{"report_id":"dd7ec47b-89a1-43ec-bb78-61ff4c43b669","version":6,"status":"done","tags":[],"date":"2025-02-07T23:06:23Z","url":{"schema":"http","addr":"adclickad.com/popunder/in/click/?ip=2001:42c0:8109:100:2175:9cd2:ed7d:1d45\u0026min_cpm=0.03780514045945553\u0026ttl=1739055876\u0026ecpm=1.3887000381946502\u0026price=0\u0026cpm=1.5000000000000002\u0026original_bid_usd=0\u0026is_cpm=0\u0026burl=https://nwwrtbbit.com/v1/track/win?data=eyJhbGciOiJIUzI1NiJ9.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.KEGz0Zu252AfoD1pIC2F-vPYcgpQM6kU9fABZJthQ3Q\u0026sp={sp}\u0026pop_type=0\u0026is_interstitial=0\u0026stratagem=\u0026accel=0\u0026gyr=0\u0026ssp=3758\u0026rc=0\u0026ip_mismatch=2001:42c0:8109:100:2175:9cd2:ed7d:1d45\u0026ua_mismatch=false\u0026v2=0\u0026v2_track=0\u0026otype=0\u0026refresh=0\u0026mn=0\u0026priority=0\u0026bb=0.035\u0026is_direct=2\u0026site_id=0\u0026verify_hash=1b3ce0549618112a70ee2c3be1956cdf26e254c03b24724ee8241a0708552ada\u0026exp=0\u0026uniq=\u0026mid=265765641729819751\u0026subid=0\u0026adblock=0\u0026format=\u0026site=\u0026sid=0\u0026cid=19627\u0026ext_campaign_id=14207\u0026usage_type=ISP\u0026crid=90233\u0026tcid=0\u0026ver=\u0026ver_c=\u0026refdom=adclickad.com\u0026hostname=auc-popunder-hz-3\u0026spot_id=802130\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=1739055876\u0026created_at=0000-00-00\u0026url=https://nwwrtbbit.com/v1/track/click?data=eyJhbGciOiJIUzI1NiJ9.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_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.vlvvpXsFgvXkBrdcmJWka8uhuQLZ7rgrj9aUzsG0o4A\u0026sp={sp}\u0026px_id=802130\u0026keywords=\u0026user_fp=0\u0026original_bid=0.0015\u0026score=1.000302033179202\u0026iabcat=IAB13\u0026placement_type_id=7\u0026ad_tags=\u0026tag_ab=\u0026pr=\u0026label_ids=83,70,0\u0026sp_scr=0\u0026sp_cl=0\u0026act_sess=0\u0026intes=\u0026izb=\u0026ang=0\u0026act_su=0\u0026empty_clicks=0\u0026comeback=\u0026offer_label_ids=0,83,70\u0026interest_vertical_ids=\u0026v_scroll_freq=\u0026time_session=\u0026high_freq_clicks=0\u0026dev_console_activity=0\u0026auction_time=1738969476\u0026topics=\u0026is_webview=0\u0026scroll_percent=0\u0026aid=3296\u0026client_price=0.00138870003819465\u0026direct_client_price=0\u0026client_payment_model=cpc\u0026delivery_method=js_redirect\u0026mediation_ecpm=0\u0026user_keywords=\u0026prev_step_diff=\u0026o_d=\u0026timezone_olson=\u0026ip_timezone=\u0026is_in_app=0\u0026service_spot_id=0\u0026testab=0\u0026social_network=\u0026crtid=d41d8cd98f00b204e9800998ecf8427e\u0026mediation_type=no_mediation","fqdn":"adclickad.com","domain":"adclickad.com","tld":"com"},"ip":{"addr":"94.130.197.239","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"1xlite-088578.top/en/block","fqdn":"1xlite-088578.top","domain":"1xlite-088578.top","tld":"top"},"title":"1xBet"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2027-04-18T23:06:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"nwwrtbbit.com","ip":{"addr":"178.63.224.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2024-03-20","domain_rank":0,"first_seen":"2024-03-20T14:30:00Z","last_seen":"2025-02-01T10:33:10.533928Z","alert_count":0,"request_count":1,"received_data":352,"sent_data":1920,"comment":"","tags":null,"fingerprints":null},{"fqdn":"refpavnpad.top","ip":{"addr":"45.135.122.193","port":443,"asn":56630,"as":"Melbikomas UAB","country":"The Netherlands","country_code":"NL"},"domain_registered":"2019-05-08","domain_rank":0,"first_seen":"2019-06-06T05:22:41Z","last_seen":"2025-02-07T07:26:37.084451Z","alert_count":0,"request_count":1,"received_data":248804,"sent_data":621,"comment":"","tags":null,"fingerprints":null},{"fqdn":"radar.cedexis.com","ip":{"addr":"45.54.49.5","port":443,"asn":63911,"as":"NetActuate, Inc","country":"United States","country_code":"US"},"domain_registered":"2009-01-07","domain_rank":3035,"first_seen":"2013-11-27T02:31:43Z","last_seen":"2025-02-01T21:34:08.602071Z","alert_count":0,"request_count":2,"received_data":1040,"sent_data":846,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.no","ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":25607,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2025-02-05T02:11:29.453562Z","alert_count":0,"request_count":1,"received_data":578,"sent_data":797,"comment":"","tags":null,"fingerprints":null},{"fqdn":"adclickad.com","ip":{"addr":"94.130.197.239","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2024-09-11","domain_rank":0,"first_seen":"2016-06-19T20:06:06Z","last_seen":"2025-02-02T02:32:36.346193Z","alert_count":0,"request_count":1,"received_data":1797,"sent_data":4747,"comment":"","tags":null,"fingerprints":null},{"fqdn":"v3.traincdn.com","ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"domain_registered":"2022-11-10","domain_rank":0,"first_seen":"2022-11-25T10:00:40Z","last_seen":"2025-02-03T12:33:31.701389Z","alert_count":0,"request_count":62,"received_data":4296048,"sent_data":31272,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":75,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-02-05T01:50:27.01532Z","alert_count":0,"request_count":4,"received_data":745453,"sent_data":1884,"comment":"","tags":null,"fingerprints":null},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":0,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2025-02-05T02:11:25.534565Z","alert_count":0,"request_count":2,"received_data":1698,"sent_data":1957,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":7,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-02-05T01:42:46.983669Z","alert_count":0,"request_count":1,"received_data":566,"sent_data":786,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":8877,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-02-05T01:36:31.262019Z","alert_count":0,"request_count":1,"received_data":11856,"sent_data":469,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-02-05T01:39:24.950912Z","alert_count":0,"request_count":1,"received_data":40963,"sent_data":552,"comment":"","tags":null,"fingerprints":null},{"fqdn":"1xlite-088578.top","ip":{"addr":"46.32.182.121","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"domain_registered":"2024-10-10","domain_rank":0,"first_seen":"2025-01-29T18:17:10.670103Z","last_seen":"2025-02-05T18:56:21.206406Z","alert_count":16,"request_count":16,"received_data":904500,"sent_data":17589,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-07","alert":"Sinkholed","trigger":"1xlite-088578.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-07","alert":"Sinkholed","trigger":"1xlite-088578.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-07","alert":"Sinkholed","trigger":"1xlite-088578.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-07","alert":"Sinkholed","trigger":"1xlite-088578.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-07","alert":"Sinkholed","trigger":"1xlite-088578.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-07","alert":"Sinkholed","trigger":"1xlite-088578.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-07","alert":"Sinkholed","trigger":"1xlite-088578.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-07","alert":"Sinkholed","trigger":"1xlite-088578.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-07","alert":"Sinkholed","trigger":"1xlite-088578.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-07","alert":"Sinkholed","trigger":"1xlite-088578.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-07","alert":"Sinkholed","trigger":"1xlite-088578.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-07","alert":"Sinkholed","trigger":"1xlite-088578.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-07","alert":"Sinkholed","trigger":"1xlite-088578.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-07","alert":"Sinkholed","trigger":"1xlite-088578.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-07","alert":"Sinkholed","trigger":"1xlite-088578.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-07","alert":"Sinkholed","trigger":"1xlite-088578.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"00beb9884d0391b342eadd30744b539a","sha1":"3124c0bd593822379d22f13d3e08e70a1bf5ea14","sha256":"92394eec5690449a4f6cfc9a7f97497a69e926b2365cb9a9aad3507a844f835c","sha512":"6fa2e21df54ca406f570cb639529d68edac5de27fd4bc3a9daa8fd0465b583ede1c1cabb550237deb75d8bf88f39e80c1a77777d794826ad3272630108e58661","ssdeep":"","tlshash":"b690029c3900310640261191001b9c6995149570a4902d9155039c445da1218525a99d","size":44,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-04-28T07:32:04.517558Z","times_seen":13717,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/721582dc/desktop/default/DC-d38fa071.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c6723a5cbee908e7ef5afd23c8d2e6e","sha1":"eb90e5319f6a4ad5a3f0c5c8e5b474eb5dd4ee3a","sha256":"5b6b600f0e59acb5aa30bcde7a2e61521195bf7dfd14ff39d9b1294882cf1cb5","sha512":"566770549c3eb11bfe810970e8d1bc3bef582f463d383c841204d41f7535b3cd41ddf926547d1bac966dd356117ab5f3ab18c6091c94b0a3aa0c0467e5acf91b","ssdeep":"","tlshash":"9151738b76dee42009e0402cbd7256109616b592d40398fcbe7d6fc4ad9580fb13ea35","size":2654,"data":"","first_seen":"2025-02-07T05:54:06.22363Z","last_seen":"2025-02-08T06:05:52.641884Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_popper_js_5I5UQEBA.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"6cb09f9375675899743ac6e31bcf0b0d","sha1":"01383c415481291b1d4eeedff5a394215d84ecee","sha256":"b17f976b26b989ff50713207d307701334974c9c1e3b491f629adf197bc879ce","sha512":"0885ba49ed5638b856c2d86f6ec9643b70a00a55dbf3314c4b1bca24269ef1bab439ba3a36a83493546e8489d9d31cfc1721030674ba427cd7cf822da726a59d","ssdeep":"384:eP7iayBuR9vu3z1JXvykd2+LaqHdC6RjVnTGm/7piCXmH8kCCcvJTCyCu+meAxiZ:yiZwO3XvO+NMSJt3XmckXcv4nxJAxiH5","tlshash":"2192a28c7684b0a287a7a2a7a07f860f71376865650e9004f59cf6ec3c35dba507bc7d","size":21252,"data":"","first_seen":"2024-12-07T20:25:30.523697Z","last_seen":"2025-04-01T10:53:16.835428Z","times_seen":349,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_libphonenumber_js_62MR2OUM.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"382948808b1330a7a717d99dfd278acb","sha1":"e43ecb337e5dfe4613663cf0bb2b2d91ff3db39e","sha256":"294b1df36207fcdeda2857f2e53154d5c383045cb70bf70d9fbaf47ff7db5cf8","sha512":"623062d3fae90b41f05a8bbcd3ecab5d5e7f641ded2a77f91b2dc4dcabd7a4d11b0580c9d7cc8791a967f1c6276ccc6f8e2dd6e36bde29794d0aa7f3a87509c8","ssdeep":"3072:3OU03o4Pwjp9BumfaVpfMHgWH71RgZXo9k:3XpzumWpf2gWH71RgZok","tlshash":"63f3b9f73640ab6775b23b188e4ad28f6f9c9c51cc88908caae7d4db5d61c22707db14","size":158815,"data":"","first_seen":"2024-12-07T20:25:30.751374Z","last_seen":"2025-04-01T10:53:16.951498Z","times_seen":349,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_fast_deep_equal_ORMYJPSV.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"e42d2bda0bda350e6cb507a391561910","sha1":"fd6785beb70e406347acd6af79b73a609a65abb7","sha256":"59e1f2ebd2ec588a043cdfb338403916451f301c50c7ace4549c0171c9659e88","sha512":"155ed01fafa70dac614ba02039f8988c9ec6b2285f69465973f27208ccd1fe96991ca6ec4926059a0d90e20d4f068063de20da1d7dab9e55416e37eb0c447f62","ssdeep":"","tlshash":"3f118cc232e3a0d1c3e069dd1111d906f239a9e9e47ca0c9d757e6f83cb2653d875b2a","size":865,"data":"","first_seen":"2024-12-07T20:25:29.889358Z","last_seen":"2025-04-01T10:53:17.008433Z","times_seen":350,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/PKQRX_b5.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"21545c1b5163b1aff8e5b501a8bf0e26","sha1":"8ee6a12b94c9b4081215ebab87d79677b3dd2fcd","sha256":"816379d9aa04c4d364a0c0f72e985074e154d6ff6f3956acdcde97d9a3e166b4","sha512":"d501a7fc15739b6cacc1ea0932c8819a113aef65ad4372ebf55608b18d44bca9a6367432960b891dd32bce56b782febdb8e3de973cdb027784a9daef8d25dbc2","ssdeep":"","tlshash":"b8d012849a79a2b1161c542d7ae609eb4655b0394a29907c40256761228b132b01f932","size":270,"data":"","first_seen":"2025-01-24T08:48:07.927401Z","last_seen":"2025-02-24T05:54:00.598039Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-088578.top/hd-api/external/apps/c5e31d5915661de4393e3f1489b00ebc4497dd48/api.js","fqdn":"1xlite-088578.top","domain":"1xlite-088578.top","tld":"top"},"ip":{"addr":"46.32.182.121","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"58ae5e05847db466a6baebf42d8b8dc7","sha1":"3b9fc2267e032e41bd5afffa6bfbd25a59faf52e","sha256":"8477984efb81d7a68f357df556fa482fba6ea0cc33c4c1e5747a50e5cd0dfce9","sha512":"2698f4b5148f2cccf32d7dba5c866de52ac5ba788d135bce67eb5e6a6063ab1e67caec6222cb22830a54728de9ec41b77464809bec7fee849f6d46aabca97c52","ssdeep":"","tlshash":"3c01dc1d2cccb0153b292ec212b7cefdf100383a390ac8d9929ed4722a0abe50526e5c","size":694,"data":"","first_seen":"2025-02-01T22:07:21.94472Z","last_seen":"2025-02-24T06:09:12.165665Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-088578.top/captcha-api/assets/pain-puzzle.js","fqdn":"1xlite-088578.top","domain":"1xlite-088578.top","tld":"top"},"ip":{"addr":"46.32.182.121","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8ae208179f187d84183832e5f60284d","sha1":"19fe1d5df701fa7c5c150925e5cea2245511c575","sha256":"63791c3a3fe72938cb161cc070fcd5d7a6ed931a48ab36dd71b3a1956483bab9","sha512":"943d97f2b5d2158332591081e42647c1ed450155b0e5dab3d8111342d99e360a04d276ffa516cee0b10ab5518283c0c17192779df73ca896adda162bdcb88e9d","ssdeep":"6144:G4DSfbyYzJlSdCmqy9BQd4nUU0a/5JJPezPIS:GfXzJlSdCmqy9BQd4nTRJJkPd","tlshash":"af24744167c06e45374b8fbbb32bb4e9e46e096f3c84498bd104bc546ad621bebf1931","size":217873,"data":"","first_seen":"2025-02-01T22:07:21.974785Z","last_seen":"2025-02-24T06:09:12.191484Z","times_seen":65,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"580b3e56fc9ab6e8b4655f43ee057cc1","sha1":"5dfce565e446f4a167195de9a1a5dd26163c711c","sha256":"446f07b6e56de61d2c2d5b6ba408cc580b492a6d1ede8fc51cfde4ef75a2b382","sha512":"b2350579a3aaa5843b9b16c31782f3d7a4b850ba211d0074aa05d819c89ba49b482eb59aefcfb33f9fc9b270abb7cf7509e1254def23e9f98c116130c47f0018","ssdeep":"","tlshash":"029002692d4d1052803a10a0041fa455dc208c3226409990d501d8484d61658039f49c","size":47,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-04-28T07:32:04.525187Z","times_seen":13711,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"domTimer","is_inline":false,"md5":"01f4b51b4ba7edd00ad9f0a22259f06e","sha1":"00723d0eda4be61a7b1c542b0a08a94a94a60017","sha256":"9fdac1c31a22f55dbb8ca225ee28c3f7e88b41cce82968af0018c9f8b3bd35ba","sha512":"83d180c9960a53f88da3e3ff8616b4e095b7d642182f5855cfa386d48a19b888fedbde6433d1f926d9dd93d0a813a24590591729a6d8393543dfc490efee2070","ssdeep":"","tlshash":"e360000c0000003cc000c000c30c0ccc0c0f3f00c0c0f000330000333c00c30c000c00","size":10,"data":"","first_seen":"2024-09-21T15:04:59Z","last_seen":"2026-01-22T06:40:31.224966Z","times_seen":5888,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/721582dc/desktop/default/vendors/plugins.vue-notification-a67b7803.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e6529effb382d60644c0d3c3b8cf4f7","sha1":"b8b8e5ad18beb7c1f884536ddf4b04d02b00b703","sha256":"7772718940086473cb10dffc55df8424bbadc64be96e2dae9e49cbf00e065df8","sha512":"a7876bbb433eaee356be19892ca85dfa88e30d3456bb0c07e5f1d48b58a4f63a767e3562f7eb5022a3706d9070a2bed39fcc244f193026021263073b1d19b6ce","ssdeep":"192:NU1hQXHv3CbfKpqEVwhSIkrReP+SdHtfGA2D3ow5EE9bJ52bFZLy2mp4ilVW:Nn3CmpcDkAP+S/fGAWf5VbWbLy2mmijW","tlshash":"c74296ceb2c2b4650be760b6402f110af136a96869ab54d4f3b1d4f2adb564c413bf3d","size":12563,"data":"","first_seen":"2025-02-07T05:54:06.184545Z","last_seen":"2025-02-08T06:05:52.651142Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/721582dc/desktop/default/vendors/plugins.vue-js-modal-4fbec5e8.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"e342cfe684d6852e5438fe1d4d9c47f9","sha1":"7b981fea02d6d89f04ab8d38a8a70ff3f85e77a2","sha256":"17977e67e0aeafa4e263c4c30a238e9881bfd879d431f79da887de0c7da243d2","sha512":"dd6e60ba7e9fb577f4c7d24f2c577be831dc986d87392bc81be1854ca78172c65d6cc00550fae96f885b60eb0415d84220cc2efb5e57f9b29cd9367adfcfda86","ssdeep":"384:BBy0a9vOeCGAZIXfKvrtsAqm00uDw9/QEjI6OGXGQVedubq0:YHyIXftE9YEuGXGQ/bq0","tlshash":"97c23a8977d8307442db5573627f2b0ab23e295475269888f772e8e65cb860d206ff3c","size":26717,"data":"","first_seen":"2025-02-07T05:54:06.182718Z","last_seen":"2025-02-08T06:05:52.609789Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/721582dc/desktop/default/useMFDebugger-7fb8ea70.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c77105a99a0eb729c55aa9cd36f7812f","sha1":"8f917410c1b7d3f631b353142057a6a35a2c00be","sha256":"501b7f8ca863ac02c77eeeabb7051a110a4e08cf4c087d0d80ba8808cf2157c6","sha512":"f0f52c03aacccb8fd98dfb01401caa64843b32cee4b4929181d734f10f027720d34169f8dc02be366f6b238fa801006505211db75883a41955b60303422daf6b","ssdeep":"384:AeebwLP/OyOx7LBSjar7XioOyQR0J9cEHqdT:ADbwLpOxBSjar7yoOyKwchdT","tlshash":"1242fa217bd1567943ad4f8ff3f9e328babd1622f021a4e075dcc89d379dc8040a5a66","size":13115,"data":"","first_seen":"2025-02-07T05:54:06.229906Z","last_seen":"2025-02-08T06:05:52.635559Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"a01893d8e129ad16c1e0fc5c7537f411","sha1":"0e46d1bf2718f848d9d596fa269eaedb31204772","sha256":"cbe7b89533bcd75b69f3e54807308551d68242ec1761e63bee1a99fc6e560175","sha512":"074e309b533fc11690afbeab9b4dda85851e086c0ede97936860c7a5c4120ed9a16c6ced4fffdad21ca322f6c6e51577bd4966c5264b4a9780495acc451aee65","ssdeep":"","tlshash":"8590027939106364c0272490401f696750315434348049251609ed844875168122559d","size":47,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-04-28T07:32:04.522303Z","times_seen":13704,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16664555628\u0026l=dataLayer\u0026cx=c\u0026gtm=45He5240v9180563600za200","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b33be7dff731f1d4e4449bf7affe370","sha1":"33701e079ad297f20570a16933a1b7b8aab3bc72","sha256":"d6a76d581e06c079ae4ce9c051f6a52c7e53789dedefb7bc5eb4de7bfcf39a17","sha512":"947d6d287e37373ab52a572071d5de368cfbfcb64adec5b32b6ada87f0ed4f09634d151158679fbf7842258429d1e524598607d2eb0dce3340e8b126ac9086e8","ssdeep":"3072:SPAYI56LQbFs++0/PR0+k7jla4zp2nf3ZQXNl4Rq0ez73F4T5gqZUet8:4L8xs30/8NsENl4RqZ73F4T5gqad","tlshash":"bb542acdb3c7b46693a2a478507f014bb17a6ca2f84cc894f185c8e42e74a996177f7c","size":300630,"data":"","first_seen":"2025-02-07T23:06:27.873209Z","last_seen":"2025-02-07T23:06:27.873209Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/COcksqSu.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9cf07f82e0163c20981a2d5f31e8cb4f","sha1":"f746551d3bf4a06d54679f46a4391f1af0d6859c","sha256":"4ec156a96bcf64ce1948d818cdb62c9846cc47f7936a942f9ff39f31f47df398","sha512":"4e30d0a1964f3c1c53075a138e39b82921dfa48e123da6db2d029b6cbd424234f59e4da672c877eb1fc9d0c088793735b000b0dd46c7495b2b9638b50e74d3b0","ssdeep":"96:vuAp4FG/QcHLjJago5zmEFlItHmhR4v4U/M3imR3:vuAp4FGRrjLoZlItGji0imR3","tlshash":"caa1c8f6bcace0f7b052401e9833a840fb854f1e561874f4e2edccac539a064925a667","size":4745,"data":"","first_seen":"2025-02-03T12:33:38.847646Z","last_seen":"2025-02-24T05:54:00.594223Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5af038603de63c35022b47a95dfb53fe","sha1":"d19dd01a0925ad161f9576d78497f3305b05272b","sha256":"d28383adeab938899470b6e4337c7e4ea40a6cb55299636d645e2f924917d8f6","sha512":"cb0083d80bcead5269a76d1077980569b5edc6b666866ee1cd556dd68e219ecfb455e59cf82837b1a82675469822bacd37f42ab39141bccd6d69a7df6d8a77f2","ssdeep":"6144:Y40DfvL8xsUE0CENJCNl4RqZ73F4T5gmz+EHXNVC013DkLY:B0zYtrCf4EZJEZks","tlshash":"b4941b9e73c674265296e478507f02cbadbb28a2b45cc896f1c8cce42d346966177f3c","size":444644,"data":"","first_seen":"2025-02-07T23:06:27.90071Z","last_seen":"2025-02-08T00:55:36.70072Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"radar.cedexis.com/1/23802/radar.js","fqdn":"radar.cedexis.com","domain":"cedexis.com","tld":"com"},"ip":{"addr":"45.54.49.5","port":443,"asn":63911,"as":"NetActuate, Inc","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"82dec77fd0353c7c71ce053b8601387e","sha1":"fbbca95419e1d0c042e0a5fdf10f380aca66188c","sha256":"39f2b7b0fa78d37d0c84d2d6618bd635d86fd683d9bcdd5729850cb2a62522f7","sha512":"6872c895cb44711405e57a436dfbe15d094f9159e11ee2b89983c63b1f18f6acbdfaf0ccbb5e48b2bf24f366f16584c660bca4b6b14c048a134bb77a60f6563e","ssdeep":"","tlshash":"26e0619e8695e310577d3d76dc6e090f60f3100588e5e0e069f1d7c40450f6d1726fb4","size":390,"data":"","first_seen":"2024-02-13T14:23:26Z","last_seen":"2026-01-15T12:01:08.184588Z","times_seen":7496,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript,export const meta = import.meta;","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d772b7d405b447ecee54ab61cdd5108","sha1":"dd65fb9cd5a7cb94a40fe161f4f72303a61eb3b7","sha256":"b90ff694e492935b6036fb7e878d365dab51aafa46f0afb1e33414e7ecc3307b","sha512":"a3947640368602c9fd9dee887bb1a7e463890ff42e2ddd292c377593c5fad246d3e3363e9898cd1e5ecda9c59b5cf7c7cd0acfc2a5a1e5d3acec2cf0d62e20b2","ssdeep":"","tlshash":"3c800003880802380aa0c880028e80b00af222203f00c08328088b30ae3b08ace332a3","size":32,"data":"","first_seen":"2023-12-06T14:32:28Z","last_seen":"2026-04-28T07:32:04.520257Z","times_seen":7981,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/721582dc/desktop/default/vendors/app-712fa03d.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"e11a90bc7c662ce4ce6fa14ef9afd83c","sha1":"f2c167d69597dafa4d0675233c2e5867abc055f1","sha256":"d5218d775b1354ed639801c530838859797a0acdea335cd1d6b353f673776bfe","sha512":"6b574b5f0fc7a5fb7e7b5094599908c26b9098b76eb5a302d2d6af7fcd734af7a6d67af547a9d6d47801f74d25dfa5b1e50c8445c1af34fabd9a77c25f182d63","ssdeep":"12288:qwRyZZYwuQNFU4RUYKGg1szZIcEZ/MhW6Vko8Z25rrl:9yZZYoNFU4RUYKGg1MI1OkmHl","tlshash":"c7154b99b985f6560aa33ae9d06b0017e33d6e5a7c08d404f6a7ccda395ac047137f2f","size":934257,"data":"","first_seen":"2025-02-07T05:54:06.209438Z","last_seen":"2025-02-08T06:05:52.655494Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_localforage_KSHPPCVF.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"d750d8afadf936c37b83cbcafdbba18d","sha1":"ec95777b14c5537b0d2576363f7591cee73a9655","sha256":"f7a95c0ed0b017063d1bba414ee5097f7824d34a39c33db9f289919ee47c4f12","sha512":"4e3d2ad503f8eb57140326335cb64d84be2a215ded4dec3046d5ab46ca0354360064e0c0b6a358c0d50f6d5af0e523802ab73fb487d1cc267b92b8b3a53babfa","ssdeep":"768:DDKAOpvMewHFuM96WwZACjzz46zSTKsBE1OvFXfX1UXk:Dm8uPW43zEIOvdlUU","tlshash":"41d2b68c7799f02683bb3070907f580ef237a912594d90a0e591e5f86dbd75c822bfad","size":30277,"data":"","first_seen":"2024-12-07T20:25:30.588667Z","last_seen":"2025-04-01T10:53:16.904275Z","times_seen":350,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/eJ335cjD.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"f416882d2c236b1c411a5d7d82f2b09d","sha1":"6d2aafa53f4b87eee4a11060b8cea015b9d36ebd","sha256":"8923920a71a86087a065e322bfa6667f73618f0099979b8ddcb729f4a9a2a979","sha512":"1f52693847670ef8f82981fd204024bf095ad8dbd64df82f29ebc9de7fdd12012c439ec25b74981364896aab9aa2a5ccbded61c4a0d1ba7d152548a7f9fcaa4c","ssdeep":"96:vj157uG6FdvdLdwY6Sa9M9J/YFH4/cOzgFf0baIyIzJV:vjj7uG6FFdLd29M9tYFHYAsWv8","tlshash":"d1c1b6a4bdb4f87050d64e86e4279862f75c0d4e66fdf8f8f68cde9921060b552a230b","size":5515,"data":"","first_seen":"2025-02-03T12:33:38.825374Z","last_seen":"2025-02-24T05:54:00.599556Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"bc51ed8c76553717f10d58b2df60fd76","sha1":"e2d03a8fd8d280074b226c288880f9df299c7cb1","sha256":"bee994eaf88453f6343ba57571a069054c12c9b4e42f8cbad4f2ad75c7fb264c","sha512":"3207379b65060d0e80623fa966633b5ea31358b20de9aeb2c9416fa7d29f1972bf30809e39f0b826565e569d856dd2498ee0ec5285271c127f54daa7cf391911","ssdeep":"","tlshash":"3c9004fd341010ccc13715d41017f45d5415053030c10f001543dcc44c7111d411545c","size":39,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-04-28T07:32:04.522816Z","times_seen":13719,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/721582dc/desktop/default/analytics-6ee09f41.