{"report_id":"f5976837-0691-47bf-b068-e3c1dafcc274","version":6,"status":"done","tags":[],"date":"2026-01-25T17:01:26Z","url":{"schema":"http","addr":"s.painamour.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====?u=https://refpa749456.pro/L?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\u0026pb=b53d8e2ad6094a2c8a0466f2c882e18f\u0026click_id=cnv1bb87247345116b480f1dafce93906f7\u0026r=registration","fqdn":"s.painamour.com","domain":"painamour.com","tld":"com"},"ip":{"addr":"104.21.63.17","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","fqdn":"1xlite-03801.world","domain":"1xlite-03801.world","tld":"world"},"title":"1xBet","dom":{"size":22879,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (17878)","md5":"945e5e32fcf04c51f01f8cd0bb54c071","sha1":"57830e2a22e6b50bb0dc57f9a6ef1bafdf71da2d","sha256":"ad2431974e07712230da0532fe733828b36d12844a91d67aa3118bacec078893","sha512":"7b0e8a20d1f8ccebbec00171720c4f95645f544e0be68d29ec0733190e8794e44dac7c46b3e8b8cb5a098117b1899fe27d9017f27ff6a3ac283c4792b0f222e4","ssdeep":"384:69ihZx4uR4psEqVCr3rywsf3EqOt8H7spXJ4qtB0+TPMys:ksMr3rywy/OaApXJ4EB0+Qys","tlshash":"6da2f957f86c7117b7f765d8883aa68be2afe737c649d09192fc81c41f86a57b203800","dom_hash":"domhash6f6c3ca7e8b0677035f3f2a0eb8c0504","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"s.painamour.com/h/2770/m25uuqneqv4fvnnjzhlixlgjwktuk556r32pn2w2vr5hq4l2pz7gieduafrcp565sgou4kqzzm3z6tpmk3r6w7osgpq6y67iohfo5rxmqc2nnipvnsbetrsjujzfrxsm7xl3lxujrko43dltrbi5lwmm3okk7nfwtz3o2sfnzhxjm4wdgrgpersvcesmkya2zjyh3hlsjjxomlfajfljs5l7zjfy5jtd7nimx32fqrklbxetvqy2a4l2lbyze3mw7tt7ytubot6uricvjhbhpsnbssjufr2hodlwmk2divhgsq34lz2fiyt5pzmuovl7ofxx262cmmbhy27uknbls4pcvxk6q5naorfzmqte3bhft4lsntve33fn76jfujgllfgnnuv2ozzpzakdmbivayrwjqgm4qjbd7jgyssifqf6u4xpv5coqrpx3f4z2y4o5n5yeuktfeadaxjsffyvmrkzpv5we7ltijsvi6laoqyxefiuariros2lnfahycdr5rjevqld636ics6hjjbhguzwjumcwf63onq56mdfywuwrnkimmvhs2m6jn3mbpdsxbkppnpawpbkr77v6fbpc4lufauhqwdaifzf64ypmf7cybkgkv7huzrjerawaubmhmtdi4cfieaqifyxdrajnnhtrphz3www3n3elsxyzguuoq437ts6pbfovpg4my3czhjmtvepwwi3te2rcpe4hmneieukpunvvwumtmvhxnlgc5l5dqbaywt2mdvn3n4nnjva6qlan7i5gqlw5dmhw7uq22op4ywmnbovqc2ku7zjqbgzg34s3sos2ceem3qpo4pfyethhmrdzqw5z3nor3edbuf6ryoj5hj7pj2t2bfn5tgspa======?u=https://refpa749456.pro/L?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\u0026pb=b53d8e2ad6094a2c8a0466f2c882e18f\u0026click_id=cnv1bb87247345116b480f1dafce93906f7\u0026r=registration","fqdn":"s.painamour.com","domain":"painamour.com","tld":"com"},"ip":{"addr":"104.21.63.17","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-01T17:01:26Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-25","alert":"Sinkholed","trigger":"1xlite-03801.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"v3.traincdn.com","ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"domain_registered":"2022-11-10","domain_rank":256434,"first_seen":"2022-11-25T10:00:40Z","last_seen":"2026-01-21T12:37:51.181928Z","alert_count":0,"request_count":36,"received_data":3163041,"sent_data":18127,"comment":"","tags":null,"fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"1xlite-03801.world","ip":{"addr":"83.147.224.168","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"domain_registered":"2025-06-10","domain_rank":0,"first_seen":"2025-11-19T14:07:18.005931Z","last_seen":"2026-01-23T14:50:00.40468Z","alert_count":10,"request_count":10,"received_data":68511,"sent_data":7941,"comment":"","tags":null,"fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-01-18T22:20:30.851037Z","alert_count":0,"request_count":5,"received_data":2114913,"sent_data":2261,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-01-18T22:25:45.99612Z","alert_count":0,"request_count":5,"received_data":2601,"sent_data":4910,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.no","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2001-02-26","domain_rank":92680,"first_seen":"2012-06-26T23:22:08Z","last_seen":"2026-01-18T22:25:45.907302Z","alert_count":0,"request_count":1,"received_data":580,"sent_data":800,"comment":"","tags":null,"fingerprints":null},{"fqdn":"refpa749456.pro","ip":{"addr":"91.186.206.194","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2025-10-17T14:53:47.44609Z","last_seen":"2026-01-19T20:08:20.158975Z","alert_count":0,"request_count":1,"received_data":3911,"sent_data":572,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}]},{"fqdn":"s.painamour.com","ip":{"addr":"104.21.63.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-28","domain_rank":0,"first_seen":"2025-11-17T21:30:38.843193Z","last_seen":"2026-01-20T08:04:35.408105Z","alert_count":0,"request_count":2,"received_data":2891,"sent_data":3133,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"aaakmnr.com","ip":{"addr":"31.220.27.154","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-04-19","domain_rank":337718,"first_seen":"2025-06-16T23:34:01.853133Z","last_seen":"2025-11-29T11:34:39.612266Z","alert_count":0,"request_count":2,"received_data":51809,"sent_data":890,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"region1.analytics.google.com","ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22257,"first_seen":"2022-03-17T11:26:33Z","last_seen":"2026-01-18T22:31:43.238988Z","alert_count":0,"request_count":2,"received_data":1704,"sent_data":2366,"comment":"","tags":null,"fingerprints":null},{"fqdn":"radar.cedexis.com","ip":{"addr":"104.18.4.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-01-07","domain_rank":28156,"first_seen":"2013-11-27T02:31:43Z","last_seen":"2026-01-21T12:59:51.40196Z","alert_count":0,"request_count":1,"received_data":653,"sent_data":425,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66\u0026cx=c\u0026gtm=4e61m0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"45b9a90c01e0d71619474dfbf9bf4ef2","sha1":"aecba17a73b3447ecd32275ad58a25f6a7c0f721","sha256":"be1cfff70b8bac1b9841908cb6cd402e5b8ea7cdd83ae4743cdcff98d0f6cdd5","sha512":"30d4764244167858bab13d6923a1d7e245070ab0f9af5518999b98c782e4e41e6f04f67cb2cd4aa4d57642bcc59b862379cdd0992187d8efe4a5ce2e5cc6d5b0","ssdeep":"6144:SQJmMvkbBGAxJ508XYoeXDZItDmlFldbKKCYTdq1on4MBxVg:/mM8bBGAxJ508XYPZItD4dqOg","tlshash":"99b4f99e73c53426939af478502f12cba8bb25a2b45dc8abb1c9ccf01d3459b4167f78","size":512206,"data":"","first_seen":"2026-01-25T09:08:11.887229Z","last_seen":"2026-01-26T07:45:23.584208Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.painamour.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====?u=https://refpa749456.pro/L?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\u0026pb=b53d8e2ad6094a2c8a0466f2c882e18f\u0026click_id=cnv1bb87247345116b480f1dafce93906f7\u0026r=registration","fqdn":"s.painamour.com","domain":"painamour.com","tld":"com"},"ip":{"addr":"104.21.63.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"38bcc383b6fbba7928656b9040b282e4","sha1":"b2c4afbeba79d71db5df9e73f68b6bec4d2cd6d0","sha256":"07027ba340ef65872b6207efe05665f64bc5338b873ab256fd46a953f79f22df","sha512":"41cb43fc48199e9eba38e9df984023ddf78b9975efdfbb12c99f25cc08ee3ed1bae4c9c2a90020363ccc9d475cf49675ac38f1a3ae8bde344a1977fee373434d","ssdeep":"","tlshash":"6890025765d1a1115a6b72e1403b9d4a041641a194545850604c9c56585bc61134d8bd","size":52,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-06-14T00:14:33.354439Z","times_seen":6433,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.painamour.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====?u=https://refpa749456.pro/L?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\u0026pb=b53d8e2ad6094a2c8a0466f2c882e18f\u0026click_id=cnv1bb87247345116b480f1dafce93906f7\u0026r=registration","fqdn":"s.painamour.com","domain":"painamour.com","tld":"com"},"ip":{"addr":"104.21.63.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5c452c885f0211e6f86a8025ffed6801","sha1":"45fc7697f8759fd1fd3fc494e06b4fb164917be1","sha256":"866857ca3216e90ef194ffb8b1ff66d7a1f8147a948c649d81595ac2591aca6c","sha512":"164653be411d0edc3572b2fdf6e898e261d1588dd8b2756f138b277f0340e1e4342534f6157e5738276ae910e0c979cdb309e2de59ac499400dc99f6558e14b8","ssdeep":"","tlshash":"919002a5d042504089db66b0872b1845043010752ec4ed9010c4b5d1585a5a51b454fd","size":54,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-03T02:26:01.803116Z","times_seen":5564,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaakmnr.com/v1/script.js?kmnrKey=123456789","fqdn":"aaakmnr.com","domain":"aaakmnr.com","tld":"com"},"ip":{"addr":"31.220.27.154","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca791f2ca4a492a242d4697cd9211779","sha1":"2403d0cb62afdc3572b3b0b4480facc980711242","sha256":"21b8c3bd25e3c796f39257a319cdd71900c4f71a5d32a61e4c3107388c7e11e4","sha512":"a2e4ed033f487150c7dcacad863b4059a3b92d4f5f1eaf67c28686583ab5ca2215d40de64fe10c3bb8cd8fc12cba09ffd901453944b2f5a0748624605178b0ff","ssdeep":"768:KYLCnCAt9PEqvSJsOq2Q5qS54vzQsHNk6q5iT1svGOfkiRJRX6BZV/D:KFPr72QEtLc5iRs+OfbJRKBZVb","tlshash":"57332bae7656a42490b7217a403f7605f23e1e6ad50484d0e566ccc03de9f8b6227ffd","size":50639,"data":"","first_seen":"2026-01-25T17:01:32.2051Z","last_seen":"2026-01-25T17:01:32.2051Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","fqdn":"1xlite-03801.world","domain":"1xlite-03801.world","tld":"world"},"ip":{"addr":"83.147.224.168","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"dafb343aac3fe5ca646b209532d36997","sha1":"53e7e61d359e4302e8a8a993ef87941addbdcd3a","sha256":"27054e18281f5b986021cef8efafab9b9fbf6b6dc64a0027cca8bbb3050dc6d4","sha512":"2431a1f17b00f26dd58d329f3c4bcd32aeacc95ece9d1ac6086772ba90aa32700431daabebc5431f41654b2018b3bb9638215e2c0953c16188a17ccc8673c125","ssdeep":"","tlshash":"f6e0cd969519f61b5c33681d896c8b0f95c97e75500d795dc034855c3a53456106723a","size":308,"data":"","first_seen":"2025-12-10T10:19:59.465768Z","last_seen":"2026-05-19T09:54:34.325552Z","times_seen":1816,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","fqdn":"1xlite-03801.world","domain":"1xlite-03801.world","tld":"world"},"ip":{"addr":"83.147.224.168","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"cc2e46585080e7d5700fe233cd1b4cfd","sha1":"a3f554a9661a4c888a4c8f9386649629b49bb8c5","sha256":"81011d6f38d1385fe6146f600711e4506800b51873407bb733ed5c35a258d250","sha512":"8b64e741098a8b77c80d0d895ab2907b3735bd5f5b700d15b4842b2c5ba40a930a08af2199b1e66304f68894554b8ebea007f19ff1728d0e23e411df4ac857ea","ssdeep":"","tlshash":"0321ed25907d0a3f8a27462ea307ba419fad507662d67b1cf61c4f8ca6c62cda1136c7","size":1433,"data":"","first_seen":"2025-12-10T19:30:54.950408Z","last_seen":"2026-02-22T13:13:36.447519Z","times_seen":282,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_localforage_PJNUBKRP.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"7e7ebd44e3a6550f862e122ab7df6409","sha1":"384ecbc3ab0f65e6b0f88c1e68ba3eb73fad4999","sha256":"138767518a09e63d24f918f6380923893a2ec3aa59a640e51c83517501823076","sha512":"e2766b50e289dc6a69fa30432a49a0b7743f15cd15a54d707959c7623f258057a821a94285c492746216cfbf815089309b6cc09b930ba7977ff9c4ffc352d76e","ssdeep":"768:wDKAOpvMewHFuM96WwZACjzz46zSTKsBE1OvFXfX1UXk:wm8uPW43zEIOvdlUU","tlshash":"a5d2b68c7799f02683bb3070907f580ef237a912594d90a0e591e5f86dbd75c822bfad","size":30277,"data":"","first_seen":"2025-08-22T10:11:14.535778Z","last_seen":"2026-03-04T04:00:43.425133Z","times_seen":3921,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/entry-120b320b33.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"98b34ded77b03b2aa96af620358bd5eb","sha1":"4ffe818756a51a5990be5003ef3caf17d777d86b","sha256":"8a6bfe61ad468f380a0188a3ca9a90a2f80b1f435fc0aa87018ac3bdf65a1405","sha512":"b5e3393f8e118f63502034792ce0c026279be791c8040a1262f0a5a9f203bb31e910e2ac97c9d0102f440525cf2965ea0417f76592787b346808837da4118ada","ssdeep":"768:HIl5dHMdKVl3PKMwj6cVcvGwEAJq8ETTugwB64ZV7Z91FzKMjzF++S5yuebuJNtQ:olFVNKMwj6cVcmNyjJuM","tlshash":"55c2527c21a8f0f5308b599437f6bc5266886d1ff98afc9a508789c807da04cc9653bf","size":27342,"data":"","first_seen":"2026-01-23T14:50:02.450114Z","last_seen":"2026-01-29T09:40:33.667918Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/1d47b07fd6.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"020f1926ed5e6b97d81570c640fb0b75","sha1":"26df2b5bd19f8f78a4732f257d8869e18a934cf1","sha256":"7da8291246142c735fc7cc0feebf6228643cf3afcdc68bdd1de8a4d88d471f78","sha512":"e00b6707abec22993ff35f9eab8a3f57acf63dd2d8499d379800e7f02a6b4033da430295e787190e71d167ff51a0f7d06eb50d62e6e07e3b78061ce8aa0efe90","ssdeep":"","tlshash":"a82195ba7df4f0394b104afd382434a1438b3ea7858f909905c803a50347054692afb7","size":1322,"data":"","first_seen":"2026-01-23T14:50:02.447762Z","last_seen":"2026-01-29T09:40:33.650022Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.painamour.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====?u=https://refpa749456.pro/L?