a591c2dca52ee6e301a2a413c02604bfbd66254a6c697b3109572afea
GET /gtag/js?id=G-5671CMJ6T4 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-006032.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 11 May 2025 12:36:00 GMT
expires: Sun, 11 May 2025 12:36:00 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1075:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1075:0
report-to: {"group":"ascgcycc:1075:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1075:0"}],}
server: Google Tag Manager
content-length: 146561
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2
200 OK 64 kB URL GET v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 63748, version 1.0
Hash 6887b6f24414dbc612dbf42ccdc76b70
8068d3abfbc6cbf35b55919da45b1f4d2d136238
fc5c015fc32518f1ed810fa84ca28941eb9d5a3c81acc8df69a4dbbeedef7b0c
GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:58 GMT
content-type: font/woff2
content-length: 63748
traceparent: 00-a9aacb039dcf01e92511fbc72dee27f5-174996ce71442ad5-01
last-modified: Wed, 14 Jun 2023 09:49:53 GMT
etag: "6887b6f24414dbc612dbf42ccdc76b70"
expires: Thu, 16 Jan 2025 10:32:14 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 438
cache: HIT
x-cached-since: 2025-05-11T12:28:40+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET 1xlite-006032.top/main-static/62ddcac7/check-ob.js
200 OK 219 B URL GET 1xlite-006032.top/main-static/62ddcac7/check-ob.js
IP
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerLet's Encrypt
Subject1xlite-006032.top
FingerprintEA:03:CD:9C:9C:D6:BF:35:76:35:F3:CA:0F:0C:2A:12:AC:60:17:58
ValidityTue, 11 Mar 2025 05:20:00 GMT - Mon, 09 Jun 2025 05:19:59 GMT
File type JavaScript source, ASCII text
Hash c065700c9c8c493403359e1f2baa10d9
4630fe729e70bdf63fa7ba6c84ec277fd1f51030
1e61f0c82ae82ffcf503fcd4b4c8ae27b32c11e19b882d5d13f3c44364c893f4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /main-static/62ddcac7/check-ob.js HTTP/1.1
Host: 1xlite-006032.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_38951c_%5B%5DMS%5B%5DWL1%5B%5Dsmartcpm%5B%5Dgeneral%5B%5D6307113_d28985_l35030_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_38951c_%5B%5DMS%5B%5DWL1%5B%5Dsmartcpm%5B%5Dgeneral%5B%5D6307113_d28985_l35030_clickunder; postback_watcher=; auid=1bcn1mggmaNFSl+NBM3BAg==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:48 GMT
content-type: text/javascript; charset=utf-8
content-length: 219
last-modified: Fri, 09 May 2025 08:30:50 GMT
etag: "c065700c9c8c493403359e1f2baa10d9"
x-amz-meta-mtime: 1746779449.384478196
expires: Mon, 12 May 2025 01:51:45 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=
accept-ranges: bytes
X-Firefox-Spdy: h2
GET v3.traincdn.com/main-static/62ddcac7/desktop/default/runtime-b6dc95f8.js
200 OK 20 kB URL GET v3.traincdn.com/main-static/62ddcac7/desktop/default/runtime-b6dc95f8.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (19720), with no line terminators
Hash 097e517ba5e727312c8520b55e892e17
34643a5885d3fffb02b6aacd0203d392eb270d37
b66f8a4fdca078113b9b7ce4fdd74bb9c417c167b18f915ee31eec8f72efa489
GET /main-static/62ddcac7/desktop/default/runtime-b6dc95f8.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-006032.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:48 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-dd0f2c00abf3e7e932adc44bd20c4859-e9b68cac6e5e3afc-01
last-modified: Fri, 09 May 2025 08:29:57 GMT
etag: W/"097e517ba5e727312c8520b55e892e17"
x-amz-meta-mtime: 1746779396.608324478
content-encoding: gzip
expires: Sat, 10 May 2025 09:03:12 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 12511
cache: HIT
x-cached-since: 2025-05-11T09:07:17+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1-512/desktop/media_asset/82b61842dfc5c60fa0f8d6cf1b9e8436.json