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"9fcb8743394c1a083104898a388768aa","sha1":"a746c9a5db911ed53528d826b3779e6003e3e98c","sha256":"38db7fa05452cc14f94672c60fb11ac80f0efadbdf33b57090e522bbda513f58","sha512":"2f4aca429195e6a4881e306f0d9bc62ab505a8ed81194cb24a45630cf83a727d66cc040fc2ecf46e4c50d29a9108437e7cb179ad4746983c403a5875d17acad2","ssdeep":"192:Y8hxHt6WxhSWsd2u5IkQr7KOuJ3vu/4EW8nnlQzo4vZvO1Rx0vdkS:zHt6WxbAF+kQvKVFu/pnlinWx0FkS","tlshash":"1df1848dbcc4f03017ab1879b77b6e0ea0361617340680949a6dd494bc799bf1127ede","size":7765,"data":"","first_seen":"2025-02-07T05:54:06.221355Z","last_seen":"2025-02-08T06:05:52.64886Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=DC-14030178\u0026l=dataLayer\u0026cx=c\u0026gtm=45He5240v9180563600za200","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6efeceff808cfb9855ba5f848b3c321f","sha1":"462c88ff64ba296415a39fe47238885950e9dc47","sha256":"4ec394e4811d623ad26252b195a93c72a975668730d8d210c16f6b5f6640f7a2","sha512":"5a2d521e8cdd16a29cf7807cb267011b2a89bfbd5ced6a2551f0c5b8b2518e3d7fb43fb335fd5ef0c1d2939f9a31610323a64e4ea7dddacb17f8139a28ff9ba9","ssdeep":"3072:5SAYI56LQbFs+z0NhR0Mk7jla4zp2nLZvHqPz73F4T5gzUF7UC4xt8:ML8xs20NqNINqr73F4T5gzUF7UQ","tlshash":"be3408cdb3c6b46693a26478507f014bb17a6cd2f80cd890e186c8d87e74aa95277f7c","size":248766,"data":"","first_seen":"2025-02-07T23:06:27.872447Z","last_seen":"2025-02-08T06:05:52.612717Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-088578.top/en/block","fqdn":"1xlite-088578.top","domain":"1xlite-088578.top","tld":"top"},"ip":{"addr":"46.32.182.121","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"286d48c35a7230d714595fbdff103b7c","sha1":"dd66b8176e29ff291688feaddf6808489c057462","sha256":"3530bcf473e3f790eb5d4d0153dbad4f4514e2f367007ce3d8fb9eacadc3bcb7","sha512":"df10b0022a68d4dd6332a4aaa0c51b60b655cb917ba3ca9c6532836ef8bbdbeb7011450865781315c7ec9aa7fb4a0a1f707a0c95c84300555fb9e5d480dba8c7","ssdeep":"","tlshash":"5f31625dfe5cf0360512b6fae43f630eeb3318a16955700c8491a8e96cb4e4f981adcd","size":1736,"data":"","first_seen":"2025-02-07T05:54:06.21581Z","last_seen":"2025-02-08T06:05:52.63705Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/721582dc/desktop/default/app-d0f34e27.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"590115d6036f58455372e19beb2f520f","sha1":"f06c0523d4f83b627ff27a8d19ebf0b74343f7ca","sha256":"32c6cab7441a3d2a6f706ffa389c109b424dff7c9b3c38dbcc119c8113e2f800","sha512":"c25b919133d8fefac1cc99d143c37ef0117630251202fd72416a452ffc6da47e48474b02e41da1d7cb6105f4541bd686e93b129630c80ba8d4d97188b851e3ef","ssdeep":"12288:a7NjQKZ341k1QfZ/lAi2kBGWUmddoMPAAJNFSiYmpTQP:a7Nj5ZqGQfBlAi2IGWUmddoMPAAJN9I","tlshash":"75d44c64b5cdf48a02f35bead03a0161e33916b93809d064b679fdc9359bc48d27a63f","size":609615,"data":"","first_seen":"2025-02-07T05:54:06.211079Z","last_seen":"2025-02-08T06:05:52.634596Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_base-app_8WyFoprY.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"a4d0bfc0e3dc800417e014f5f8d9235c","sha1":"fc35a9d72f1b0b7c36d364952cf947eed2bea6c1","sha256":"55d7b22650507b7b7e1326131e66dcd8c516cafa2fe5b26b7ac57fb82c5f5119","sha512":"bbba77e8ec5c12075b06b1698030b919762f70dab1c579202d48d2fe32d266d74f3f53d8f80ece06548c278bb595aae42bd79da6fae0e558f1bb41d67d609b05","ssdeep":"12288:PRlRnIt47IboYsk9xEMAMiHCFaFIzACV2Mei3Bj:JDnItgVYskMMAMdACV2Meej","tlshash":"f5f47d99b07b7522259205fef07b0143b57c298ea04ce8a0f16aede536de40552aff3d","size":745381,"data":"","first_seen":"2025-02-03T12:33:38.84584Z","last_seen":"2025-02-24T05:54:00.585911Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_chunk_6EO4CXC4.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"464c50409850b3095783d5b3b9a1b00d","sha1":"7d5c3f49bd0689d72dddceee68afd229f4168ed5","sha256":"71cbc8847b4abb3782fe515be3e9e1f3fb639f801b337a2a3612616151ec250d","sha512":"baf34a23614284a4e969600ef577cedaa5fd197e9d6e8b5a88289111b4899d3a548c06a908e3003d4bb8223d8047145d8282c6dca21b825417f2e8cc33c9b94b","ssdeep":"","tlshash":"2ef002ea2fe8fa60207814b4f12d7801e102d23d57d850f5e5546fbc94d504c93f90b1","size":610,"data":"","first_seen":"2024-12-07T20:25:30.616073Z","last_seen":"2025-05-20T22:14:00.663292Z","times_seen":572,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-088578.top/en/block","fqdn":"1xlite-088578.top","domain":"1xlite-088578.top","tld":"top"},"ip":{"addr":"46.32.182.121","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"c56da65e8c035b265670ec7da3b604b3","sha1":"5e052ddf1b8f282415cfd38dcf0386fbed74aeca","sha256":"ba0501f7f453b44aef23d35eb731e84d1349533b076a66c3fe50fa46a268e93b","sha512":"b0cb171cd271c8b7a74387ba7665359bcec8f885d3ddb0fa1bd805cbfb3da5be9a2fc8b662bdf8f199c46c7c6ac2604f301b8868967d88ffefd37640f6ab63a9","ssdeep":"96:ihgdY8R0yK9g9kt4RlIeli+5gOm6v1OKPl+zUbKRQG3nn:SgdZR0vaktMewFE6v1Jl+oOL","tlshash":"d3a1c7c1e40c6a1fec73a60ef0573b161a641aa6bd867b10e57e0b2d3593262e316f46","size":4825,"data":"","first_seen":"2025-02-07T05:54:50.955816Z","last_seen":"2025-02-08T06:05:52.647244Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/721582dc/desktop/default/vendors/plugins.v-tooltip-ea0a1988.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"34c95c9180a523dffe38757dbc4ef686","sha1":"62d7b68aafe81e7fb4f7bb9db3c6a16a31e6efbf","sha256":"70ba6b66db76d0a43bc8815bf3bdf2be6ef561e1c993ebdcf655432334528e67","sha512":"7b860a42fe12e368a554f39f12ec84ab509e759819691280602de9bcd0e3f8b9aeb570944395b8007ace06035b59808a876fa30317a3e921d3b456623352fcfb","ssdeep":"768:kVRV0LQVC26owtqJ0PbIAWMZI+7tSCUC8Lk7t8R6zk+BaNfSby/Qw/Hgbg57bh0K:kngQQ2dwgJeIATPRSCv1MHg3WdRfm5K","tlshash":"fe73b54eb290f4b207e7a175403f620fb2776558b40ae014f2b1e6d4ac3da5da267e3d","size":76898,"data":"","first_seen":"2025-02-07T05:54:06.206165Z","last_seen":"2025-02-08T06:05:52.626724Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_accept_language_parser_F4H4E7NH.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"268c88e3fff4b1ae77e5109cba692e17","sha1":"24c1b85897ed42dc18d9fd0df1c6fd31494dc184","sha256":"3e2f76fc7558357fcdec6f1ef4964f031737098953dac4a16bf8d8286f87ae2b","sha512":"ce45a1c04c98d11a8499166f7930a6784fac3c507a0652ced17223f6e3940aadf6f814787566f48b433a3adf9c9611dca629ee2d764fa12b080b68e55580a892","ssdeep":"","tlshash":"1c210b9abad2f2904384194c4e7ec465b23a3953241ce6fcd726e7c66c407b182f2c09","size":1297,"data":"","first_seen":"2024-12-07T20:25:30.436112Z","last_seen":"2025-04-01T10:53:17.007834Z","times_seen":350,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/entry-DsGuPC-W.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"ede42f17f414cecfd3b63cefb914bc76","sha1":"d7486ef95ae7767006bb786f347b5dbc619bcd7c","sha256":"898aa9453d7f857b658bb4163099046a6b4d9ae87471a6fd22c5edbc00ea4c96","sha512":"cbacaeacd7ea8bc432eaf890afe30ec47bbffc4833cede81fa320941112b8d4f4a1756d32a6276b8787a0fcb1d86ea8815f80a645143519770073131a85813a1","ssdeep":"1536:0WgINwJg19WFLH4abo+Wzwgn2mn0fbyerM:jXN+g1+LYabohnuXM","tlshash":"a7436c70f4d9e13fb97602dce1771a406298ea22a21ed0f9e12c2e741787553c5b3bb6","size":57921,"data":"","first_seen":"2025-02-03T12:33:38.858439Z","last_seen":"2025-02-24T05:54:00.580173Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/721582dc/desktop/default/commons/app-888fb706.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"66ad0dfb44029ab7d67b2c1f8d3461fb","sha1":"cff47ef7ceeaeefa67c9af28e1463cf32e11ee00","sha256":"3e1a96e59c0169192712482c2798a2e730bd403e2793a07ea687dbbbabdbe3ee","sha512":"9292bad26a360219c0ef876413207dc9dd1d05c2c7ebf1dd6e5db18a2884a3706495b9ebf2e0e28c13386273a1becd7a0503baa4fe8032dc241f67464f072ec4","ssdeep":"1536:/0UiXH2DHJjIAG3wvvjE+gjmZVBMtJCrmho8G5YGf7BMr3y6MPT+PWKDUUy:GXHUp0qXjE+gjmZAum6YGNMrlXy","tlshash":"12d3d5dcf695b03117e721b5407f150bf23a7898680ac0a4f266e8d53db888ea167f7d","size":137776,"data":"","first_seen":"2025-02-07T05:54:06.213847Z","last_seen":"2025-02-08T06:05:52.654373Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_vue_deps_YT7LKPBD.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"e32db66b83b190cea91f31b5ee2d0f0e","sha1":"a3e75f5748a5635d21b16fa4d1f823ebb0dc0f07","sha256":"c1ce0f514f21867220cd6ce3eb2bddaac874f8c4b8d9ab2ae4a299b366d28d78","sha512":"b398dfd1bda1af2c4d247cc0e73a6122292bb8c813da407e85e7061f55a8a426d71ed288a7967613da9bbdc15d9b3ab9dac5e4aa223c5f8acf2fbfa7073dde21","ssdeep":"384:GFwZ1yyQBPg1jbmWEUuGB0cw6rbPQG6pyrWJ4Cru18Eiun6PKFJcsOJX1q60lBC4:UwZ1yyQBubmW0GB0x+s/yRj1niFKFJcO","tlshash":"2d923ba46bbdfda333ac04cc90270a13f36549a7c49cd460e7995ea634a054385b6b7f","size":20307,"data":"","first_seen":"2025-01-25T07:15:20.224838Z","last_seen":"2025-04-01T07:25:35.545811Z","times_seen":175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-088578.top/hd-api/external/assets/hdf.js","fqdn":"1xlite-088578.top","domain":"1xlite-088578.top","tld":"top"},"ip":{"addr":"46.32.182.121","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f26a679e9d54a65e6578e947cc5bdf2","sha1":"1b984864aa7b3e28231ac7cea3c199435dbdc6bf","sha256":"1e3c4bd81a1cd9ee02e42a42802d5c18cbdb3f3a11c0b2732eb11bd12263020c","sha512":"68558c3d19f060650a48fffcf75bbe522966a5c9049c5c56f96f71405c824e658cfdb9f9790b84eaf90bb4cce3a7b2bc4f9a4c561067219814f66fc7a224c15c","ssdeep":"48:Mn7iStMb8gMWNwld0mPr6eU5p8WtAffUdOM4Tbbcy89kJcoXBsJfa8f9MM:u7i6MogMrgoU47T/UccoRsJie+M","tlshash":"3a81833760ad6e3142539892d1bfd9ebf269790629b0e81c75ec0d4f1740f2181b2e3a","size":4078,"data":"","first_seen":"2024-11-12T02:24:18.994891Z","last_seen":"2025-05-20T22:14:00.816695Z","times_seen":708,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KFGPRJ2V","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ffa05ab25ac6256bac4b5ecb99630bd","sha1":"6cb9ba7aa75371fd385c718aecbd007e5b7b0c91","sha256":"af40d29d4bc4fd4aa5384db079d7e4c0cf7837d3cedae3c2f380f63b4a2c1fd6","sha512":"95d309988152180ddddafad762cd2a390fea99d5a46351eb665a4659b87122d7668bb1665656005e7a4c6ab88a307dc2d1f9f63db6e5d548fe08b4a1a8c01afa","ssdeep":"3072:mI1HAYI56LQbFs+p0tXR0ka7jla4zp2nf3ZQXNl4Rq0ez73F4T5gR6UF7U8ROt6:tL8xsO0tkNsENl4RqZ73F4T5gR6UF7R1","tlshash":"1d542acdb386b46693a26478507f010bb13a7ce2f84cd894f186c8d42e74aa96177f7d","size":298549,"data":"","first_seen":"2025-02-07T23:06:27.870355Z","last_seen":"2025-02-07T23:06:27.870355Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-088578.top/main-static/721582dc/check-ob.js","fqdn":"1xlite-088578.top","domain":"1xlite-088578.top","tld":"top"},"ip":{"addr":"46.32.182.121","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c065700c9c8c493403359e1f2baa10d9","sha1":"4630fe729e70bdf63fa7ba6c84ec277fd1f51030","sha256":"1e61f0c82ae82ffcf503fcd4b4c8ae27b32c11e19b882d5d13f3c44364c893f4","sha512":"b2e1c73cb94f5e3ceb35c3662bf4d72baf800a9a7c64318b1db07d50e9c885dbd94821ef3b3916d1b8b4fabb8f45cb588834b41c6a8a7f4d2c3e9c3866083ee7","ssdeep":"","tlshash":"5bd0a78fb50031140ad3e557d17f8539847725973e00859624459fd079b8f4d4b37994","size":219,"data":"","first_seen":"2024-07-17T14:33:52Z","last_seen":"2026-01-22T06:40:31.153166Z","times_seen":6298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"94361ed86ab9b2fbb8d805c2025df46a","sha1":"3f428332f7a1c7196a85c93a373a966d75708c19","sha256":"eee4d228a49a86625f29410cf9a23d145e821a09cbb1f7a4d7557d206872715a","sha512":"c8f4fb7c642357730c6c59e0b49fe3ec16c228d83d4ce402dc62f01e451529b8087240afca37096cebdaaabf47c189dfde5e6e2d780440f663f0e2bc8cf88ff7","ssdeep":"","tlshash":"39b0128f3c0291104562d0c151efd8b19c7625303600cc497c0cef68ad3e95dc93725d","size":96,"data":"","first_seen":"2023-12-06T14:32:27Z","last_seen":"2026-04-28T07:32:04.518399Z","times_seen":7982,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/721582dc/desktop/default/runtime-a73cbf9d.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"a1b20b9de0edef9c904992455ab22b59","sha1":"3ed8d928f2d506680599b0be3e3adf22fba62eb5","sha256":"5cb8e70c2f5079909bcf6869d632c33a860e3939d677401cc0f918a8c2615495","sha512":"371e352b6baedc93a20b6e911ba3e1d3cc67422197164ad56fc6c2146e12021ddc0558e004f02938dcb3938464b9410c56e95d134fdf01c2ef66e886d9474a24","ssdeep":"384:z48lYLZVnAFIT96pzhBsxprlYLZVnAFIT96pE7q4qNCVdnB8x70TqrhbrTc4:TanAFw8hBsxpranAFwm4qNyB6wA3c4","tlshash":"d9b22c4e4f2fc8eb5e67cc877c103c26956911731c1707aca5fed6294404aac66afe2b","size":23632,"data":"","first_seen":"2025-02-07T05:54:06.183705Z","last_seen":"2025-02-08T06:05:52.633044Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/721582dc/desktop/default/Betting.Core-3f55577d.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d5114f1fdf2fc5b3f096ede447436e7","sha1":"a91eb958f22ebbac2f0f4b33e468f64fe5dadd00","sha256":"845b914520453ab1532d4fff816c2c3d6562ff5f7229b8035010c756ca236478","sha512":"de76bc6e8367c01114b6c6f59239470099fbb9eb338944af588f45e45161b1340ab23a8e6fec57f643441b2a601d9979f1b2a0fd6c2ea5aa85d628939ff233ea","ssdeep":"","tlshash":"e141bb893ae2f844933e18c681f74de5f0e91eb1380d02fca641f9d471359b2c1d6e46","size":2091,"data":"","first_seen":"2025-02-07T05:54:06.226575Z","last_seen":"2025-02-08T06:05:52.63049Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-088578.top/en/block","fqdn":"1xlite-088578.top","domain":"1xlite-088578.top","tld":"top"},"ip":{"addr":"46.32.182.121","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"introduction_type":"scriptElement","is_inline":true,"md5":"08539eeb75f0d7deec68ebe5f6409990","sha1":"72f847d5031072fba7aa428bad76102b045f7748","sha256":"12133bb850b43b2035d95017942c6dc7d6c0dec9e443fb8dd4fe05875a31eae6","sha512":"3b862e88675f78424dca1a1aa9adafd5f2bbce84a7f49d030c3a411d4799aafb86e7737afbe0a79ebde25ddb439d05856c5822310a24fe3786c0a75fe007a593","ssdeep":"3072:d3OlOhQR6c+MDMajx7HHRtj/98QOWDiDD9h:deHRyMDXjx9OsmD9h","tlshash":"4c04b48d54185c7e835a2bf9d483bf8e676c092330de5d68a8ddaf5e00e67d40a7212f","size":177569,"data":"","first_seen":"2025-02-07T23:06:27.913418Z","last_seen":"2025-02-07T23:06:27.913418Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/721582dc/desktop/default/Page.Block-a0463c30.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"1733f1533ee152b2c8eaad4c052dd785","sha1":"47290b7d16a877b7496a26d06785961bad74908e","sha256":"b226242494444cdbe6aed6383229bc4067b21dd1b962238b91f3f62d6a536003","sha512":"5da6ef5a172d5e360d6e8f67105f53c064696679bc83a3e4556eea18b50743ba21ab58ab31f28ecf69438f5879457c45ff20a7afdc978409913c692c7eb3c44f","ssdeep":"","tlshash":"55f00e6e5462fc8c98e7005343bbc2fb748c397a0a89293006a1c4b272f6862082024f","size":476,"data":"","first_seen":"2025-02-07T05:54:06.151461Z","last_seen":"2025-02-08T06:05:52.637744Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"Function","is_inline":false,"md5":"7bcdb973ab8af8e24ab11cb554a1ba6e","sha1":"24e8a10f240f2b06f81d7c173cd0a90606641fc1","sha256":"916ec4eb9b485eb47f43a17fe212e84e4b72600b45eb6d4588599ad495a57fcd","sha512":"1d890761e2a00081531fda5c0489ebf4df4140a9748bdc6d97bd355023e3e4ab09e19663ab319cf775e28ba71d99ab09f20d5414a561fa10fa3be2cb874484ca","ssdeep":"","tlshash":"b290047c30045414c0f354d100577455501044733044cd101d01fd454c7511c011557c","size":34,"data":"","first_seen":"2023-04-14T16:26:15Z","last_seen":"2026-04-28T07:32:04.521268Z","times_seen":13726,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":[{"md5":"83dcddede941ac74cbb1adc38c67941e","sha1":"c4b5ffc7547f716067aa627667cd0211d73921e9","sha256":"d55bb56f8894a7285b9029bda2d7414cfd0975c2f638eaefb0755eab7a4e4432","sha512":"8133eb657c9d5f34455c3c50f40e811836a2a6927cb291d4bc63e7b9e6624b6bdf50a0293e8e47e246b29efd5aea28b4b2d5cd0d81263fd62d4632153f7cef42","ssdeep":"","tlshash":"3d214481e01ca92fec33591ed15f6f072a982a626dc93f057424073c395208fb907bd7","size":1225,"data":"","first_seen":"2025-02-03T12:33:38.861481Z","last_seen":"2025-02-24T05:54:00.603986Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"45ca7a26e176f52eb8ad685e10692ec5","sha1":"08a20e96a462d4d47d364cbdcb939129a5b8b819","sha256":"9de2593651196e0231797e5569be199111a84986568bbf7c4a4c79756aca85ec","sha512":"1d4c3b00d3071839f3c356825ed5578e7eab5c26ad82e7521ab03db1d4ad7f450ee5ad99dcce890ce71c4d6510d5a67ccad64127af552734de8073ce3b906b0f","ssdeep":"6144:mnP+ptxp1qLt1o6djgSLP9QFTu8Vtawc7p5bcHzThT:mG11Ot1omjgSLP9Q5u8nT","tlshash":"2e647655a9c01aa2cf8341b771093b08f46f2ce1f68417f8faacff01ee74a26a552575","size":330864,"data":"","first_seen":"2025-02-07T23:06:27.916321Z","last_seen":"2025-02-07T23:06:27.916321Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"adclickad.com/popunder/in/click/?ip=2001:42c0:8109:100:2175:9cd2:ed7d:1d45\u0026min_cpm=0.03780514045945553\u0026ttl=1739055876\u0026ecpm=1.3887000381946502\u0026price=0\u0026cpm=1.5000000000000002\u0026original_bid_usd=0\u0026is_cpm=0\u0026burl=https://nwwrtbbit.com/v1/track/win?data=eyJhbGciOiJIUzI1NiJ9.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.KEGz0Zu252AfoD1pIC2F-vPYcgpQM6kU9fABZJthQ3Q\u0026sp={sp}\u0026pop_type=0\u0026is_interstitial=0\u0026stratagem=\u0026accel=0\u0026gyr=0\u0026ssp=3758\u0026rc=0\u0026ip_mismatch=2001:42c0:8109:100:2175:9cd2:ed7d:1d45\u0026ua_mismatch=false\u0026v2=0\u0026v2_track=0\u0026otype=0\u0026refresh=0\u0026mn=0\u0026priority=0\u0026bb=0.035\u0026is_direct=2\u0026site_id=0\u0026verify_hash=1b3ce0549618112a70ee2c3be1956cdf26e254c03b24724ee8241a0708552ada\u0026exp=0\u0026uniq=\u0026mid=265765641729819751\u0026subid=0\u0026adblock=0\u0026format=\u0026site=\u0026sid=0\u0026cid=19627\u0026ext_campaign_id=14207\u0026usage_type=ISP\u0026crid=90233\u0026tcid=0\u0026ver=\u0026ver_c=\u0026refdom=adclickad.com\u0026hostname=auc-popunder-hz-3\u0026spot_id=802130\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=1739055876\u0026created_at=0000-00-00\u0026url=https://nwwrtbbit.com/v1/track/click?data=eyJhbGciOiJIUzI1NiJ9.eyJhbCI6ImVuLU1MIiwiYXQiOjE3Mzg5Njk0NzY2NjAsImJ2IjoiMC4wLjAiLCJjcnMiOjAsImNzIjoiVzNzaWJDSTZNeXdpZENJNkluZHBiaUlzSW1RaU9qZzJOREF3TURBd01EQXdNREF3ZlN4N0ltd2lPakVzSW5RaU9pSmpiR2xqYXlJc0ltUWlPamcyTkRBd01EQXdNREF3TURBd2ZWMD0iLCJjdSI6ImlwK3VhIiwiZHAiOiJkaXJlY3QiLCJkdCI6MTczOTA1NTg3NjY2MCwiZXIiOiIyNjU3NjU2NDE3Mjk4MTk3NTEiLCJlcyI6IjE5NjI3IiwiaSI6IjgwMjEzMDoyMjY6MTQxNDU0MjY1ODg1MDE0NzA1OTg6MTQyMDc6OTAyMzM6MTEzNjc2MjM4MjQ2NTk2MjkzMDQ6MTI5MzY6OiIsImljcyI6MCwiaXAiOiIiLCJpcHY2IjoiMjAwMTo0MmMwOjgxMDk6MTAwOjIxNzU6OWNkMjplZDdkOjFkNDUiLCJqdGkiOiI5YjAwYjJhOC1kNGQ4LTRkZTYtYTkzNC1hMTQwYzdhZjZmOTkiLCJwIjowLjAwMTUsInByIjpmYWxzZSwicnAiOjAuMDAxNSwicyI6ZmFsc2UsInNkIjotMSwic3AiOiJ7fSIsInQiOiJwb3B1bmRlcl9kaXJlY3RfbWFpbnN0cmVhbTpjcGMiLCJ0cmlkIjoidGNiLWRzcC1oei0xOCIsInUiOiJodHRwczovL3JlZnBhdm5wYWQudG9wL0w_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.vlvvpXsFgvXkBrdcmJWka8uhuQLZ7rgrj9aUzsG0o4A\u0026sp={sp}\u0026px_id=802130\u0026keywords=\u0026user_fp=0\u0026original_bid=0.0015\u0026score=1.000302033179202\u0026iabcat=IAB13\u0026placement_type_id=7\u0026ad_tags=\u0026tag_ab=\u0026pr=\u0026label_ids=83,70,0\u0026sp_scr=0\u0026sp_cl=0\u0026act_sess=0\u0026intes=\u0026izb=\u0026ang=0\u0026act_su=0\u0026empty_clicks=0\u0026comeback=\u0026offer_label_ids=0,83,70\u0026interest_vertical_ids=\u0026v_scroll_freq=\u0026time_session=\u0026high_freq_clicks=0\u0026dev_console_activity=0\u0026auction_time=1738969476\u0026topics=\u0026is_webview=0\u0026scroll_percent=0\u0026aid=3296\u0026client_price=0.00138870003819465\u0026direct_client_price=0\u0026client_payment_model=cpc\u0026delivery_method=js_redirect\u0026mediation_ecpm=0\u0026user_keywords=\u0026prev_step_diff=\u0026o_d=\u0026timezone_olson=\u0026ip_timezone=\u0026is_in_app=0\u0026service_spot_id=0\u0026testab=0\u0026social_network=\u0026crtid=d41d8cd98f00b204e9800998ecf8427e\u0026mediation_type=no_mediation","fqdn":"adclickad.com","domain":"adclickad.com","tld":"com"},"ip":{"addr":"94.130.197.239","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-02-07T23:05:48.009Z","timestamp":1738969548009,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"popunder.infrapu.sh","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jan 2025 08:07:41 GMT","end":"Thu, 01 May 2025 08:07:40 GMT"},"fingerprint":{"sha1":"44:1A:02:E5:2E:8D:1B:48:F2:6D:0E:03:3C:75:45:E5:83:05:DA:48","sha256":"08:B0:CE:EA:9F:DD:1A:2A:43:5B:BE:BD:41:00:54:F1:E9:40:C3:E8:B4:49:0F:64:9D:8F:39:8D:7C:FF:6B:60"}}},"request":{"raw":"GET /popunder/in/click/?ip=2001:42c0:8109:100:2175:9cd2:ed7d:1d45\u0026min_cpm=0.03780514045945553\u0026ttl=1739055876\u0026ecpm=1.3887000381946502\u0026price=0\u0026cpm=1.5000000000000002\u0026original_bid_usd=0\u0026is_cpm=0\u0026burl=https://nwwrtbbit.com/v1/track/win?data=eyJhbGciOiJIUzI1NiJ9.eyJhbCI6ImVuLU1MIiwiYXQiOjE3Mzg5Njk0NzY2NjAsImJ2IjoiMC4wLjAiLCJjcnMiOjAsImNzIjoiVzNzaWJDSTZNeXdpZENJNkluZHBiaUlzSW1RaU9qZzJOREF3TURBd01EQXdNREF3ZlN4N0ltd2lPakVzSW5RaU9pSmpiR2xqYXlJc0ltUWlPamcyTkRBd01EQXdNREF3TURBd2ZWMD0iLCJjdSI6ImlwK3VhIiwiZHAiOiJkaXJlY3QiLCJkdCI6MTczOTA1NTg3NjY2MCwiZXIiOiIyNjU3NjU2NDE3Mjk4MTk3NTEiLCJlcyI6IjE5NjI3IiwiaSI6IjgwMjEzMDoyMjY6MTQxNDU0MjY1ODg1MDE0NzA1OTg6MTQyMDc6OTAyMzM6MTEzNjc2MjM4MjQ2NTk2MjkzMDQ6MTI5MzY6OiIsImljcyI6MCwiaXAiOiIiLCJpcHY2IjoiMjAwMTo0MmMwOjgxMDk6MTAwOjIxNzU6OWNkMjplZDdkOjFkNDUiLCJqdGkiOiI1YmIyYTkwYy1jYjg2LTQwODktYmIwOC03ZTdkZDQwMmZlNGUiLCJwIjowLjAwMTUsInByIjpmYWxzZSwicnAiOjAuMDAxNSwicyI6ZmFsc2UsInNkIjotMSwic3AiOiJ7fSIsInQiOiJwb3B1bmRlcl9kaXJlY3RfbWFpbnN0cmVhbTpjcGMiLCJ0cmlkIjoidGNiLWRzcC1oei0xOCIsInUiOiIiLCJ1YSI6Ik1vemlsbGEvNS4wIChMaW51eDsgQW5kcm9pZCAxMDsgSykgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgU2Ftc3VuZ0Jyb3dzZXIvMjcuMCBDaHJvbWUvMTI1LjAuMC4wIE1vYmlsZSBTYWZhcmkvNTM3LjM2IiwidWgiOiI5ZDBlYTM5Y2M1OTRhYmE2YjI1ZWVkNTJkNjY2ZWE2ZSIsInVpIjoiOTI1ZmZjNTEtNTliNy01YTViLWExOGItYjJhMjQ2ZTEyYzQ0IiwidXIiOiIyMjY6cG9wdW5kZXJfZGlyZWN0X21haW5zdHJlYW06ODAyMTMwOmZhbHNlOiIsInYiOiIiLCJ2ZiI6IiJ9.KEGz0Zu252AfoD1pIC2F-vPYcgpQM6kU9fABZJthQ3Q\u0026sp={sp}\u0026pop_type=0\u0026is_interstitial=0\u0026stratagem=\u0026accel=0\u0026gyr=0\u0026ssp=3758\u0026rc=0\u0026ip_mismatch=2001:42c0:8109:100:2175:9cd2:ed7d:1d45\u0026ua_mismatch=false\u0026v2=0\u0026v2_track=0\u0026otype=0\u0026refresh=0\u0026mn=0\u0026priority=0\u0026bb=0.035\u0026is_direct=2\u0026site_id=0\u0026verify_hash=1b3ce0549618112a70ee2c3be1956cdf26e254c03b24724ee8241a0708552ada\u0026exp=0\u0026uniq=\u0026mid=265765641729819751\u0026subid=0\u0026adblock=0\u0026format=\u0026site=\u0026sid=0\u0026cid=19627\u0026ext_campaign_id=14207\u0026usage_type=ISP\u0026crid=90233\u0026tcid=0\u0026ver=\u0026ver_c=\u0026refdom=adclickad.com\u0026hostname=auc-popunder-hz-3\u0026spot_id=802130\u0026utm_source=\u0026utm_medium=\u0026utm_campaign=\u0026utm_content=\u0026expiration_timestamp=1739055876\u0026created_at=0000-00-00\u0026url=https://nwwrtbbit.com/v1/track/click?data=eyJhbGciOiJIUzI1NiJ9.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_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.vlvvpXsFgvXkBrdcmJWka8uhuQLZ7rgrj9aUzsG0o4A\u0026sp={sp}\u0026px_id=802130\u0026keywords=\u0026user_fp=0\u0026original_bid=0.0015\u0026score=1.000302033179202\u0026iabcat=IAB13\u0026placement_type_id=7\u0026ad_tags=\u0026tag_ab=\u0026pr=\u0026label_ids=83,70,0\u0026sp_scr=0\u0026sp_cl=0\u0026act_sess=0\u0026intes=\u0026izb=\u0026ang=0\u0026act_su=0\u0026empty_clicks=0\u0026comeback=\u0026offer_label_ids=0,83,70\u0026interest_vertical_ids=\u0026v_scroll_freq=\u0026time_session=\u0026high_freq_clicks=0\u0026dev_console_activity=0\u0026auction_time=1738969476\u0026topics=\u0026is_webview=0\u0026scroll_percent=0\u0026aid=3296\u0026client_price=0.00138870003819465\u0026direct_client_price=0\u0026client_payment_model=cpc\u0026delivery_method=js_redirect\u0026mediation_ecpm=0\u0026user_keywords=\u0026prev_step_diff=\u0026o_d=\u0026timezone_olson=\u0026ip_timezone=\u0026is_in_app=0\u0026service_spot_id=0\u0026testab=0\u0026social_network=\u0026crtid=d41d8cd98f00b204e9800998ecf8427e\u0026mediation_type=no_mediation HTTP/1.1\r\nHost: adclickad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx/1.16.0\r\ndate: Fri, 07 Feb 2025 23:05:48 GMT\r\ncontent-length: 0\r\nvary: Origin\r\ncache-control: no-transform, no-cache, no-store, must-revalidate\r\npragma: no-cache\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: *\r\nlocation: https://nwwrtbbit.com/v1/track/click?data=eyJhbGciOiJIUzI1NiJ9.eyJhbCI6ImVuLU1MIiwiYXQiOjE3Mzg5Njk0NzY2NjAsImJ2IjoiMC4wLjAiLCJjcnMiOjAsImNzIjoiVzNzaWJDSTZNeXdpZENJNkluZHBiaUlzSW1RaU9qZzJOREF3TURBd01EQXdNREF3ZlN4N0ltd2lPakVzSW5RaU9pSmpiR2xqYXlJc0ltUWlPamcyTkRBd01EQXdNREF3TURBd2ZWMD0iLCJjdSI6ImlwK3VhIiwiZHAiOiJkaXJlY3QiLCJkdCI6MTczOTA1NTg3NjY2MCwiZXIiOiIyNjU3NjU2NDE3Mjk4MTk3NTEiLCJlcyI6IjE5NjI3IiwiaSI6IjgwMjEzMDoyMjY6MTQxNDU0MjY1ODg1MDE0NzA1OTg6MTQyMDc6OTAyMzM6MTEzNjc2MjM4MjQ2NTk2MjkzMDQ6MTI5MzY6OiIsImljcyI6MCwiaXAiOiIiLCJpcHY2IjoiMjAwMTo0MmMwOjgxMDk6MTAwOjIxNzU6OWNkMjplZDdkOjFkNDUiLCJqdGkiOiI5YjAwYjJhOC1kNGQ4LTRkZTYtYTkzNC1hMTQwYzdhZjZmOTkiLCJwIjowLjAwMTUsInByIjpmYWxzZSwicnAiOjAuMDAxNSwicyI6ZmFsc2UsInNkIjotMSwic3AiOiJ7fSIsInQiOiJwb3B1bmRlcl9kaXJlY3RfbWFpbnN0cmVhbTpjcGMiLCJ0cmlkIjoidGNiLWRzcC1oei0xOCIsInUiOiJodHRwczovL3JlZnBhdm5wYWQudG9wL0w_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.vlvvpXsFgvXkBrdcmJWka8uhuQLZ7rgrj9aUzsG0o4A\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T08:36:34.154379Z","times_seen":14318473,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":103,"dns":16,"connect":28,"send":0,"wait":28,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nwwrtbbit.com/v1/track/click?data=eyJhbGciOiJIUzI1NiJ9.