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\u0026pb=b53d8e2ad6094a2c8a0466f2c882e18f\u0026click_id=cnv1bb87247345116b480f1dafce93906f7\u0026r=registration","fqdn":"s.painamour.com","domain":"painamour.com","tld":"com"},"ip":{"addr":"104.21.63.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"be5d9ebf54fefc6e38f077cef4bd6caa","sha1":"26a1f34155b4aa54100a69c778dc0b4be5c1a500","sha256":"00e0eac098edfd61cca6fe77139f78b66926ce917eb603a36311c4b64dab6c73","sha512":"1309dc64e26ba7e55efec514e1c4ca8654062c8f69ec54a04e51fd1fe9a398839e4f556ed24989e68383a0ca766bf6fd23288340b2c0212e2c2d4eb30e49f9ad","ssdeep":"","tlshash":"1fa01281e185519c11f321e810855dc070315820304944c04044d0124416c1aa70d028","size":84,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-06-14T00:14:33.36811Z","times_seen":6437,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.painamour.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====?u=https://refpa749456.pro/L?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\u0026pb=b53d8e2ad6094a2c8a0466f2c882e18f\u0026click_id=cnv1bb87247345116b480f1dafce93906f7\u0026r=registration","fqdn":"s.painamour.com","domain":"painamour.com","tld":"com"},"ip":{"addr":"104.21.63.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"be7bfc2a908a684a210d585ed55d30e5","sha1":"c0459f4c57d2e1a980fcac6fac8e47d3a18f237d","sha256":"9e9bd85194604c6912fb8f12147e0bdab67f1932f029c8accfb629bed57945c3","sha512":"2c2f6e1ec8c1e59bb7c57acfc09ffd94c332e1e6f5cae8e481633b1a2294eec0453c88b995ea7ab17b4eabad583de7806c04d05125baf69ff8e3a363a3051dd2","ssdeep":"","tlshash":"4d9002bd9840919455572b9605965844092040612945dd500041a46218660705e0596c","size":45,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-06-14T00:14:33.351859Z","times_seen":6434,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.painamour.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====?u=https://refpa749456.pro/L?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\u0026pb=b53d8e2ad6094a2c8a0466f2c882e18f\u0026click_id=cnv1bb87247345116b480f1dafce93906f7\u0026r=registration","fqdn":"s.painamour.com","domain":"painamour.com","tld":"com"},"ip":{"addr":"104.21.63.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"d5c96eb52a1711f3a2950348f2d115f9","sha1":"c2477218c9a9fd31c0e09166892f83381f5e0e26","sha256":"a65dc9d6d0e097cf39657dfb89d3deea54548c6b59805088214fe5622e8bec61","sha512":"3f9b89c57906a121dc5933b94b73efe961d28148e1878b50c809df9a24061b30d0406b1c97e852b7676151eacf1b4206b7c2cc9c2094271c0bf089611c1a569f","ssdeep":"","tlshash":"dfb0125867953032530211e240094c585b3e08f1c4e05cd6805ad87817f3c2273583dc","size":102,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-06-14T00:14:33.352718Z","times_seen":6425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.painamour.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====?u=https://refpa749456.pro/L?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\u0026pb=b53d8e2ad6094a2c8a0466f2c882e18f\u0026click_id=cnv1bb87247345116b480f1dafce93906f7\u0026r=registration","fqdn":"s.painamour.com","domain":"painamour.com","tld":"com"},"ip":{"addr":"104.21.63.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1062fa6ded0164e25b5b275dfb895363","sha1":"fc336d7708976831ca87a805625ad1e937f72d36","sha256":"c69c01ecbd87b13f25156d07620fc3a3e3ec42b093e63fa99ccea511122faac9","sha512":"b7cd7a7b7f6eddc4ad5f62be3dfa9bbf48a67d0ff73e0501c237938d17e7431e68021dbb8b0f9db57895cba8ab6abf7b9dd9e85568b723ecdb9941cda1098913","ssdeep":"","tlshash":"439002e5a1c27010865251a540aa6985613954605499c94440b09762196b4b0a2e949c","size":53,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-03T02:26:01.805737Z","times_seen":5558,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_3527178aeb.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"c705c140b60217c27ec8bc7bf7b4c4f1","sha1":"7cad410f5369c4e81b6e07b2162310db621b5526","sha256":"9c864efdf018b52d35bbb01943dc4806c82b39b3a33bdb89649ef9ef957a7101","sha512":"ec036223857c3a8d0f1cd7d61b50efa8fdfb1e7c65af40cbf268d3350732bf3a71d87c83251e5d6e3e4e78f48fd0726dfa602121a9483df3fc94d47b27010fb6","ssdeep":"","tlshash":"12d0eb3d6ff1a0b4331528ff321b75d2330a3804530ac4a300a6036802c80f4b235e3a","size":291,"data":"","first_seen":"2026-01-23T14:50:02.456569Z","last_seen":"2026-01-29T09:40:33.668672Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.painamour.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====?u=https://refpa749456.pro/L?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\u0026pb=b53d8e2ad6094a2c8a0466f2c882e18f\u0026click_id=cnv1bb87247345116b480f1dafce93906f7\u0026r=registration","fqdn":"s.painamour.com","domain":"painamour.com","tld":"com"},"ip":{"addr":"104.21.63.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"034d21c266d82b1579998cc036512358","sha1":"18502599f21b6fba79982d8801f2525b2fd3b988","sha256":"cfe1df1650cf9e5565b4d99de32961d73acedf09e4445d80ab2552aed9c8bd83","sha512":"dd0d92326aaa84f76da1b3ce77263e5c2bdbd070a479d049dcf317e74552449b4ea07f73ef2346f81de9706ec798de79771392eece35bdde0261bd04b93103a0","ssdeep":"","tlshash":"5ab092a7a1ee90894fab51d910c35481562a97263898868128b099a49e31cb0d63aadc","size":114,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-06-14T00:14:33.364856Z","times_seen":6427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.painamour.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====?u=https://refpa749456.pro/L?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\u0026pb=b53d8e2ad6094a2c8a0466f2c882e18f\u0026click_id=cnv1bb87247345116b480f1dafce93906f7\u0026r=registration","fqdn":"s.painamour.com","domain":"painamour.com","tld":"com"},"ip":{"addr":"104.21.63.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f48f4887afd273629c89c18117c7d6ef","sha1":"b4d7ba70f042062ebce7b56bcb7ab452a944e375","sha256":"72720823e7778fd15730f6cdd8c0271b7a33da888493257fa17304785879bd6b","sha512":"67efd8ae6ee25ba84cef24d492542719792088a4aaa254f3911e57f7a3becb9625d582e9388def60bc662461ff47ca595159635283fdcd5d566130f3c70c132a","ssdeep":"","tlshash":"6fa022f0a3cb2c30b2c320c000a30ccc202888b0200888000082c28b082c0b3a23a02c","size":67,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-03T02:26:01.802013Z","times_seen":5554,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/$_$.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"2cdaa92927f02e0b628f1ef4d7dd8caf","sha1":"9104a2e16ed080b80a42588b8aeb52ebec47ab7a","sha256":"ef8101ffea52addcdcfcc3a83f96ff2d4613fb3ae6d1c16bbe4852387b73a9db","sha512":"31da80bc1b17aa708fef74b0211af91fce1b4a5f518f11e5caa80f50e9a7791b6e94924e381f550fc44a02f4c1d785e5b95fa2464e7968b5cab079612d70d839","ssdeep":"","tlshash":"1ba002935a5ef66c209044860696e74733823d6a3477b1d625bc5509e6061474817257","size":69,"data":"","first_seen":"2025-05-14T05:06:37.199299Z","last_seen":"2026-03-18T19:40:26.76398Z","times_seen":5502,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/d755687362.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"64079da1f8626708fb1bf43a74ea38ae","sha1":"b1cf3e27d65d22c605fb7a4ba3fbd11f25d98a3d","sha256":"4316cf9c959efab15b715fdea4f48ba446afe1c97fda51e3cf31d3a4421b143f","sha512":"ad43aa3d8f77983484b4a660119d0d63a7a3f0d345c334955d1caa6a9e670b1afb0a6c98bf21d542f187e31bd1b7d98bdcde5b59823e745a145c1aede7299816","ssdeep":"","tlshash":"e631544a7ca4a4e3ab7703ffbd1250f4460d794ad29d04874de8476c220e0941b1bb52","size":1782,"data":"","first_seen":"2026-01-23T14:50:02.487438Z","last_seen":"2026-01-29T09:40:33.667162Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/7ccc349c39.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ab9e144f1e16ca28fe89c5f6adab6c5","sha1":"72edc46eb430f3e6d285ea1d58965691c085543c","sha256":"0aeb71656c1947155e819ef5efb1205bc28aedb8aef455b0db45270b1756e201","sha512":"0012ed58317cd4171fecd55d4681f695b5be800f4882d2e7f25edf04e5fd5540529cfb8c6c4ca79603e6b64e7dfa9fd57cfbafb16a10cc4c951847d9157d7b77","ssdeep":"","tlshash":"867186466c74f5f6bb0782a43d1304f0cb1fac2ae0544adad1b4cbbc169d4952532f53","size":3677,"data":"","first_seen":"2026-01-23T14:50:02.473206Z","last_seen":"2026-01-29T09:40:33.666281Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_f978b4369d.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a4af5789426796fafd3970de96371be","sha1":"ebdd29b76f8e6d20d0f1e41b17e032080872ff2b","sha256":"09adb51065cb406cb94d9809a73d3a05a29ad79ff58c1042790bee2308a88a8c","sha512":"e2a8d26c266ae1347566c938c7e1dc2944f7b228b2ac2bf0ef6dc37375edb82a348cce310a05b9a117139ca00d09ec23ec53509dbd9286b14aa8bb9a3d5f73b4","ssdeep":"","tlshash":"93e0684fb19a4c35168a78e843f5d70822d7226520473c21abac982c3964aabc417e5d","size":389,"data":"","first_seen":"2025-12-18T00:40:38.932063Z","last_seen":"2026-06-09T11:30:02.086699Z","times_seen":1747,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.painamour.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====?u=https://refpa749456.pro/L?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\u0026pb=b53d8e2ad6094a2c8a0466f2c882e18f\u0026click_id=cnv1bb87247345116b480f1dafce93906f7\u0026r=registration","fqdn":"s.painamour.com","domain":"painamour.com","tld":"com"},"ip":{"addr":"104.21.63.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9daba20cc0b62ef713a5a7f45045325f","sha1":"cc9083b0d3694a975ce99e281de797d4bf228115","sha256":"df290d8a6019595f4629829ff425382ab36241c211436f20e6e86a1a55bbe91e","sha512":"48dc2041be342c744bf6b781f483f08cf406b69eca6b850bdc37ede116ff5bcb7f328a7d1f2258245c79864bf07349875bda3a02a227ddff1c1031feac0cfa0e","ssdeep":"","tlshash":"67b09279678070e6e817231c2623ab804c3002b13849fe34901c9cc5aad9413020a019","size":116,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-06-14T00:14:33.365641Z","times_seen":6438,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.painamour.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====?u=https://refpa749456.pro/L?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\u0026pb=b53d8e2ad6094a2c8a0466f2c882e18f\u0026click_id=cnv1bb87247345116b480f1dafce93906f7\u0026r=registration","fqdn":"s.painamour.com","domain":"painamour.com","tld":"com"},"ip":{"addr":"104.21.63.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"45e3a46717e58c7d667b3009ba7f3201","sha1":"8e2670f0a7d0edc65217d49b5ce2f7dec0c37cbe","sha256":"e60406ed119af9cd082932dcbd659e7ffa184f9f0e498d02a26b8bd8dd9eec99","sha512":"59ce3e1cec54ec0b44014cc177e9c9d572a6d4b60bc36201f73ab7cff682466c396d17fd6f6be2161dd83a4edee4e63e6553fa2061c2b157448664ac78cf3b98","ssdeep":"","tlshash":"f1a022be32c3200c2b022080003e2cfa0c3202fa080aeee0c280bc300a3c83ca30a0fc","size":72,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-06-05T01:12:09.412412Z","times_seen":1730,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.painamour.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====?u=https://refpa749456.pro/L?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\u0026pb=b53d8e2ad6094a2c8a0466f2c882e18f\u0026click_id=cnv1bb87247345116b480f1dafce93906f7\u0026r=registration","fqdn":"s.painamour.com","domain":"painamour.com","tld":"com"},"ip":{"addr":"104.21.63.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"522e15cd0eccf8e81dffca4eb0f361d5","sha1":"5c522ca9e31221a5deae04d7399017309db30bcb","sha256":"513feae42ff2ad6797faa65044639484689e880ad19213eeedfbe53e344ada77","sha512":"d3154f513d8c0ba67afe2a3b40304306c064b53edf74bd9bc9b8cd711db2cafbc721d9b2678ec4d376e9cd888db5d64f889822f9e2e5fe2ab3a167ae732c7624","ssdeep":"","tlshash":"b9f09e1115e9082851abc879f64b31287f3f803e84ca54a1e1dda1c8792f6a766600cd","size":517,"data":"","first_seen":"2026-01-25T17:01:32.238717Z","last_seen":"2026-01-25T17:01:32.238717Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","fqdn":"1xlite-03801.world","domain":"1xlite-03801.world","tld":"world"},"ip":{"addr":"83.147.224.168","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"introduction_type":"scriptElement","is_inline":true,"md5":"0f5eaca32bb428f63dd1e2a5bd29f1dc","sha1":"d03a0dba7a7f5a37ade51eb2ea91bea8c517b57b","sha256":"b79028da2e4e559d41f05acc9b18abc6881408036c9e5d1cd61926e530c5f17c","sha512":"9b070fe4f452b27f8c34e0ff460c7c10822d3586106aaf6ec444054ba75e83dfe97b01036770601affef154d129ff7f6be949be2ef2e24a2b3e71d05125464f6","ssdeep":"","tlshash":"6c11b5330a38e73f412469ccc4a1aba955d0281ab000c04f9dfc8c47176b1c3ad93f13","size":1037,"data":"","first_seen":"2026-01-23T14:50:02.504463Z","last_seen":"2026-01-29T09:40:33.68431Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16664555628\u0026cx=c\u0026gtm=4e61m0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"218bcb648d6d81f9ca8cfaf6b76c3702","sha1":"d231e77749fa8def40fca615067577c9b38b45b9","sha256":"83a38441d476c76fa045cea9030a228a46261cfb56ca324e25b92b46ae8e17fb","sha512":"bdb7fd1d0d2a165884f398611bd3051e8756167febae2322f4bab8035aece16a43690171a0459df85d06393848791c1f4c8ee6bda4afa54afabcc4843029ea80","ssdeep":"6144:uJmMvPWQAxJ508RYoeXDIItDmlFldbKKCY5dqbQlS4:GmMnWQAxJ508RYPIItDIdqP4","tlshash":"318418dd73d6702693a3a478403f118ba57b69a2f44cc899f189cce42e74a9a4177f3c","size":382743,"data":"","first_seen":"2026-01-25T09:08:11.865676Z","last_seen":"2026-01-26T03:38:24.68273Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_accept_language_parser_LEQ4UAP5.