200 OK 747 B URL GET v3.traincdn.com/genfiles/cms/1-512/desktop/media_asset/82b61842dfc5c60fa0f8d6cf1b9e8436.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash f4e90636ec9cff061c4301b3cefdd0d6
c506efe9c3672c58434ea10021dab0ad81b1ad98
30666f138ccc12735e2f8a6405ddce4a3d8756b9445e3b2732fa2970f14dbcea
GET /genfiles/cms/1-512/desktop/media_asset/82b61842dfc5c60fa0f8d6cf1b9e8436.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:49 GMT
content-type: application/json
content-length: 747
traceparent: 00-32af74a446b00b0c913e11eed2da0322-38efa49a3f7f7d6c-01
last-modified: Thu, 27 Feb 2025 13:26:38 GMT
etag: "f4e90636ec9cff061c4301b3cefdd0d6"
expires: Sun, 11 May 2025 13:35:49 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
cache: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/shared-assets/__shared_libphonenumber_js_4IISRMA4.js
200 OK 159 kB URL GET v3.traincdn.com/sys-static/shared-assets/__shared_libphonenumber_js_4IISRMA4.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type ASCII text, with very long lines (65509)
Size 159 kB (158815 bytes)
Hash 4673edf4e262d0703069c59915cde01f
da52ee1e0d3f5967a58218500593537f8e33621e
4e24e1b83813d014e5a44217a142123c8f95be42d2a9594b535155630e1adf45
GET /sys-static/shared-assets/__shared_libphonenumber_js_4IISRMA4.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:50 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-9fa68e625be3df783692603f40078b5e-29fffde8f2849f29-01
last-modified: Fri, 09 May 2025 08:32:04 GMT
etag: W/"4673edf4e262d0703069c59915cde01f"
x-amz-meta-mtime: 1746779387.557591925
content-encoding: gzip
expires: Sat, 10 May 2025 10:58:29 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 5644
cache: HIT
x-cached-since: 2025-05-11T11:01:46+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1-512/desktop/media_asset/e9a3c4aa63650070928007d0c6a945b7.json
200 OK 1.3 kB URL GET v3.traincdn.com/genfiles/cms/1-512/desktop/media_asset/e9a3c4aa63650070928007d0c6a945b7.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash 499d57f89b2bf5fed52d984d865fd72c
f3dd138886f2c1e257d3ac2214b7e3cba57e56b2
9467cf5576ce2a97d9e44e53915a9c4ae529c134cc1ea5a3c62ea304eebda0c8
GET /genfiles/cms/1-512/desktop/media_asset/e9a3c4aa63650070928007d0c6a945b7.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:50 GMT
content-type: application/json
traceparent: 00-f198751e80945c39e26d8191255d96ab-4d21777f8405705b-01
last-modified: Thu, 27 Feb 2025 08:17:18 GMT
etag: W/"499d57f89b2bf5fed52d984d865fd72c"
content-encoding: gzip
expires: Sun, 11 May 2025 13:35:50 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
cache: MISS
X-Firefox-Spdy: h2
GET 1xlite-006032.top/web-api/session
204 No Content 0 B URL GET 1xlite-006032.top/web-api/session
IP
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerLet's Encrypt
Subject1xlite-006032.top
FingerprintEA:03:CD:9C:9C:D6:BF:35:76:35:F3:CA:0F:0C:2A:12:AC:60:17:58
ValidityTue, 11 Mar 2025 05:20:00 GMT - Mon, 09 Jun 2025 05:19:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /web-api/session HTTP/1.1
Host: 1xlite-006032.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
content-type: application/json
x-requested-with: XMLHttpRequest
x-app-n: v3-nuxt2
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_38951c_%5B%5DMS%5B%5DWL1%5B%5Dsmartcpm%5B%5Dgeneral%5B%5D6307113_d28985_l35030_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_38951c_%5B%5DMS%5B%5DWL1%5B%5Dsmartcpm%5B%5Dgeneral%5B%5D6307113_d28985_l35030_clickunder; auid=1bcn1mggmaNFSl+NBM3BAg==; window_width=1280; che_g=13964025-f63d-a816-18f6-36ea5c3fcd1c
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
server: nginx
date: Sun, 11 May 2025 12:35:58 GMT
cache-control: no-cache, private
server-timing: dt_total;dur=0.115, p;dur=20.173, wf-uht;dur=0.031