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_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.vlvvpXsFgvXkBrdcmJWka8uhuQLZ7rgrj9aUzsG0o4A","fqdn":"nwwrtbbit.com","domain":"nwwrtbbit.com","tld":"com"},"ip":{"addr":"178.63.224.179","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-02-07T23:05:48.174Z","timestamp":1738969548174,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nwwrtbbit.com","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Jan 2025 01:49:18 GMT","end":"Tue, 15 Apr 2025 01:49:17 GMT"},"fingerprint":{"sha1":"BB:0D:CB:0F:3F:14:EB:89:85:89:FF:C0:52:D4:07:B3:D9:44:D7:1C","sha256":"F4:B4:BA:1D:F0:BC:66:E8:9D:2D:6B:B9:37:2C:9F:ED:F8:21:51:F6:84:4B:31:E4:89:71:04:F0:98:45:44:E4"}}},"request":{"raw":"GET /v1/track/click?data=eyJhbGciOiJIUzI1NiJ9.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_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.vlvvpXsFgvXkBrdcmJWka8uhuQLZ7rgrj9aUzsG0o4A HTTP/1.1\r\nHost: nwwrtbbit.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx/1.24.0\r\nDate: Fri, 07 Feb 2025 23:05:48 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 0\r\nConnection: keep-alive\r\nVary: Origin\r\nLocation: https://refpavnpad.top/L?tag=d_2473637m_21103c_[]MS[]null[]null[]general[]80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder\u0026site=2473637\u0026ad=21103\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T08:36:34.154379Z","times_seen":14318473,"resource_available":true,"data":null}},"time_used":228,"timings":{"blocked":100,"dns":28,"connect":24,"send":0,"wait":25,"receive":1,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refpavnpad.top/L?tag=d_2473637m_21103c_[]MS[]null[]null[]general[]80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder\u0026site=2473637\u0026ad=21103","fqdn":"refpavnpad.top","domain":"refpavnpad.top","tld":"top"},"ip":{"addr":"45.135.122.193","port":443,"asn":56630,"as":"Melbikomas UAB","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-02-07T23:05:48.331Z","timestamp":1738969548331,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refpavnpad.top","organization":""},"issuer":{"commonName":"R10","organization":"Let's Encrypt"},"validity":{"start":"Tue, 21 Jan 2025 05:17:37 GMT","end":"Mon, 21 Apr 2025 05:17:36 GMT"},"fingerprint":{"sha1":"C2:12:5D:DB:B2:37:A6:09:9E:3E:DD:C1:AC:C6:CF:42:BF:DE:E0:CC","sha256":"8B:7F:DD:72:55:49:42:6E:07:44:C6:7F:07:CA:CB:E6:3F:EC:9F:5C:D7:66:3B:C0:9F:29:34:77:C0:88:FD:5F"}}},"request":{"raw":"GET /L?tag=d_2473637m_21103c_[]MS[]null[]null[]general[]80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder\u0026site=2473637\u0026ad=21103 HTTP/1.1\r\nHost: refpavnpad.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 303 See Other\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:48 GMT\r\nlocation: https://1xlite-088578.top:443/en?tag=d_2473637m_21103c_[]MS[]null[]null[]general[]80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder\r\nset-cookie: A_21103_v=0; expires=Sat, 08 Feb 2025 23:05:48 GMT; path=/; secure\nA_21103_c=1; expires=Sat, 08 Feb 2025 23:05:48 GMT; path=/; secure\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: wf-uht;dur=0.001\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"303","status_text":"See Other","fingerprints":null,"data":{"size":248296,"size_decoded":248296,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (58389)","md5":"aa2eb6870c2d85d7b4dd51a4deee95e3","sha1":"c6c22d238b6cd35dbedc0b272302e1b049583cca","sha256":"ba9f8198fdbffd1cdba59c7ecebb3e43e4d0bce1e3fd1e5fb56fa075d0cf5982","sha512":"1c21461423b938d926a89ef11cfdbb48a83719101244241043ec5fe94836372da60517c9d0e49eb2f41773041d8da4e73e231691e81ea243803375d408791a10","ssdeep":"6144:UE2BF375xWt5JkyunibYhIIpueHRyMDXjx9OsmD9o:UE2BF375xWt5JkyunibYhjpuewGxNUW","tlshash":"8a34fa9d9c18887e535a2bb5d0437f8e2b3c852774e90e69e89c6f5d10d2bc10bb252f","first_seen":"2025-02-07T23:06:27.840522Z","last_seen":"2025-02-07T23:06:27.840522Z","times_seen":1,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":204,"dns":34,"connect":17,"send":0,"wait":19,"receive":0,"ssl":150},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-088578.top/main-static/721582dc/check-ob.js","fqdn":"1xlite-088578.top","domain":"1xlite-088578.top","tld":"top"},"ip":{"addr":"46.32.182.121","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:49.520Z","timestamp":1738969549520,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-088578.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Dec 2024 09:21:57 GMT","end":"Tue, 25 Mar 2025 09:21:56 GMT"},"fingerprint":{"sha1":"3C:76:93:78:DA:B8:BD:F4:14:7C:F0:30:59:1A:02:C7:F8:0E:09:C4","sha256":"6C:F3:2B:9F:DD:97:EA:A7:5C:EA:BB:31:BB:94:1A:C4:E1:76:0C:EA:48:25:6D:30:DB:9E:99:66:F8:4F:AF:3C"}}},"request":{"raw":"GET /main-static/721582dc/check-ob.js HTTP/1.1\r\nHost: 1xlite-088578.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/en/block\r\nCookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2473637m_21103c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2473637m_21103c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder; postback_watcher=; auid=LiC2eWemkcyuA23hAzZmAg==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:49 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 219\r\nlast-modified: Thu, 06 Feb 2025 09:09:20 GMT\r\netag: \"c065700c9c8c493403359e1f2baa10d9\"\r\nx-amz-meta-mtime: 1738832959.827080386\r\nexpires: Sat, 08 Feb 2025 22:47:52 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: wf-uht;dur=\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":219,"size_decoded":219,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"c065700c9c8c493403359e1f2baa10d9","sha1":"4630fe729e70bdf63fa7ba6c84ec277fd1f51030","sha256":"1e61f0c82ae82ffcf503fcd4b4c8ae27b32c11e19b882d5d13f3c44364c893f4","sha512":"b2e1c73cb94f5e3ceb35c3662bf4d72baf800a9a7c64318b1db07d50e9c885dbd94821ef3b3916d1b8b4fabb8f45cb588834b41c6a8a7f4d2c3e9c3866083ee7","ssdeep":"","tlshash":"96d0a79fb900211406939267d12f8668807724973f008182500597e069b8f4c4b37895","first_seen":"2024-07-17T14:33:52Z","last_seen":"2026-01-22T06:40:31.153166Z","times_seen":6298,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-07","alert":"Sinkholed","trigger":"1xlite-088578.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/CuImo7CT.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:49.536Z","timestamp":1738969549536,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/CuImo7CT.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:49 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 650\r\ntraceparent: 00-9b3cfd8d0e9b84fa9af27fcd4830cbcf-80bd1aba8a265fb0-01\r\nlast-modified: Tue, 04 Feb 2025 08:46:45 GMT\r\netag: \"2229547d50a851e3f9c39e19cdcf4751\"\r\nx-amz-meta-mtime: 1738658615.908617195\r\nexpires: Wed, 05 Feb 2025 12:30:02 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 38108\r\ncache: HIT\r\nx-cached-since: 2025-02-07T12:30:41+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":650,"size_decoded":650,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"2229547d50a851e3f9c39e19cdcf4751","sha1":"faaf12acea401378e691df74690b6dc0eaacfa11","sha256":"7cfe9ce64aa88e9db8abacc1821a7ed463e9b9aa224852291922071ea8806f47","sha512":"57e37cf1fca8df79aa949ffd297e3b092d93cb09d0dc40e7106f83a65a91b605e15becc02adec90e08a39db71fa0711289204543a35c450798f2227ce3deeda9","ssdeep":"","tlshash":"95f02b393d3d91dc2b77c1405ee04b493012f62ed38690cab87bc1945dca2031e9e15f","first_seen":"2025-01-24T08:48:07.798887Z","last_seen":"2025-04-23T06:07:22.038242Z","times_seen":175,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":157,"dns":86,"connect":2,"send":0,"wait":2,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/version.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:49.541Z","timestamp":1738969549541,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /version.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:49 GMT\r\ncontent-type: application/json\r\ncontent-length: 11\r\ntraceparent: 00-b67d2e83a329473c5931c92ca092b9d6-837d5771ec61c190-01\r\nlast-modified: Fri, 07 Feb 2025 15:58:28 GMT\r\netag: \"b06cce3dba699d956266da284bf3a8b9\"\r\nx-amz-meta-mtime: 1738943908.809899657\r\nexpires: Fri, 07 Feb 2025 16:00:55 GMT\r\ncache-control: max-age=60\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 17\r\ncache: HIT\r\nx-cached-since: 2025-02-07T23:05:32+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11,"size_decoded":11,"mime_type":"application/json","magic":"ASCII text","md5":"b06cce3dba699d956266da284bf3a8b9","sha1":"a06b63a57878d3981c53ffd649fb193f358582e0","sha256":"bef5eaa60bba4deb553e91b0f2f2b2d5fa61500306b8d5ed53ba47b5e90819c1","sha512":"8f59cedeacf439d0d8abdbeeb28ce6883d3b64a8877b93691f29b8a9e8fbbb83da9eda1b7f3d850e346621ab2a7d0e34e5f12f99ac1d9cc0a68eee003cc1d68f","ssdeep":"","tlshash":"2d5000030030c0f0000c0000030cf03000033c000c303003300c00c000000c00000000","first_seen":"2025-02-07T21:54:43.338014Z","last_seen":"2025-02-09T03:39:21.339165Z","times_seen":16,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":76,"connect":1,"send":0,"wait":1,"receive":3,"ssl":193},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/721582dc/desktop/default/css/a81ab59c.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:49.538Z","timestamp":1738969549538,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/721582dc/desktop/default/css/a81ab59c.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:49 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-dc4445f6777e3e532059d2d596927fd5-9d6d80982f8405f7-01\r\nlast-modified: Thu, 06 Feb 2025 09:05:46 GMT\r\netag: W/\"f422c8bf0ea5efac64826f754f0d4905\"\r\nx-amz-meta-mtime: 1738832744.939569694\r\ncontent-encoding: gzip\r\nexpires: Fri, 07 Feb 2025 09:24:17 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 49268\r\ncache: HIT\r\nx-cached-since: 2025-02-07T09:24:41+00:00\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":67002,"size_decoded":67002,"mime_type":"text/css; charset=utf-8","magic":"gzip compressed data, max speed, from Unix","md5":"9d9d5f0d83c9014a367d2a24bd3eff50","sha1":"25318a45bc711d5d71ac0bd0b84c4fda837a03be","sha256":"bf7cedaa6e6218b3032b73524bf1e7e8aab6ef5358e6c2e9da301ea8404ffcc6","sha512":"0cb3fc7cffb1c4814cb397fa41cdbd6718128694352b03b2ac3e1ffc6422d7c2be27373075f0189b566cbb910072ce0ba7bd69e600769724124b53d34890630f","ssdeep":"1536:XRtdCG+Dz6RxAx457zL0ASEn091Y0H1mTOzI/OzMFOoTX4u:zMG+yRpzN091Y0VtI/pOoTt","tlshash":"c063024c1451f9e5cac3073c0f6949dbb376736e55a2204e59baae830d37db8bea2071","first_seen":"2025-02-07T23:06:27.84391Z","last_seen":"2025-02-07T23:06:27.84391Z","times_seen":1,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":84,"connect":1,"send":0,"wait":4,"receive":0,"ssl":189},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:59.957Z","timestamp":1738969559957,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63920\r\ntraceparent: 00-38dbae56d88889966a7d21fe7b84d1ec-9bddf64e509f3bed-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"a65527fcb58f66a7cfbc0e6b160538b4\"\r\nexpires: Thu, 16 Jan 2025 10:45:34 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1137\r\ncache: HIT\r\nx-cached-since: 2025-02-07T22:46:53+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":63920,"size_decoded":63920,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63920, version 1.0","md5":"a65527fcb58f66a7cfbc0e6b160538b4","sha1":"45d260e7fa343401b5bb0df982a014f53e2d253b","sha256":"fb13c3a1cbac60649b76f7d7f85c1645d35ac69b85ce5f4eb0692505ecc2cd45","sha512":"8448e96abe326f43285b2d8b0d75beaf0e9c9e051e8754841d907b30eb303ae24c447011306da6a1703b9192d02aeff76a4517bdf94ec6e7dc360ce3538802af","ssdeep":"1536:UIG3hJMkJeK8ic5iZGnJ4URj9vqXOQ6UqYdbuA5RVK1:UL31hcLlRjDQ6Uq4W1","tlshash":"7f5302df8de32a148ff78772668885f4f4927c68898c8e7345526a8907f07d6b96c04f","first_seen":"2023-05-07T18:04:27Z","last_seen":"2026-04-28T07:40:10.598659Z","times_seen":10369,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/721582dc/desktop/default/Page.Block-a0463c30.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.159Z","timestamp":1738969550159,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/721582dc/desktop/default/Page.Block-a0463c30.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 476\r\ntraceparent: 00-72ae3ba0609847b71845f22dd8858ed1-2c2a2604d7d9b600-01\r\nlast-modified: Thu, 06 Feb 2025 09:05:45 GMT\r\netag: \"1733f1533ee152b2c8eaad4c052dd785\"\r\nx-amz-meta-mtime: 1738832744.935569658\r\nexpires: Fri, 07 Feb 2025 09:24:22 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 49268\r\ncache: HIT\r\nx-cached-since: 2025-02-07T09:24:42+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":476,"size_decoded":476,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (476), with no line terminators","md5":"1733f1533ee152b2c8eaad4c052dd785","sha1":"47290b7d16a877b7496a26d06785961bad74908e","sha256":"b226242494444cdbe6aed6383229bc4067b21dd1b962238b91f3f62d6a536003","sha512":"5da6ef5a172d5e360d6e8f67105f53c064696679bc83a3e4556eea18b50743ba21ab58ab31f28ecf69438f5879457c45ff20a7afdc978409913c692c7eb3c44f","ssdeep":"","tlshash":"9cf09e6b5462fc8d95f7109343b6c2f7b48c797a0a89697046a1c4a632f7856081124f","first_seen":"2025-02-07T05:54:06.151461Z","last_seen":"2025-02-08T06:05:52.637744Z","times_seen":11,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/721582dc/desktop/default/commons/app-888fb706.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.162Z","timestamp":1738969550162,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/721582dc/desktop/default/commons/app-888fb706.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-5c962c021461a8b06ee9946bdf851093-9c092a1e07c8e670-01\r\nlast-modified: Thu, 06 Feb 2025 09:05:46 GMT\r\netag: W/\"66ad0dfb44029ab7d67b2c1f8d3461fb\"\r\nx-amz-meta-mtime: 1738832744.935569658\r\ncontent-encoding: gzip\r\nexpires: Fri, 07 Feb 2025 09:24:18 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 49268\r\ncache: HIT\r\nx-cached-since: 2025-02-07T09:24:42+00:00\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":55116,"size_decoded":55116,"mime_type":"text/javascript; charset=utf-8","magic":"gzip compressed data, max speed, from Unix","md5":"b3a03fd59ec68612d40a1b936f947911","sha1":"d2f6c2b2cdb6a2e796ea26ff8615bc1f28460bfc","sha256":"ce5dc72167f9c42ad223db37bb887ed0b8a217b285addc488b31d8319784b65f","sha512":"40758525e70fe24bc38f300777faf963b406cf022e876ff32f69fd0d44b4cabb9634a951564f0a17cd4d754d43bb6164232f9f1409a0eeda0c880e3f75b6581a","ssdeep":"1536:jJ1T9Rp0iOHpPFFnowa9znNziRDvUlashSS6CPpDHkfAw:jvT9yoJ9znNzipv3qSSXZEfb","tlshash":"853302fd267255eb78cc5594638ee34ffff4004a991268896411f378e68c23ad96edc0","first_seen":"2025-02-07T23:06:27.846175Z","last_seen":"2025-02-08T04:55:06.143365Z","times_seen":2,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/b5cd9a5e87d930de856c92da15aa121e.png","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.283Z","timestamp":1738969550283,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/b5cd9a5e87d930de856c92da15aa121e.png HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 653\r\ntraceparent: 00-a71f65b19a2f996043ebd34775d42fe0-e7115d60e21de908-01\r\nlast-modified: Wed, 26 Jun 2024 08:18:02 GMT\r\netag: \"e6f0766cbd95db33da44e7a9140648f2\"\r\nexpires: Thu, 16 Jan 2025 10:46:36 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1010\r\ncache: HIT\r\nx-cached-since: 2025-02-07T22:49:00+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":653,"size_decoded":653,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"e6f0766cbd95db33da44e7a9140648f2","sha1":"5f196b1bfe8c3f92bd2ebcd67124e72e81ae6aaf","sha256":"c0399d478788d5d483f104a2e8cb7c32f41cb40e9df0c22e831b2bfa2db63ec0","sha512":"249da39baba03408de98c7fa9a9342ef120436037ab6245b3b4a5f1a206291caaf67481c6ed67064544576697d41ab82499abffec998d837812292a050bf826a","ssdeep":"","tlshash":"90f083e032254a855c02ac7fc33414448fb226cc3682bb09e012887119d24a79dd1368","first_seen":"2023-04-05T22:56:35Z","last_seen":"2026-04-03T12:07:45.643999Z","times_seen":6597,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/C4PINCZn.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:49.526Z","timestamp":1738969549526,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/C4PINCZn.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:49 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-d076aad73c0a2abc50150960c93aaf4e-dd86d0b46d895b14-01\r\nlast-modified: Tue, 04 Feb 2025 08:46:45 GMT\r\netag: W/\"06994907baa314da4e2fab30e7162717\"\r\nx-amz-meta-mtime: 1738658615.907617159\r\ncontent-encoding: gzip\r\nexpires: Thu, 06 Feb 2025 08:57:05 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.004\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 50827\r\ncache: HIT\r\nx-cached-since: 2025-02-07T08:58:42+00:00\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10413,"size_decoded":10413,"mime_type":"text/css; charset=utf-8","magic":"gzip compressed data, max speed, from Unix","md5":"9bc5c14d65e712ef9746219e995d734d","sha1":"ce7d5faeb99bca3de2c645f0ce94f28eca73a6ce","sha256":"3c63d2a221d1e1171efc597d48b1a0d8904c72605c75461c5d59233c9b9820e9","sha512":"f9993504dae32600566bcfe37658e53ee4e77e7e68bc7f1aa7a46834e9927621b604c40e60c24ba33c4e7b2dbb22e422e9b833491ca0042a9254554087b63143","ssdeep":"192:YjkU5CPWZ3Dt5e+vz0c+EUVWyZoBY9NeZ3y/wIIZje2jD0YPSR8coV6G:akU5CQ3BoVEUVWyR9A3hfDjDfSR8tV6G","tlshash":"d122bf2ff44cd92afae8ab706a29825b1b4f3c470e62c55c303da1ed63b144b48506b7","first_seen":"2025-02-07T23:06:27.847668Z","last_seen":"2025-02-07T23:06:27.847668Z","times_seen":1,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":159,"dns":89,"connect":1,"send":0,"wait":4,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-ui/2.3.66/Desktop/Default/client.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:49.522Z","timestamp":1738969549522,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-ui/2.3.66/Desktop/Default/client.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:49 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-fc36a3edab353ccfcf06498ee1a9ba0f-fc29cff43a64d1f3-01\r\nlast-modified: Mon, 27 Jan 2025 12:28:45 GMT\r\netag: W/\"fe8cacab34b8950548aadd4ec9a9accb\"\r\nx-amz-meta-mtime: 1737980923.154099049\r\ncontent-encoding: gzip\r\nexpires: Fri, 07 Feb 2025 08:46:19 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.063\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 51520\r\ncache: HIT\r\nx-cached-since: 2025-02-07T08:47:09+00:00\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":106796,"size_decoded":106796,"mime_type":"text/css; charset=utf-8","magic":"gzip compressed data, max speed, from Unix","md5":"b122ff051c738b0273adf5f8e9d8ffdb","sha1":"f00ec67b8deeecdc63398e3a69082d271e2a1620","sha256":"adce0d610dd26278cd1a0b9cc4309be81ecace587580d9f1097f8eeea339187d","sha512":"9a63408000092abc60383dee1e4a2597d3dfb80d10519a5ac5f6986cb87f3ce5691f6843564781b8e15ca0bbd69cb7df0a63851b655669cccfef453a6afd9649","ssdeep":"3072:bKk6xHDyc9r4PH1V2Va5U+ZTmo6pAE7R7/fz:ekSV86qRcaE7x","tlshash":"56a312cb51a1be6df2583a7d53bb4c03459719c98ed6e6c3a762c6c1762270b31db230","first_seen":"2025-02-07T23:06:27.848818Z","last_seen":"2025-02-07T23:06:27.848818Z","times_seen":1,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":161,"dns":92,"connect":1,"send":0,"wait":2,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/site-admin/css_vars/f506188b04c16eaa9c664ed23f7ce58e.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.626Z","timestamp":1738969550626,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/site-admin/css_vars/f506188b04c16eaa9c664ed23f7ce58e.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: text/css\r\ncontent-length: 46\r\ntraceparent: 00-195216f280500c31dcb4d336cef0b65d-1e70db9b022b5643-01\r\nlast-modified: Fri, 12 Apr 2024 13:46:52 GMT\r\netag: \"f506188b04c16eaa9c664ed23f7ce58e\"\r\ncache-control: max-age=3600\r\nexpires: Thu, 16 Jan 2025 10:51:06 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1262\r\ncache: HIT\r\nx-cached-since: 2025-02-07T22:44:48+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":46,"size_decoded":46,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"f506188b04c16eaa9c664ed23f7ce58e","sha1":"08d068d7fa5a84beb06ba924a35d84d6bfdab30a","sha256":"b9bfda0e940104e190b19543b94a10d120643bd1516d3ca2d266a0af6c0966e9","sha512":"23dac433e5ca014e169a7f7adf61c3dc3654d5db36ee4f63abc031aa99550e38c0f47e98466f23bc0bdae642bdabdfab39a3184dffe29eb88e944a23b077f21c","ssdeep":"","tlshash":"249002a4a50c25602121c656105c48d010a812466621355451527451b8438109960188","first_seen":"2024-04-24T06:33:16Z","last_seen":"2025-03-20T10:07:40.602352Z","times_seen":1507,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_express_day/en/dictionary_d33d208649ed1030df89e13e093c1b13.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.643Z","timestamp":1738969550643,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_express_day/en/dictionary_d33d208649ed1030df89e13e093c1b13.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-088578.top/\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 831\r\ntraceparent: 00-bc8340865e17eae6fc8334ba69529fce-a6479de097b6226d-01\r\nlast-modified: Wed, 24 Jan 2024 16:06:20 GMT\r\netag: \"5d35c8a9d00341303233a231c1adecdb\"\r\ncache-control: max-age=3600\r\nexpires: Thu, 16 Jan 2025 10:56:26 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 101\r\ncache: HIT\r\nx-cached-since: 2025-02-07T23:04:09+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":831,"size_decoded":831,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5d35c8a9d00341303233a231c1adecdb","sha1":"868de72ab2e64dbfd609751d6783c978826b39dd","sha256":"fe97545e2ddeb8d2e24ebc21daaea02500fa15d9a5b8914b86884ad0ad1419a5","sha512":"f156b7860057e0c8bf33126581a85038f4346ee00492d2fedcb67b788d51389b51da6dd58a654098cc1532b1c3d093727d66cba04d234f9fa6cea75d1543b2f8","ssdeep":"","tlshash":"f901dbeb1035173f59136a2f7d3f929006c0085052f8b043369f39eb33ccdd59a2966a","first_seen":"2024-01-27T06:35:15Z","last_seen":"2025-05-02T07:07:27.487127Z","times_seen":264,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-088578.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json","fqdn":"1xlite-088578.top","domain":"1xlite-088578.top","tld":"top"},"ip":{"addr":"46.32.182.121","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.581Z","timestamp":1738969550581,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-088578.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Dec 2024 09:21:57 GMT","end":"Tue, 25 Mar 2025 09:21:56 GMT"},"fingerprint":{"sha1":"3C:76:93:78:DA:B8:BD:F4:14:7C:F0:30:59:1A:02:C7:F8:0E:09:C4","sha256":"6C:F3:2B:9F:DD:97:EA:A7:5C:EA:BB:31:BB:94:1A:C4:E1:76:0C:EA:48:25:6D:30:DB:9E:99:66:F8:4F:AF:3C"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json HTTP/1.1\r\nHost: 1xlite-088578.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-088578.top/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 131aa738-2334-4749-9707-2253b2275e27\r\nContent-Length: 19\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2473637m_21103c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2473637m_21103c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder; postback_watcher=; auid=LiC2eWemkcyuA23hAzZmAg==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nx-dt: 285\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.008, wf-uht;dur=0.013\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2,"size_decoded":2,"mime_type":"application/json","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-04-28T08:35:51.219452Z","times_seen":251428,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-07","alert":"Sinkholed","trigger":"1xlite-088578.