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"83e311eb8e222d229b6177bd007ce9eb","sha1":"96b851ffda0eab794c2bb637255a48ae25770144","sha256":"d0ff62de588e1c47eedbd91a89dcf394e2ec5bd09392ea556b9a34108077e9ad","sha512":"fd2e1bfb6588598e356ddc08724c2e6f602b89626b30eeca2c25b8f60340f25e28a761b8e13b75d1627172530abf7dd0e586e792f53759d08bda626145f65b0d","ssdeep":"","tlshash":"202112debed2b5908394188c4e2ec055f23a2957641ce6fcd765e7827c403a186f3c1d","size":1297,"data":"","first_seen":"2025-08-22T10:11:14.559442Z","last_seen":"2026-03-04T04:00:43.42063Z","times_seen":3921,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KFGPRJ2V","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf254f7d5a97f9576750fed5539c599f","sha1":"f9441f2dc3ecd76853e920700ffff827ff39ec6f","sha256":"64c72f6c2f7a790934f99e148cbc1c1a720d571e8e18cac5fa76fb1c597298f3","sha512":"be5740ba3352f7d34d5e611b04e8598a8dd370cf2d6ea1d99a88c6b8e6a36f4369f36c66df62a1e09bee26dc73f1f23bc2feec11c30c5373852025304368ff46","ssdeep":"6144:wJmMvKXQAxJ508RYoeXDIItDmlFldbKKCY5dqwaiKX8:EmMSXQAxJ508RYPIItDIdqR8","tlshash":"4a841acdb7d6746683a2b478403f114ba13b7a92f44cc894f186d8e42e74aaa0177f7d","size":373541,"data":"","first_seen":"2026-01-25T15:07:12.689871Z","last_seen":"2026-01-25T17:01:32.22701Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=DC-14030178\u0026cx=c\u0026gtm=4e61m0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dbb823005b1cf2f93529d0fd9e3d97f8","sha1":"9fa9ccb2cd91a2f0b1d7d7fe7216dfe783dd5d62","sha256":"a11dc8aa7fe5fd58b2376cc6ef0e79dee20eb915e635d844570439d5a53db7e7","sha512":"0d1e4049dd305ba9a8c34256c73de604453ea324287f40f4d41c3b5640e3bc991880f79bf96dfd7c553423263d5b15ffa01a7c0bb5bfff75ead2da62f026910f","ssdeep":"6144:TJmMvPyQAxJ508RYoeZSElFldbKKCY5dq4Qh9:VmMnyQAxJ508RYNSmdq99","tlshash":"7e6408cdb3d6746693a3a478403f114bb17b6992f84cc895f186d8e42e70aaa4177f3c","size":330294,"data":"","first_seen":"2026-01-25T15:06:57.365288Z","last_seen":"2026-01-26T07:45:23.623858Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.painamour.com/h/2770/m25uuqneqv4fvnnjzhlixlgjwktuk556r32pn2w2vr5hq4l2pz7gieduafrcp565sgou4kqzzm3z6tpmk3r6w7osgpq6y67iohfo5rxmqc2nnipvnsbetrsjujzfrxsm7xl3lxujrko43dltrbi5lwmm3okk7nfwtz3o2sfnzhxjm4wdgrgpersvcesmkya2zjyh3hlsjjxomlfajfljs5l7zjfy5jtd7nimx32fqrklbxetvqy2a4l2lbyze3mw7tt7ytubot6uricvjhbhpsnbssjufr2hodlwmk2divhgsq34lz2fiyt5pzmuovl7ofxx262cmmbhy27uknbls4pcvxk6q5naorfzmqte3bhft4lsntve33fn76jfujgllfgnnuv2ozzpzakdmbivayrwjqgm4qjbd7jgyssifqf6u4xpv5coqrpx3f4z2y4o5n5yeuktfeadaxjsffyvmrkzpv5we7ltijsvi6laoqyxefiuariros2lnfahycdr5rjevqld636ics6hjjbhguzwjumcwf63onq56mdfywuwrnkimmvhs2m6jn3mbpdsxbkppnpawpbkr77v6fbpc4lufauhqwdaifzf64ypmf7cybkgkv7huzrjerawaubmhmtdi4cfieaqifyxdrajnnhtrphz3www3n3elsxyzguuoq437ts6pbfovpg4my3czhjmtvepwwi3te2rcpe4hmneieukpunvvwumtmvhxnlgc5l5dqbaywt2mdvn3n4nnjva6qlan7i5gqlw5dmhw7uq22op4ywmnbovqc2ku7zjqbgzg34s3sos2ceem3qpo4pfyethhmrdzqw5z3nor3edbuf6ryoj5hj7pj2t2bfn5tgspa======?u=https://refpa749456.pro/L?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\u0026pb=b53d8e2ad6094a2c8a0466f2c882e18f\u0026click_id=cnv1bb87247345116b480f1dafce93906f7\u0026r=registration","fqdn":"s.painamour.com","domain":"painamour.com","tld":"com"},"ip":{"addr":"104.21.63.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3c1bc1dd08f96349c433eb122aead61f","sha1":"604a16c0e2869cb47564301036b786202c8a8787","sha256":"869b75296a55932491e9a9847f1b8746d20031365f68588214df57565331437a","sha512":"33f6be39ce7c03944319279e0496969c0bc05f376f2b9587787d6bf108f043f75336b71a84a8a4dd9f47f2bf84137889bbf93dfef63a07ec2cc8fcc1008016ac","ssdeep":"","tlshash":"33a022a0b0c3b03033a32203802e8cece03000f000e0fee0c000a8302b22030b32c3ac","size":66,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-06-14T00:14:33.353569Z","times_seen":6434,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.painamour.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====?u=https://refpa749456.pro/L?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\u0026pb=b53d8e2ad6094a2c8a0466f2c882e18f\u0026click_id=cnv1bb87247345116b480f1dafce93906f7\u0026r=registration","fqdn":"s.painamour.com","domain":"painamour.com","tld":"com"},"ip":{"addr":"104.21.63.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"baa6d30f18ea544c73cd0137a66018a8","sha1":"3784f42cd9573cdb55a633553e82da98352fbefd","sha256":"59d80d13ba6ff1ea36ea83d976e0a5a9f2c25a1a00a453b3d87865dcd33834ff","sha512":"a79613151ff50983e56ac032f05b77afa85ab475a2e371dd5cce69769a36c3edb00aac9532e2a3240383a94b8be670bc9d8047d7f5cda755404d12c3eb47059a","ssdeep":"","tlshash":"4190044f71c03134455751d055173fd40014047134455cc400c0f473fc53434111dcfc","size":42,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-03T02:26:01.799286Z","times_seen":5569,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.painamour.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====?u=https://refpa749456.pro/L?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\u0026pb=b53d8e2ad6094a2c8a0466f2c882e18f\u0026click_id=cnv1bb87247345116b480f1dafce93906f7\u0026r=registration","fqdn":"s.painamour.com","domain":"painamour.com","tld":"com"},"ip":{"addr":"104.21.63.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"960fcd0655ec535371ba62b2f4dc6d52","sha1":"165a8f9dfc2cc679a818b292d7bcd20965dc9c8e","sha256":"e1e15579d2de91dfe6f5e8fec26a44bd3ced2fb71344ac6b32bbe24e514a3c79","sha512":"53b620c4cf923de7c1274041a5b3e76e2c81acc5284b5e5ea70d5c8aef25398286f480abaf2eeedde1f78b2387526abdd0e0619297294fcd0d68f8b2565f84e9","ssdeep":"","tlshash":"28800447d050145555533dd0141f1c44005001711c404c4004c4d4550c71c313507d5c","size":38,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-03T02:26:01.806721Z","times_seen":5565,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_chunk_LNU73JEK.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"d96d317966512ab8915a90670ca5a5af","sha1":"a810be1c3e515adb49804e8d976250deb16fd77d","sha256":"f125201d62c452efba070d856821885c7cfd539a31d55846caa6ae3a7522d3cf","sha512":"460b29966e6f5ac4d34ccc714217d29686d7aff42efa92a102729d40aa36dd4fbb87116178b2f9fdece5fdb09cb2bf2024312d3f1b86abb69644f695c76aca2d","ssdeep":"","tlshash":"a521f1e56fbc7ba362be2ae4a02e0041e001d53752f4f1d4f294dfb4a4e949d035b5b6","size":1232,"data":"","first_seen":"2025-08-22T10:11:14.554562Z","last_seen":"2026-03-04T04:00:43.411503Z","times_seen":3921,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_fast_deep_equal_RNYYWXHZ.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"00e44cad05af09626c2b10aeee7de5a3","sha1":"4461fd05cdd85255f4ab24edd5ac80e7b6dec92e","sha256":"5277a86b8db312b1e34318cb994829e113d8204c3a2e88ab594e5135b2bbfb2a","sha512":"548bf615b1118881d21a0cfd2d530b3f0ce1e14cc93cb6afce662b30ac70877fa152fd71b5d786bb2e43e31a1980e00b83106b1f4b3ae12fbb2ddbedf6c81841","ssdeep":"","tlshash":"901159c232e3a0d183e058cd1001d906f23969e9a4bca0c9c757e6b93cb2a53d87672a","size":865,"data":"","first_seen":"2025-08-22T10:11:14.567955Z","last_seen":"2026-03-04T04:00:43.420123Z","times_seen":3921,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_popper_js_WZJKYEQD.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"bea5b052c307601192270938523fa030","sha1":"937f7094c67f5a92c1032a7bc3f21ee94bec66ef","sha256":"f41290374ba615854ebb4b28a07de775581707f3b6427bcc01c0529c62476f64","sha512":"b9bff7f7d9b518ec76898a732114873c01206378c2a840c62062f05487ef773716ce841d7a5bafe3f0c65fbfdf05509852571a3a6b381661cb6f4984d6bc23a9","ssdeep":"384:ZP7iayBuR9vu3z1JXvykd2+LaqHdC6RjVnTGm/7piCXmH8kCCcvJTCyCu+meAxiZ:piZwO3XvO+NMSJt3XmckXcv4nxJAxiH5","tlshash":"7b92a28c7684b0a287a7a2a7a07f860f71376865650e9004f59cf6ec3c35dba507bc7d","size":21252,"data":"","first_seen":"2025-08-22T10:11:14.555802Z","last_seen":"2026-03-04T04:00:43.408775Z","times_seen":3920,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.painamour.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====?u=https://refpa749456.pro/L?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\u0026pb=b53d8e2ad6094a2c8a0466f2c882e18f\u0026click_id=cnv1bb87247345116b480f1dafce93906f7\u0026r=registration","fqdn":"s.painamour.com","domain":"painamour.com","tld":"com"},"ip":{"addr":"104.21.63.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"23b58def11b45727d3351702515f86af","sha1":"099600a10a944114aac406d136b625fb416dd779","sha256":"6c179f21e6f62b629055d8ab40f454ed02e48b68563913473b857d3638e23b28","sha512":"16b7aa7f7e549ba129c776bb91ce1e692da103271242d44a9bc145cf338450c90132496ead2530f527b1bd7f50544f37e7d27a2d2bbb58099890aa320f40aca9","ssdeep":"","tlshash":"c710000000000000000000300000000000000000000000000000000000000000000000","size":2,"data":"","first_seen":"2023-03-07T01:16:29Z","last_seen":"2026-06-13T08:42:54.059474Z","times_seen":3731,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.painamour.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====?u=https://refpa749456.pro/L?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\u0026pb=b53d8e2ad6094a2c8a0466f2c882e18f\u0026click_id=cnv1bb87247345116b480f1dafce93906f7\u0026r=registration","fqdn":"s.painamour.com","domain":"painamour.com","tld":"com"},"ip":{"addr":"104.21.63.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"63116ca3bdfc7ef0c9a09579faa8cb15","sha1":"d89ca9be8c6cead2d2a12f3e9a79edc27de2a6cc","sha256":"f670b2247c591e2af8adc9e0b31c64592554871c81deb0ccc4e7246f1ac4a5e2","sha512":"25de0033af0ccfafee7d4e9c99231c8bfc6004b082a03158be40c3536513493c4d8f7cfab57cf6c1a7e807ff4fe367c327f34bd9934978c352d294159e570a18","ssdeep":"","tlshash":"b7b0126612ce000bdf2212d452263c410f26317798c04c0161915c542c12c351114f6c","size":94,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-06-14T00:14:33.367261Z","times_seen":6440,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.painamour.com/h/2770/m25uuqneqv4fvnnjzhlixlgjwktuk556r32pn2w2vr5hq4l2pz7gieduafrcp565sgou4kqzzm3z6tpmk3r6w7osgpq6y67iohfo5rxmqc2nnipvnsbetrsjujzfrxsm7xl3lxujrko43dltrbi5lwmm3okk7nfwtz3o2sfnzhxjm4wdgrgpersvcesmkya2zjyh3hlsjjxomlfajfljs5l7zjfy5jtd7nimx32fqrklbxetvqy2a4l2lbyze3mw7tt7ytubot6uricvjhbhpsnbssjufr2hodlwmk2divhgsq34lz2fiyt5pzmuovl7ofxx262cmmbhy27uknbls4pcvxk6q5naorfzmqte3bhft4lsntve33fn76jfujgllfgnnuv2ozzpzakdmbivayrwjqgm4qjbd7jgyssifqf6u4xpv5coqrpx3f4z2y4o5n5yeuktfeadaxjsffyvmrkzpv5we7ltijsvi6laoqyxefiuariros2lnfahycdr5rjevqld636ics6hjjbhguzwjumcwf63onq56mdfywuwrnkimmvhs2m6jn3mbpdsxbkppnpawpbkr77v6fbpc4lufauhqwdaifzf64ypmf7cybkgkv7huzrjerawaubmhmtdi4cfieaqifyxdrajnnhtrphz3www3n3elsxyzguuoq437ts6pbfovpg4my3czhjmtvepwwi3te2rcpe4hmneieukpunvvwumtmvhxnlgc5l5dqbaywt2mdvn3n4nnjva6qlan7i5gqlw5dmhw7uq22op4ywmnbovqc2ku7zjqbgzg34s3sos2ceem3qpo4pfyethhmrdzqw5z3nor3edbuf6ryoj5hj7pj2t2bfn5tgspa======?u=https://refpa749456.pro/L?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\u0026pb=b53d8e2ad6094a2c8a0466f2c882e18f\u0026click_id=cnv1bb87247345116b480f1dafce93906f7\u0026r=registration","fqdn":"s.painamour.com","domain":"painamour.com","tld":"com"},"ip":{"addr":"104.21.63.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a0bb2b917a2139d1e28fe43296edbfd9","sha1":"30c72615ba6def457f66cc870475aa91f8a7d626","sha256":"46b547a2290e02d6379c03cb35d2d696000b0a69e950d4a987cab7631f039c05","sha512":"5fc9279c55799c4ed7baafd33331b8fa61ecba4a8e3cdf0a4d281af5955b85b69d9aef0afc730944cc17d7dd54fab79db45c629a947c955f5c19f658d6782585","ssdeep":"","tlshash":"2ca012b333c2840147c3209000172984c02583e200040943802089a7361d035f81692c","size":83,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-06-14T00:14:33.368939Z","times_seen":6427,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.painamour.com/h/2770/m25uuqneqv4fvnnjzhlixlgjwktuk556r32pn2w2vr5hq4l2pz7gieduafrcp565sgou4kqzzm3z6tpmk3r6w7osgpq6y67iohfo5rxmqc2nnipvnsbetrsjujzfrxsm7xl3lxujrko43dltrbi5lwmm3okk7nfwtz3o2sfnzhxjm4wdgrgpersvcesmkya2zjyh3hlsjjxomlfajfljs5l7zjfy5jtd7nimx32fqrklbxetvqy2a4l2lbyze3mw7tt7ytubot6uricvjhbhpsnbssjufr2hodlwmk2divhgsq34lz2fiyt5pzmuovl7ofxx262cmmbhy27uknbls4pcvxk6q5naorfzmqte3bhft4lsntve33fn76jfujgllfgnnuv2ozzpzakdmbivayrwjqgm4qjbd7jgyssifqf6u4xpv5coqrpx3f4z2y4o5n5yeuktfeadaxjsffyvmrkzpv5we7ltijsvi6laoqyxefiuariros2lnfahycdr5rjevqld636ics6hjjbhguzwjumcwf63onq56mdfywuwrnkimmvhs2m6jn3mbpdsxbkppnpawpbkr77v6fbpc4lufauhqwdaifzf64ypmf7cybkgkv7huzrjerawaubmhmtdi4cfieaqifyxdrajnnhtrphz3www3n3elsxyzguuoq437ts6pbfovpg4my3czhjmtvepwwi3te2rcpe4hmneieukpunvvwumtmvhxnlgc5l5dqbaywt2mdvn3n4nnjva6qlan7i5gqlw5dmhw7uq22op4ywmnbovqc2ku7zjqbgzg34s3sos2ceem3qpo4pfyethhmrdzqw5z3nor3edbuf6ryoj5hj7pj2t2bfn5tgspa======?u=https://refpa749456.pro/L?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\u0026pb=b53d8e2ad6094a2c8a0466f2c882e18f\u0026click_id=cnv1bb87247345116b480f1dafce93906f7\u0026r=registration","fqdn":"s.painamour.com","domain":"painamour.com","tld":"com"},"ip":{"addr":"104.21.63.