set-cookie: ua=deleted; expires=Thu, 01 Jan 1970 00:00:01 GMT; Max-Age=0; path=/
SESSION=3cf01ba86811f99a1d2d0d6aad113590; path=/; secure; httponly; samesite=lax
x-dt: 512
x-time-ng: 0.022, 0.022
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
GET v3.traincdn.com/main-static/62ddcac7/desktop/default/commons/app-6cee1b54.js
200 OK 138 kB URL GET v3.traincdn.com/main-static/62ddcac7/desktop/default/commons/app-6cee1b54.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65476)
Size 138 kB (138079 bytes)
Hash d76951ff0952b11ad5f228dd59e3440c
8e7aa237896f6fa259609de20e31566959afe1c2
56e30a9244acd3ebfa556a91683b65ef46bd00f1a4b4f4086df628abfcd4d2ca
GET /main-static/62ddcac7/desktop/default/commons/app-6cee1b54.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-006032.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:48 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-68c41f2cee78b510af829d37e5a97146-4e491e5e9b1edd72-01
last-modified: Fri, 09 May 2025 08:29:57 GMT
etag: W/"d76951ff0952b11ad5f228dd59e3440c"
x-amz-meta-mtime: 1746779396.588324419
content-encoding: gzip
expires: Sat, 10 May 2025 09:03:12 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 12511
cache: HIT
x-cached-since: 2025-05-11T09:07:17+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/site-admin/colors/73c1e50506faab2d495c95d31b820a22.css
200 OK 40 kB URL GET v3.traincdn.com/genfiles/site-admin/colors/73c1e50506faab2d495c95d31b820a22.css
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type ASCII text, with very long lines (39662), with no line terminators
Hash 73c1e50506faab2d495c95d31b820a22
c0f2744dc4b187b6667f6aa6a9b4013cf1f0dcd3
4ea05001192895400e75d7cd8c07c56ed203c40a1aed77be2534e7bd42135566
GET /genfiles/site-admin/colors/73c1e50506faab2d495c95d31b820a22.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-006032.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:49 GMT
content-type: text/css
traceparent: 00-66d9e8a2caa5be69e8dedb4229c72224-3038473467cc09c4-01
last-modified: Wed, 30 Apr 2025 07:00:46 GMT
etag: W/"73c1e50506faab2d495c95d31b820a22"
cache-control: max-age=3600
content-encoding: gzip
expires: Wed, 30 Apr 2025 09:47:52 GMT
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1854
cache: HIT
x-cached-since: 2025-05-11T12:04:55+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1-512/desktop/media_asset/ad9a6897641867994c052eb8f0bcb524.json
200 OK 14 kB URL GET v3.traincdn.com/genfiles/cms/1-512/desktop/media_asset/ad9a6897641867994c052eb8f0bcb524.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash 811ce3b7877d19901e45430cb6523d62
16a905115a678fdef3923f91c6f76cbab613e84d
10fbb74dbac63abfe9c4f5a77abc03757ef3527a479d4ae70dc977b515eec8cb
GET /genfiles/cms/1-512/desktop/media_asset/ad9a6897641867994c052eb8f0bcb524.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:49 GMT
content-type: application/json
traceparent: 00-cabc91a86f695433836b877f671fc72e-165e88c6a08e1161-01
last-modified: Thu, 27 Feb 2025 09:04:05 GMT
etag: W/"811ce3b7877d19901e45430cb6523d62"
content-encoding: gzip
expires: Sun, 11 May 2025 13:35:49 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
cache: MISS
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/3391a1bcde.js
200 OK 134 B URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/3391a1bcde.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash 9cab00381884409f22ed5881f2c6b94e
6cb9dc6ad9f587cac210658052275cc905a83a47
3d2a785e69f540de179b22dc081d4a1645cc79b40a9359da6476cc406cdd76a2
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/3391a1bcde.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:50 GMT
content-type: text/javascript; charset=utf-8
content-length: 134
traceparent: 00-b7927da9616a8664074100abd82e00d4-27d412a26a11e729-01