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/7eb49f3cb95029f19a7a99d6483a332d.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.667Z","timestamp":1738969550667,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/7eb49f3cb95029f19a7a99d6483a332d.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-088578.top/\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: application/json\r\ncontent-length: 182\r\ntraceparent: 00-db0f70229a5bf32ab84099b687a69ab2-4eccd5bea99c4fef-01\r\nlast-modified: Fri, 17 May 2024 06:18:09 GMT\r\netag: \"e4c69ca8e3916987138c95a26642f53a\"\r\nexpires: Thu, 16 Jan 2025 11:02:52 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1493\r\ncache: HIT\r\nx-cached-since: 2025-02-07T22:40:57+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":182,"size_decoded":182,"mime_type":"application/json","magic":"JSON text data","md5":"e4c69ca8e3916987138c95a26642f53a","sha1":"411149ef1233c191122618916dc7fa4965a30f7c","sha256":"9bbbe99b83a20d3d0bd65ab0b343de560c6d437a74a4835786bbd6a58bb0e08e","sha512":"eacff7797f4dbb5ce4e6befc71fe01fa40b9d9e95c9a546560004ea9798c06eb6d9493ab8b9e348798b7db18f0d11f77c753bfe37e0c87982c5f1b4d8a51ab73","ssdeep":"","tlshash":"ecc0c034f1d8447b010f28bc10dbd1c427984f2336033c04770c349c0bc50244014d3d","first_seen":"2023-11-28T18:13:34Z","last_seen":"2025-02-26T22:15:29.520096Z","times_seen":615,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_registration/en/dictionary_6aa416cbcb6fcd28a1a718e960b804a0.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.639Z","timestamp":1738969550639,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_registration/en/dictionary_6aa416cbcb6fcd28a1a718e960b804a0.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-088578.top/\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-970aa13524ebe8dbed351a0ed55faf3c-b96648b153332c7e-01\r\nlast-modified: Fri, 31 Jan 2025 14:05:37 GMT\r\netag: W/\"5465a450f89f16695869dae6be88f8f7\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Fri, 31 Jan 2025 15:13:38 GMT\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 995\r\ncache: HIT\r\nx-cached-since: 2025-02-07T22:49:15+00:00\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7573,"size_decoded":7573,"mime_type":"application/json; charset=utf-8","magic":"gzip compressed data, max speed, from Unix","md5":"bbd0fde834a4b05c0e40ddf43640fca0","sha1":"edc5b3de19a0d5d515d9d4bb3f0d4d6e5f81819a","sha256":"0b5e2c4e1ae275f3082d512bfb508859733dfbcc82c8bc5ea1fc9fb38aac71be","sha512":"cb44ffab370572f700e7bddc3c15a038d05b93c3aa40eefc9f1eaa236bcd635fcd8c1c39d92d42543b2c67f4126dd38b5a2fa1c209c42df83ddc949c4a183b7e","ssdeep":"192:I4AqeJKeMFj3Qn6SVA9QODFxhNC8ipO34n44sBv:Ivw26x9QOD9NxtIn44sl","tlshash":"e9f1afca1ab88863482779a3d09a570e12d03e67b4867c05f4bf23fba72492f412f471","first_seen":"2025-02-07T23:06:27.853405Z","last_seen":"2025-02-07T23:06:27.853405Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_reset_password/en/dictionary_612c6e919ca15d39cc751a619a3952c7.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.658Z","timestamp":1738969550658,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_reset_password/en/dictionary_612c6e919ca15d39cc751a619a3952c7.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-088578.top/\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 765\r\ntraceparent: 00-59db03af61936f154b59036224be4632-219df632c108b83c-01\r\nlast-modified: Wed, 11 Oct 2023 12:52:53 GMT\r\netag: \"00f980f23f1b4c1ccee99ed49e0a8feb\"\r\ncache-control: max-age=3600\r\nexpires: Thu, 16 Jan 2025 10:53:47 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\ncache: REVALIDATED\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":765,"size_decoded":765,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"00f980f23f1b4c1ccee99ed49e0a8feb","sha1":"4cb07094de9bffff1bf81d94446280b91013b660","sha256":"bb3be3377fbb8e66a4b5a8a3866dfd865a37cb4a96482ab2f439981e03b57cea","sha512":"45587feec47804731eb344682dd7465959a50f2f47e114e332e875097a9e2009d6fe41e8ff684fb287d935fd9c4d12a5b83e1fe310f3ceca6061d569502ac1de","ssdeep":"","tlshash":"80015701129f0ef21b4bc65a940b1c71b2a0c043936b8c8757baeb8f73bbd8b009584f","first_seen":"2023-09-28T10:29:17Z","last_seen":"2026-04-28T07:32:04.306178Z","times_seen":5104,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/721582dc/desktop/default/vendors/plugins.vue-js-modal-4fbec5e8.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.595Z","timestamp":1738969550595,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/721582dc/desktop/default/vendors/plugins.vue-js-modal-4fbec5e8.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-4e26d45e8696d32ff4f039077f72243e-b378b2eb308395b4-01\r\nlast-modified: Thu, 06 Feb 2025 09:05:46 GMT\r\netag: W/\"e342cfe684d6852e5438fe1d4d9c47f9\"\r\nx-amz-meta-mtime: 1738832744.951569801\r\ncontent-encoding: gzip\r\nexpires: Fri, 07 Feb 2025 09:24:21 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 49267\r\ncache: HIT\r\nx-cached-since: 2025-02-07T09:24:43+00:00\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12467,"size_decoded":12467,"mime_type":"text/javascript; charset=utf-8","magic":"gzip compressed data, max speed, from Unix","md5":"6e6368da1e1fbb9c85b69714a8dc4fe2","sha1":"02d64a67502b051888b0230d30cba6f916748fe7","sha256":"b54a4059848f107ca703117c959ce2cfeeb925e2beb3684acaffb7ec38d8862d","sha512":"e881bc64432097966cb1e8540bb4c8e2b6c505d2611bcd2409ceeb53f5c6c8eda3c041923f3a282441fca04b011cd9d4eee8b3489f556a5082003ca4651894c8","ssdeep":"192:IboMB5nwMHC/SSM0ypRRnzOUETSRJtbqqZAHuc/RlQazM54vdxqXngtE2Wy:I0gw9VgEmRJBqvHtH1Qmxingtd","tlshash":"9942c00a71d1d155bbe51770a33cddd85e13483200a3a99cbe47c91aa1a291fc61fb7d","first_seen":"2025-02-07T23:06:27.85496Z","last_seen":"2025-02-07T23:06:27.85496Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/721582dc/desktop/default/vendors/plugins.v-tooltip-ea0a1988.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.552Z","timestamp":1738969550552,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/721582dc/desktop/default/vendors/plugins.v-tooltip-ea0a1988.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-830f9f4fe75b2f65ffeb3070d3b8e51b-78b37919ee717607-01\r\nlast-modified: Thu, 06 Feb 2025 09:05:46 GMT\r\netag: W/\"34c95c9180a523dffe38757dbc4ef686\"\r\nx-amz-meta-mtime: 1738832744.947569765\r\ncontent-encoding: gzip\r\nexpires: Fri, 07 Feb 2025 09:24:21 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 49267\r\ncache: HIT\r\nx-cached-since: 2025-02-07T09:24:43+00:00\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31178,"size_decoded":31178,"mime_type":"text/javascript; charset=utf-8","magic":"gzip compressed data, max speed, from Unix","md5":"961761854e972ace090d0c646db712f1","sha1":"79d42f325df0bca5ec3e252656ce39e979db9170","sha256":"0183a77d20264676bd868e696cb6dafac0d5ae1d424ee91d4d9621682f296b9d","sha512":"1a3c4127a5c5be86d53892379604a467f8f238dc84f611c52626b38b886e3eda7adae72839e9305e29cad0e730ff4072eaba5b6c3c5933cee27c374253a88c07","ssdeep":"768:JHuWUHslUWoaj7QFfM/WSe/Ut2KWoYaLuug9pP2:JHFF/rt2foYKgX2","tlshash":"31e2f13058ec0e27805fc5da6fd24276ae68b76ef316c763ea21ddd45839206520c66b","first_seen":"2025-02-07T23:06:27.85587Z","last_seen":"2025-02-07T23:06:27.85587Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-088578.top/seo-module-api/api/public/v1/analytics-counters?project[id]=285\u0026domain[host]=1xlite-088578.top","fqdn":"1xlite-088578.top","domain":"1xlite-088578.top","tld":"top"},"ip":{"addr":"46.32.182.121","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.808Z","timestamp":1738969550808,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-088578.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Dec 2024 09:21:57 GMT","end":"Tue, 25 Mar 2025 09:21:56 GMT"},"fingerprint":{"sha1":"3C:76:93:78:DA:B8:BD:F4:14:7C:F0:30:59:1A:02:C7:F8:0E:09:C4","sha256":"6C:F3:2B:9F:DD:97:EA:A7:5C:EA:BB:31:BB:94:1A:C4:E1:76:0C:EA:48:25:6D:30:DB:9E:99:66:F8:4F:AF:3C"}}},"request":{"raw":"GET /seo-module-api/api/public/v1/analytics-counters?project[id]=285\u0026domain[host]=1xlite-088578.top HTTP/1.1\r\nHost: 1xlite-088578.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-088578.top/en/block\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2473637m_21103c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2473637m_21103c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder; postback_watcher=; auid=LiC2eWemkcyuA23hAzZmAg==; window_width=1920\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: application/json\r\ncontent-length: 116\r\ncache-control: max-age=1200, must-revalidate, public, s-maxage=1800, stale-if-error=86400, stale-while-revalidate=300\r\nx-content-digest: en6d0e5d6e0146a49c358c0eaad1d2ef38\r\nage: 702\r\nx-request-id: 25bc87b0e84848c4caf7ff19419e5e25\r\nx-request-guid: 25bc87b0e84848c4caf7ff19419e5e25\r\ncontent-encoding: br\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: p;dur=1.2650489807129, wf-uht;dur=0.013\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":116,"size_decoded":4096,"mime_type":"application/json","magic":"JSON text data","md5":"c3b99d303306b462b1ed909b7b95987b","sha1":"2d839df95274b9c85fd354e45127067095186ffa","sha256":"387b26258a25650ddd79a1e7c0be2697a66584f5280152825a6605c6586d38a3","sha512":"6d551bf399fc7c13f1d220743383db89e189b0d5d32360b0a65ffff84c50ea532be020c8ced30a717a5f52ae28acfded9bfe0e468264b2c0de7683f0a4b90a50","ssdeep":"","tlshash":"f68192219588ecb825036880449e1813d47970658ea616407d2dc77283ac1143421b7f","first_seen":"2024-07-03T17:05:42Z","last_seen":"2025-02-08T23:55:26.774741Z","times_seen":149,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-07","alert":"Sinkholed","trigger":"1xlite-088578.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_fast_deep_equal_ORMYJPSV.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.909Z","timestamp":1738969550909,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_fast_deep_equal_ORMYJPSV.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 865\r\ntraceparent: 00-b2d1da4d657405bae469d28c4449d34c-903a1c56de549575-01\r\nlast-modified: Fri, 07 Feb 2025 07:58:53 GMT\r\netag: \"e42d2bda0bda350e6cb507a391561910\"\r\nx-amz-meta-mtime: 1738914957.347437356\r\nexpires: Sat, 08 Feb 2025 09:57:19 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 47311\r\ncache: HIT\r\nx-cached-since: 2025-02-07T09:57:19+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":865,"size_decoded":865,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (840)","md5":"e42d2bda0bda350e6cb507a391561910","sha1":"fd6785beb70e406347acd6af79b73a609a65abb7","sha256":"59e1f2ebd2ec588a043cdfb338403916451f301c50c7ace4549c0171c9659e88","sha512":"155ed01fafa70dac614ba02039f8988c9ec6b2285f69465973f27208ccd1fe96991ca6ec4926059a0d90e20d4f068063de20da1d7dab9e55416e37eb0c447f62","ssdeep":"","tlshash":"57115cd132e3a0d183e054dd1001d906f23969e5a47ca0c9d757e6b83cb2653987572a","first_seen":"2024-12-07T20:25:29.889358Z","last_seen":"2025-04-01T10:53:17.008433Z","times_seen":350,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_game/en/dictionary_d3735ae52deabdb00e3d736326f9d798.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.633Z","timestamp":1738969550633,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_game/en/dictionary_d3735ae52deabdb00e3d736326f9d798.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-088578.top/\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-7ebf8566d2ed8498543a4d4febf1bf10-c6ebc8a936cd3ddf-01\r\nlast-modified: Thu, 23 Jan 2025 18:05:47 GMT\r\netag: W/\"1bd41b39aeeba3906a1ab104ef181983\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Thu, 23 Jan 2025 19:19:08 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1111\r\ncache: HIT\r\nx-cached-since: 2025-02-07T22:47:19+00:00\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7554,"size_decoded":7554,"mime_type":"application/json; charset=utf-8","magic":"gzip compressed data, max speed, from Unix","md5":"cbc397908a756bc4c1d4d27391856f5c","sha1":"cb905a60b5191eddcd46ed4e0a3e1fd4fd7edf53","sha256":"9c5b1683c538b4099f983b11ce33f7b8eb2cc4ac215907095a3a9f4e480a2d07","sha512":"e5e76c212ad2d63bc545a5fb5839ac82dc289c7f4734e61fb38e85c5483ec8247e1ee0d01977ab8f5c58b680062c57a6450acf5a08d249b232007f0782660a4a","ssdeep":"192:K7P7RzdP3OpA0oXFDMnvlZmbaVkT63Hzbxw3sSw2h1kB4VhqSl6qwiHv:C7B9ibo1DWtZmbaK63nO+2hSKhRlKiHv","tlshash":"3df18d4db310a136d3299e65d44a93ef1382b455398c39ce8bfd2028381ea350ea5ebd","first_seen":"2025-02-07T23:06:27.858068Z","last_seen":"2025-02-07T23:06:27.858068Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-088578.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-088578.top","domain":"1xlite-088578.top","tld":"top"},"ip":{"addr":"46.32.182.121","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.766Z","timestamp":1738969550766,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-088578.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Dec 2024 09:21:57 GMT","end":"Tue, 25 Mar 2025 09:21:56 GMT"},"fingerprint":{"sha1":"3C:76:93:78:DA:B8:BD:F4:14:7C:F0:30:59:1A:02:C7:F8:0E:09:C4","sha256":"6C:F3:2B:9F:DD:97:EA:A7:5C:EA:BB:31:BB:94:1A:C4:E1:76:0C:EA:48:25:6D:30:DB:9E:99:66:F8:4F:AF:3C"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-088578.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-088578.top/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 131aa738-2334-4749-9707-2253b2275e27\r\nContent-Length: 88\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2473637m_21103c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2473637m_21103c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder; postback_watcher=; auid=LiC2eWemkcyuA23hAzZmAg==; window_width=1280; che_g=7e4b80d9-1856-bb1d-f545-cc5653a8d4a4\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\nx-dt: 285\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.005, wf-uht;dur=0.017\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23,"size_decoded":23,"mime_type":"application/json","magic":"JSON text data","md5":"9cf4e94b531c9f66ce6da13efee728dd","sha1":"1d424fd56b66892866bc9063a5a30ef6dc3a2269","sha256":"763958402d32921dbfb50bdac6e99970747277911311d2071b8b2259b09bb486","sha512":"687e657537b4a6de719a55ba71bc5cd85f19f101f09a532a5f2ac609a58593ff93125eb6d3211d0218402aa1dd147ebcc2db1cece6107a80e7f43a28e32b6474","ssdeep":"","tlshash":"1c70002020c00020022080200200080a02a0aa032800003028c880a00f00ef0020a002","first_seen":"2025-02-07T23:06:27.858923Z","last_seen":"2025-02-07T23:06:27.858923Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-07","alert":"Sinkholed","trigger":"1xlite-088578.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_chunk_6EO4CXC4.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.948Z","timestamp":1738969550948,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_chunk_6EO4CXC4.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 610\r\ntraceparent: 00-033ca57c9d7d52e7644b55ccf4d0352f-50ae1e1978bc686f-01\r\nlast-modified: Fri, 07 Feb 2025 07:58:53 GMT\r\netag: \"464c50409850b3095783d5b3b9a1b00d\"\r\nx-amz-meta-mtime: 1738914957.347437356\r\nexpires: Sat, 08 Feb 2025 09:57:24 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 47306\r\ncache: HIT\r\nx-cached-since: 2025-02-07T09:57:24+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":610,"size_decoded":610,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (609)","md5":"464c50409850b3095783d5b3b9a1b00d","sha1":"7d5c3f49bd0689d72dddceee68afd229f4168ed5","sha256":"71cbc8847b4abb3782fe515be3e9e1f3fb639f801b337a2a3612616151ec250d","sha512":"baf34a23614284a4e969600ef577cedaa5fd197e9d6e8b5a88289111b4899d3a548c06a908e3003d4bb8223d8047145d8282c6dca21b825417f2e8cc33c9b94b","ssdeep":"","tlshash":"bdf0a2a65fe8f6a260bc14f8f22d5841d102d27e53ed60f5d1505db894fd04d83690f2","first_seen":"2024-12-07T20:25:30.616073Z","last_seen":"2025-05-20T22:14:00.663292Z","times_seen":572,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/8192228305b202797f207eeb6842287c.png","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.956Z","timestamp":1738969550956,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/8192228305b202797f207eeb6842287c.png HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: image/png\r\ncontent-length: 5202\r\ntraceparent: 00-116f1fe3f672bf3b0cd6640ce345bb33-3bc9a15c758daf1c-01\r\nlast-modified: Wed, 26 Jun 2024 08:22:59 GMT\r\netag: \"b9a636eef54b2844b571fe7de49184a7\"\r\nexpires: Thu, 16 Jan 2025 11:18:57 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 511\r\ncache: HIT\r\nx-cached-since: 2025-02-07T22:57:19+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5202,"size_decoded":5202,"mime_type":"image/png","magic":"PNG image data, 514 x 514, 8-bit colormap, non-interlaced","md5":"b9a636eef54b2844b571fe7de49184a7","sha1":"bf653690790ced40eb3189da075a275d951d1607","sha256":"001bfcdd52b658d46543a1aec889d35b73b3909b47097cc011b95e96fc9e3743","sha512":"7b288a27a69c91697042ebb6f80f48cf25e0c6260620ee8f4b0e7afa75430b95c394c3f284445e0628b347341b89480e2e7098510bc07f4db43ecc46d893c38f","ssdeep":"96:561aQaPXOi0Ui/+kgrJtv72TgGuDG9JAsXgQrjQ:470T0PEnv7Sgc9vPQ","tlshash":"56b19e22d46fe4a53230c81b67c1820a1df839c6e72c29d0e8ed4db5e2c8b7f84883c4","first_seen":"2023-11-17T17:46:27Z","last_seen":"2026-01-13T06:38:33.673472Z","times_seen":5260,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_forgot_password/en/dictionary_28cb4e6b9a8be3afbcbc2a6b22ab3393.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.653Z","timestamp":1738969550653,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_forgot_password/en/dictionary_28cb4e6b9a8be3afbcbc2a6b22ab3393.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-088578.top/\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-bf34be83e335096725b26024708325fe-6403a7c56b18837b-01\r\nlast-modified: Tue, 03 Dec 2024 08:05:32 GMT\r\netag: W/\"273bec90c875f74d2f5ef70f9e32db45\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Thu, 16 Jan 2025 10:56:28 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2953\r\ncache: HIT\r\nx-cached-since: 2025-02-07T22:16:37+00:00\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1505,"size_decoded":1505,"mime_type":"application/json; charset=utf-8","magic":"gzip compressed data, max speed, from Unix","md5":"4621b082972ac3a4da617bc97985359a","sha1":"4b50b0b4a285d212d96c5d02357fa80ece2fd98e","sha256":"3ed0be5861457e26be0e2352f50ae2c16d511f6b6c644b1058fb84ef1b40cd97","sha512":"ac9b328729fe6d8dd35a0de7071d4f830ecaac929e7bf4fd8741d40fb13c3a22da820af6e52065a3e1869c84f2216f0edc1cd8cca8582dd10446a81b3ff0efd4","ssdeep":"","tlshash":"c031d502f1e12c62d4af84beb872a24827889f43188a53b87996171cb7981165cc2e3f","first_seen":"2025-02-07T23:06:27.861001Z","last_seen":"2025-02-07T23:06:27.861001Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/e7f91740f4be211afac731343dc63895.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.663Z","timestamp":1738969550663,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/e7f91740f4be211afac731343dc63895.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-088578.top/\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-41259a0c2eb9e3733fdd9b0b25ceb0af-09f401869141b908-01\r\nlast-modified: Fri, 17 May 2024 01:07:57 GMT\r\netag: W/\"5f6393bd6febc268d33cb235c7eec194\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 16 Jan 2025 11:02:52 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1493\r\ncache: HIT\r\nx-cached-since: 2025-02-07T22:40:57+00:00\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3065,"size_decoded":3065,"mime_type":"application/json","magic":"gzip compressed data, max speed, from Unix","md5":"8fbe3fdeeb8e14eade09537e937ff909","sha1":"93a6adf470a48cceeecafd79bcc96f7f05272342","sha256":"accb88158bdcef66e00efe417c75366afcc40641de1f757026ec0d6389ed4a07","sha512":"bf72f33c66e710dbbc5d46154061a34e38395b174bbc8040bc9c3dc1584b65b1cb86c7330cebbaa2ffb9533d391bc7154b29a987ff6db906c98850a663784728","ssdeep":"","tlshash":"09514abdbfc84b5200aea7bd80d899851f859fff2e5559623d0e2d9c0b0a054456ec3f","first_seen":"2025-01-27T00:08:07.162318Z","last_seen":"2025-02-07T23:06:27.861992Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/437a72a65fc10ef89c2833eacb513eda.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:51.326Z","timestamp":1738969551326,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/437a72a65fc10ef89c2833eacb513eda.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-088578.top/\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:51 GMT\r\ncontent-type: application/json\r\ncontent-length: 245\r\ntraceparent: 00-4524cafc0d366b895e346e3cf98316f8-b52adcf2126d3756-01\r\nlast-modified: Sat, 18 May 2024 07:21:30 GMT\r\netag: \"158d1271ad904e98b54f460bb5b828af\"\r\nexpires: Thu, 16 Jan 2025 10:57:33 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1460\r\ncache: HIT\r\nx-cached-since: 2025-02-07T22:41:31+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":245,"size_decoded":245,"mime_type":"application/json","magic":"JSON text data","md5":"158d1271ad904e98b54f460bb5b828af","sha1":"2098f50a727cd68e1f5e0fd8d40c0cfde88faf43","sha256":"5f250d09be4bf35ac625fb35faae0f664de6bc43b9aa3525425b3f11895084bf","sha512":"bae731e0839ca1aa871c8e4e0ee49ca4dc55dbf9137e7c6c6e576f8d71e8a00097a6dc8adc33264bc8abf9a74c8df00530b70c4cb59d9ed7d08e923e754be6fe","ssdeep":"","tlshash":"8ad0a7a9bfe00fb3202f507c59a5b55487890f43a805a8587e2da65c17b590500aac7d","first_seen":"2024-12-01T01:31:03.646953Z","last_seen":"2025-02-24T05:54:00.545201Z","times_seen":44,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/e3dd2d416ede1d7659584842878349f6.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:51.313Z","timestamp":1738969551313,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/e3dd2d416ede1d7659584842878349f6.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-088578.top/\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:51 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-33e435fb8e3f5838d769013b38dfb703-d3a069fcb50263fc-01\r\nlast-modified: Thu, 16 May 2024 19:05:13 GMT\r\netag: W/\"338264fc869e8f0b86b0d6c9d92102b0\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 16 Jan 2025 11:19:55 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1460\r\ncache: HIT\r\nx-cached-since: 2025-02-07T22:41:31+00:00\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2742,"size_decoded":2742,"mime_type":"application/json","magic":"gzip compressed data, max speed, from Unix","md5":"134ad5fa58f5b7e5af82bb17e0bad485","sha1":"249b8e50d4a814a34399f33ef373ec4bd24325a6","sha256":"8e97c349dcf6207e545fe63ed15602549ceea9fca43616f4ac132d8047ac5156","sha512":"0b0f8e65a03c3a1e3cb7942f3cee8e2446394fd6e3a1412aff69ad4e0b3a85b678583db2a96f94ed9e031372baf67559c328541e7224f2f58ebe34616fd21290","ssdeep":"","tlshash":"d0512ccc54bdb784c7284a9b370307eb1b44f024297510bd25be5fd5996429682a3d52","first_seen":"2025-02-05T15:57:40.810337Z","last_seen":"2025-02-08T00:55:36.682928Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-088578.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-088578.top","domain":"1xlite-088578.top","tld":"top"},"ip":{"addr":"46.32.182.121","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.766Z","timestamp":1738969550766,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-088578.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Dec 2024 09:21:57 GMT","end":"Tue, 25 Mar 2025 09:21:56 GMT"},"fingerprint":{"sha1":"3C:76:93:78:DA:B8:BD:F4:14:7C:F0:30:59:1A:02:C7:F8:0E:09:C4","sha256":"6C:F3:2B:9F:DD:97:EA:A7:5C:EA:BB:31:BB:94:1A:C4:E1:76:0C:EA:48:25:6D:30:DB:9E:99:66:F8:4F:AF:3C"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-088578.