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"225e21c7e2bf1b5238d7138335602ce3","sha1":"1f018c8954063352ba37ce827019b1cee535337b","sha256":"bff6e99d71258f7cc6e620b22752116e44e86545faa6d5c25d0ef2782d95f7f0","sha512":"33d4dd7fde48bc8824e9a9572f87d3ef8579510c278f0814a0e5b81e5780ed8dab2ecf9fe0068a01af21f56e4c1ef56d113a01ddd2871fa82204841778c741c6","ssdeep":"","tlshash":"4c9004fd50c01004c5571550157f1c4d407401f05ddc4cc1c045f5510cd3070111d5fc","size":42,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-03T02:26:01.798784Z","times_seen":5553,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_vue_deps_SVFQYWER.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"8271cba2e772055eeedb9d9ba51c4865","sha1":"5449e456d04946a212eb159b3a5277743d2dbb3b","sha256":"9194c59a3270e071e6dd250052eee77a200d6d29a99cd224a501e6a216ae81bc","sha512":"bad79d29c1b48b6269ea153be12e327f5b935be5cb498dd27075e865514c8ef9f2e36f4b3b688754a513c7ea95ec9ca684050dbc106ac0743509c929e0a069d2","ssdeep":"768:z5wZ1yyQB1UR5DNca4U7B0vZ1vEhicZr6CG4FH9H1KG7UXOA7:z5wWB1URXH4U7B0vZ1UicZrjG4jH176p","tlshash":"e2e25bd8b77abc72336e50cc94370313b37559a7584d9020e3a99fa23065a4382e7b7e","size":32325,"data":"","first_seen":"2026-01-14T17:17:28.233273Z","last_seen":"2026-02-11T03:04:26.800415Z","times_seen":183,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.painamour.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====?u=https://refpa749456.pro/L?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\u0026pb=b53d8e2ad6094a2c8a0466f2c882e18f\u0026click_id=cnv1bb87247345116b480f1dafce93906f7\u0026r=registration","fqdn":"s.painamour.com","domain":"painamour.com","tld":"com"},"ip":{"addr":"104.21.63.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"9fb507f661392bb18734a143229795e8","sha1":"004279a4f630424371fbe72b6c2c45ac86b59ddd","sha256":"e495c02fb62945e7a859af557a81c73673dde7789fa538536b9b8eb3958cf16f","sha512":"1c209d5ac784cc5f12d74cbc9a195349b1aee933077ec935720bfd1d38d6634b3e49552e96d1290bf351e298e37bf38886c8edf12a13409cd819ce6d271ce4ef","ssdeep":"","tlshash":"51b0127820e520d60d6311c920fb5b98e8a0523010204801c148cc7434f4d61401541c","size":91,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-06-14T00:14:33.369669Z","times_seen":6431,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.painamour.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====?u=https://refpa749456.pro/L?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\u0026pb=b53d8e2ad6094a2c8a0466f2c882e18f\u0026click_id=cnv1bb87247345116b480f1dafce93906f7\u0026r=registration","fqdn":"s.painamour.com","domain":"painamour.com","tld":"com"},"ip":{"addr":"104.21.63.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a3e1b26ce1ce08bf4ab2f623e5936f78","sha1":"36dc38e63d6d61672791ea9319134504def2ce9c","sha256":"f67d06b9b4c2938c52806c4801d3dc13946c9891a019b97f0608e9ffb4f99abc","sha512":"00913437703bba046f4422e7c21313193ddf026c11f5624362eec110934db74d3bdb96e35b37610b50f02833eee9e3a79054a124537810c52ff72c38dadde86b","ssdeep":"","tlshash":"cca024cf70c47101cc4730d0300f1c0c5454043c150c0cc443c0c5435d330d5c30555c","size":70,"data":"","first_seen":"2023-05-07T19:10:45Z","last_seen":"2026-04-03T02:26:01.794133Z","times_seen":5574,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.painamour.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====?u=https://refpa749456.pro/L?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\u0026pb=b53d8e2ad6094a2c8a0466f2c882e18f\u0026click_id=cnv1bb87247345116b480f1dafce93906f7\u0026r=registration","fqdn":"s.painamour.com","domain":"painamour.com","tld":"com"},"ip":{"addr":"104.21.63.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7215ee9c7d9dc229d2921a40e899ec5f","sha1":"b858cb282617fb0956d960215c8e84d1ccf909c6","sha256":"36a9e7f1c95b82ffb99743e0c5c4ce95d83c9a430aac59f84ef3cbfab6145068","sha512":"f90ddd77e400dfe6a3fcf479b00b1ee29e7015c5bb8cd70f5f15b4886cc339275ff553fc8a053f8ddc7324f45168cffaf81f8c3ac93996f6536eef38e5e40768","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","size":1,"data":"","first_seen":"2023-03-07T01:02:53Z","last_seen":"2026-06-14T00:58:22.954059Z","times_seen":38418,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.painamour.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====?u=https://refpa749456.pro/L?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\u0026pb=b53d8e2ad6094a2c8a0466f2c882e18f\u0026click_id=cnv1bb87247345116b480f1dafce93906f7\u0026r=registration","fqdn":"s.painamour.com","domain":"painamour.com","tld":"com"},"ip":{"addr":"104.21.63.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b138acf3e5898680079edfcdaca45458","sha1":"9e798e3712e5592a815d4a78aa95ed0cad2ed091","sha256":"7d01f773cc20c1c193ba74fcd1136b6b5a727e278a32e03acea6d822abaaf340","sha512":"e604ee8492813ae95aea43a77e7a68fa4360bed556a3183c35091083f9d4afe680abe2da327f35304baa775e692b13c7d4aabc6ae8371346cfede1cb95f37670","ssdeep":"","tlshash":"7d700000802808e0002000008a0223a02000c80a820a0822020828b2200080f8230080","size":21,"data":"","first_seen":"2023-03-07T14:16:26Z","last_seen":"2026-06-12T22:41:15.676165Z","times_seen":3350,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_base-app_1222199311.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"importedModule","is_inline":false,"md5":"2b26dc38d87c2ccf330b4c6cf4b99d22","sha1":"692112a84cd89104b049b5565d6af6a8ed855174","sha256":"69f22e62dc9fcb9b8812258b801db7e969c4ead5076776baf2f39c4dcbc0755e","sha512":"473f97c87b384a0f5d414dc73a85a4d52a6ffd6a503c6b3e6f7681f4b52a4d1c1d657525c7906266a4072daaf4ec44e43e82b98025c074c3203e2e8c96487ae2","ssdeep":"49152:RFLjP8EGOv5wPRISDDADzr2A2k4TJSB/n/wUx3WG:S4QnG","tlshash":"e1759d55f0467d223ee745e5a0771282669c5a9ec408f8a4f5fbcce83a8f44412afb7c","size":1638450,"data":"","first_seen":"2026-01-23T14:50:02.506325Z","last_seen":"2026-01-29T09:40:33.675848Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_1c3eaa7178.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"introduction_type":"scriptElement","is_inline":false,"md5":"414e8029e21e558fd9d07bd1d919c3c4","sha1":"616aa94cb106a7684ccc214de20d5a85071f8d70","sha256":"36d14d379f6c74f3bfaf138903d6f8aa4a6e0ae6f93f45303caadb0db6c0e1fa","sha512":"1a9d8949916f0f5ad19b45dbc7804768926698fe01c32fe4b435f00294a4c2632ca1e9e79c1cb774baeb18008fe8609e374ee6d5c27e92808c41c30545ee2550","ssdeep":"","tlshash":"47f0239b38949078076e27e09373d75a7052154d744abc30f7895c5878364e6641f65c","size":449,"data":"","first_seen":"2025-12-18T05:17:53.538942Z","last_seen":"2026-06-12T16:40:10.774289Z","times_seen":1260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"94b140fa5cb226a3fc0bb42652c4c5c7","sha1":"d289cf30fef5756415426059a044480d5179d8be","sha256":"57fefc59824cb22af7c36e8162412749d4dbd08f9cb28979781085cc2778c141","sha512":"55480559de6638b92e99abab1cc1ff41b7d6ad64575e93761e9ca38ed6521b33c4729f330b21ab041cb4a5d090dc2ce23132f081d49657c53d3d75e46d62bcb2","ssdeep":"6144:SLJmMvkbBYAxJ508XYoeXDZItDmlFldbKKCYTdq1on4MBxVg:EmM8bBYAxJ508XYPZItD4dqOg","tlshash":"edb4f99e73c53426939af478502f12cba8bb25a2b45dc8abb1c9ccf01d3459b4167f78","size":512221,"data":"","first_seen":"2026-01-25T17:01:32.209938Z","last_seen":"2026-01-25T17:01:32.209938Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/$_$.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:02.739Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/$_$.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-03801.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 69\r\ntraceparent: 00-b0db9467c9cc1c7bb4836a047ac01109-f59fa81fa6d41b27-01\r\nlast-modified: Fri, 23 Jan 2026 09:25:05 GMT\r\netag: \"2cdaa92927f02e0b628f1ef4d7dd8caf\"\r\nx-amz-meta-mtime: 1769160184.289784914\r\nexpires: Sat, 24 Jan 2026 13:41:43 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc14\r\nage: 11957\r\ncache: HIT\r\nx-cached-since: 2026-01-25T13:41:45+00:00\r\naccept-ranges: bytes\r\nx-shard: sto5-shard0-default_443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"2cdaa92927f02e0b628f1ef4d7dd8caf","sha1":"9104a2e16ed080b80a42588b8aeb52ebec47ab7a","sha256":"ef8101ffea52addcdcfcc3a83f96ff2d4613fb3ae6d1c16bbe4852387b73a9db","sha512":"31da80bc1b17aa708fef74b0211af91fce1b4a5f518f11e5caa80f50e9a7791b6e94924e381f550fc44a02f4c1d785e5b95fa2464e7968b5cab079612d70d839","ssdeep":"","tlshash":"1ba002935a5ef66c209044860696e74733823d6a3477b1d625bc5509e6061474817257","first_seen":"2025-05-14T05:06:37.199299Z","last_seen":"2026-03-18T19:40:26.76398Z","times_seen":5502,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_localforage_PJNUBKRP.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:03.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_localforage_PJNUBKRP.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-03801.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:03 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-4555a8445f67524586089aa965e012ff-f5a80e3c00f0897f-01\r\nlast-modified: Fri, 23 Jan 2026 15:40:15 GMT\r\netag: W/\"7e7ebd44e3a6550f862e122ab7df6409\"\r\nx-amz-meta-mtime: 1769182747.621963027\r\ncontent-encoding: gzip\r\nexpires: Sun, 25 Jan 2026 06:43:02 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc16\r\nage: 37080\r\ncache: HIT\r\nx-cached-since: 2026-01-25T06:43:03+00:00\r\nx-shard: sto5-shard0-default_443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30277,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (30255)","md5":"7e7ebd44e3a6550f862e122ab7df6409","sha1":"384ecbc3ab0f65e6b0f88c1e68ba3eb73fad4999","sha256":"138767518a09e63d24f918f6380923893a2ec3aa59a640e51c83517501823076","sha512":"e2766b50e289dc6a69fa30432a49a0b7743f15cd15a54d707959c7623f258057a821a94285c492746216cfbf815089309b6cc09b930ba7977ff9c4ffc352d76e","ssdeep":"768:wDKAOpvMewHFuM96WwZACjzz46zSTKsBE1OvFXfX1UXk:wm8uPW43zEIOvdlUU","tlshash":"a5d2b68c7799f02683bb3070907f580ef237a912594d90a0e591e5f86dbd75c822bfad","first_seen":"2025-08-22T10:11:14.535778Z","last_seen":"2026-03-04T04:00:43.425133Z","times_seen":3921,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-03801.world/seo-module-api/api/public/v1/analytics-counters?project[id]=285\u0026domain[host]=1xlite-03801.world","fqdn":"1xlite-03801.world","domain":"1xlite-03801.world","tld":"world"},"ip":{"addr":"83.147.224.168","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:03.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-03801.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Nov 2025 08:12:53 GMT","end":"Tue, 24 Feb 2026 08:12:52 GMT"},"fingerprint":{"sha1":"68:D8:EA:EB:4C:1A:04:AC:2A:DD:98:D4:E6:5C:A8:72:E6:AF:A5:FE","sha256":"F1:0B:50:F5:08:17:82:B7:89:E9:A7:A1:68:BE:9E:A3:4D:79:03:A5:83:9C:7C:FB:69:9E:58:61:98:1B:23:67"}}},"request":{"raw":"GET /seo-module-api/api/public/v1/analytics-counters?project[id]=285\u0026domain[host]=1xlite-03801.world HTTP/1.1\r\nHost: 1xlite-03801.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nis-srv: false\r\nx-svc-source: __TECHNICAL_PAGES_APP__\r\nx-app-n: __TECHNICAL_PAGES_APP__\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=U5PgqGl2TE6sPcbtBDWyAg==; lng=en; fatman_uuid=ceccc701-6436-4c91-a9f9-0a750ed2bf64; tzo=3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sun, 25 Jan 2026 17:01:03 GMT\r\ncontent-type: application/json\r\ncontent-length: 107\r\ncontent-encoding: br\r\ncache-control: max-age=1200, must-revalidate, public, s-maxage=1800, stale-if-error=86400, stale-while-revalidate=300\r\nx-content-digest: en6d0e5d6e0146a49c358c0eaad1d2ef38\r\nage: 1781\r\nx-request-id: d194bc32751db504f3cc235c133defab\r\nx-request-guid: d194bc32751db504f3cc235c133defab\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: p;dur=0.81706047058105, wf-uht;dur=\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":105,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6abfe5f6641fddde82c2ca29cf5c6a7a","sha1":"958379bc84073d266358a27b3cf86b15484f5f6d","sha256":"ede01772dfd8da2cc82f245e454ce360b2ceb13b7d1c330bbc1d68fe41255c19","sha512":"ecbaa34447669af053d49cc9b252812fc653923247f4b9e3629a55ba0cd919810e81b0f8be8f11a74401e0ed9c889bc7e6b02587b289c3b41142505b6a8fb42a","ssdeep":"","tlshash":"1db092219588ecb825036880409e1813d47870658ea616404d10c772806c1143421b7f","first_seen":"2024-05-18T12:55:24Z","last_seen":"2026-03-30T04:38:43.789364Z","times_seen":2956,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-25","alert":"Sinkholed","trigger":"1xlite-03801.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/3083a20a3f73c30fce38710d7ada9cbb.svg","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:03.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/3083a20a3f73c30fce38710d7ada9cbb.svg HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-03801.