last-modified: Wed, 30 Apr 2025 07:29:34 GMT
etag: "9cab00381884409f22ed5881f2c6b94e"
x-amz-meta-mtime: 1745997847.066695082
expires: Wed, 07 May 2025 20:42:56 GMT
cache-control: max-age=86400
x-time-ng: 0.003
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 56145
cache: HIT
x-cached-since: 2025-05-10T21:00:05+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1-512/desktop/media_asset/d5a2771f2227aeeb85010f8c6becacaf.json
200 OK 22 kB URL GET v3.traincdn.com/genfiles/cms/1-512/desktop/media_asset/d5a2771f2227aeeb85010f8c6becacaf.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash ff5d81879a491bb1cfe091c5817a89b4
2a1d20f61eb8c513b270b8d123e3a9f66c89f808
538bffce9fa55e37a08e6b7f5148f8e7884c02a82b13e8426553061ff2475f90
GET /genfiles/cms/1-512/desktop/media_asset/d5a2771f2227aeeb85010f8c6becacaf.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:49 GMT
content-type: application/json
traceparent: 00-da8aa385866777bdd6253295bd396469-03014568fc7cd782-01
last-modified: Wed, 16 Apr 2025 13:44:07 GMT
etag: W/"ff5d81879a491bb1cfe091c5817a89b4"
content-encoding: gzip
expires: Sun, 11 May 2025 13:35:49 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
cache: MISS
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/8192228305b202797f207eeb6842287c.png
200 OK 5.2 kB URL GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/8192228305b202797f207eeb6842287c.png
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type PNG image data, 514 x 514, 8-bit colormap, non-interlaced
Hash b9a636eef54b2844b571fe7de49184a7
bf653690790ced40eb3189da075a275d951d1607
001bfcdd52b658d46543a1aec889d35b73b3909b47097cc011b95e96fc9e3743
GET /genfiles/cms/1-285/desktop/media_asset/8192228305b202797f207eeb6842287c.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-006032.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:50 GMT
content-type: image/png
content-length: 5202
traceparent: 00-233fbc9203ab97883597ecc4ddb5b4aa-21ae75bac6817bf7-01
last-modified: Wed, 26 Jun 2024 08:22:59 GMT
etag: "b9a636eef54b2844b571fe7de49184a7"
expires: Thu, 16 Jan 2025 11:18:57 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
cache: REVALIDATED
accept-ranges: bytes
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/shared-assets/__shared_fast_deep_equal_4DKQVMAE.js
200 OK 865 B URL GET v3.traincdn.com/sys-static/shared-assets/__shared_fast_deep_equal_4DKQVMAE.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (840)
Hash b83f09e2c933f2aafd2e97f88f23d81f
c5c5ff5f8b7cd801781559b42c365a16e6839800
f584585b1dce860bf95b8270b60680af7022244f6723ed8f01fe3967780c6aae
GET /sys-static/shared-assets/__shared_fast_deep_equal_4DKQVMAE.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:50 GMT
content-type: text/javascript; charset=utf-8
content-length: 865
traceparent: 00-52fb9a807d6c6a2bd4541f7d6df18431-d0f91085a0087c2b-01
last-modified: Fri, 09 May 2025 08:32:04 GMT
etag: "b83f09e2c933f2aafd2e97f88f23d81f"
x-amz-meta-mtime: 1746779387.557591925
expires: Sat, 10 May 2025 10:58:33 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 5644
cache: HIT
x-cached-since: 2025-05-11T11:01:46+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET 1xlite-006032.top/hd-api/external/apps/c5e31d5915661de4393e3f1489b00ebc4497dd48/api.js
200 OK 753 B URL GET 1xlite-006032.top/hd-api/external/apps/c5e31d5915661de4393e3f1489b00ebc4497dd48/api.js
IP
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerLet's Encrypt
Subject1xlite-006032.top
FingerprintEA:03:CD:9C:9C:D6:BF:35:76:35:F3:CA:0F:0C:2A:12:AC:60:17:58
ValidityTue, 11 Mar 2025 05:20:00 GMT - Mon, 09 Jun 2025 05:19:59 GMT
File type JavaScript source, ASCII text, with very long lines (752)
Hash f004562bde4d48fb0987e200eb06f3af
6ce4bb1f9a61802bc2b28d084810a6a752af30a6