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-088578.top/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 131aa738-2334-4749-9707-2253b2275e27\r\nContent-Length: 72\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2473637m_21103c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2473637m_21103c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder; postback_watcher=; auid=LiC2eWemkcyuA23hAzZmAg==; window_width=1280; che_g=7e4b80d9-1856-bb1d-f545-cc5653a8d4a4\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:51 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\nx-dt: 285\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.011, wf-uht;dur=0.010\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23,"size_decoded":23,"mime_type":"application/json","magic":"JSON text data","md5":"2d385fc62859221ab81d1ef07789a9a9","sha1":"b2ce3bc422ea8bc681defcb7def3f3b70e617cad","sha256":"d58b709da66771b264f142468f223ee3937010151a14accd1412754a0906f4a4","sha512":"a698f819e0b8fab05e357a997fb50d9b9f1910cde4979ff02c676ad61884589033608e81709a5dab75881873672afc72456e9890c3a6a5a96cedcca102a2a435","ssdeep":"","tlshash":"7e7000a0000002800220880202008c0b80a0a22a2000323008c008800208ea8800a0c2","first_seen":"2025-02-07T23:06:27.864406Z","last_seen":"2025-02-07T23:06:27.864406Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-07","alert":"Sinkholed","trigger":"1xlite-088578.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-088578.top/web-api/session","fqdn":"1xlite-088578.top","domain":"1xlite-088578.top","tld":"top"},"ip":{"addr":"46.32.182.121","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:58.869Z","timestamp":1738969558869,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-088578.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Dec 2024 09:21:57 GMT","end":"Tue, 25 Mar 2025 09:21:56 GMT"},"fingerprint":{"sha1":"3C:76:93:78:DA:B8:BD:F4:14:7C:F0:30:59:1A:02:C7:F8:0E:09:C4","sha256":"6C:F3:2B:9F:DD:97:EA:A7:5C:EA:BB:31:BB:94:1A:C4:E1:76:0C:EA:48:25:6D:30:DB:9E:99:66:F8:4F:AF:3C"}}},"request":{"raw":"GET /web-api/session HTTP/1.1\r\nHost: 1xlite-088578.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-088578.top/en/block\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2473637m_21103c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2473637m_21103c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder; auid=LiC2eWemkcyuA23hAzZmAg==; window_width=1280; che_g=7e4b80d9-1856-bb1d-f545-cc5653a8d4a4\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:58 GMT\r\ncache-control: no-cache, private\r\nserver-timing: dt_total;dur=0.005, p;dur=15.053, wf-uht;dur=0.027\r\nset-cookie: ua=deleted; expires=Thu, 01 Jan 1970 00:00:01 GMT; Max-Age=0; path=/\nSESSION=bd3702e24c3b0dc7e264acc75913ec8b; path=/; secure; httponly; samesite=lax\r\nx-dt: 285\r\nx-time-ng: 0.017, 0.017\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T08:36:34.154379Z","times_seen":14318473,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-07","alert":"Sinkholed","trigger":"1xlite-088578.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/721582dc/desktop/default/useMFDebugger-7fb8ea70.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.857Z","timestamp":1738969550857,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/721582dc/desktop/default/useMFDebugger-7fb8ea70.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-37b46314364f2b1bac00b7435ed91805-42fb30877ae8ce7d-01\r\nlast-modified: Thu, 06 Feb 2025 09:05:46 GMT\r\netag: W/\"1a9f1e40be28436c68b93db697fdd3c7\"\r\nx-amz-meta-mtime: 1738832744.947569765\r\ncontent-encoding: gzip\r\nexpires: Fri, 07 Feb 2025 09:24:23 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 49266\r\ncache: HIT\r\nx-cached-since: 2025-02-07T09:24:44+00:00\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":272567,"size_decoded":779526,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18939)","md5":"060175f078d3b3135240e910de12823d","sha1":"2f436fe788afd601eb0cd383d01a6bec75ebd1e8","sha256":"4c48912e0927c042f376dcca6105270fa89f3e7ec1b19e46d84cee7ad2535d3f","sha512":"73ef29af34b371ffa73595945c7712d69087705e63a65c1aba03ea040253eb4bd94d816134ccf786d2ea1df3239ad6528b6d14c9c341a83b1b95bc31b5460127","ssdeep":"12288:PRlRnIt47IboYsk9xEMAMiHCFaFIzACV2Mei3B4G:JDnItgVYskMMAMdACV2MeeP","tlshash":"1cf48d99b07b7522259605fef07b0143b53c298ea04ce8a0f16aede536de40552aff3d","first_seen":"2025-02-07T23:06:27.865222Z","last_seen":"2025-02-07T23:06:27.865222Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-088578.top/hd-api/external/assets/hdf.js","fqdn":"1xlite-088578.top","domain":"1xlite-088578.top","tld":"top"},"ip":{"addr":"46.32.182.121","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:58.987Z","timestamp":1738969558987,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-088578.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Dec 2024 09:21:57 GMT","end":"Tue, 25 Mar 2025 09:21:56 GMT"},"fingerprint":{"sha1":"3C:76:93:78:DA:B8:BD:F4:14:7C:F0:30:59:1A:02:C7:F8:0E:09:C4","sha256":"6C:F3:2B:9F:DD:97:EA:A7:5C:EA:BB:31:BB:94:1A:C4:E1:76:0C:EA:48:25:6D:30:DB:9E:99:66:F8:4F:AF:3C"}}},"request":{"raw":"GET /hd-api/external/assets/hdf.js HTTP/1.1\r\nHost: 1xlite-088578.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/en/block\r\nCookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2473637m_21103c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2473637m_21103c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder; auid=LiC2eWemkcyuA23hAzZmAg==; window_width=1280; che_g=7e4b80d9-1856-bb1d-f545-cc5653a8d4a4; SESSION=bd3702e24c3b0dc7e264acc75913ec8b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:59 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 1622\r\ncache-control: public, max-age=300\r\ncontent-encoding: gzip\r\netag: 2f26a679e9d54a65e6578e947cc5bdf2\r\nvary: Accept-Encoding\r\nx-dt: 455\r\nx-request-guid: a065a3d62b516ab1d68004cd828b58b2\r\nx-time-ng: 0.010\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.009, wf-uht;dur=\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1622,"size_decoded":4078,"mime_type":"text/javascript; charset=utf-8","magic":"C++ source, ASCII text, with very long lines (874)","md5":"2f26a679e9d54a65e6578e947cc5bdf2","sha1":"1b984864aa7b3e28231ac7cea3c199435dbdc6bf","sha256":"1e3c4bd81a1cd9ee02e42a42802d5c18cbdb3f3a11c0b2732eb11bd12263020c","sha512":"68558c3d19f060650a48fffcf75bbe522966a5c9049c5c56f96f71405c824e658cfdb9f9790b84eaf90bb4cce3a7b2bc4f9a4c561067219814f66fc7a224c15c","ssdeep":"","tlshash":"d481443660fe6d2143639052d13fd5e9f269a80729a8ec4c71ec5d4a0f50f6185b2e3a","first_seen":"2024-11-12T02:24:18.994891Z","last_seen":"2025-05-20T22:14:00.816695Z","times_seen":708,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-07","alert":"Sinkholed","trigger":"1xlite-088578.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-088578.top/captcha-api/assets/pain-puzzle.js","fqdn":"1xlite-088578.top","domain":"1xlite-088578.top","tld":"top"},"ip":{"addr":"46.32.182.121","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:58.991Z","timestamp":1738969558991,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-088578.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Dec 2024 09:21:57 GMT","end":"Tue, 25 Mar 2025 09:21:56 GMT"},"fingerprint":{"sha1":"3C:76:93:78:DA:B8:BD:F4:14:7C:F0:30:59:1A:02:C7:F8:0E:09:C4","sha256":"6C:F3:2B:9F:DD:97:EA:A7:5C:EA:BB:31:BB:94:1A:C4:E1:76:0C:EA:48:25:6D:30:DB:9E:99:66:F8:4F:AF:3C"}}},"request":{"raw":"GET /captcha-api/assets/pain-puzzle.js HTTP/1.1\r\nHost: 1xlite-088578.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/en/block\r\nCookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2473637m_21103c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2473637m_21103c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder; auid=LiC2eWemkcyuA23hAzZmAg==; window_width=1280; che_g=7e4b80d9-1856-bb1d-f545-cc5653a8d4a4; SESSION=bd3702e24c3b0dc7e264acc75913ec8b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:59 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=300\r\nx-request-id: b15c709355e87a3e3c3dcdf371e43d04\r\ncontent-encoding: br\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: wf-uht;dur=\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":66104,"size_decoded":217873,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (39007)","md5":"e8ae208179f187d84183832e5f60284d","sha1":"19fe1d5df701fa7c5c150925e5cea2245511c575","sha256":"63791c3a3fe72938cb161cc070fcd5d7a6ed931a48ab36dd71b3a1956483bab9","sha512":"943d97f2b5d2158332591081e42647c1ed450155b0e5dab3d8111342d99e360a04d276ffa516cee0b10ab5518283c0c17192779df73ca896adda162bdcb88e9d","ssdeep":"6144:G4DSfbyYzJlSdCmqy9BQd4nUU0a/5JJPezPIS:GfXzJlSdCmqy9BQd4nTRJJkPd","tlshash":"af24744167c06e45374b8fbbb32bb4e9e46e096f3c84498bd104bc546ad621bebf1931","first_seen":"2025-02-01T22:07:21.974785Z","last_seen":"2025-02-24T06:09:12.191484Z","times_seen":65,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-07","alert":"Sinkholed","trigger":"1xlite-088578.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/d9842b87b9dabdc4cdc248c062355299.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.659Z","timestamp":1738969550659,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/d9842b87b9dabdc4cdc248c062355299.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-088578.top/\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-54633a2923910feef280d7530f24c490-6c6722ad715ab716-01\r\nlast-modified: Thu, 23 Jan 2025 13:19:10 GMT\r\netag: W/\"0614058b667e6dfa1cdecc6e0e53131c\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 23 Jan 2025 14:50:28 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1493\r\ncache: HIT\r\nx-cached-since: 2025-02-07T22:40:57+00:00\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":128913,"size_decoded":128913,"mime_type":"application/json","magic":"gzip compressed data, max speed, from Unix","md5":"30de66b73c0be0da64a217e946dbf604","sha1":"8a1ac1911d647dec19c4d33e5abb366830dd8120","sha256":"d7bee1e757c898523fca090660cace9be0f5a12bcd5be0b9099e0e75392cf171","sha512":"251ffefd3254f9180825ad256ca635bf14bf2685f9b9c545a04575c238248404d050f90e450f305b071add2dc5f3ba48cd26e9ff56665bb71ce3f6340c7d73eb","ssdeep":"3072:/uBrTQgXhWa/DL8eqTxQYcTR3JWD2AZ/2wLt+0GY72wxO:/uBrVWaLLJqTSYcVJWqs/2wsRO2wk","tlshash":"4ac3225521b8f73dc43a27a428e0d4d4564122d74aec2aaa0fd74f5e4bdedbf708e098","first_seen":"2025-02-07T23:06:27.867234Z","last_seen":"2025-02-07T23:06:27.867234Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:59.957Z","timestamp":1738969559957,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:59 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63920\r\ntraceparent: 00-9112debcb8187fb0976ad3c74203954c-5a8ee83416090aba-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"a65527fcb58f66a7cfbc0e6b160538b4\"\r\nexpires: Thu, 16 Jan 2025 10:45:34 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1146\r\ncache: HIT\r\nx-cached-since: 2025-02-07T22:46:53+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":63920,"size_decoded":63920,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63920, version 1.0","md5":"a65527fcb58f66a7cfbc0e6b160538b4","sha1":"45d260e7fa343401b5bb0df982a014f53e2d253b","sha256":"fb13c3a1cbac60649b76f7d7f85c1645d35ac69b85ce5f4eb0692505ecc2cd45","sha512":"8448e96abe326f43285b2d8b0d75beaf0e9c9e051e8754841d907b30eb303ae24c447011306da6a1703b9192d02aeff76a4517bdf94ec6e7dc360ce3538802af","ssdeep":"1536:UIG3hJMkJeK8ic5iZGnJ4URj9vqXOQ6UqYdbuA5RVK1:UL31hcLlRjDQ6Uq4W1","tlshash":"7f5302df8de32a148ff78772668885f4f4927c68898c8e7345526a8907f07d6b96c04f","first_seen":"2023-05-07T18:04:27Z","last_seen":"2026-04-28T07:40:10.598659Z","times_seen":10369,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-ui/3.3.76/Desktop/Default/merged.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:49.524Z","timestamp":1738969549524,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-ui/3.3.76/Desktop/Default/merged.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:49 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-96fd0e18e84538d931e74024cebd3625-3c06aab59470b055-01\r\nlast-modified: Fri, 07 Feb 2025 08:44:39 GMT\r\netag: W/\"ef994e27cf2d075b034b1a2063d57389\"\r\nx-amz-meta-mtime: 1738917806.095407807\r\ncontent-encoding: gzip\r\nexpires: Sat, 08 Feb 2025 08:50:58 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.004\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 51056\r\ncache: HIT\r\nx-cached-since: 2025-02-07T08:54:53+00:00\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":248932,"size_decoded":1803458,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0ab6b20f0304216719c51774cabac062","sha1":"9b097ffadbdcee2d29753a970e4fb8c7e1e8bf16","sha256":"5ed90c02bd2ab285f5cabc6da962a1b23b1fa49dd847f50eed302be30041726d","sha512":"7f24e0573de058165d5f788af29a549bb9c946ae9f4ca7d2b9fe71f96e9cf0f515bf5c60ee2b6b953c93a6f3033af9f659683faf3809fa2eada772ba80b9850f","ssdeep":"6144:3jGIXW6/ONQvfe8hkmzejRDvMNYvFiSS6Fsw5k73pz0GXA6fQrdWDOYYL2O3edC0:t+q8oH8PPLs/X","tlshash":"3a85752cf25d91343e37e62462949ffc6620b7439713187ef89a029b1ec35427196ebb","first_seen":"2025-02-07T23:06:27.868128Z","last_seen":"2025-02-07T23:06:27.868128Z","times_seen":1,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":152,"dns":91,"connect":1,"send":0,"wait":1,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_accept_language_parser_F4H4E7NH.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:51.101Z","timestamp":1738969551101,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_accept_language_parser_F4H4E7NH.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-eb535d7358197c3bbe7fba0e1a5fb5a6-4d26c8623a874cab-01\r\nlast-modified: Fri, 07 Feb 2025 07:58:53 GMT\r\netag: W/\"268c88e3fff4b1ae77e5109cba692e17\"\r\nx-amz-meta-mtime: 1738914957.347437356\r\ncontent-encoding: gzip\r\nexpires: Sat, 08 Feb 2025 09:57:56 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 47274\r\ncache: HIT\r\nx-cached-since: 2025-02-07T09:57:57+00:00\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7099,"size_decoded":7099,"mime_type":"text/javascript; charset=utf-8","magic":"gzip compressed data, max speed, from Unix","md5":"47b87867aef73f3a9fea24ce3a978e8e","sha1":"8d5541747ee402ede4c4dc2ec1fddc997a3bf154","sha256":"82e209b1920d77dd02ccae311a5758fa8f04ea518f9459658b2c749640ba9952","sha512":"cee1d83295d32e4c9dd5bb6ff5b681a9c20fc0fd98a328a65f403eac8c0f220fb2f44a196f1498636c908555320b53b0c06aa1cf5558c6b03e922d23453dd6fd","ssdeep":"192:dn48DEW3bIOI39OpDrwgka37lo+gdmR4Dv:u2EWrN894D0gnJo+gdmqDv","tlshash":"72e19e2bf7620ceac5450bf6075d23a096c0ebe958406bdee9611a02c9be0d85d7a307","first_seen":"2025-02-07T23:06:27.868892Z","last_seen":"2025-02-07T23:06:27.868892Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/721582dc/desktop/default/analytics-6ee09f41.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:06:00.901Z","timestamp":1738969560901,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/721582dc/desktop/default/analytics-6ee09f41.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:06:00 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-f62bb631ba1fa8745dc20ee0e3d7b286-efb735bc4780b2e0-01\r\nlast-modified: Thu, 06 Feb 2025 09:05:46 GMT\r\netag: W/\"9fcb8743394c1a083104898a388768aa\"\r\nx-amz-meta-mtime: 1738832744.935569658\r\ncontent-encoding: gzip\r\nexpires: Fri, 07 Feb 2025 09:24:33 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 49266\r\ncache: HIT\r\nx-cached-since: 2025-02-07T09:24:54+00:00\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":144442,"size_decoded":144442,"mime_type":"text/javascript; charset=utf-8","magic":"gzip compressed data, max speed, from Unix","md5":"e92eb3463a2687544dc32b056304d52e","sha1":"acb9cd40d9771db7b98dd32cf48e9c175422ca82","sha256":"3e95dc19f5543ebe99b8a71c75c774a6fe75f71c39e107056f5f1b1fa71573b9","sha512":"b6dfc81abe79ef54fc0ce8af6d11e821f104ce73803e28a89d5886f9676e1279ccd1792e01c8a1e8fd06fa1c3943cc20df5e98ca979475c323e7a440b4804a2d","ssdeep":"3072:bGd1JQKTmywj93OotAm2ms0DLmwj3TdSGGAA2a5qMVBgNX:ypTrwjBOoAHxgDTdSfh2aiNX","tlshash":"8fe3122a27ed434938ae1f7e5eeec673d18815fc5b6d149adcc5805323e168aa313336","first_seen":"2025-02-07T23:06:27.869614Z","last_seen":"2025-02-07T23:06:27.869614Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KFGPRJ2V","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:06:00.961Z","timestamp":1738969560961,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jan 2025 08:36:04 GMT","end":"Mon, 14 Apr 2025 08:36:03 GMT"},"fingerprint":{"sha1":"18:BB:CC:69:33:72:62:2E:E5:B6:28:51:17:5B:BD:CE:CD:85:8D:B3","sha256":"AB:DB:01:47:B2:F7:31:7D:CE:18:42:50:CB:EF:16:B4:E6:B5:8F:B7:7D:FF:32:8B:CE:96:99:13:CE:93:5C:37"}}},"request":{"raw":"GET /gtm.js?id=GTM-KFGPRJ2V HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 07 Feb 2025 23:06:01 GMT\r\nexpires: Fri, 07 Feb 2025 23:06:01 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 07 Feb 2025 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1245:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1245:0\r\nreport-to: {\"group\":\"ascgcycc:1245:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1245:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 104357\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":104357,"size_decoded":298549,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4828)","md5":"8ffa05ab25ac6256bac4b5ecb99630bd","sha1":"6cb9ba7aa75371fd385c718aecbd007e5b7b0c91","sha256":"af40d29d4bc4fd4aa5384db079d7e4c0cf7837d3cedae3c2f380f63b4a2c1fd6","sha512":"95d309988152180ddddafad762cd2a390fea99d5a46351eb665a4659b87122d7668bb1665656005e7a4c6ab88a307dc2d1f9f63db6e5d548fe08b4a1a8c01afa","ssdeep":"3072:mI1HAYI56LQbFs+p0tXR0ka7jla4zp2nf3ZQXNl4Rq0ez73F4T5gR6UF7U8ROt6:tL8xsO0tkNsENl4RqZ73F4T5gR6UF7R1","tlshash":"1d542acdb386b46693a26478507f010bb13a7ce2f84cd894f186c8d42e74aa96177f7d","first_seen":"2025-02-07T23:06:27.870355Z","last_seen":"2025-02-07T23:06:27.870355Z","times_seen":1,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":64,"dns":9,"connect":21,"send":0,"wait":20,"receive":26,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"radar.cedexis.com/1/23802/radar.js","fqdn":"radar.cedexis.com","domain":"cedexis.com","tld":"com"},"ip":{"addr":"45.54.49.5","port":443,"asn":63911,"as":"NetActuate, Inc","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:06:01.215Z","timestamp":1738969561215,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"radar.cedexis.com","organization":"Citrix Systems, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 29 Mar 2024 00:00:00 GMT","end":"Fri, 28 Mar 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:58:79:8E:87:A5:C3:05:CA:E2:82:50:61:CF:72:83:BD:64:80:C1","sha256":"72:9B:92:78:4D:A4:DB:1B:4B:E3:BA:62:E7:3D:A6:E6:5B:A9:97:6C:DD:73:B4:9B:2B:54:75:94:B9:8C:14:6B"}}},"request":{"raw":"GET /1/23802/radar.js HTTP/1.1\r\nHost: radar.cedexis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Moved Temporarily\r\nServer: nginx\r\nDate: Fri, 07 Feb 2025 23:06:01 GMT\r\nContent-Type: text/html\r\nContent-Length: 138\r\nConnection: keep-alive\r\nLocation: /1707728419/stub.js\r\nExpires: Fri, 07 Feb 2025 23:16:01 GMT\r\nCache-Control: max-age=600\r\nVary: User-Agent,DNT\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Moved Temporarily","fingerprints":null,"data":{"size":138,"size_decoded":138,"mime_type":"application/javascript","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"aff950cab4c0265e21d401db15f1026d","sha1":"f03e18461817f7a6546c8bf8fa8d686d7e30aca0","sha256":"753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0","sha512":"a1f0f6f3dd6788a1d7c922c6a8fc81d4709dbd0bf28433023fb8fbd151f645daa096c6e9dd670fb7f86c1699942514a11c183aa09f0018142f823668fb2a0aa2","ssdeep":"","tlshash":"a5c092af79533c8cc8f33a3954c3a298d1ed92726ba8960096408553b2c72568ec3363","first_seen":"2023-04-05T03:40:47Z","last_seen":"2026-03-26T18:06:03.990474Z","times_seen":38808,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":39,"dns":0,"connect":19,"send":0,"wait":19,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-7JGWL9SV66\u0026cid=545623399.1738969561\u0026gtm=45je5240v897130004za200\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~102067808~102081485~102123608~102482433~102539968~102558064~102587591~102605417\u0026tag_exp=101509157~102067808~102081485~102123608~102482433~102539968~102558064~102587591~102605417\u0026z=814635799","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:06:01.411Z","timestamp":1738969561411,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jan 2025 08:38:53 GMT","end":"Mon, 14 Apr 2025 08:38:52 GMT"},"fingerprint":{"sha1":"2E:C7:EA:04:BA:61:C5:2D:FD:13:66:BD:7C:21:BB:D9:3A:EA:86:13","sha256":"06:8E:59:A4:AD:C1:BB:C9:64:E3:56:5F:CD:44:F0:4B:BF:0C:E6:D6:0D:F5:58:DE:42:60:B1:4A:C9:35:5F:B3"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-7JGWL9SV66\u0026cid=545623399.1738969561\u0026gtm=45je5240v897130004za200\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=101509157~102067808~102081485~102123608~102482433~102539968~102558064~102587591~102605417\u0026tag_exp=101509157~102067808~102081485~102123608~102482433~102539968~102558064~102587591~102605417\u0026z=814635799 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Fri, 07 Feb 2025 23:06:01 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":42,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-04-28T08:35:53.505411Z","times_seen":827600,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":71,"dns":0,"connect":8,"send":0,"wait":22,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je5240v897130004za200\u0026_p=1738969560909\u0026em=tv.1~em.ODS1igyfeIhzOTHENqwIfH1sb8t0oxg8FT6iY2YCmeo\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~102067808~102081485~102123608~102482433~102539968~102558064~102587591~102605417\u0026cid=545623399.1738969561\u0026ecid=1113991798\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026ec_mode=a\u0026_s=2\u0026sid=1738969561\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-088578.top%2Fen%2Fblock\u0026dt=1xBet\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026ep.optimize_id=GTM-5R4MT54\u0026tfd=13406","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:06:01.415Z","timestamp":1738969561415,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jan 2025 08:36:04 GMT","end":"Mon, 14 Apr 2025 08:36:03 GMT"},"fingerprint":{"sha1":"18:BB:CC:69:33:72:62:2E:E5:B6:28:51:17:5B:BD:CE:CD:85:8D:B3","sha256":"AB:DB:01:47:B2:F7:31:7D:CE:18:42:50:CB:EF:16:B4:E6:B5:8F:B7:7D:FF:32:8B:CE:96:99:13:CE:93:5C:37"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je5240v897130004za200\u0026_p=1738969560909\u0026em=tv.1~em.ODS1igyfeIhzOTHENqwIfH1sb8t0oxg8FT6iY2YCmeo\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~102067808~102081485~102123608~102482433~102539968~102558064~102587591~102605417\u0026cid=545623399.1738969561\u0026ecid=1113991798\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026ec_mode=a\u0026_s=2\u0026sid=1738969561\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-088578.top%2Fen%2Fblock\u0026dt=1xBet\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026ep.optimize_id=GTM-5R4MT54\u0026tfd=13406 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-088578.top/\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://1xlite-088578.top\r\ndate: Fri, 07 Feb 2025 23:06:01 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:136:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:136:0\r\nreport-to: {\"group\":\"ascnsrsggc:136:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:136:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T08:36:34.154379Z","times_seen":14318473,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":58,"dns":0,"connect":21,"send":0,"wait":31,"receive":0,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=DC-14030178\u0026l=dataLayer\u0026cx=c\u0026gtm=45He5240v9180563600za200","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:06:01.421Z","timestamp":1738969561421,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jan 2025 08:36:04 GMT","end":"Mon, 14 Apr 2025 08:36:03 GMT"},"fingerprint":{"sha1":"18:BB:CC:69:33:72:62:2E:E5:B6:28:51:17:5B:BD:CE:CD:85:8D:B3","sha256":"AB:DB:01:47:B2:F7:31:7D:CE:18:42:50:CB:EF:16:B4:E6:B5:8F:B7:7D:FF:32:8B:CE:96:99:13:CE:93:5C:37"}}},"request":{"raw":"GET /gtag/destination?id=DC-14030178\u0026l=dataLayer\u0026cx=c\u0026gtm=45He5240v9180563600za200 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 07 Feb 2025 23:06:01 GMT\r\nexpires: Fri, 07 Feb 2025 23:06:01 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 07 Feb 2025 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcysghrgc:42:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcysghrgc:42:0\r\nreport-to: {\"group\":\"ascgcysghrgc:42:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcysghrgc:42:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 88616\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":88616,"size_decoded":248766,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5268)","md5":"6efeceff808cfb9855ba5f848b3c321f","sha1":"462c88ff64ba296415a39fe47238885950e9dc47","sha256":"4ec394e4811d623ad26252b195a93c72a975668730d8d210c16f6b5f6640f7a2","sha512":"5a2d521e8cdd16a29cf7807cb267011b2a89bfbd5ced6a2551f0c5b8b2518e3d7fb43fb335fd5ef0c1d2939f9a31610323a64e4ea7dddacb17f8139a28ff9ba9","ssdeep":"3072:5SAYI56LQbFs+z0NhR0Mk7jla4zp2nLZvHqPz73F4T5gzUF7UC4xt8:ML8xs20NqNINqr73F4T5gzUF7UQ","tlshash":"be3408cdb3c6b46693a26478507f014bb17a6cd2f80cd890e186c8d87e74aa95277f7c","first_seen":"2025-02-07T23:06:27.872447Z","last_seen":"2025-02-08T06:05:52.612717Z","times_seen":2,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je5240v897130004za200\u0026_p=1738969560909\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~102067808~102081485~102123608~102482433~102539968~102558064~102587591~102605417\u0026cid=545623399.1738969561\u0026ecid=1113991798\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AEA\u0026_s=1\u0026sid=1738969561\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-088578.top%2Fen%2Fblock\u0026dt=1xBet\u0026en=scroll\u0026ep.optimize_id=GTM-5R4MT54\u0026epn.percent_scrolled=90\u0026upn.ref_id=1\u0026tfd=13405","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.34.