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:03 GMT\r\ncontent-type: image/svg+xml\r\ntraceparent: 00-656217106fba16ff5c49aedff362ef82-d381cf2d5d53a8ba-01\r\nlast-modified: Wed, 19 Apr 2023 11:51:30 GMT\r\netag: W/\"3ae81b002dca46d3b732ce3e03ae35c6\"\r\ncontent-encoding: gzip\r\nexpires: Fri, 09 May 2025 15:00:24 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc21\r\nage: 2390\r\ncache: HIT\r\nx-cached-since: 2026-01-25T16:21:13+00:00\r\nx-shard: sto5-shard0-default_443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1228,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3ae81b002dca46d3b732ce3e03ae35c6","sha1":"388d37b5f714937677de74330a8daab0a0d1196b","sha256":"1c76b93f07c6a861c4ad9529059ea99ae69f2451788da7cab1f17fa94d54382e","sha512":"48887848044da3a9a54b72a1f15a39ac0b30ea8ad7ddc3d4c69e51bb0479f39631d4b9098d289eecdaa9648db4118ddfa38cf76ef1a58718c67d70efc80a67a8","ssdeep":"","tlshash":"e72124be434d5bfb60025fd8967802513abaf0c2f29926ed55d674227903cf4d074955","first_seen":"2023-04-05T22:56:35Z","last_seen":"2026-06-12T16:40:10.777798Z","times_seen":2429,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=DC-14030178\u0026cx=c\u0026gtm=4e61m0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:13.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"GET /gtag/destination?id=DC-14030178\u0026cx=c\u0026gtm=4e61m0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-03801.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 25 Jan 2026 17:01:13 GMT\r\nexpires: Sun, 25 Jan 2026 17:01:13 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 25 Jan 2026 15:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:72:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:72:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:72:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:72:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 115995\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":330294,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5882)","md5":"dbb823005b1cf2f93529d0fd9e3d97f8","sha1":"9fa9ccb2cd91a2f0b1d7d7fe7216dfe783dd5d62","sha256":"a11dc8aa7fe5fd58b2376cc6ef0e79dee20eb915e635d844570439d5a53db7e7","sha512":"0d1e4049dd305ba9a8c34256c73de604453ea324287f40f4d41c3b5640e3bc991880f79bf96dfd7c553423263d5b15ffa01a7c0bb5bfff75ead2da62f026910f","ssdeep":"6144:TJmMvPyQAxJ508RYoeZSElFldbKKCY5dq4Qh9:VmMnyQAxJ508RYNSmdq99","tlshash":"7e6408cdb3d6746693a3a478403f114bb17b6992f84cc895f186d8e42e70aaa4177f3c","first_seen":"2026-01-25T15:06:57.365288Z","last_seen":"2026-01-26T07:45:23.623858Z","times_seen":6,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":28,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-03801.world/bff-api/config/group/get?groups=b.core,d.core\u0026lang=en","fqdn":"1xlite-03801.world","domain":"1xlite-03801.world","tld":"world"},"ip":{"addr":"83.147.224.168","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:03.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-03801.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Nov 2025 08:12:53 GMT","end":"Tue, 24 Feb 2026 08:12:52 GMT"},"fingerprint":{"sha1":"68:D8:EA:EB:4C:1A:04:AC:2A:DD:98:D4:E6:5C:A8:72:E6:AF:A5:FE","sha256":"F1:0B:50:F5:08:17:82:B7:89:E9:A7:A1:68:BE:9E:A3:4D:79:03:A5:83:9C:7C:FB:69:9E:58:61:98:1B:23:67"}}},"request":{"raw":"GET /bff-api/config/group/get?groups=b.core,d.core\u0026lang=en HTTP/1.1\r\nHost: 1xlite-03801.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nis-srv: false\r\nx-svc-source: __TECHNICAL_PAGES_APP__\r\nx-app-n: __TECHNICAL_PAGES_APP__\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=U5PgqGl2TE6sPcbtBDWyAg==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sun, 25 Jan 2026 17:01:03 GMT\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ncontent-encoding: br\r\nserver-timing: dt_total;dur=0.116, bff;dur=1.51, wf-uht;dur=0.020\r\nvary: Accept-Encoding\r\nx-cache-expire: 467\r\nx-cache-hit: 1\r\nx-dt: 285\r\nx-pod: R-ldxr5\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":47776,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3c428ef65f46b87ae5bc7fca2aabb1df","sha1":"a0b47ff01e9ef2c209d48b443780625ec7592d3f","sha256":"661fddee24ead8af30e6a876fcfb755a81e2e1f54423017b389971a5e9275651","sha512":"06b83329752c62b92963ded7e6cc6ce5ef1095938fe364c4260c490ee0e053bb80a5eb20dff8fe0b9651359b350c58caecf8b0e2a5ef9481d6b781910acdbd0a","ssdeep":"768:lkJXox7vaLCOxb1Mfxp2f++VgxwtJrqdsbzc+092IXeDV0ZKQWHLzQ:l6XuWeOB1MfxYf++CwtJr0Czc+09FOZi","tlshash":"dc23ec6e71d05a3a411f1efacc63ec0e57e81f1b1c93e46699e3bd8a28b191444e347e","first_seen":"2026-01-25T15:06:57.379607Z","last_seen":"2026-01-25T17:35:28.813762Z","times_seen":4,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-25","alert":"Sinkholed","trigger":"1xlite-03801.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_block_pages/en/dictionary_c7c82d0ec840dcaf32f6dfe636c4fafc.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:03.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_block_pages/en/dictionary_c7c82d0ec840dcaf32f6dfe636c4fafc.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-03801.world/\r\nOrigin: https://1xlite-03801.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:03 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-5c2964fe1ecec0efbbedff4036869dfd-7c6ce7921a99dfd1-01\r\nlast-modified: Wed, 17 Dec 2025 12:10:10 GMT\r\netag: W/\"573ca19484ed7b68628289de225c652b\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Wed, 17 Dec 2025 13:18:40 GMT\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc16\r\nage: 2547\r\ncache: HIT\r\nx-cached-since: 2026-01-25T16:18:36+00:00\r\nx-shard: sto5-shard0-default_443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2975,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"573ca19484ed7b68628289de225c652b","sha1":"2999f577da4581078174d2f467bdf80a5b884337","sha256":"89b905bf9f7efa10994d329be5ed307e2c48205e0a8a06be4801ccadebeadf3c","sha512":"7cfabf5198a96f2c4992fcd0dce602464be5f8b6f31d6e9686e82210185749fbbc6b3f70b22c90374cf2d095182d6a35f561e92b8f9e22098999bf3fc8c6943e","ssdeep":"","tlshash":"a651750f733c45e5383841403d0d6e6a7b160168afa29194fa8cd85d337f5cae12b22f","first_seen":"2025-12-18T00:40:38.951295Z","last_seen":"2026-02-11T03:04:26.783249Z","times_seen":346,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_2c84c6427b5d4b7133d6cd6a3c8933f2.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:03.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_2c84c6427b5d4b7133d6cd6a3c8933f2.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-03801.world/\r\nOrigin: https://1xlite-03801.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:03 GMT\r\ncontent-type: application/json; charset=utf-8\r\ntraceparent: 00-6190fc0885a136d1884be6b573dd891a-bd56b0d9bac045f4-01\r\nlast-modified: Thu, 22 Jan 2026 06:10:13 GMT\r\netag: W/\"344c45d9dd6dea17d9989f39e9686ba7\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Thu, 22 Jan 2026 07:46:01 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc15\r\nage: 286\r\ncache: HIT\r\nx-cached-since: 2026-01-25T16:56:17+00:00\r\nx-shard: sto5-shard0-default_443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":148115,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"344c45d9dd6dea17d9989f39e9686ba7","sha1":"7722f6379d14224e0b388866a44faeb54f8b0c27","sha256":"2c323f3e103fe035a63d8e31f1a03c0237bb147b49840e3cfb1ebf837fb0c2bd","sha512":"1c1067c5e9ef8f785ad822946f73d1912b4b63d707ab2758cdce74cc3189c2fdea2c77af8558b5e414d3ee382301970e3063745029d437a33f40be233877b67b","ssdeep":"3072:L4+H5u8iZcIkZPePfxxlRVPtE+IsLKHMc6WrDnRf7JmgpvZk:LXQXlRVPtE+ZKHZRf7JmghK","tlshash":"14e3d80a194c6e7b0fda12ddf98fdf4962b00045aab2c822d8eec51e7197fd2917714b","first_seen":"2026-01-22T13:09:34.627322Z","last_seen":"2026-01-25T17:35:28.775331Z","times_seen":23,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/site-admin/colors/ac807ea7bf6b3d0ff1813b5eadc3e98a.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:03.804Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/site-admin/colors/ac807ea7bf6b3d0ff1813b5eadc3e98a.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-03801.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:03 GMT\r\ncontent-type: text/css\r\ntraceparent: 00-35f68c2223ea0e17b298e8e70aac1689-fd890f9441c93b50-01\r\nlast-modified: Fri, 23 Jan 2026 14:28:57 GMT\r\netag: W/\"ac807ea7bf6b3d0ff1813b5eadc3e98a\"\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\nexpires: Fri, 23 Jan 2026 16:29:55 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc21\r\nage: 3072\r\ncache: HIT\r\nx-cached-since: 2026-01-25T16:09:51+00:00\r\nx-shard: sto5-shard0-default_443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41375,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (41375), with no line terminators","md5":"ac807ea7bf6b3d0ff1813b5eadc3e98a","sha1":"9483c1b722af655b4d51c04c5247ad367fd16a35","sha256":"8c57ea603f02d13f97aa644529208c4d11ef35834db2523eafbc44079aa7e147","sha512":"ffcec057ff5752012fd832655100cb49eb6080be33be273f6ad283feffb3e9de399f9ba788771f5aeff6cbe2e63018322a132d1952633f2516bb22c91fcd677b","ssdeep":"768:+EO1mFS775xWt5JkyunibMhSNmInQLeCA:+EO1mFI75xWt5JkyunibMhvInQLeB","tlshash":"f8037b7ded91c1712a991931911c677b3d36e9ceae240f8fd02c73e570c1a022be5a7a","first_seen":"2025-12-18T19:24:06.611705Z","last_seen":"2026-02-04T19:06:52.762739Z","times_seen":253,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaakmnr.com/v1/script.js?kmnrKey=123456789","fqdn":"aaakmnr.com","domain":"aaakmnr.com","tld":"com"},"ip":{"addr":"31.220.27.154","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://s.painamour.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====?u=https://refpa749456.pro/L?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\u0026pb=b53d8e2ad6094a2c8a0466f2c882e18f\u0026click_id=cnv1bb87247345116b480f1dafce93906f7\u0026r=registration","date":"2026-01-25T17:01:01.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaakmnr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 11:12:11 GMT","end":"Tue, 14 Apr 2026 11:12:10 GMT"},"fingerprint":{"sha1":"EC:D6:44:4F:28:46:9E:5E:AA:81:20:28:0F:15:FC:F9:39:79:05:0B","sha256":"D8:D6:E8:FF:25:4F:42:6D:DD:59:C5:12:CD:D8:4D:CC:B1:6B:1F:80:07:A5:74:0E:B9:69:23:06:6D:E3:12:AC"}}},"request":{"raw":"GET /v1/script.js?kmnrKey=123456789 HTTP/1.1\r\nHost: aaakmnr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s.painamour.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:01 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\naccept-ch: Width, Viewport-Width, DPR, Device-Memory, Downlink, RTT, ECT, Save-Data, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version\r\naccess-control-allow-headers: X-Requested-With, Cache-Control, Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50639,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49514), with CRLF line terminators","md5":"ca791f2ca4a492a242d4697cd9211779","sha1":"2403d0cb62afdc3572b3b0b4480facc980711242","sha256":"21b8c3bd25e3c796f39257a319cdd71900c4f71a5d32a61e4c3107388c7e11e4","sha512":"a2e4ed033f487150c7dcacad863b4059a3b92d4f5f1eaf67c28686583ab5ca2215d40de64fe10c3bb8cd8fc12cba09ffd901453944b2f5a0748624605178b0ff","ssdeep":"768:KYLCnCAt9PEqvSJsOq2Q5qS54vzQsHNk6q5iT1svGOfkiRJRX6BZV/D:KFPr72QEtLc5iRs+OfbJRKBZVb","tlshash":"57332bae7656a42490b7217a403f7605f23e1e6ad50484d0e566ccc03de9f8b6227ffd","first_seen":"2026-01-25T17:01:32.2051Z","last_seen":"2026-01-25T17:01:32.2051Z","times_seen":1,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":69,"dns":27,"connect":17,"send":0,"wait":34,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_3527178aeb.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:03.703Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_3527178aeb.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-03801.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:03 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 291\r\ntraceparent: 00-0e1e83679fc2ccdf83cf5869166104e8-61e62e5c2c32f92f-01\r\nlast-modified: Fri, 23 Jan 2026 15:40:18 GMT\r\netag: \"c705c140b60217c27ec8bc7bf7b4c4f1\"\r\nx-amz-meta-mtime: 1769182747.583961675\r\nexpires: Sun, 25 Jan 2026 09:18:52 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc20\r\nage: 27570\r\ncache: HIT\r\nx-cached-since: 2026-01-25T09:21:33+00:00\r\naccept-ranges: bytes\r\nx-shard: sto5-shard0-default_443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":291,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"Java source, ASCII text","md5":"c705c140b60217c27ec8bc7bf7b4c4f1","sha1":"7cad410f5369c4e81b6e07b2162310db621b5526","sha256":"9c864efdf018b52d35bbb01943dc4806c82b39b3a33bdb89649ef9ef957a7101","sha512":"ec036223857c3a8d0f1cd7d61b50efa8fdfb1e7c65af40cbf268d3350732bf3a71d87c83251e5d6e3e4e78f48fd0726dfa602121a9483df3fc94d47b27010fb6","ssdeep":"","tlshash":"12d0eb3d6ff1a0b4331528ff321b75d2330a3804530ac4a300a6036802c80f4b235e3a","first_seen":"2026-01-23T14:50:02.456569Z","last_seen":"2026-01-29T09:40:33.668672Z","times_seen":46,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_1c3eaa7178.