ba2a7d9626d02a36d5c599c2e0f24594f47e2624d8fa93f6944056722e31f20f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /hd-api/external/apps/c5e31d5915661de4393e3f1489b00ebc4497dd48/api.js HTTP/1.1
Host: 1xlite-006032.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=2; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_224327m_38951c_%5B%5DMS%5B%5DWL1%5B%5Dsmartcpm%5B%5Dgeneral%5B%5D6307113_d28985_l35030_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_224327m_38951c_%5B%5DMS%5B%5DWL1%5B%5Dsmartcpm%5B%5Dgeneral%5B%5D6307113_d28985_l35030_clickunder; auid=1bcn1mggmaNFSl+NBM3BAg==; window_width=1280; che_g=13964025-f63d-a816-18f6-36ea5c3fcd1c; SESSION=3cf01ba86811f99a1d2d0d6aad113590
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:58 GMT
content-type: text/javascript; charset=utf-8
content-length: 490
cache-control: public, max-age=300
content-encoding: gzip
etag: f004562bde4d48fb0987e200eb06f3af
vary: Accept-Encoding
x-dt: 706
x-request-guid: 19fff502ebb2d342e6eff042ec5102b3
x-time-ng: 0.001
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.014, wf-uht;dur=
accept-ranges: bytes
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-ui/3.3.197/Desktop/Default/merged.css
200 OK 939 kB URL GET v3.traincdn.com/sys-ui/3.3.197/Desktop/Default/merged.css
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 939 kB (938845 bytes)
Hash f52991ea7bb76b9ddc72b913dfc83299
ca8b5d46d2e7410a8135d0c95622fec171bf3556
e2ac549362bdd8175475fae965fbc7f7edf43348a7fcf8d48ad1c31d8d9bdea5
GET /sys-ui/3.3.197/Desktop/Default/merged.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-006032.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:48 GMT
content-type: text/css; charset=utf-8
traceparent: 00-6dd083608fed925a0473cac787da0389-983c9f9db2da95bf-01
last-modified: Sat, 10 May 2025 10:53:14 GMT
etag: W/"f52991ea7bb76b9ddc72b913dfc83299"
x-amz-meta-mtime: 1746874355.186762576
content-encoding: gzip
expires: Sun, 11 May 2025 10:57:46 GMT
cache-control: max-age=86400
x-time-ng: 0.003
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 5666
cache: HIT
x-cached-since: 2025-05-11T11:01:22+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/19f05ee466.css
200 OK 15 kB URL GET v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/19f05ee466.css
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type ASCII text, with very long lines (15082)
Hash 967ea13abafaa256ab87710daeab15e3
c35d006df7e93184905785ddd0780675dbf5ea14
21a68512f65cb824cf777ebddc9aa65f5922defc4dfbc969c3c0e37f74636eda
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/19f05ee466.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-006032.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:48 GMT
content-type: text/css; charset=utf-8
traceparent: 00-10bcb7db767c790fb63ac1a67f1c9447-28bacd3a6e05d45a-01
last-modified: Wed, 30 Apr 2025 07:29:34 GMT
etag: W/"967ea13abafaa256ab87710daeab15e3"
x-amz-meta-mtime: 1745997847.069695279
content-encoding: gzip
expires: Thu, 01 May 2025 10:12:15 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 6712
cache: HIT
x-cached-since: 2025-05-11T10:43:56+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/main-static/62ddcac7/desktop/default/Page.Block-8205f2da.js
200 OK 476 B URL GET v3.traincdn.com/main-static/62ddcac7/desktop/default/Page.Block-8205f2da.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (476), with no line terminators
Hash e86306810b548e42f2e7815c1b75121d
346bbfd46ceb2300dc259150a11670b68f8281e9
980db9cdb7d3b824645bdf19ae79a9a64b06a38880966b44e9ebe3ec7ee20d71
GET /main-static/62ddcac7/desktop/default/Page.Block-8205f2da.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-006032.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:48 GMT
content-type: text/javascript; charset=utf-8