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:06:01.414Z","timestamp":1738969561414,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jan 2025 08:36:04 GMT","end":"Mon, 14 Apr 2025 08:36:03 GMT"},"fingerprint":{"sha1":"18:BB:CC:69:33:72:62:2E:E5:B6:28:51:17:5B:BD:CE:CD:85:8D:B3","sha256":"AB:DB:01:47:B2:F7:31:7D:CE:18:42:50:CB:EF:16:B4:E6:B5:8F:B7:7D:FF:32:8B:CE:96:99:13:CE:93:5C:37"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je5240v897130004za200\u0026_p=1738969560909\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=101509157~102067808~102081485~102123608~102482433~102539968~102558064~102587591~102605417\u0026cid=545623399.1738969561\u0026ecid=1113991798\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AEA\u0026_s=1\u0026sid=1738969561\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-088578.top%2Fen%2Fblock\u0026dt=1xBet\u0026en=scroll\u0026ep.optimize_id=GTM-5R4MT54\u0026epn.percent_scrolled=90\u0026upn.ref_id=1\u0026tfd=13405 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-088578.top/\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://1xlite-088578.top\r\ndate: Fri, 07 Feb 2025 23:06:01 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:136:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:136:0\r\nreport-to: {\"group\":\"ascnsrsggc:136:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:136:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T08:36:34.154379Z","times_seen":14318473,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":71,"dns":0,"connect":25,"send":0,"wait":32,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16664555628\u0026l=dataLayer\u0026cx=c\u0026gtm=45He5240v9180563600za200","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:06:01.428Z","timestamp":1738969561428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jan 2025 08:36:04 GMT","end":"Mon, 14 Apr 2025 08:36:03 GMT"},"fingerprint":{"sha1":"18:BB:CC:69:33:72:62:2E:E5:B6:28:51:17:5B:BD:CE:CD:85:8D:B3","sha256":"AB:DB:01:47:B2:F7:31:7D:CE:18:42:50:CB:EF:16:B4:E6:B5:8F:B7:7D:FF:32:8B:CE:96:99:13:CE:93:5C:37"}}},"request":{"raw":"GET /gtag/destination?id=AW-16664555628\u0026l=dataLayer\u0026cx=c\u0026gtm=45He5240v9180563600za200 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 07 Feb 2025 23:06:01 GMT\r\nexpires: Fri, 07 Feb 2025 23:06:01 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Fri, 07 Feb 2025 21:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcysghrgc:42:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcysghrgc:42:0\r\nreport-to: {\"group\":\"ascgcysghrgc:42:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcysghrgc:42:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 103725\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":103725,"size_decoded":300630,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5268)","md5":"3b33be7dff731f1d4e4449bf7affe370","sha1":"33701e079ad297f20570a16933a1b7b8aab3bc72","sha256":"d6a76d581e06c079ae4ce9c051f6a52c7e53789dedefb7bc5eb4de7bfcf39a17","sha512":"947d6d287e37373ab52a572071d5de368cfbfcb64adec5b32b6ada87f0ed4f09634d151158679fbf7842258429d1e524598607d2eb0dce3340e8b126ac9086e8","ssdeep":"3072:SPAYI56LQbFs++0/PR0+k7jla4zp2nf3ZQXNl4Rq0ez73F4T5gqZUet8:4L8xs30/8NsENl4RqZ73F4T5gqad","tlshash":"bb542acdb3c7b46693a2a478507f014bb17a6ca2f84cc894f185c8e42e74a996177f7c","first_seen":"2025-02-07T23:06:27.873209Z","last_seen":"2025-02-07T23:06:27.873209Z","times_seen":1,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"radar.cedexis.com/1707728419/stub.js","fqdn":"radar.cedexis.com","domain":"cedexis.com","tld":"com"},"ip":{"addr":"45.54.49.5","port":443,"asn":63911,"as":"NetActuate, Inc","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:06:01.586Z","timestamp":1738969561586,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"radar.cedexis.com","organization":"Citrix Systems, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Fri, 29 Mar 2024 00:00:00 GMT","end":"Fri, 28 Mar 2025 23:59:59 GMT"},"fingerprint":{"sha1":"33:58:79:8E:87:A5:C3:05:CA:E2:82:50:61:CF:72:83:BD:64:80:C1","sha256":"72:9B:92:78:4D:A4:DB:1B:4B:E3:BA:62:E7:3D:A6:E6:5B:A9:97:6C:DD:73:B4:9B:2B:54:75:94:B9:8C:14:6B"}}},"request":{"raw":"GET /1707728419/stub.js HTTP/1.1\r\nHost: radar.cedexis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-088578.top/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 07 Feb 2025 23:06:01 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLast-Modified: Mon, 12 Feb 2024 09:51:01 GMT\r\nVary: Accept-Encoding\r\nETag: W/\"65c9ea05-186\"\r\nExpires: Fri, 21 Feb 2025 23:06:01 GMT\r\nCache-Control: max-age=1209600, public\r\nContent-Encoding: gzip\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":271,"size_decoded":390,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"82dec77fd0353c7c71ce053b8601387e","sha1":"fbbca95419e1d0c042e0a5fdf10f380aca66188c","sha256":"39f2b7b0fa78d37d0c84d2d6618bd635d86fd683d9bcdd5729850cb2a62522f7","sha512":"6872c895cb44711405e57a436dfbe15d094f9159e11ee2b89983c63b1f18f6acbdfaf0ccbb5e48b2bf24f366f16584c660bca4b6b14c048a134bb77a60f6563e","ssdeep":"","tlshash":"02e068ae9391a318537a2dbacc4e060ba0f6114888e5e4e029f5c2c00461bae072bfb4","first_seen":"2024-02-13T14:23:26Z","last_seen":"2026-01-15T12:01:08.184588Z","times_seen":7496,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?en=page_view\u0026dl=https%3A%2F%2F1xlite-088578.top%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=1419787.1738969561\u0026dt=1xBet\u0026auid=521487851.1738969561\u0026navt=n\u0026npa=1\u0026gtm=45He5240v9180563600za200\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=102067808~102081485~102123608~102482433~102539968~102558064~102587591~102605417\u0026tft=1738969561419\u0026tfd=13429\u0026apve=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:06:02.027Z","timestamp":1738969562027,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jan 2025 08:37:54 GMT","end":"Mon, 14 Apr 2025 08:37:53 GMT"},"fingerprint":{"sha1":"A5:8A:8C:6D:C5:D6:86:EA:BD:43:96:00:02:99:B8:C6:97:0C:AF:E5","sha256":"C6:8A:2E:CC:80:45:01:A2:D1:2F:8C:BE:B9:FD:6B:74:AA:00:82:4D:E7:C1:5A:E3:C8:91:BE:1E:8E:60:70:77"}}},"request":{"raw":"POST /ccm/collect?en=page_view\u0026dl=https%3A%2F%2F1xlite-088578.top%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026frm=0\u0026rnd=1419787.1738969561\u0026dt=1xBet\u0026auid=521487851.1738969561\u0026navt=n\u0026npa=1\u0026gtm=45He5240v9180563600za200\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=102067808~102081485~102123608~102482433~102539968~102558064~102587591~102605417\u0026tft=1738969561419\u0026tfd=13429\u0026apve=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/plain\r\ndate: Fri, 07 Feb 2025 23:06:02 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://1xlite-088578.top\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T08:36:34.154379Z","times_seen":14318473,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":79,"dns":0,"connect":8,"send":0,"wait":18,"receive":1,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-088578.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-088578.top","domain":"1xlite-088578.top","tld":"top"},"ip":{"addr":"46.32.182.121","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.766Z","timestamp":1738969550766,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-088578.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Dec 2024 09:21:57 GMT","end":"Tue, 25 Mar 2025 09:21:56 GMT"},"fingerprint":{"sha1":"3C:76:93:78:DA:B8:BD:F4:14:7C:F0:30:59:1A:02:C7:F8:0E:09:C4","sha256":"6C:F3:2B:9F:DD:97:EA:A7:5C:EA:BB:31:BB:94:1A:C4:E1:76:0C:EA:48:25:6D:30:DB:9E:99:66:F8:4F:AF:3C"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-088578.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-088578.top/en/block\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: 131aa738-2334-4749-9707-2253b2275e27\r\nContent-Length: 109\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2473637m_21103c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2473637m_21103c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder; auid=LiC2eWemkcyuA23hAzZmAg==; window_width=1280; che_g=7e4b80d9-1856-bb1d-f545-cc5653a8d4a4; SESSION=bd3702e24c3b0dc7e264acc75913ec8b; _ga_7JGWL9SV66=GS1.1.1738969561.1.0.1738969561.60.0.1113991798; _ga=GA1.1.545623399.1738969561; _gcl_au=1.1.521487851.1738969561\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:06:02 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\nx-dt: 285\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.005, wf-uht;dur=0.010\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23,"size_decoded":23,"mime_type":"application/json","magic":"JSON text data","md5":"3421a947e74b058801568c73d4cafd41","sha1":"d82ed2b280500912edb2aaa65e28a4ef9b31bea7","sha256":"0e25becc700be5f4fc5cba76caae6eb3cccfcbc4df4b6cf74fc8360c8947fd6c","sha512":"7d584e36068b70651ecb8d693871b69db0e98d379fb10e13010665dfeacccc6d7f93f7e86037b6b89a8fe2739f6c8db59036663198d8e975ad94666927763b1f","ssdeep":"","tlshash":"ef7000200002880002a800002b00080aa8b0a202e0000c3008c8280038c8aa0002a282","first_seen":"2025-02-07T23:06:27.874596Z","last_seen":"2025-02-07T23:06:27.874596Z","times_seen":1,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-07","alert":"Sinkholed","trigger":"1xlite-088578.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-088578.top/en?tag=d_2473637m_21103c_[]MS[]null[]null[]general[]80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder","fqdn":"1xlite-088578.top","domain":"1xlite-088578.top","tld":"top"},"ip":{"addr":"46.32.182.121","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-02-07T23:05:48.560Z","timestamp":1738969548560,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-088578.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Dec 2024 09:21:57 GMT","end":"Tue, 25 Mar 2025 09:21:56 GMT"},"fingerprint":{"sha1":"3C:76:93:78:DA:B8:BD:F4:14:7C:F0:30:59:1A:02:C7:F8:0E:09:C4","sha256":"6C:F3:2B:9F:DD:97:EA:A7:5C:EA:BB:31:BB:94:1A:C4:E1:76:0C:EA:48:25:6D:30:DB:9E:99:66:F8:4F:AF:3C"}}},"request":{"raw":"GET /en?tag=d_2473637m_21103c_[]MS[]null[]null[]general[]80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder HTTP/1.1\r\nHost: 1xlite-088578.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:48 GMT\r\nlink: \u003chttps://v3.traincdn.com/sys-ui/2.3.66/Desktop/Default/client.css\u003e; rel=preload; as=style; crossorigin=anonymous\r\nlocation: /en/block\r\nserver-timing: dt_total;dur=0.017, total;dur=19;desc=\"Nuxt Server Time\", wf-uht;dur=0.040\r\nset-cookie: platform_type=desktop; Path=/; Expires=Mon, 10 Feb 2025 23:05:48 GMT; Secure; SameSite=None; Partitioned\nlng=en; Path=/\ncookies_agree_type=3; Path=/\ntzo=1; Path=/\nis12h=0; Path=/\nreferral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2473637m_21103c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; Path=/; Expires=Tue, 08 Apr 2025 23:05:48 GMT\nreflinkid=d_2473637m_21103c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder; Path=/; Expires=Sat, 08 Feb 2025 00:05:48 GMT\npostback_watcher=; Path=/; Expires=Fri, 07 Feb 2025 23:05:52 GMT\nauid=LiC2eWemkcyuA23hAzZmAg==; path=/; secure; httponly; samesite=lax\r\nx-dt: 285\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":248296,"size_decoded":248296,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T08:36:34.154379Z","times_seen":14318473,"resource_available":true,"data":null}},"time_used":346,"timings":{"blocked":137,"dns":26,"connect":33,"send":0,"wait":73,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-07","alert":"Sinkholed","trigger":"1xlite-088578.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-088578.top/version.json?timestamp=1738969550795","fqdn":"1xlite-088578.top","domain":"1xlite-088578.top","tld":"top"},"ip":{"addr":"46.32.182.121","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.811Z","timestamp":1738969550811,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-088578.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Dec 2024 09:21:57 GMT","end":"Tue, 25 Mar 2025 09:21:56 GMT"},"fingerprint":{"sha1":"3C:76:93:78:DA:B8:BD:F4:14:7C:F0:30:59:1A:02:C7:F8:0E:09:C4","sha256":"6C:F3:2B:9F:DD:97:EA:A7:5C:EA:BB:31:BB:94:1A:C4:E1:76:0C:EA:48:25:6D:30:DB:9E:99:66:F8:4F:AF:3C"}}},"request":{"raw":"GET /version.json?timestamp=1738969550795 HTTP/1.1\r\nHost: 1xlite-088578.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-088578.top/en/block\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2473637m_21103c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2473637m_21103c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder; postback_watcher=; auid=LiC2eWemkcyuA23hAzZmAg==; window_width=1920\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: application/json\r\ncontent-length: 11\r\nlast-modified: Fri, 07 Feb 2025 15:58:28 GMT\r\netag: \"b06cce3dba699d956266da284bf3a8b9\"\r\nx-amz-meta-mtime: 1738943908.809899657\r\nexpires: Fri, 07 Feb 2025 23:06:50 GMT\r\ncache-control: max-age=60\r\nx-time-ng: 0.000\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: wf-uht;dur=0.008\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11,"size_decoded":11,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"4c9b85cd943a31b6729603b5496ae61a","sha1":"7be41c463035e844a266e6a83748a7f5b7d01830","sha256":"c56993c2ab2c7a430ee07877ca29f5ae366a7c330563545a8f588f1bfecaab87","sha512":"b76ffc01a31d039d73b60c9ba73d62148f5158db57c5e6f858cefd10d636b6d3c4f17d1ddee1b4a7c9faaaf0b6762caafbc07038bd0e4b5e8d4d3bbf82659690","ssdeep":"","tlshash":"da600033003000f00c0c003000c0f3000003000030f03000000c00c000303c00000000","first_seen":"2025-02-07T22:57:56.82449Z","last_seen":"2025-02-09T03:39:21.395199Z","times_seen":6,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-07","alert":"Sinkholed","trigger":"1xlite-088578.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_base-app_8WyFoprY.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.905Z","timestamp":1738969550905,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_base-app_8WyFoprY.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-e0afc3de853c4f4110827de191540fad-ae7f7bee8d280d75-01\r\nlast-modified: Thu, 06 Feb 2025 12:55:13 GMT\r\netag: W/\"a4d0bfc0e3dc800417e014f5f8d9235c\"\r\nx-amz-meta-mtime: 1738846390.305604582\r\ncontent-encoding: gzip\r\nexpires: Sat, 08 Feb 2025 08:58:31 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 50825\r\ncache: HIT\r\nx-cached-since: 2025-02-07T08:58:45+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":745381,"size_decoded":745381,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T08:36:34.154379Z","times_seen":14318473,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/09c57c19d4f24724ef9af0686b86845f.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:51.321Z","timestamp":1738969551321,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/09c57c19d4f24724ef9af0686b86845f.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-088578.top/\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:51 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-25ef09a2b2a012d1a34390c887541404-397cd8c82e60817b-01\r\nlast-modified: Mon, 23 Dec 2024 11:31:03 GMT\r\netag: W/\"20162c0068a1990d739eb07c9725864e\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 16 Jan 2025 11:19:55 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1460\r\ncache: HIT\r\nx-cached-since: 2025-02-07T22:41:31+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3557,"size_decoded":3557,"mime_type":"application/json","magic":"ASCII text, with very long lines (3907), with no line terminators","md5":"e2953e36428a9962227abae0f638f50f","sha1":"08b2cec573c8af3a7ea882dbfa45767c22749359","sha256":"1fba73584351a4187b71ec94508363d6680ef1fb20d04e55bbb4a98ce6a4bcda","sha512":"f5eed5da3b6a2f7a566b8e4db5ca9e62e1daec7ccfa2a892eb971ae0172935dce718f1bfd9080de5a9c97e47e9fc43e4f56d59889299b1badd5f4e002758dad2","ssdeep":"","tlshash":"09812b0bf6e5ce33213b29f599a2ba56a7893fca54e15587389d648d73d2009082bc3d","first_seen":"2024-12-23T15:55:03.915375Z","last_seen":"2025-02-27T03:54:40.936478Z","times_seen":65,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/ca0b35c4fc049f15180d875f935913b8.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.703Z","timestamp":1738969550703,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/ca0b35c4fc049f15180d875f935913b8.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-088578.top/\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-81572cb6a2e1da5422c7943778aadaa0-1579dc4456d16aa4-01\r\nlast-modified: Wed, 20 Nov 2024 09:20:07 GMT\r\netag: W/\"ca7f8dc261bfa0bedbe26c6196957093\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 16 Jan 2025 10:57:42 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1493\r\ncache: HIT\r\nx-cached-since: 2025-02-07T22:40:57+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":9330,"size_decoded":9330,"mime_type":"application/json","magic":"ASCII text, with very long lines (10243), with no line terminators","md5":"dbb3e349af512d58c9bdc0b817a5611b","sha1":"3e2c1be287cf999a8e8e05fee82c97ebe5219f72","sha256":"0e16a00e731a3a1ac2740dccf1334f82f881551b94bb0297b2cba2b7ed0134a4","sha512":"ddad598804e6bc1629bbc37d5bca1a020cfe8fae4d3e9378ae3241ddec7d9da8dd449f5f9455ef9927c4315a931c3f095464345c4baffd3f10bd5f4db33d1519","ssdeep":"96:ltNaDF0Tgceo2XGZnmCCy3uIjfJPJUppg5W:UD2RFSppt","tlshash":"0f226e4bfdd0dd3b122728fa9a667e26a7c93fc758d495923c4d589da362005086fc3c","first_seen":"2024-11-21T20:50:07.252033Z","last_seen":"2025-04-06T20:04:20.697519Z","times_seen":203,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/bf723c7b79b6ce6aa267a76dc3f0a308.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:51.330Z","timestamp":1738969551330,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/bf723c7b79b6ce6aa267a76dc3f0a308.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-088578.top/\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:51 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-a45bfbbd9e4fe8390a3604941df38fe3-4b2381c624f72ead-01\r\nlast-modified: Wed, 15 Jan 2025 12:27:18 GMT\r\netag: W/\"fdf7f1a656ad6df3359d2f2706bc0f1c\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 16 Jan 2025 11:02:51 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1460\r\ncache: HIT\r\nx-cached-since: 2025-02-07T22:41:31+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2040,"size_decoded":2040,"mime_type":"application/json","magic":"ASCII text, with very long lines (2258), with no line terminators","md5":"384c7b75c8400678aba79bac67d057dd","sha1":"8f5bb6aa11a990dc0ead3f007085c61affebeaf0","sha256":"c91c3087976d2e77000749bdc41e75e7199e0d69a9fd15e3bf7a7d57521899b2","sha512":"99e21b9da7091e0f4c0a59ed772dd1fa56ffc86c515b0db88fed2ef4d48dc6fd650ffb88466b77382911383fc4ab6fa96d444a185a1c6976ec571969a355f836","ssdeep":"","tlshash":"e941180fe9919d3a126b1dfb89632b75a7863f8f64e04aa63c4d5c8e63c2105085ac3d","first_seen":"2025-01-20T09:57:56.539519Z","last_seen":"2025-02-19T05:55:52.175118Z","times_seen":48,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/721582dc/desktop/default/DC-d38fa071.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.825Z","timestamp":1738969550825,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/721582dc/desktop/default/DC-d38fa071.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-e0d6975698506433819df1553ce1b88a-8d17743543f42bf7-01\r\nlast-modified: Thu, 06 Feb 2025 09:05:45 GMT\r\netag: W/\"6c6723a5cbee908e7ef5afd23c8d2e6e\"\r\nx-amz-meta-mtime: 1738832744.927569586\r\ncontent-encoding: gzip\r\nexpires: Fri, 07 Feb 2025 09:24:23 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 49267\r\ncache: HIT\r\nx-cached-since: 2025-02-07T09:24:43+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2654,"size_decoded":2654,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2676), with no line terminators","md5":"3529b738cb216445d573e7eb67f2a5e8","sha1":"d44639908e2dfcdeb8c7cd6f6deb18bfb228af8f","sha256":"312b4a4a91c739293ba1cdcff62e80c54b60a4697c2ef2e8664ab88f2b6f6558","sha512":"a70b8acebd2d69915ffa3957c2cb043449b4c7867753ad9de3fa7abcc4fd8f98bf2b2da8023c0683dab89e658fd038724dcc656ae3621eae3e5cf7c5c64f51c2","ssdeep":"","tlshash":"7b51738b76dee02009e0402cbd7256109616b592d40398fcbe7d6fc4ad9580fb13ea35","first_seen":"2025-02-07T05:54:06.201696Z","last_seen":"2025-02-08T04:55:06.242433Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/PKQRX_b5.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:51.374Z","timestamp":1738969551374,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/PKQRX_b5.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 270\r\ntraceparent: 00-07b378a66dd5427d7894f42d18e332b0-479d48ee1a440137-01\r\nlast-modified: Tue, 04 Feb 2025 08:46:45 GMT\r\netag: \"21545c1b5163b1aff8e5b501a8bf0e26\"\r\nx-amz-meta-mtime: 1738658615.908617195\r\nexpires: Wed, 05 Feb 2025 12:32:17 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 37970\r\ncache: HIT\r\nx-cached-since: 2025-02-07T12:33:01+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":270,"size_decoded":270,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"41bfc42b774ef52359e818ad3183126f","sha1":"41df2d45a39f3d54dcf5b3abdbc4d33fdc10c7d4","sha256":"360e0d6beaa6f9f26dbb97f355f16e410809ebe9c7cdc3835ab7b53ed7e6c2a9","sha512":"966b7e527e0fef5a3dcbb70aa3bc7fdc935a1fb166401149e426b803844bfb3eba7005045bbe0c6d0d7634738c5d1d0154763fad447629bd3518ca489e7d688e","ssdeep":"","tlshash":"58d012849a79a2b1161c442d7ae609eb4655b0394a29507c40256761228b132b01f932","first_seen":"2025-01-24T08:48:07.879749Z","last_seen":"2025-02-24T05:54:00.579398Z","times_seen":49,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-088578.top/en/block","fqdn":"1xlite-088578.top","domain":"1xlite-088578.top","tld":"top"},"ip":{"addr":"46.32.182.121","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-02-07T23:05:48.775Z","timestamp":1738969548775,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-088578.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Dec 2024 09:21:57 GMT","end":"Tue, 25 Mar 2025 09:21:56 GMT"},"fingerprint":{"sha1":"3C:76:93:78:DA:B8:BD:F4:14:7C:F0:30:59:1A:02:C7:F8:0E:09:C4","sha256":"6C:F3:2B:9F:DD:97:EA:A7:5C:EA:BB:31:BB:94:1A:C4:E1:76:0C:EA:48:25:6D:30:DB:9E:99:66:F8:4F:AF:3C"}}},"request":{"raw":"GET /en/block HTTP/1.1\r\nHost: 1xlite-088578.