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:13.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_1c3eaa7178.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-03801.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:13 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 449\r\ntraceparent: 00-c1deda67cadca79c203c98f2987a2dfc-abf2a0b7628225a6-01\r\nlast-modified: Fri, 23 Jan 2026 15:40:18 GMT\r\netag: \"414e8029e21e558fd9d07bd1d919c3c4\"\r\nx-amz-meta-mtime: 1769182747.58296164\r\nexpires: Sun, 25 Jan 2026 04:14:19 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc21\r\nage: 46000\r\ncache: HIT\r\nx-cached-since: 2026-01-25T04:14:33+00:00\r\naccept-ranges: bytes\r\nx-shard: sto5-shard0-default_443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":449,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (448)","md5":"414e8029e21e558fd9d07bd1d919c3c4","sha1":"616aa94cb106a7684ccc214de20d5a85071f8d70","sha256":"36d14d379f6c74f3bfaf138903d6f8aa4a6e0ae6f93f45303caadb0db6c0e1fa","sha512":"1a9d8949916f0f5ad19b45dbc7804768926698fe01c32fe4b435f00294a4c2632ca1e9e79c1cb774baeb18008fe8609e374ee6d5c27e92808c41c30545ee2550","ssdeep":"","tlshash":"47f0239b38949078076e27e09373d75a7052154d744abc30f7895c5878364e6641f65c","first_seen":"2025-12-18T05:17:53.538942Z","last_seen":"2026-06-12T16:40:10.774289Z","times_seen":1260,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/destination?id=AW-16664555628\u0026cx=c\u0026gtm=4e61m0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:13.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"GET /gtag/destination?id=AW-16664555628\u0026cx=c\u0026gtm=4e61m0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-03801.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 25 Jan 2026 17:01:13 GMT\r\nexpires: Sun, 25 Jan 2026 17:01:13 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 25 Jan 2026 15:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgsrsghrgc:72:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascgsrsghrgc:72:0\r\nreport-to: {\"group\":\"ascgsrsghrgc:72:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgsrsghrgc:72:0\"}],}\r\nserver: Google Tag Manager\r\ncontent-length: 130469\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":382743,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5882)","md5":"218bcb648d6d81f9ca8cfaf6b76c3702","sha1":"d231e77749fa8def40fca615067577c9b38b45b9","sha256":"83a38441d476c76fa045cea9030a228a46261cfb56ca324e25b92b46ae8e17fb","sha512":"bdb7fd1d0d2a165884f398611bd3051e8756167febae2322f4bab8035aece16a43690171a0459df85d06393848791c1f4c8ee6bda4afa54afabcc4843029ea80","ssdeep":"6144:uJmMvPWQAxJ508RYoeXDIItDmlFldbKKCY5dqbQlS4:GmMnWQAxJ508RYPIItDIdqP4","tlshash":"318418dd73d6702693a3a478403f118ba57b69a2f44cc899f189cce42e74a9a4177f3c","first_seen":"2026-01-25T09:08:11.865676Z","last_seen":"2026-01-26T03:38:24.68273Z","times_seen":7,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_css_542ed6.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:02.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_css_542ed6.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-03801.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-03801.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:02 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-e23cede7cd2c807bdcc40135d7250ca0-5b36d320b99bc362-01\r\nlast-modified: Fri, 23 Jan 2026 15:40:18 GMT\r\netag: W/\"7eb4f3d4c97ec66a32269ae3b07d7653\"\r\nx-amz-meta-mtime: 1769182748.078979279\r\ncontent-encoding: gzip\r\nexpires: Sun, 25 Jan 2026 03:33:10 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc19\r\nage: 48471\r\ncache: HIT\r\nx-cached-since: 2026-01-25T03:33:11+00:00\r\nx-shard: sto5-shard0-default_443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11025,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (11024)","md5":"7eb4f3d4c97ec66a32269ae3b07d7653","sha1":"e31f7fc270a78d455c90a57d8c365bccf6ebdfb0","sha256":"542ed6b44d2771468d5e5d4c77dfddaab1f7d4169bf692a087c56f024d9813dc","sha512":"02195935d732af0ae4dceecb4677bcb4ad90d284dfbd27a707ee927fc587fb3a9bacc8bd8cf315ee025b67d1a53b33fb0e9ced17d24ea019deb2a0be9765ec37","ssdeep":"192:mLhA5ZO73iyDDW7qE/eVgnmnh8RbxJEU4PuiPBvDDQ7qOtIZ4Io:QAXOLisDUqE/Y8RbxUuwBLDCqOt24v","tlshash":"cc3226adc9e495231d26b5216388be7c85f0f06aee314e55f80ec6104ad3f9f15e0e79","first_seen":"2025-08-13T23:36:01.800779Z","last_seen":"2026-03-04T04:00:43.402045Z","times_seen":3922,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":89,"dns":39,"connect":8,"send":0,"wait":34,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_accept_language_parser_LEQ4UAP5.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:03.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_accept_language_parser_LEQ4UAP5.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-03801.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:03 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-bd1308634b05cb49a08f13166ef076de-e5a8a4c1ecbe0b4c-01\r\nlast-modified: Fri, 23 Jan 2026 15:40:15 GMT\r\netag: W/\"83e311eb8e222d229b6177bd007ce9eb\"\r\nx-amz-meta-mtime: 1769182747.620962991\r\ncontent-encoding: gzip\r\nexpires: Sun, 25 Jan 2026 09:22:54 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc21\r\nage: 27196\r\ncache: HIT\r\nx-cached-since: 2026-01-25T09:27:47+00:00\r\nx-shard: sto5-shard0-default_443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1297,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1265)","md5":"83e311eb8e222d229b6177bd007ce9eb","sha1":"96b851ffda0eab794c2bb637255a48ae25770144","sha256":"d0ff62de588e1c47eedbd91a89dcf394e2ec5bd09392ea556b9a34108077e9ad","sha512":"fd2e1bfb6588598e356ddc08724c2e6f602b89626b30eeca2c25b8f60340f25e28a761b8e13b75d1627172530abf7dd0e586e792f53759d08bda626145f65b0d","ssdeep":"","tlshash":"202112debed2b5908394188c4e2ec055f23a2957641ce6fcd765e7827c403a186f3c1d","first_seen":"2025-08-22T10:11:14.559442Z","last_seen":"2026-03-04T04:00:43.42063Z","times_seen":3921,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_chunk_LNU73JEK.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:03.065Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_chunk_LNU73JEK.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-03801.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:03 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-b8c9d79f861a1a7334a41f17ade638d4-bcad4d0c7f177168-01\r\nlast-modified: Fri, 23 Jan 2026 15:40:15 GMT\r\netag: W/\"d96d317966512ab8915a90670ca5a5af\"\r\nx-amz-meta-mtime: 1769182747.621963027\r\ncontent-encoding: gzip\r\nexpires: Sat, 24 Jan 2026 18:31:29 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc22\r\nage: 80973\r\ncache: HIT\r\nx-cached-since: 2026-01-24T18:31:30+00:00\r\nx-shard: sto5-shard0-default_443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1232,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1231)","md5":"d96d317966512ab8915a90670ca5a5af","sha1":"a810be1c3e515adb49804e8d976250deb16fd77d","sha256":"f125201d62c452efba070d856821885c7cfd539a31d55846caa6ae3a7522d3cf","sha512":"460b29966e6f5ac4d34ccc714217d29686d7aff42efa92a102729d40aa36dd4fbb87116178b2f9fdece5fdb09cb2bf2024312d3f1b86abb69644f695c76aca2d","ssdeep":"","tlshash":"a521f1e56fbc7ba362be2ae4a02e0041e001d53752f4f1d4f294dfb4a4e949d035b5b6","first_seen":"2025-08-22T10:11:14.554562Z","last_seen":"2026-03-04T04:00:43.411503Z","times_seen":3921,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-03801.world/bff-api/config/group/get?groups=d.technical,d.global\u0026lang=en","fqdn":"1xlite-03801.world","domain":"1xlite-03801.world","tld":"world"},"ip":{"addr":"83.147.224.168","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:03.331Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-03801.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Nov 2025 08:12:53 GMT","end":"Tue, 24 Feb 2026 08:12:52 GMT"},"fingerprint":{"sha1":"68:D8:EA:EB:4C:1A:04:AC:2A:DD:98:D4:E6:5C:A8:72:E6:AF:A5:FE","sha256":"F1:0B:50:F5:08:17:82:B7:89:E9:A7:A1:68:BE:9E:A3:4D:79:03:A5:83:9C:7C:FB:69:9E:58:61:98:1B:23:67"}}},"request":{"raw":"GET /bff-api/config/group/get?groups=d.technical,d.global\u0026lang=en HTTP/1.1\r\nHost: 1xlite-03801.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nis-srv: false\r\nx-svc-source: __TECHNICAL_PAGES_APP__\r\nx-app-n: __TECHNICAL_PAGES_APP__\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=U5PgqGl2TE6sPcbtBDWyAg==; lng=en; fatman_uuid=ceccc701-6436-4c91-a9f9-0a750ed2bf64; tzo=3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sun, 25 Jan 2026 17:01:03 GMT\r\ncontent-type: application/json\r\ncache-control: no-cache, private\r\ncontent-encoding: br\r\nserver-timing: dt_total;dur=0.114, bff;dur=0.95, wf-uht;dur=0.278\r\nvary: Accept-Encoding\r\nx-cache-expire: 568\r\nx-cache-hit: 1\r\nx-dt: 285\r\nx-pod: R-x8bs7\r\nx-time-ng: 0.268\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":1373,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1ba49e6097fc1ec2fee017199c0a5de8","sha1":"abe5e8edd1788c6a50cd76ac1cba37182397d946","sha256":"e60811adb7410d61f63d2bbd1c354e7912acca507e9bd67771ff8012fec1a3f7","sha512":"411264be9505984a7f1cd72823a462943373d6b0d1cb21db206934516c5e7bba2ad24725e6892567d0c83110b80b6328fc5e7884dc60b298fcde5fe17921dd77","ssdeep":"","tlshash":"e221765e20b5c63c60680676db82be449efd405f3580b881fd0c9c5c60e2ceefa2254f","first_seen":"2026-01-15T22:59:41.337307Z","last_seen":"2026-02-09T06:38:19.884931Z","times_seen":117,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-25","alert":"Sinkholed","trigger":"1xlite-03801.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:13.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"GET /gtag/js?id=G-7JGWL9SV66 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-03801.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 25 Jan 2026 17:01:13 GMT\r\nexpires: Sun, 25 Jan 2026 17:01:13 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 162171\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":512221,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12571)","md5":"94b140fa5cb226a3fc0bb42652c4c5c7","sha1":"d289cf30fef5756415426059a044480d5179d8be","sha256":"57fefc59824cb22af7c36e8162412749d4dbd08f9cb28979781085cc2778c141","sha512":"55480559de6638b92e99abab1cc1ff41b7d6ad64575e93761e9ca38ed6521b33c4729f330b21ab041cb4a5d090dc2ce23132f081d49657c53d3d75e46d62bcb2","ssdeep":"6144:SLJmMvkbBYAxJ508XYoeXDZItDmlFldbKKCYTdq1on4MBxVg:EmM8bBYAxJ508XYPZItD4dqOg","tlshash":"edb4f99e73c53426939af478502f12cba8bb25a2b45dc8abb1c9ccf01d3459b4167f78","first_seen":"2026-01-25T17:01:32.209938Z","last_seen":"2026-01-25T17:01:32.209938Z","times_seen":1,"resource_available":true,"data":null}},"time_used":322,"timings":{"blocked":127,"dns":0,"connect":24,"send":0,"wait":35,"receive":30,"ssl":101},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je61m1h2v897130004za200zb9180563600zd9180563600\u0026_p=1769360473283\u0026em=tv.1~em.ODS1igyfeIhzOTHENqwIfH1sb8t0oxg8FT6iY2YCmeo\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=1870063262.1769360474\u0026ecid=1499575741\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026ec_mode=a\u0026_eu=AAAAAGA\u0026_s=2\u0026tag_exp=103116026~103200004~104527907~104528500~104684208~104684211~105391253~115495939~115616986~115938465~115938468~116682875~116988316~116992597~117041588~117042505\u0026sid=1769360473\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-03801.world%2Fen%2Fblock%3Ftag%3Ds_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\u0026dt=1xBet\u0026_tu=KA\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026ep.optimize_id=GTM-5R4MT54\u0026tfd=12191","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:14.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je61m1h2v897130004za200zb9180563600zd9180563600\u0026_p=1769360473283\u0026em=tv.1~em.ODS1igyfeIhzOTHENqwIfH1sb8t0oxg8FT6iY2YCmeo\u0026_gaz=1\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=1870063262.1769360474\u0026ecid=1499575741\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026ec_mode=a\u0026_eu=AAAAAGA\u0026_s=2\u0026tag_exp=103116026~103200004~104527907~104528500~104684208~104684211~105391253~115495939~115616986~115938465~115938468~116682875~116988316~116992597~117041588~117042505\u0026sid=1769360473\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-03801.world%2Fen%2Fblock%3Ftag%3Ds_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\u0026dt=1xBet\u0026_tu=KA\u0026en=page_view\u0026_fv=1\u0026_nsi=1\u0026_ss=1\u0026_ee=1\u0026ep.optimize_id=GTM-5R4MT54\u0026tfd=12191 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-03801.world/\r\nOrigin: https://1xlite-03801.