content-length: 476
traceparent: 00-f6b77024fd3f3d3424ac73bc9aa9aeb7-5601fbedce7bccd1-01
last-modified: Fri, 09 May 2025 08:29:57 GMT
etag: "e86306810b548e42f2e7815c1b75121d"
x-amz-meta-mtime: 1746779396.584324408
expires: Sat, 10 May 2025 09:03:18 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 12259
cache: HIT
x-cached-since: 2025-05-11T09:11:29+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET v3.traincdn.com/main-static/62ddcac7/desktop/default/app-f96c89dd.js
200 OK 512 kB URL GET v3.traincdn.com/main-static/62ddcac7/desktop/default/app-f96c89dd.js
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (65536), with no line terminators
Size 512 kB (511702 bytes)
Hash 0dec2a25c2b968439ab5d1031dc51c64
df48197a9df3f46d7131245416737b508ff97556
167e5558cce31248f259b98aed4a1befbfb20b09a79e12f0f38590c362ee30ed
GET /main-static/62ddcac7/desktop/default/app-f96c89dd.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-006032.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:48 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-ea703d48f3a24d15ab878683d963cb40-f763da3826f4b63b-01
last-modified: Fri, 09 May 2025 08:29:57 GMT
etag: W/"0dec2a25c2b968439ab5d1031dc51c64"
x-amz-meta-mtime: 1746779396.588324419
content-encoding: gzip
expires: Sat, 10 May 2025 09:03:12 GMT
cache-control: max-age=86400
x-time-ng: 0.003
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 12511
cache: HIT
x-cached-since: 2025-05-11T09:07:17+00:00
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/b5cd9a5e87d930de856c92da15aa121e.png
200 OK 653 B URL GET v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/b5cd9a5e87d930de856c92da15aa121e.png
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Hash e6f0766cbd95db33da44e7a9140648f2
5f196b1bfe8c3f92bd2ebcd67124e72e81ae6aaf
c0399d478788d5d483f104a2e8cb7c32f41cb40e9df0c22e831b2bfa2db63ec0
GET /genfiles/cms/1-285/desktop/media_asset/b5cd9a5e87d930de856c92da15aa121e.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-006032.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:49 GMT
content-type: image/png
content-length: 653
traceparent: 00-e7d2e3127eed480611e416a2d9be188f-7fc1916cdc310d12-01
last-modified: Wed, 26 Jun 2024 08:18:02 GMT
etag: "e6f0766cbd95db33da44e7a9140648f2"
expires: Thu, 16 Jan 2025 10:46:36 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 732
cache: HIT
x-cached-since: 2025-05-11T12:23:37+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
GET v3.traincdn.com/genfiles/cms/1-512/desktop/media_asset/b72c6c5d4f5251969ce6d1ed378b622f.json
200 OK 1.1 kB URL GET v3.traincdn.com/genfiles/cms/1-512/desktop/media_asset/b72c6c5d4f5251969ce6d1ed378b622f.json
IP
ASN #199524 G-Core Labs S.A.
Requested by https://1xlite-006032.top/en/block?redirectedFrom=5b63b43810086835f8b2b8111b74c271
Certificate IssuerSectigo Limited
Subject*.traincdn.com
Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA
ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash 338264fc869e8f0b86b0d6c9d92102b0
83b4d35816df0e1486b766251e74d23f28b77824
015355a44429f40dd63b566dd1e9b1b76af3dfa28dcd25a43e82820ba0847b8d
GET /genfiles/cms/1-512/desktop/media_asset/b72c6c5d4f5251969ce6d1ed378b622f.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-006032.top/
Origin: https://1xlite-006032.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 11 May 2025 12:35:50 GMT
content-type: application/json
traceparent: 00-8fee67aa7c5be5817975c8f8823940e4-2ddc82ac964bc08d-01
last-modified: Thu, 16 May 2024 19:05:52 GMT
etag: W/"338264fc869e8f0b86b0d6c9d92102b0"
content-encoding: gzip
expires: Sun, 11 May 2025 13:35:50 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
cache: MISS
X-Firefox-Spdy: h2
213.183.39.214
185.244.209.62
142.250.74.131
0.0.0.0