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2473637m_21103c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2473637m_21103c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder; postback_watcher=; auid=LiC2eWemkcyuA23hAzZmAg==\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 203 Non Authoritative\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 248296\r\naccept-ranges: none\r\nlink: \u003chttps://v3.traincdn.com/sys-ui/2.3.66/Desktop/Default/client.css\u003e; rel=preload; as=style; crossorigin=anonymous\r\nserver-timing: dt_total;dur=0.002, total;dur=47;desc=\"Nuxt Server Time\"\r\nset-cookie: lng=en; Path=/\ncookies_agree_type=3; Path=/\ntzo=1; Path=/\nis12h=0; Path=/\r\nx-dt: 285\r\nx-frame-options: SAMEORIGIN\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"203","status_text":"Non Authoritative","fingerprints":null,"data":{"size":248296,"size_decoded":248296,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T08:36:34.154379Z","times_seen":14318473,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":146,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-07","alert":"Sinkholed","trigger":"1xlite-088578.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/721582dc/desktop/default/runtime-a73cbf9d.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.157Z","timestamp":1738969550157,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/721582dc/desktop/default/runtime-a73cbf9d.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-7f4f1d03c1277d6e4ead62160c63de6c-3e32fc2dd7d2d529-01\r\nlast-modified: Thu, 06 Feb 2025 09:05:46 GMT\r\netag: W/\"a1b20b9de0edef9c904992455ab22b59\"\r\nx-amz-meta-mtime: 1738832744.947569765\r\ncontent-encoding: gzip\r\nexpires: Fri, 07 Feb 2025 09:24:18 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 49268\r\ncache: HIT\r\nx-cached-since: 2025-02-07T09:24:42+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23632,"size_decoded":23632,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (23632), with no line terminators","md5":"a1b20b9de0edef9c904992455ab22b59","sha1":"3ed8d928f2d506680599b0be3e3adf22fba62eb5","sha256":"5cb8e70c2f5079909bcf6869d632c33a860e3939d677401cc0f918a8c2615495","sha512":"371e352b6baedc93a20b6e911ba3e1d3cc67422197164ad56fc6c2146e12021ddc0558e004f02938dcb3938464b9410c56e95d134fdf01c2ef66e886d9474a24","ssdeep":"384:z48lYLZVnAFIT96pzhBsxprlYLZVnAFIT96pE7q4qNCVdnB8x70TqrhbrTc4:TanAFw8hBsxpranAFwm4qNyB6wA3c4","tlshash":"d9b22c4e4f2fc8eb5e67cc877c103c26956911731c1707aca5fed6294404aac66afe2b","first_seen":"2025-02-07T05:54:06.183705Z","last_seen":"2025-02-08T06:05:52.633044Z","times_seen":11,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/entry-DsGuPC-W.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.866Z","timestamp":1738969550866,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/entry-DsGuPC-W.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-b6ee69082c3b87c350925531a093b9a3-04bf4ccdf2a80ace-01\r\nlast-modified: Tue, 04 Feb 2025 08:46:45 GMT\r\netag: W/\"ede42f17f414cecfd3b63cefb914bc76\"\r\nx-amz-meta-mtime: 1738658615.905617089\r\ncontent-encoding: gzip\r\nexpires: Wed, 05 Feb 2025 08:58:14 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.003\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 50825\r\ncache: HIT\r\nx-cached-since: 2025-02-07T08:58:45+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":57921,"size_decoded":57921,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (11946)","md5":"ede42f17f414cecfd3b63cefb914bc76","sha1":"d7486ef95ae7767006bb786f347b5dbc619bcd7c","sha256":"898aa9453d7f857b658bb4163099046a6b4d9ae87471a6fd22c5edbc00ea4c96","sha512":"cbacaeacd7ea8bc432eaf890afe30ec47bbffc4833cede81fa320941112b8d4f4a1756d32a6276b8787a0fcb1d86ea8815f80a645143519770073131a85813a1","ssdeep":"1536:0WgINwJg19WFLH4abo+Wzwgn2mn0fbyerM:jXN+g1+LYabohnuXM","tlshash":"a7436c70f4d9e13fb97602dce1771a406298ea22a21ed0f9e12c2e741787553c5b3bb6","first_seen":"2025-02-03T12:33:38.858439Z","last_seen":"2025-02-24T05:54:00.580173Z","times_seen":30,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/1b971b84fe10ebd62b918973bbbce120.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:51.324Z","timestamp":1738969551324,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/1b971b84fe10ebd62b918973bbbce120.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-088578.top/\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:51 GMT\r\ncontent-type: application/json\r\ncontent-length: 406\r\ntraceparent: 00-615418520287d5129c352951993bef76-66780a05403585f2-01\r\nlast-modified: Wed, 05 Jun 2024 07:44:12 GMT\r\netag: \"39fde6a5275961cbbab7d73f1235f56e\"\r\nexpires: Thu, 16 Jan 2025 11:19:55 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1460\r\ncache: HIT\r\nx-cached-since: 2025-02-07T22:41:31+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":406,"size_decoded":406,"mime_type":"application/json","magic":"ASCII text, with very long lines (448), with no line terminators","md5":"b03e27529cf4744deb0b02c09afaaadb","sha1":"c978f024470dc7c8d7d5d13a2d52ecf8fad291da","sha256":"eb793dab621b90af9cbe649e359928fe5d9517390e9d20c66d9be5f7e0305e12","sha512":"1a6f24f7e7d45f4fba424cf16c63a2ba484d1287d6cf726192f3e1974963aa55a83eae8b38101b224e4eaad134737f8c33df560b3213ff9480c94f92065af9dc","ssdeep":"","tlshash":"f8f0ab0bfd848d36023718fe4962b654a3863fc620e048c33e0e604d33820041c1fc3e","first_seen":"2024-07-03T09:59:31Z","last_seen":"2025-02-26T22:19:53.956069Z","times_seen":152,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/77d274ae92641bcba2aa23003b9148b0.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.696Z","timestamp":1738969550696,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/77d274ae92641bcba2aa23003b9148b0.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-088578.top/\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: application/json\r\ncontent-length: 673\r\ntraceparent: 00-81ee34b738d30168b20fd9f7ba0b00f5-af6d77c4cb2b37df-01\r\nlast-modified: Sat, 18 May 2024 04:20:46 GMT\r\netag: \"fb89b3f86b1e1fb8bcf38c14cac3ede6\"\r\nexpires: Thu, 16 Jan 2025 11:01:41 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1493\r\ncache: HIT\r\nx-cached-since: 2025-02-07T22:40:57+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":673,"size_decoded":673,"mime_type":"application/json","magic":"ASCII text, with very long lines (742), with no line terminators","md5":"4f36fc2394373a8f7291def9ef9cb3e0","sha1":"f2d7ea9dc4cb72d6b1b2a3244dc0e871e3c05b3e","sha256":"5bafa1953fc1ee54ce026314713b4862221e183c50c58b62541e3d49014fbea4","sha512":"9d3655d92d2243b93596719431681ab0972fcf69abf5366f52d4e5b747927ef9c13a2c05173c8569888cafbd2b9cae04fbfa30d418695962165a9fa166e34eb6","ssdeep":"","tlshash":"5d01760becd0ce3b1b770cf786221a6167c83bc650f08e863c9f288d9391549081e87e","first_seen":"2025-01-01T12:35:44.359524Z","last_seen":"2025-02-26T22:19:53.95512Z","times_seen":15,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/cca369af6198d7764a276e816ecf67dd.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:51.314Z","timestamp":1738969551314,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/cca369af6198d7764a276e816ecf67dd.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-088578.top/\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:51 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-ab4d7609ef9be9e56032ef65793a3d53-8b9b2f37ffc54db8-01\r\nlast-modified: Thu, 10 Oct 2024 12:42:28 GMT\r\netag: W/\"6a4635ef54a2476b6606f4b98ba743d0\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 16 Jan 2025 11:19:55 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1460\r\ncache: HIT\r\nx-cached-since: 2025-02-07T22:41:31+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12519,"size_decoded":12519,"mime_type":"application/json","magic":"JSON text data","md5":"6a4635ef54a2476b6606f4b98ba743d0","sha1":"d41e0cbe241494ff70cfc50c8e398902b6f161c1","sha256":"2a5fc3f71a70d1af1966f031dfd607226dbfc4a2f8edac1e602dd30655549fc3","sha512":"a9bca2ee31c5292d17394c0a0447fa8e5e8cb7c4ebb16dd06466e5c15712c0565d2597d5c4ddf9892cc1730a09834a2ae80de8fe790173de37849f250bfdae25","ssdeep":"96:xzuCaZt3rgNz6Ag/q/1mymUnfMoUHJSwDw9TkTCKx5x:xzDztLmymUn/UHcw2Kx5x","tlshash":"c642db85fbe02d33103f50ad85b2b64da3881f476c4b7c15bead2b8d2b94616046ed7e","first_seen":"2024-10-13T10:47:41.733717Z","last_seen":"2025-03-11T11:40:37.654222Z","times_seen":129,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.168","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:06:00.926Z","timestamp":1738969560926,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jan 2025 08:36:04 GMT","end":"Mon, 14 Apr 2025 08:36:03 GMT"},"fingerprint":{"sha1":"18:BB:CC:69:33:72:62:2E:E5:B6:28:51:17:5B:BD:CE:CD:85:8D:B3","sha256":"AB:DB:01:47:B2:F7:31:7D:CE:18:42:50:CB:EF:16:B4:E6:B5:8F:B7:7D:FF:32:8B:CE:96:99:13:CE:93:5C:37"}}},"request":{"raw":"GET /gtag/js?id=G-7JGWL9SV66 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 07 Feb 2025 23:06:01 GMT\r\nexpires: Fri, 07 Feb 2025 23:06:01 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1003:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1003:0\r\nreport-to: {\"group\":\"ascgcycc:1003:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1003:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 141298\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":444644,"size_decoded":444644,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T08:36:34.154379Z","times_seen":14318473,"resource_available":true,"data":null}},"time_used":188,"timings":{"blocked":63,"dns":0,"connect":8,"send":0,"wait":27,"receive":28,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-088578.top/hd-api/external/0194e2a9-aff4-7ccc-87f8-21e2db424a4a.js","fqdn":"1xlite-088578.top","domain":"1xlite-088578.top","tld":"top"},"ip":{"addr":"46.32.182.121","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:59.032Z","timestamp":1738969559032,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-088578.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Dec 2024 09:21:57 GMT","end":"Tue, 25 Mar 2025 09:21:56 GMT"},"fingerprint":{"sha1":"3C:76:93:78:DA:B8:BD:F4:14:7C:F0:30:59:1A:02:C7:F8:0E:09:C4","sha256":"6C:F3:2B:9F:DD:97:EA:A7:5C:EA:BB:31:BB:94:1A:C4:E1:76:0C:EA:48:25:6D:30:DB:9E:99:66:F8:4F:AF:3C"}}},"request":{"raw":"GET /hd-api/external/0194e2a9-aff4-7ccc-87f8-21e2db424a4a.js HTTP/1.1\r\nHost: 1xlite-088578.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-088578.top/en/block\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2473637m_21103c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2473637m_21103c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder; auid=LiC2eWemkcyuA23hAzZmAg==; window_width=1280; che_g=7e4b80d9-1856-bb1d-f545-cc5653a8d4a4; SESSION=bd3702e24c3b0dc7e264acc75913ec8b\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:59 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: private, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-dt: 285\r\nx-hd-trace-id: 6fb0c764-d7af-4671-91f5-c68b14761181\r\nx-request-guid: 569df7ab1863072d1be1baf8b9b5d6fa\r\nx-time-ng: 0.003\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.026, wf-uht;dur=0.022\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":330866,"size_decoded":330866,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T08:36:34.154379Z","times_seen":14318473,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":111,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-07","alert":"Sinkholed","trigger":"1xlite-088578.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/721582dc/desktop/default/css/7fe5f71b.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.594Z","timestamp":1738969550594,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/721582dc/desktop/default/css/7fe5f71b.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-17351c9e524030e9f93035e421fa172a-feac48eaa12c8626-01\r\nlast-modified: Thu, 06 Feb 2025 09:05:46 GMT\r\netag: W/\"c610b8710368de3bf2f1c5bb581b6a3a\"\r\nx-amz-meta-mtime: 1738832744.939569694\r\ncontent-encoding: gzip\r\nexpires: Fri, 07 Feb 2025 09:24:21 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 49267\r\ncache: HIT\r\nx-cached-since: 2025-02-07T09:24:43+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3313,"size_decoded":3313,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3315), with no line terminators","md5":"a094ae2a980f9c9b48cfc132e74ab16c","sha1":"61b5d23a03be10876ee135cc656e300653dffcb9","sha256":"8539c401214dafe1264f86e601c2ba0e06d5b6d23b21d7dd343f28c3e6e738b4","sha512":"044d9e06e34f59b70dc48e69099fecdb3a6581393e85d775f2562d5ec8fb8bd5604c5302febc75fe34831cd489b90a84e8b87c67bd08e0e5d65ea989dd4cb627","ssdeep":"","tlshash":"5361c23e9cbc24359e7f472b7053ce84e199a39092030f8afdba755a4c4b21d3895176","first_seen":"2024-05-28T10:15:10Z","last_seen":"2025-04-06T20:04:20.735468Z","times_seen":746,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_block_pages/en/dictionary_2579b0e62e11dfdc9944af80a7135015.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:51.219Z","timestamp":1738969551219,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_block_pages/en/dictionary_2579b0e62e11dfdc9944af80a7135015.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-088578.top/\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:51 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-6553e3b50dd5b9b5e9a5a04f94f5f0cd-2e739628f0de35eb-01\r\nlast-modified: Fri, 15 Nov 2024 09:45:51 GMT\r\netag: W/\"69ebea31f035c654ca3d565d6a96540e\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Thu, 16 Jan 2025 10:55:29 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 67\r\ncache: HIT\r\nx-cached-since: 2025-02-07T23:04:44+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1994,"size_decoded":1994,"mime_type":"application/json; charset=utf-8","magic":"troff or preprocessor input, Unicode text, UTF-8 text, with very long lines (1936), with no line terminators","md5":"13b45504cd2db723587e3ad82415e90f","sha1":"d51b7113752503b3d4168441ca7f65d10b625f9d","sha256":"b1f5ce09501377501da98c79869d2d2d0ee05e296cf770eee6f93d479739f3c6","sha512":"6b3fdece8dc3742a8ad112affa2a1ae222c2eb5bc09fc9abdb0aa056f5b5538a7b03d08ed7ef2cc2a2ea96dc3ead9f20943b6b034b753d269396803f7a871247","ssdeep":"","tlshash":"0841621b72bce1e6741444453e7d2d673a16406cafe1619afa88c85d332f4f681b750e","first_seen":"2024-12-09T13:17:10.160479Z","last_seen":"2025-04-06T20:04:20.736978Z","times_seen":260,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/eJ335cjD.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:51.372Z","timestamp":1738969551372,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/eJ335cjD.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-3462645aeaadfdd88ff529cccc6b1c0d-7e2c9c77f8945200-01\r\nlast-modified: Tue, 04 Feb 2025 08:46:45 GMT\r\netag: W/\"f416882d2c236b1c411a5d7d82f2b09d\"\r\nx-amz-meta-mtime: 1738658615.905617089\r\ncontent-encoding: gzip\r\nexpires: Thu, 06 Feb 2025 08:57:06 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 50825\r\ncache: HIT\r\nx-cached-since: 2025-02-07T08:58:46+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5515,"size_decoded":5515,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5650), with no line terminators","md5":"a3e008ea1a3e9751bf6585e7900879b7","sha1":"414e8103abbac5c4c606f7769f3c551fa75ed471","sha256":"f027bbbe87710ee02cee0718f86088d67a23f933624d69865461ef7aa1d18052","sha512":"226722708d76b2960c5e107b233e8d946f07bb163215d8b522548067bb2eeeb72dc314df5dfacd901077c6c394ec96fa22dae81e131a8f2f3a6050798493d565","ssdeep":"96:Pj157uG6FdvdLdwY6Sa9M9J/YFH4/cOzgFf0baIyIzJN:Pjj7uG6FFdLd29M9tYFHYAsWvq","tlshash":"66c1b7a4bdb4f87050d64e86e4279862f75c0d4f66fdf8f8f68cde9921060b552a230b","first_seen":"2025-02-03T12:33:38.807742Z","last_seen":"2025-02-24T05:54:00.566869Z","times_seen":27,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_3c142d6ca7a9625f4c906edd73158ac7.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.628Z","timestamp":1738969550628,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_3c142d6ca7a9625f4c906edd73158ac7.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-088578.top/\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-7c0dc5a63d8d60d41156dc67c9a8452c-be7d4d054262284d-01\r\nlast-modified: Fri, 07 Feb 2025 18:05:39 GMT\r\netag: W/\"36775a1fa7ffd702207c7e87c72c5620\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Fri, 07 Feb 2025 19:20:45 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2555\r\ncache: HIT\r\nx-cached-since: 2025-02-07T22:23:15+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":128280,"size_decoded":128280,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T08:36:34.154379Z","times_seen":14318473,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/COcksqSu.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:51.364Z","timestamp":1738969551364,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/COcksqSu.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-baf7a35109e3f1512e32351bf108b17b-d9f99b4c696a5386-01\r\nlast-modified: Tue, 04 Feb 2025 08:46:45 GMT\r\netag: W/\"9cf07f82e0163c20981a2d5f31e8cb4f\"\r\nx-amz-meta-mtime: 1738658615.907617159\r\ncontent-encoding: gzip\r\nexpires: Thu, 06 Feb 2025 08:58:22 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 50825\r\ncache: HIT\r\nx-cached-since: 2025-02-07T08:58:46+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4745,"size_decoded":4745,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (4870), with no line terminators","md5":"2e4d30cdaae298aaa163ac80c1f5f6fe","sha1":"a33c10d3eca841b31960ac5072275247c1f543f3","sha256":"21bf6adf50b3c909e88abf1c2a9fe8f1f9806c69c18bae3e4114daaf736446bb","sha512":"d26f6df7be2170ffd569d93094c8e82007ba95ea5622432e70efb3d1d4e3976ad04831a08508441bd32fa6a57a5a1b1adba0fd36702dee3989d7b3120bf85b55","ssdeep":"96:PuAp4FG/QcHLjJago5zmEFlItHmhR4v4U/M3imR3:PuAp4FGRrjLoZlItGji0imR3","tlshash":"7da1c8f6bcace0f7b052401e9833a840fb854f1e561874f4e2edccac539a064925a667","first_seen":"2025-02-03T18:04:04.780465Z","last_seen":"2025-02-11T04:07:41.255869Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-088578.top/hd-api/external/verify","fqdn":"1xlite-088578.top","domain":"1xlite-088578.top","tld":"top"},"ip":{"addr":"46.32.182.121","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:06:00.166Z","timestamp":1738969560166,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-088578.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Dec 2024 09:21:57 GMT","end":"Tue, 25 Mar 2025 09:21:56 GMT"},"fingerprint":{"sha1":"3C:76:93:78:DA:B8:BD:F4:14:7C:F0:30:59:1A:02:C7:F8:0E:09:C4","sha256":"6C:F3:2B:9F:DD:97:EA:A7:5C:EA:BB:31:BB:94:1A:C4:E1:76:0C:EA:48:25:6D:30:DB:9E:99:66:F8:4F:AF:3C"}}},"request":{"raw":"POST /hd-api/external/verify HTTP/1.1\r\nHost: 1xlite-088578.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-088578.top/en/block\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 74313\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2473637m_21103c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2473637m_21103c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder; auid=LiC2eWemkcyuA23hAzZmAg==; window_width=1280; che_g=7e4b80d9-1856-bb1d-f545-cc5653a8d4a4; SESSION=bd3702e24c3b0dc7e264acc75913ec8b\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:06:00 GMT\r\ncontent-type: application/json\r\ncontent-length: 513\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-dt: 285\r\nx-request-guid: f28a93e3cc8c586d4c56743b41b8566a\r\nx-time-ng: 0.005\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.011, wf-uht;dur=0.033\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":609,"size_decoded":609,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with very long lines (615), with no line terminators","md5":"5f854117efc5bc48ca059477202c66ce","sha1":"2fd2d97cbbc32882ae10e001a49850b413825c20","sha256":"61c62d4373e4db88c2168f2f3617ad9998caabc12099bba690016c0c70456314","sha512":"ffd1381bc4ff8ba25c9712ab4abc8fbba8e4be8cdb97ae8d5c4cfb96e0d3278d991045d18b2bf06477dad1dc12e8a82911cd6b864a477340a3d8555a051b7fbe","ssdeep":"","tlshash":"2ef0620a06819dcca290fd40c35c15fc90e97a902228312a09e084b6ecb8376cc35698","first_seen":"2025-02-07T23:06:27.884188Z","last_seen":"2025-02-07T23:06:27.884188Z","times_seen":1,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":0,"dns":0,"connect":0,"send":33,"wait":102,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-07","alert":"Sinkholed","trigger":"1xlite-088578.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/721582dc/desktop/default/Betting.Core-3f55577d.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.831Z","timestamp":1738969550831,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/721582dc/desktop/default/Betting.Core-3f55577d.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-344202222062c6a427b1f3b06e9c3574-8a9a6f359b3977e2-01\r\nlast-modified: Thu, 06 Feb 2025 09:05:45 GMT\r\netag: W/\"1d5114f1fdf2fc5b3f096ede447436e7\"\r\nx-amz-meta-mtime: 1738832744.927569586\r\ncontent-encoding: gzip\r\nexpires: Fri, 07 Feb 2025 09:24:23 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 49267\r\ncache: HIT\r\nx-cached-since: 2025-02-07T09:24:43+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2091,"size_decoded":2091,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2132), with no line terminators","md5":"3f9f18e186a4c6895cdc1de1d6ceb14d","sha1":"3552dac68db015bb2b6a8f868d67d95aad53ed1e","sha256":"24bc4f97492f68c3606f50e724c50c1706d249fb5ca0aae775b1e079b69df353","sha512":"cfe01f878106f19e8765a680700d22bf3108cf935f2416c145430b61d52181dc2ae7d3158be0309a920e5f5c047e762f4f612177146aa20da3188c61eb395933","ssdeep":"","tlshash":"7941bb893ae2f444933e18c681f74de5f0e91eb1380d02fca641f9d471359b2c1d6e46","first_seen":"2025-02-07T05:54:50.922949Z","last_seen":"2025-02-08T06:05:52.609123Z","times_seen":8,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-088578.top/hd-api/external/apps/c5e31d5915661de4393e3f1489b00ebc4497dd48/api.js","fqdn":"1xlite-088578.top","domain":"1xlite-088578.top","tld":"top"},"ip":{"addr":"46.32.182.121","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:58.938Z","timestamp":1738969558938,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-088578.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Dec 2024 09:21:57 GMT","end":"Tue, 25 Mar 2025 09:21:56 GMT"},"fingerprint":{"sha1":"3C:76:93:78:DA:B8:BD:F4:14:7C:F0:30:59:1A:02:C7:F8:0E:09:C4","sha256":"6C:F3:2B:9F:DD:97:EA:A7:5C:EA:BB:31:BB:94:1A:C4:E1:76:0C:EA:48:25:6D:30:DB:9E:99:66:F8:4F:AF:3C"}}},"request":{"raw":"GET /hd-api/external/apps/c5e31d5915661de4393e3f1489b00ebc4497dd48/api.js HTTP/1.1\r\nHost: 1xlite-088578.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/en/block\r\nCookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2473637m_21103c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2473637m_21103c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder; auid=LiC2eWemkcyuA23hAzZmAg==; window_width=1280; che_g=7e4b80d9-1856-bb1d-f545-cc5653a8d4a4; SESSION=bd3702e24c3b0dc7e264acc75913ec8b\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:58 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 440\r\ncache-control: public, max-age=300\r\ncontent-encoding: gzip\r\netag: 58ae5e05847db466a6baebf42d8b8dc7\r\nvary: Accept-Encoding\r\nx-dt: 455\r\nx-request-guid: 496994ece82dab7e6bdcbeeb5fe30fa5\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.009, wf-uht;dur=\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":694,"size_decoded":694,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (717), with no line terminators","md5":"31f3730e189d3249574ac16445776a13","sha1":"78dd2845268470f34ed8bc6d67ca7ca26c19ee65","sha256":"5089000e6a778ea376d1ddd71c4767bc00d335ab1e3c8bf56523181301666345","sha512":"d83d5e6f4aa9de4a8a489608018026066acb0ec80b8b6481f9988b77728f34e014f2452566cd99541a938c4396e123ccf757fd7de05c69daff881c7e139c94e1","ssdeep":"","tlshash":"0c01dc1d2cccb0153b292ec212b7cefdf100283a390ac8d9929ed4722a0abe50526e5c","first_seen":"2025-02-01T23:16:20.341509Z","last_seen":"2025-02-19T05:42:41.609786Z","times_seen":11,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-07","alert":"Sinkholed","trigger":"1xlite-088578.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_css_66b724.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:49.528Z","timestamp":1738969549528,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_css_66b724.