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://1xlite-03801.world\r\ndate: Sun, 25 Jan 2026 17:01:14 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:170:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:170:0\r\nreport-to: {\"group\":\"ascnsrsggc:170:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:170:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-14T01:33:42.567327Z","times_seen":16400444,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":46,"dns":1,"connect":8,"send":0,"wait":20,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/entry-120b320b33.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:02.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/entry-120b320b33.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-03801.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-03801.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-8397f95807d9f7b81b47274941249eb2-095bd9c50770d355-01\r\nlast-modified: Fri, 23 Jan 2026 09:25:05 GMT\r\netag: W/\"98b34ded77b03b2aa96af620358bd5eb\"\r\nx-amz-meta-mtime: 1769160184.307786477\r\ncontent-encoding: gzip\r\nexpires: Sat, 24 Jan 2026 09:28:05 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.007\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc15\r\nage: 27148\r\ncache: HIT\r\nx-cached-since: 2026-01-25T09:28:34+00:00\r\nx-shard: sto5-shard0-default_443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27342,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26620)","md5":"98b34ded77b03b2aa96af620358bd5eb","sha1":"4ffe818756a51a5990be5003ef3caf17d777d86b","sha256":"8a6bfe61ad468f380a0188a3ca9a90a2f80b1f435fc0aa87018ac3bdf65a1405","sha512":"b5e3393f8e118f63502034792ce0c026279be791c8040a1262f0a5a9f203bb31e910e2ac97c9d0102f440525cf2965ea0417f76592787b346808837da4118ada","ssdeep":"768:HIl5dHMdKVl3PKMwj6cVcvGwEAJq8ETTugwB64ZV7Z91FzKMjzF++S5yuebuJNtQ:olFVNKMwj6cVcmNyjJuM","tlshash":"55c2527c21a8f0f5308b599437f6bc5266886d1ff98afc9a508789c807da04cc9653bf","first_seen":"2026-01-23T14:50:02.450114Z","last_seen":"2026-01-29T09:40:33.667918Z","times_seen":35,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_popper_js_WZJKYEQD.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:03.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_popper_js_WZJKYEQD.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-03801.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:03 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-6aa3ac078a3bb71aa758ac125382b284-7c20b4bd556ae6fc-01\r\nlast-modified: Fri, 23 Jan 2026 15:40:15 GMT\r\netag: W/\"bea5b052c307601192270938523fa030\"\r\nx-amz-meta-mtime: 1769182747.621963027\r\ncontent-encoding: gzip\r\nexpires: Sun, 25 Jan 2026 10:22:49 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc14\r\nage: 23893\r\ncache: HIT\r\nx-cached-since: 2026-01-25T10:22:50+00:00\r\nx-shard: sto5-shard0-default_443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21252,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (21232)","md5":"bea5b052c307601192270938523fa030","sha1":"937f7094c67f5a92c1032a7bc3f21ee94bec66ef","sha256":"f41290374ba615854ebb4b28a07de775581707f3b6427bcc01c0529c62476f64","sha512":"b9bff7f7d9b518ec76898a732114873c01206378c2a840c62062f05487ef773716ce841d7a5bafe3f0c65fbfdf05509852571a3a6b381661cb6f4984d6bc23a9","ssdeep":"384:ZP7iayBuR9vu3z1JXvykd2+LaqHdC6RjVnTGm/7piCXmH8kCCcvJTCyCu+meAxiZ:piZwO3XvO+NMSJt3XmckXcv4nxJAxiH5","tlshash":"7b92a28c7684b0a287a7a2a7a07f860f71376865650e9004f59cf6ec3c35dba507bc7d","first_seen":"2025-08-22T10:11:14.555802Z","last_seen":"2026-03-04T04:00:43.408775Z","times_seen":3920,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/a9e0022052044ff7404336f86137f19b.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:03.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/a9e0022052044ff7404336f86137f19b.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-03801.world/\r\nOrigin: https://1xlite-03801.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:03 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-a27931c0beb054028cd6b5d2bec46b0f-85ec9a69775b3bbb-01\r\nlast-modified: Wed, 24 Dec 2025 14:23:13 GMT\r\netag: W/\"90539e045cd6aee730f89f811acc4a30\"\r\ncontent-encoding: gzip\r\nexpires: Wed, 24 Dec 2025 15:50:59 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc21\r\nage: 2086\r\ncache: HIT\r\nx-cached-since: 2026-01-25T16:26:17+00:00\r\nx-shard: sto5-shard0-default_443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1712,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"90539e045cd6aee730f89f811acc4a30","sha1":"b419105e1bca131d03bf88ea751fb2220fd35df8","sha256":"df5274eabaedc02741f745d19342175eb01707560f5867a537227190cea40537","sha512":"1e9d298520ec854b8e75b4c8961d9f8e30c26dd764542472ce0b2b23787156c4254a7024c435a04a832a37a00c8714c8d725647fd66d9935f6094b0749db0fc6","ssdeep":"","tlshash":"da31dc89fbf02cb3302f90ed99b7b54ed3880f07ac566d54ba5c754c2b54516006ad7e","first_seen":"2025-12-24T17:22:02.953849Z","last_seen":"2026-03-09T08:17:21.757896Z","times_seen":496,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"region1.analytics.google.com/g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je61m1h2v897130004za200zb9180563600zd9180563600\u0026_p=1769360473283\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=1870063262.1769360474\u0026ecid=1499575741\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AEAAAGQ\u0026_s=1\u0026tag_exp=103116026~103200004~104527907~104528500~104684208~104684211~105391253~115495939~115616986~115938465~115938468~116682875~116988316~116992597~117041588~117042505\u0026sid=1769360473\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-03801.world%2Fen%2Fblock%3Ftag%3Ds_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\u0026dt=1xBet\u0026en=scroll\u0026ep.optimize_id=GTM-5R4MT54\u0026epn.percent_scrolled=90\u0026upn.ref_id=1\u0026tfd=12190","fqdn":"region1.analytics.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.239.32.36","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:14.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"POST /g/collect?v=2\u0026tid=G-7JGWL9SV66\u0026gtm=45je61m1h2v897130004za200zb9180563600zd9180563600\u0026_p=1769360473283\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026dma_cps=syphamo\u0026dma=1\u0026cid=1870063262.1769360474\u0026ecid=1499575741\u0026ul=en-us\u0026sr=1280x1024\u0026frm=0\u0026pscdl=noapi\u0026_eu=AEAAAGQ\u0026_s=1\u0026tag_exp=103116026~103200004~104527907~104528500~104684208~104684211~105391253~115495939~115616986~115938465~115938468~116682875~116988316~116992597~117041588~117042505\u0026sid=1769360473\u0026sct=1\u0026seg=0\u0026dl=https%3A%2F%2F1xlite-03801.world%2Fen%2Fblock%3Ftag%3Ds_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\u0026dt=1xBet\u0026en=scroll\u0026ep.optimize_id=GTM-5R4MT54\u0026epn.percent_scrolled=90\u0026upn.ref_id=1\u0026tfd=12190 HTTP/1.1\r\nHost: region1.analytics.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-03801.world/\r\nOrigin: https://1xlite-03801.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\naccess-control-allow-origin: https://1xlite-03801.world\r\ndate: Sun, 25 Jan 2026 17:01:14 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:170:0\r\ncross-origin-opener-policy-report-only: same-origin; report-to=ascnsrsggc:170:0\r\nreport-to: {\"group\":\"ascnsrsggc:170:0\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:170:0\"}],}\r\nserver: Golfe2\r\ncontent-length: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-14T01:33:42.567327Z","times_seen":16400444,"resource_available":true,"data":null}},"time_used":92,"timings":{"blocked":34,"dns":1,"connect":10,"send":0,"wait":19,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_fast_deep_equal_RNYYWXHZ.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:03.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_fast_deep_equal_RNYYWXHZ.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-03801.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:03 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 865\r\ntraceparent: 00-c273bd59a1f2fc594906c19fc68760ec-a76f2dd5546308c5-01\r\nlast-modified: Fri, 23 Jan 2026 15:40:15 GMT\r\netag: \"00e44cad05af09626c2b10aeee7de5a3\"\r\nx-amz-meta-mtime: 1769182747.621963027\r\nexpires: Sat, 24 Jan 2026 21:58:46 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc10\r\nage: 68536\r\ncache: HIT\r\nx-cached-since: 2026-01-24T21:58:47+00:00\r\naccept-ranges: bytes\r\nx-shard: sto5-shard0-default_443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":865,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (840)","md5":"00e44cad05af09626c2b10aeee7de5a3","sha1":"4461fd05cdd85255f4ab24edd5ac80e7b6dec92e","sha256":"5277a86b8db312b1e34318cb994829e113d8204c3a2e88ab594e5135b2bbfb2a","sha512":"548bf615b1118881d21a0cfd2d530b3f0ce1e14cc93cb6afce662b30ac70877fa152fd71b5d786bb2e43e31a1980e00b83106b1f4b3ae12fbb2ddbedf6c81841","ssdeep":"","tlshash":"901159c232e3a0d183e058cd1001d906f23969e9a4bca0c9c757e6b93cb2a53d87672a","first_seen":"2025-08-22T10:11:14.567955Z","last_seen":"2026-03-04T04:00:43.420123Z","times_seen":3921,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/09e5237db8d5432fa160874c221307c2.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:03.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/09e5237db8d5432fa160874c221307c2.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-03801.world/\r\nOrigin: https://1xlite-03801.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:03 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-7d78521d7362fc5068ba8fbeb019d54f-dba53640f28a23f4-01\r\nlast-modified: Sun, 11 Jan 2026 03:45:30 GMT\r\netag: W/\"1881d91c6fa96142af49d6f4c76d523d\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 11 Jan 2026 04:51:20 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc19\r\nage: 3113\r\ncache: HIT\r\nx-cached-since: 2026-01-25T16:09:10+00:00\r\nx-shard: sto5-shard0-default_443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3239,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"1881d91c6fa96142af49d6f4c76d523d","sha1":"4c6286dfad566142376ff8656b4e497f2c0b4da2","sha256":"3661d1a5396ba25400e52a77be8407489c5e00b15f4ae7f117aca62c56ee290f","sha512":"1d3bbb35229319e49357176c569a28cb1f44d528b5ac782e0185b6fe7882ecdb013197b5f89b85bee1df037fa53b8d1fd844839360dd86b7bc3e7820a666076e","ssdeep":"","tlshash":"d2614c89f6e41c33002f59bdc0f77a2993d81f4f684a7c283a9d2c4d1bd451900aad3e","first_seen":"2026-01-11T08:38:28.381696Z","last_seen":"2026-03-31T08:13:38.461421Z","times_seen":366,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"radar.cedexis.com/1/23802/radar.js","fqdn":"radar.cedexis.com","domain":"cedexis.com","tld":"com"},"ip":{"addr":"104.18.4.213","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:13.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.cedexis.com","organization":"Citrix Systems, Inc."},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 04 Mar 2025 00:00:00 GMT","end":"Tue, 03 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"40:1F:1C:04:04:94:FB:2D:7E:C0:26:1A:95:75:97:58:33:9B:50:1F","sha256":"48:3A:9A:8C:71:EA:33:9C:74:D3:3E:91:AD:55:B3:F5:4B:25:EC:A1:E9:18:4A:DF:58:64:66:54:7A:F5:A4:5E"}}},"request":{"raw":"GET /1/23802/radar.js HTTP/1.1\r\nHost: radar.cedexis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-03801.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 25 Jan 2026 17:01:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 0\r\ncf-ray: 9c3954d00f95b512-OSL\r\ncache-control: public, max-age=172800\r\nx-content-type-options: nosniff\r\nx-cache: FunctionGeneratedResponse from cloudfront\r\nvia: 1.1 9786ec469d62f3b53938082150cd0248.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: FRA56-P13\r\nx-amz-cf-id: Vq9wRNUpHO3nTywF_ahwnCL4B9iDCrwwrq9dfwQ-sfH8IZ5XdPS-HA==\r\nexpires: Tue, 27 Jan 2026 17:01:13 GMT\r\naccept-ranges: bytes\r\nlast-modified: Sat, 24 Jan 2026 11:29:06 GMT\r\nage: 106327\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-14T01:33:42.567327Z","times_seen":16400444,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":2,"dns":0,"connect":1,"send":0,"wait":17,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66\u0026cx=c\u0026gtm=4e61m0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:13.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"GET /gtag/js?id=G-7JGWL9SV66\u0026cx=c\u0026gtm=4e61m0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-03801.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 25 Jan 2026 17:01:13 GMT\r\nexpires: Sun, 25 Jan 2026 17:01:13 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 162201\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":512206,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12571)","md5":"45b9a90c01e0d71619474dfbf9bf4ef2","sha1":"aecba17a73b3447ecd32275ad58a25f6a7c0f721","sha256":"be1cfff70b8bac1b9841908cb6cd402e5b8ea7cdd83ae4743cdcff98d0f6cdd5","sha512":"30d4764244167858bab13d6923a1d7e245070ab0f9af5518999b98c782e4e41e6f04f67cb2cd4aa4d57642bcc59b862379cdd0992187d8efe4a5ce2e5cc6d5b0","ssdeep":"6144:SQJmMvkbBGAxJ508XYoeXDZItDmlFldbKKCYTdq1on4MBxVg:/mM8bBGAxJ508XYPZItD4dqOg","tlshash":"99b4f99e73c53426939af478502f12cba8bb25a2b45dc8abb1c9ccf01d3459b4167f78","first_seen":"2026-01-25T09:08:11.887229Z","last_seen":"2026-01-26T07:45:23.584208Z","times_seen":3,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/__shared_vue_deps_SVFQYWER.