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:49 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-7be66eccbf2c86dd91657f0591148041-f95e75a0a96d11de-01\r\nlast-modified: Thu, 06 Feb 2025 12:55:13 GMT\r\netag: W/\"d90507ea03abafcb832dd6540a994a26\"\r\nx-amz-meta-mtime: 1738846390.30660466\r\ncontent-encoding: gzip\r\nexpires: Sat, 08 Feb 2025 08:58:05 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 50827\r\ncache: HIT\r\nx-cached-since: 2025-02-07T08:58:42+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5952,"size_decoded":5952,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (5954), with no line terminators","md5":"5232acca0ec5548d41b1573882c6110a","sha1":"2629e73833795355dcf089437d2b46f4e0c35b60","sha256":"1c60a0f508ca844e42df032d5fe75fffa98ca457a62b530cff02b54e794345c4","sha512":"71d6d122894b107f82c6cd5a647c1e2f9e6ad6db7af373fb37b7a9b5742d1498130609af77471346e29f82595d02a8319a784703ce77049cb62211734b879f0f","ssdeep":"96:KGZYJXjn9tzJXjn9l7WFlujZv+DKGMY9QFKafe:KgM79td79l7Wfcv+DPzKFKafe","tlshash":"dfc1af1ee8b8d6b50d2bf811438c9e3d1270f85eed258c5fe25d472635c2ba245b48ba","first_seen":"2025-02-03T12:33:38.804496Z","last_seen":"2025-02-24T05:54:00.566214Z","times_seen":20,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":164,"dns":88,"connect":2,"send":0,"wait":2,"receive":0,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_coupon/en/dictionary_9514726ab1e70b389311f9cca2350b8c.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.630Z","timestamp":1738969550630,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_coupon/en/dictionary_9514726ab1e70b389311f9cca2350b8c.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-088578.top/\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-3905852bf522ee44c5ec0dfac7ad0792-be76c4099511fb9d-01\r\nlast-modified: Tue, 14 Jan 2025 18:06:00 GMT\r\netag: W/\"87e0b0fb7cdcc6570063fa443b80d36d\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Thu, 16 Jan 2025 10:05:19 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 3349\r\ncache: HIT\r\nx-cached-since: 2025-02-07T22:10:01+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24432,"size_decoded":24432,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T08:36:34.154379Z","times_seen":14318473,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_libphonenumber_js_62MR2OUM.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.907Z","timestamp":1738969550907,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_libphonenumber_js_62MR2OUM.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-78200ce821fc7f847cb30d20af71d97c-104294ff32d6f232-01\r\nlast-modified: Fri, 07 Feb 2025 07:58:53 GMT\r\netag: W/\"382948808b1330a7a717d99dfd278acb\"\r\nx-amz-meta-mtime: 1738914958.505478751\r\ncontent-encoding: gzip\r\nexpires: Sat, 08 Feb 2025 09:57:24 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 47306\r\ncache: HIT\r\nx-cached-since: 2025-02-07T09:57:24+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":158815,"size_decoded":158815,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T08:36:34.154379Z","times_seen":14318473,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@400;500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:59.208Z","timestamp":1738969559208,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jan 2025 08:37:08 GMT","end":"Mon, 14 Apr 2025 08:37:07 GMT"},"fingerprint":{"sha1":"91:3E:F9:90:4B:40:4C:8E:D9:11:EA:64:14:86:3D:AD:DB:41:93:5C","sha256":"5B:FE:D1:BB:DA:41:0B:CB:DE:2B:77:4F:BF:20:D7:AB:C5:22:8A:DB:95:91:21:B5:86:53:45:B7:AB:68:EE:85"}}},"request":{"raw":"GET /css2?family=Roboto:wght@400;500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 07 Feb 2025 23:05:59 GMT\r\ndate: Fri, 07 Feb 2025 23:05:59 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11170,"size_decoded":11170,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"1a1ae91e1fe0b01f9dea764f21874075","sha1":"a1006eefc9aba5cf2ae3e114ff48c37204a32716","sha256":"ada3b7203d295e55b36578f106d50dd90663ac67ffae11e1c7491a0287b853d9","sha512":"155f19b3e126d06bfa8c2c74275ec973fb02a9c56acd8b97ff89a197b9b38c999a8b1ebca9d66696d6b0450a8c9b5cf0ffefacdf38a82919191efe176250450d","ssdeep":"192:2NMtfmNMtfNMt4NMtfkNMt/qbNMtDbqGIwV4BNMtnNMtuwNMtkNMtfNNMtgNMtXq:8CfMC1CWC6CyhC/qY4XCNCtCiCfDCOCa","tlshash":"d0321fa1041740009b835ce223cebf34fe1f92117141d0b5abfd9b6badcbda652693ad","first_seen":"2025-01-08T23:56:24.173349Z","last_seen":"2025-11-24T07:11:56.527004Z","times_seen":478,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":125,"dns":1,"connect":20,"send":0,"wait":34,"receive":0,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/721582dc/desktop/default/vendors/app-712fa03d.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.164Z","timestamp":1738969550164,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/721582dc/desktop/default/vendors/app-712fa03d.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-cef31b4d87afe6e9d453308212ecd700-901451eb683afa12-01\r\nlast-modified: Thu, 06 Feb 2025 09:05:46 GMT\r\netag: W/\"e11a90bc7c662ce4ce6fa14ef9afd83c\"\r\nx-amz-meta-mtime: 1738832744.947569765\r\ncontent-encoding: gzip\r\nexpires: Fri, 07 Feb 2025 09:24:18 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.003\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 49268\r\ncache: HIT\r\nx-cached-since: 2025-02-07T09:24:42+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":934257,"size_decoded":934257,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T08:36:34.154379Z","times_seen":14318473,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/721582dc/desktop/default/vendors/plugins.vue-notification-a67b7803.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.588Z","timestamp":1738969550588,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/721582dc/desktop/default/vendors/plugins.vue-notification-a67b7803.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-31272f2df77ffe8ba16337e5219acd89-ea6333942361e13e-01\r\nlast-modified: Thu, 06 Feb 2025 09:05:46 GMT\r\netag: W/\"7e6529effb382d60644c0d3c3b8cf4f7\"\r\nx-amz-meta-mtime: 1738832744.951569801\r\ncontent-encoding: gzip\r\nexpires: Fri, 07 Feb 2025 09:24:21 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 49267\r\ncache: HIT\r\nx-cached-since: 2025-02-07T09:24:43+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12563,"size_decoded":12563,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12563), with no line terminators","md5":"7e6529effb382d60644c0d3c3b8cf4f7","sha1":"b8b8e5ad18beb7c1f884536ddf4b04d02b00b703","sha256":"7772718940086473cb10dffc55df8424bbadc64be96e2dae9e49cbf00e065df8","sha512":"a7876bbb433eaee356be19892ca85dfa88e30d3456bb0c07e5f1d48b58a4f63a767e3562f7eb5022a3706d9070a2bed39fcc244f193026021263073b1d19b6ce","ssdeep":"192:NU1hQXHv3CbfKpqEVwhSIkrReP+SdHtfGA2D3ow5EE9bJ52bFZLy2mp4ilVW:Nn3CmpcDkAP+S/fGAWf5VbWbLy2mmijW","tlshash":"c74296ceb2c2b4650be760b6402f110af136a96869ab54d4f3b1d4f2adb564c413bf3d","first_seen":"2025-02-07T05:54:06.184545Z","last_seen":"2025-02-08T06:05:52.651142Z","times_seen":11,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_localforage_KSHPPCVF.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:51.097Z","timestamp":1738969551097,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_localforage_KSHPPCVF.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-32ecb0555553c2a5e32616ac8068fe1a-e3e4c954631b8d5c-01\r\nlast-modified: Fri, 07 Feb 2025 07:58:53 GMT\r\netag: W/\"d750d8afadf936c37b83cbcafdbba18d\"\r\nx-amz-meta-mtime: 1738914957.348437392\r\ncontent-encoding: gzip\r\nexpires: Sat, 08 Feb 2025 09:57:24 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 47307\r\ncache: HIT\r\nx-cached-since: 2025-02-07T09:57:24+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30277,"size_decoded":30277,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (30255)","md5":"d750d8afadf936c37b83cbcafdbba18d","sha1":"ec95777b14c5537b0d2576363f7591cee73a9655","sha256":"f7a95c0ed0b017063d1bba414ee5097f7824d34a39c33db9f289919ee47c4f12","sha512":"4e3d2ad503f8eb57140326335cb64d84be2a215ded4dec3046d5ab46ca0354360064e0c0b6a358c0d50f6d5af0e523802ab73fb487d1cc267b92b8b3a53babfa","ssdeep":"768:DDKAOpvMewHFuM96WwZACjzz46zSTKsBE1OvFXfX1UXk:Dm8uPW43zEIOvdlUU","tlshash":"41d2b68c7799f02683bb3070907f580ef237a912594d90a0e591e5f86dbd75c822bfad","first_seen":"2024-12-07T20:25:30.588667Z","last_seen":"2025-04-01T10:53:16.904275Z","times_seen":350,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:59.516Z","timestamp":1738969559516,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jan 2025 08:37:07 GMT","end":"Mon, 14 Apr 2025 08:37:06 GMT"},"fingerprint":{"sha1":"62:57:FE:D4:36:DB:03:15:19:B1:2C:50:42:64:6E:D7:C2:32:4F:B6","sha256":"F8:9C:C0:1F:4E:1B:CD:EE:4D:3C:9C:8B:76:34:D7:01:22:15:ED:66:6A:5E:0C:AB:7D:69:25:CC:B1:62:DC:7D"}}},"request":{"raw":"GET /s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 06 Feb 2025 10:03:46 GMT\r\nexpires: Fri, 06 Feb 2026 10:03:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 133333\r\nlast-modified: Wed, 08 Jan 2025 18:23:10 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":40128,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-04-28T08:35:15.6188Z","times_seen":768504,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":109,"dns":7,"connect":21,"send":0,"wait":23,"receive":26,"ssl":73},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_popper_js_5I5UQEBA.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:51.103Z","timestamp":1738969551103,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_popper_js_5I5UQEBA.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-1ee469deb92a276b7ba9d9722073eea2-fab1efcc133bd3df-01\r\nlast-modified: Fri, 07 Feb 2025 07:58:53 GMT\r\netag: W/\"6cb09f9375675899743ac6e31bcf0b0d\"\r\nx-amz-meta-mtime: 1738914958.505478751\r\ncontent-encoding: gzip\r\nexpires: Sat, 08 Feb 2025 10:07:59 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 46672\r\ncache: HIT\r\nx-cached-since: 2025-02-07T10:07:59+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21252,"size_decoded":21252,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21232)","md5":"6cb09f9375675899743ac6e31bcf0b0d","sha1":"01383c415481291b1d4eeedff5a394215d84ecee","sha256":"b17f976b26b989ff50713207d307701334974c9c1e3b491f629adf197bc879ce","sha512":"0885ba49ed5638b856c2d86f6ec9643b70a00a55dbf3314c4b1bca24269ef1bab439ba3a36a83493546e8489d9d31cfc1721030674ba427cd7cf822da726a59d","ssdeep":"384:eP7iayBuR9vu3z1JXvykd2+LaqHdC6RjVnTGm/7piCXmH8kCCcvJTCyCu+meAxiZ:yiZwO3XvO+NMSJt3XmckXcv4nxJAxiH5","tlshash":"2192a28c7684b0a287a7a2a7a07f860f71376865650e9004f59cf6ec3c35dba507bc7d","first_seen":"2024-12-07T20:25:30.523697Z","last_seen":"2025-04-01T10:53:16.835428Z","times_seen":349,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/1c0cd0740fccd19a9816be06e69f0a1b.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:51.316Z","timestamp":1738969551316,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/1c0cd0740fccd19a9816be06e69f0a1b.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-088578.top/\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:51 GMT\r\ncontent-type: application/json\r\ncontent-length: 473\r\ntraceparent: 00-56ac4679c6ba784cf89cb957a3a37658-bbe6b5deb392fc6b-01\r\nlast-modified: Thu, 16 May 2024 20:41:30 GMT\r\netag: \"e67aa19ef00fd2285c7b4ecbb6018306\"\r\nexpires: Thu, 16 Jan 2025 11:19:55 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1460\r\ncache: HIT\r\nx-cached-since: 2025-02-07T22:41:31+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":473,"size_decoded":473,"mime_type":"application/json","magic":"ASCII text, with very long lines (522), with no line terminators","md5":"f3440f6f4afdcd28fb77909da59d385d","sha1":"a2d60764b1ba4ab5a19d7f5ce9e48a1df55197ea","sha256":"27c629a48bf70e54e36e8a1a500e562335783afca1dcbff87a7afbac73f04b60","sha512":"5e9f3045994c9861360e35455eb7e9d1299e345167cf0dfba6d215b3c5545430db3a6335a123226be80947f3c721e0d7ab82cae571d075da3606ab30ca95cad0","ssdeep":"","tlshash":"c4f05907fad08d36217714fd8e62bb14a7c53f8a18e09596384d558d3382659199ec3d","first_seen":"2023-12-19T13:23:45Z","last_seen":"2025-04-06T19:05:17.083406Z","times_seen":441,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/site-admin/colors/5b2250f464951c6b1d4b2cfa25b00f4c.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.621Z","timestamp":1738969550621,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/site-admin/colors/5b2250f464951c6b1d4b2cfa25b00f4c.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: text/css\r\ntraceparent: 00-84e10701032ec94f2dec3eafae0c9158-470b86b4bbfe917f-01\r\nlast-modified: Thu, 30 Jan 2025 15:18:07 GMT\r\netag: W/\"5b2250f464951c6b1d4b2cfa25b00f4c\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Thu, 30 Jan 2025 17:18:07 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 3559\r\ncache: HIT\r\nx-cached-since: 2025-02-07T22:06:31+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":38759,"size_decoded":38759,"mime_type":"text/css","magic":"ASCII text, with very long lines (38759), with no line terminators","md5":"5b2250f464951c6b1d4b2cfa25b00f4c","sha1":"2959bf3dc3493cd23891a55ed986bd16fe6845de","sha256":"84588a275e80795b5952f1f1af78e60b4c1bcc3da5c53c4ec1eda2e67bdfb0bc","sha512":"c4ea9574a7f096c2e2f5415359c7ca21069a9a0ac9bf52b9bd1a09c8832e280db0a3ee415e280247351f70907eb0b0da9adf3c7e95ff3edb8d4e77f44ac9b70e","ssdeep":"192:+w2ADLPJMesMGzFpgJCmuuZs3NyOzxQOg+lNvChrjgZca7qRjH9W7Sn2b3rLDOBm:+E2BFsK75xWt5JkyunibYhMEW7I9pJ","tlshash":"63037c3ded91c1752a591931d11c677f3d36e9daae240f8fd02c73e630c1a022ba5a7a","first_seen":"2025-01-24T08:48:07.903233Z","last_seen":"2025-02-11T04:07:41.247384Z","times_seen":44,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/98f724b77568f44429da8babd1b679b3.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.677Z","timestamp":1738969550677,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/98f724b77568f44429da8babd1b679b3.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-088578.top/\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-96292ca7b52948376b9c146520fd3a59-ceda0da5ce2f82b6-01\r\nlast-modified: Wed, 15 Jan 2025 12:23:16 GMT\r\netag: W/\"676ec11eff720c830185b6d21e7c7d30\"\r\ncontent-encoding: gzip\r\nexpires: Thu, 16 Jan 2025 11:02:51 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1493\r\ncache: HIT\r\nx-cached-since: 2025-02-07T22:40:57+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20912,"size_decoded":20912,"mime_type":"application/json","magic":"JSON text data","md5":"676ec11eff720c830185b6d21e7c7d30","sha1":"f45543629d322653abae1f82f4f25441eb506e2f","sha256":"c7780f0587a401812a4b865f963b9effed6a577989d7727fa5f6de6d28915ee3","sha512":"820ea2875f97c0c628f3c438a8978d7c802caa8771c83699deca31cb6219db64fe01b1c6262aeb0c6f51eb98a77f6596191a39429e25830d280fc5097a26dbec","ssdeep":"384:hrLr0fLSwUj+uZbC445IOhT9TYXw1LyaNuRBCUz8W5:hvkO+ylRBF","tlshash":"b6922985fef40c33212f90ae55f3ba0e93d85f979d4a6c14bfac2a4c2b54519016ad3e","first_seen":"2025-01-20T09:57:56.538569Z","last_seen":"2025-03-11T17:04:41.029729Z","times_seen":100,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-088578.top/checker/redirect/stat/run/","fqdn":"1xlite-088578.top","domain":"1xlite-088578.top","tld":"top"},"ip":{"addr":"46.32.182.121","port":443,"asn":202492,"as":"Silverhill Group Holding Ltd","country":"Azerbaijan","country_code":"AZ"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.891Z","timestamp":1738969550891,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-088578.top","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Wed, 25 Dec 2024 09:21:57 GMT","end":"Tue, 25 Mar 2025 09:21:56 GMT"},"fingerprint":{"sha1":"3C:76:93:78:DA:B8:BD:F4:14:7C:F0:30:59:1A:02:C7:F8:0E:09:C4","sha256":"6C:F3:2B:9F:DD:97:EA:A7:5C:EA:BB:31:BB:94:1A:C4:E1:76:0C:EA:48:25:6D:30:DB:9E:99:66:F8:4F:AF:3C"}}},"request":{"raw":"GET /checker/redirect/stat/run/ HTTP/1.1\r\nHost: 1xlite-088578.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-088578.top/en/block\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_2473637m_21103c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_2473637m_21103c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D80213038q6Le_4Xh_fUqXjCCFwK8_qdhMxF6ZvtF_d101078_l125423_clickunder; postback_watcher=; auid=LiC2eWemkcyuA23hAzZmAg==; window_width=1280; che_g=7e4b80d9-1856-bb1d-f545-cc5653a8d4a4\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: application/json\r\ncontent-length: 14\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: wf-uht;dur=0.011\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14,"size_decoded":14,"mime_type":"application/json","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"d9612159e7d1b3767bdbd34943bf3653","sha1":"104709407a86206ce1a7b41213b664e1adc06855","sha256":"d649c3334243c98e9f6ca64e9ec6ccbdcfc0079fa95597575d0197c2bb4a366e","sha512":"b66c34127af78409a5061c9733886bbc54ffef102e1bad488596d953307ca94f605dba789f59d3dcf1342d129098c2f30fff0fc81a5cbd897bb93fe9e509f519","ssdeep":"","tlshash":"7f6000202800000208820228a08020000280a020802002208a23088002200280c20808","first_seen":"2023-04-07T11:30:25Z","last_seen":"2025-04-06T20:04:20.717081Z","times_seen":408,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2025-02-07","alert":"Sinkholed","trigger":"1xlite-088578.top","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/721582dc/desktop/default/css/f83de4aa.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:49.539Z","timestamp":1738969549539,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/721582dc/desktop/default/css/f83de4aa.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:49 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-68bcd1a388cbf21ea12280a272fb175b-10d693c69f46ead0-01\r\nlast-modified: Thu, 06 Feb 2025 09:05:46 GMT\r\netag: W/\"a162b5616d038ab2972e0f3c30f49b64\"\r\nx-amz-meta-mtime: 1738832744.939569694\r\ncontent-encoding: gzip\r\nexpires: Fri, 07 Feb 2025 09:24:17 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 49268\r\ncache: HIT\r\nx-cached-since: 2025-02-07T09:24:41+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":57970,"size_decoded":57970,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (57970), with no line terminators","md5":"a162b5616d038ab2972e0f3c30f49b64","sha1":"9f6378b7c48a14c871abe36d0b692cd7895c4383","sha256":"9823f05ea32d0254cb58753bdd3a5cc9e58233eb662ad2a429daf9cee81bf492","sha512":"5f177780a20b01524a3e92cd142152b0eeedc5504d98dcebf16e6c1f0bea16a87d8ce10b213ee12e8fc9de1d42f06e59d36bf6e13043385b476bf2dcbe4f87fb","ssdeep":"768:dlwoaXC59ApQzrojPccsVV72VanIgvvsJH/Q6rgpftQvrOr8reHh:QoEC59ApQzkhI6i","tlshash":"8d43ea2ceca8d1b60c2bb511938c7f3c1970f45b9e314ea7d41d5ba929c3b9a05b0d7a","first_seen":"2025-02-07T09:15:23.182255Z","last_seen":"2025-02-08T23:55:26.808439Z","times_seen":9,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":138,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/main-static/721582dc/desktop/default/app-d0f34e27.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.168Z","timestamp":1738969550168,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /main-static/721582dc/desktop/default/app-d0f34e27.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-088578.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-955e99fb6c35a4d619bedab29309b120-1d737afe47ea2785-01\r\nlast-modified: Thu, 06 Feb 2025 09:05:46 GMT\r\netag: W/\"590115d6036f58455372e19beb2f520f\"\r\nx-amz-meta-mtime: 1738832744.935569658\r\ncontent-encoding: gzip\r\nexpires: Fri, 07 Feb 2025 09:24:18 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 49268\r\ncache: HIT\r\nx-cached-since: 2025-02-07T09:24:42+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":609615,"size_decoded":609615,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T08:36:34.154379Z","times_seen":14318473,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.105Z","timestamp":1738969550105,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63748\r\ntraceparent: 00-f17ecf528dc06df3b67abf9dbd3d3e3e-1e97d3ce16873535-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"6887b6f24414dbc612dbf42ccdc76b70\"\r\nexpires: Thu, 16 Jan 2025 10:32:14 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 2088\r\ncache: HIT\r\nx-cached-since: 2025-02-07T22:31:02+00:00\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":63748,"size_decoded":63748,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63748, version 1.0","md5":"6887b6f24414dbc612dbf42ccdc76b70","sha1":"8068d3abfbc6cbf35b55919da45b1f4d2d136238","sha256":"fc5c015fc32518f1ed810fa84ca28941eb9d5a3c81acc8df69a4dbbeedef7b0c","sha512":"00f08f9dd648972c9571547e06172d5505dd13f577fe2e65a497d3856172807ac11c996984e4138d2eb2ac784257fe61864aee15752fe9e9e76f98db931e0c2a","ssdeep":"1536:KtdCG+Dz6RxAx457zL0ASEn091Y0H1mTOzI/OzMFOoTX4u:MMG+yRpzN091Y0VtI/pOoTt","tlshash":"8b5302485551fae2cac3073c0f7a89dbb37a776d519224cd98b69f830d37964bea2070","first_seen":"2023-06-14T19:15:49Z","last_seen":"2026-04-28T07:40:10.638175Z","times_seen":10509,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":7,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_auth/en/dictionary_3302f5052cd12ca260cd946af7660ff0.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:50.634Z","timestamp":1738969550634,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_auth/en/dictionary_3302f5052cd12ca260cd946af7660ff0.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-088578.top/\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:50 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-d5fc2e43e48fa1f0ee79f632447d391b-ac3fc78591786aef-01\r\nlast-modified: Fri, 15 Nov 2024 12:25:26 GMT\r\netag: W/\"c960df03c02866eb54a219e318dd1cc8\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Thu, 16 Jan 2025 10:10:18 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 1119\r\ncache: HIT\r\nx-cached-since: 2025-02-07T22:47:11+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8744,"size_decoded":8744,"mime_type":"application/json; charset=utf-8","magic":"troff or preprocessor input, Unicode text, UTF-8 text, with very long lines (9165), with no line terminators","md5":"15045e7ecd3e7ed1ec2c5dca3b78df8e","sha1":"c1afeb59e486fafa5db2b03a3f616ad754299689","sha256":"21030d217c9887eee14ae3038c7f943d5e876ec51d888538b2ffa049891dc9e2","sha512":"95571a7ae374b916edc8468f7027b4702d496372f43be24a9885390854aec33bc02ce3f1f97ea72ca38c4dc4f71e65404965444cb4bc082a9728fb52c45899ac","ssdeep":"192:BTn8mmGIAdLPVmI2mbS5imwnDrclIedOr5XMlklX1yiBcZUBIhhdMRu5kWrjLQ0Q:BTn8mmGpZSIf/5XMlkl3BcuBIhhTFJ2l","tlshash":"30120e1b916acc47cf4b0d0b7d795e28a39d896849e84da85cf0ca3e02e163997ff245","first_seen":"2024-11-21T20:50:07.31563Z","last_seen":"2025-02-24T05:54:00.565529Z","times_seen":77,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_vue_deps_YT7LKPBD.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"185.244.209.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-088578.top/en/block","date":"2025-02-07T23:05:51.089Z","timestamp":1738969551089,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 26 Nov 2024 00:00:00 GMT","end":"Fri, 26 Dec 2025 23:59:59 GMT"},"fingerprint":{"sha1":"71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA","sha256":"25:0D:BA:0E:61:92:06:3D:A5:AC:35:E6:49:CB:32:10:0C:93:21:05:99:95:91:80:04:2F:A7:FF:E2:E7:5B:C4"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_vue_deps_YT7LKPBD.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-088578.top\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 07 Feb 2025 23:05:51 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-e552f359ebbd395b6452736323931743-7fa4b0198123db30-01\r\nlast-modified: Fri, 07 Feb 2025 07:58:53 GMT\r\netag: W/\"e32db66b83b190cea91f31b5ee2d0f0e\"\r\nx-amz-meta-mtime: 1738914958.506478787\r\ncontent-encoding: gzip\r\nexpires: Sat, 08 Feb 2025 09:57:39 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: osix-hw-edge-gc4\r\nage: 47292\r\ncache: HIT\r\nx-cached-since: 2025-02-07T09:57:39+00:00\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20307,"size_decoded":20307,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-28T08:36:34.154379Z","times_seen":14318473,"resource_available":true,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}