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:03.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/shared-assets/__shared_vue_deps_SVFQYWER.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-03801.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:03 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-676536c1bf9e2d55ec770a04d5804664-33ba2f593f6ecb1a-01\r\nlast-modified: Fri, 23 Jan 2026 15:40:15 GMT\r\netag: W/\"8271cba2e772055eeedb9d9ba51c4865\"\r\nx-amz-meta-mtime: 1769182747.622963062\r\ncontent-encoding: gzip\r\nexpires: Sun, 25 Jan 2026 07:42:31 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc21\r\nage: 33480\r\ncache: HIT\r\nx-cached-since: 2026-01-25T07:43:03+00:00\r\nx-shard: sto5-shard0-default_443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32325,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32184)","md5":"8271cba2e772055eeedb9d9ba51c4865","sha1":"5449e456d04946a212eb159b3a5277743d2dbb3b","sha256":"9194c59a3270e071e6dd250052eee77a200d6d29a99cd224a501e6a216ae81bc","sha512":"bad79d29c1b48b6269ea153be12e327f5b935be5cb498dd27075e865514c8ef9f2e36f4b3b688754a513c7ea95ec9ca684050dbc106ac0743509c929e0a069d2","ssdeep":"768:z5wZ1yyQB1UR5DNca4U7B0vZ1vEhicZr6CG4FH9H1KG7UXOA7:z5wWB1URXH4U7B0vZ1UicZrjG4jH176p","tlshash":"e2e25bd8b77abc72336e50cc94370313b37559a7584d9020e3a99fa23065a4382e7b7e","first_seen":"2026-01-14T17:17:28.233273Z","last_seen":"2026-02-11T03:04:26.800415Z","times_seen":183,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2F1xlite-03801.world%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026rnd=1311910687.1769360474\u0026dt=1xBet\u0026auid=28406754.1769360474\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He61m0v9180563600za200zd9180563600xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=102015666~103116026~103200004~104527907~104528500~104684208~104684211~105391252~115938465~115938469~116185179~116185180~116682875~116992597~117041588~117042506\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1769360473686\u0026tfd=11779","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:13.758Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:53:09 GMT","end":"Mon, 23 Mar 2026 19:53:08 GMT"},"fingerprint":{"sha1":"48:33:DD:3F:0B:48:93:34:93:FB:CD:86:06:0B:02:0A:26:C8:9D:34","sha256":"51:93:52:C6:2F:18:71:EC:3A:8F:29:E1:74:86:FF:6C:A2:EC:19:58:65:2A:9C:A2:DF:E5:86:6A:E9:6A:73:7E"}}},"request":{"raw":"POST /ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2F1xlite-03801.world%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026rnd=1311910687.1769360474\u0026dt=1xBet\u0026auid=28406754.1769360474\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He61m0v9180563600za200zd9180563600xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=102015666~103116026~103200004~104527907~104528500~104684208~104684211~105391252~115938465~115938469~116185179~116185180~116682875~116992597~117041588~117042506\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1769360473686\u0026tfd=11779 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-03801.world/\r\nOrigin: https://1xlite-03801.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: text/plain\r\ndate: Sun, 25 Jan 2026 17:01:13 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://1xlite-03801.world\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-14T01:33:42.567327Z","times_seen":16400444,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":59,"dns":0,"connect":8,"send":0,"wait":19,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/b5cd9a5e87d930de856c92da15aa121e.png","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:03.941Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/b5cd9a5e87d930de856c92da15aa121e.png HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-03801.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 653\r\ntraceparent: 00-54ec9a8760c30a16b0ace0cc24e1c077-7a7f1fb3b3de13dc-01\r\nlast-modified: Wed, 26 Jun 2024 08:18:02 GMT\r\netag: \"e6f0766cbd95db33da44e7a9140648f2\"\r\nexpires: Fri, 17 Jan 2025 11:42:58 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc21\r\nage: 3355\r\ncache: HIT\r\nx-cached-since: 2026-01-25T16:05:08+00:00\r\naccept-ranges: bytes\r\nx-shard: sto5-shard0-default_443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":653,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"e6f0766cbd95db33da44e7a9140648f2","sha1":"5f196b1bfe8c3f92bd2ebcd67124e72e81ae6aaf","sha256":"c0399d478788d5d483f104a2e8cb7c32f41cb40e9df0c22e831b2bfa2db63ec0","sha512":"249da39baba03408de98c7fa9a9342ef120436037ab6245b3b4a5f1a206291caaf67481c6ed67064544576697d41ab82499abffec998d837812292a050bf826a","ssdeep":"","tlshash":"90f083e032254a855c02ac7fc33414448fb226cc3682bb09e012887119d24a79dd1368","first_seen":"2023-04-05T22:56:35Z","last_seen":"2026-05-24T01:53:15.210281Z","times_seen":6599,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-03801.world/bff-api/config/group/get?groups=d.customize\u0026lang=en","fqdn":"1xlite-03801.world","domain":"1xlite-03801.world","tld":"world"},"ip":{"addr":"83.147.224.168","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:03.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-03801.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Nov 2025 08:12:53 GMT","end":"Tue, 24 Feb 2026 08:12:52 GMT"},"fingerprint":{"sha1":"68:D8:EA:EB:4C:1A:04:AC:2A:DD:98:D4:E6:5C:A8:72:E6:AF:A5:FE","sha256":"F1:0B:50:F5:08:17:82:B7:89:E9:A7:A1:68:BE:9E:A3:4D:79:03:A5:83:9C:7C:FB:69:9E:58:61:98:1B:23:67"}}},"request":{"raw":"GET /bff-api/config/group/get?groups=d.customize\u0026lang=en HTTP/1.1\r\nHost: 1xlite-03801.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\r\ncontent-type: application/json\r\nx-requested-with: XMLHttpRequest\r\nis-srv: false\r\nx-svc-source: __TECHNICAL_PAGES_APP__\r\nx-app-n: __TECHNICAL_PAGES_APP__\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=U5PgqGl2TE6sPcbtBDWyAg==; lng=en; fatman_uuid=ceccc701-6436-4c91-a9f9-0a750ed2bf64; tzo=3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sun, 25 Jan 2026 17:01:03 GMT\r\ncontent-type: application/json\r\ncontent-length: 834\r\ncache-control: no-cache, private\r\nserver-timing: dt_total;dur=0.015, bff;dur=0.84, wf-uht;dur=0.019\r\nx-cache-expire: 568\r\nx-cache-hit: 1\r\nx-dt: 285\r\nx-pod: R-j94rx\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":834,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"eb7e6716c8ab46e237ad25bf6d8422b7","sha1":"a9ff583c3c8bfefa24317c459b2da02a870638bf","sha256":"9c30d6703b7e66f99c1e601ee8f99e4794d9cad5e348c37a1682d70711dbfe65","sha512":"0c258cda2f7b306d4c086c36029786a7f79a469157ea62657c9126c73448b8c9530db8d1e0cb3530ae9e43b5dc5722b8522e7750568ae76ffdc3480e8f2ffc41","ssdeep":"","tlshash":"9b01d44d91a1623cd6614bd9d8813f189ff990a739897901e81c9dca33e37ebd1b5203","first_seen":"2026-01-22T04:37:56.686634Z","last_seen":"2026-01-27T08:46:19.900268Z","times_seen":33,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-25","alert":"Sinkholed","trigger":"1xlite-03801.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/976f58d35ea1c9feae38bf1b7179b8e7.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:03.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/976f58d35ea1c9feae38bf1b7179b8e7.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-03801.world/\r\nOrigin: https://1xlite-03801.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:03 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-c6ce103477a19e1ff90514a3ffc50cca-f7cbd73e39045af6-01\r\nlast-modified: Tue, 13 Jan 2026 12:35:47 GMT\r\netag: W/\"dff99f6bc9ecba6980aa745f94af5a1a\"\r\ncontent-encoding: gzip\r\nexpires: Tue, 13 Jan 2026 13:51:06 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.044\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc17\r\nage: 2086\r\ncache: HIT\r\nx-cached-since: 2026-01-25T16:26:17+00:00\r\nx-shard: sto5-shard0-default_443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9147,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"dff99f6bc9ecba6980aa745f94af5a1a","sha1":"861f845b5cff3957d54a16f6de6328720f2ceb44","sha256":"9366926746850b8b2178a9c8dfdc54b0bacfdcf88418043ee1fcddc636b8d64e","sha512":"aa33f09c38322ef3f0d7a7815dd9883a7ce7a37dcd43c630c7b5dc7141573a922e757319abc2eb2fcd15b978079d825ed136dd50bb0d7a871c87655336ae100c","ssdeep":"48:TzABBABGkABjABFygABCN/ABCNYN8ABjAB1yHAB3ABwEABzzNABzzqFABIIYABIF:l+CNQMlslB68LZLKKObvkzyLO5GIQ","tlshash":"bd122989fff05c33103f94bd99b2ba09a3c80f47ac5a691c7f9d294d2b5450504aadbe","first_seen":"2026-01-13T15:44:31.305891Z","last_seen":"2026-03-18T06:25:42.895683Z","times_seen":287,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.no/ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-7JGWL9SV66\u0026cid=1870063262.1769360474\u0026gtm=45je61m1h2v897130004za200zb9180563600zd9180563600\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~104527907~104528500~104684208~104684211~105391253~115495939~115616986~115938465~115938468~116682875~116988316~116992597~117041588~117042505\u0026z=1682758032","fqdn":"www.google.no","domain":"google.no","tld":"no"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:14.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.no","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:54:04 GMT","end":"Mon, 23 Mar 2026 19:54:03 GMT"},"fingerprint":{"sha1":"79:6F:61:ED:85:71:D3:03:AF:65:A2:06:5F:BB:34:EA:21:15:9F:B6","sha256":"4B:DF:16:AF:B7:35:08:DF:0B:C5:AF:B6:BB:CA:F4:32:78:1C:B7:4B:BE:2D:E3:AE:55:3D:F5:3B:E0:D2:A6:AB"}}},"request":{"raw":"GET /ads/ga-audiences?v=1\u0026t=sr\u0026slf_rd=1\u0026_r=4\u0026tid=G-7JGWL9SV66\u0026cid=1870063262.1769360474\u0026gtm=45je61m1h2v897130004za200zb9180563600zd9180563600\u0026aip=1\u0026dma=1\u0026dma_cps=syphamo\u0026gcd=13l3lPl2l1l1\u0026npa=1\u0026frm=0\u0026tag_exp=103116026~103200004~104527907~104528500~104684208~104684211~105391253~115495939~115616986~115938465~115938468~116682875~116988316~116992597~117041588~117042505\u0026z=1682758032 HTTP/1.1\r\nHost: www.google.no\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-03801.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 25 Jan 2026 17:01:14 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-14T01:31:37.704739Z","times_seen":948355,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":67,"dns":1,"connect":8,"send":0,"wait":21,"receive":0,"ssl":60},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/gmp/conversion;src=14030178;type=xbet;cat=uniqu0;ord=1;num=1237560507749;npa=1;auiddc=28406754.1769360474;pscdl=noapi;frm=0;_tu=KJA;gtm=45fe61m0v9190735530z89180563600za20gzb9180563600zd9180563600xea;gcd=13l3l3l2l1l1;dma_cps=syphamo;dma=1;dc_fmt=4;tag_exp=103116026~103200004~104527907~104528500~104684208~104684211~105391252~115616985~115938465~115938469~116682875~116992597~117041587~117099528;epver=2;dc_random=1769360474_TMtgcbHauPh-3TKTo-0QD_o2MzbYxpizNw;~oref=https%3A%2F%2F1xlite-03801.world%2Fen%2Fblock%3Ftag%3Ds_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7?","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:14.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"A8:07:E4:29:1F:DC:18:F7:9D:4E:B4:B1:E3:DE:8B:8E:C7:50:9F:F4","sha256":"D1:3C:D1:40:94:0C:B9:C2:51:D7:CA:E9:9A:B6:25:51:0F:E5:17:F1:6F:FF:2E:58:C6:FA:6A:72:54:B1:96:46"}}},"request":{"raw":"POST /gmp/conversion;src=14030178;type=xbet;cat=uniqu0;ord=1;num=1237560507749;npa=1;auiddc=28406754.1769360474;pscdl=noapi;frm=0;_tu=KJA;gtm=45fe61m0v9190735530z89180563600za20gzb9180563600zd9180563600xea;gcd=13l3l3l2l1l1;dma_cps=syphamo;dma=1;dc_fmt=4;tag_exp=103116026~103200004~104527907~104528500~104684208~104684211~105391252~115616985~115938465~115938469~116682875~116992597~117041587~117099528;epver=2;dc_random=1769360474_TMtgcbHauPh-3TKTo-0QD_o2MzbYxpizNw;~oref=https%3A%2F%2F1xlite-03801.world%2Fen%2Fblock%3Ftag%3Ds_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7? HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-03801.world/\r\nOrigin: https://1xlite-03801.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\np3p: policyref=\"https://www.googleadservices.com/pagead/p3p.xml\", CP=\"NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC\"\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ndate: Sun, 25 Jan 2026 17:01:14 GMT\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: no-cache, must-revalidate\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://1xlite-03801.world\r\ncontent-type: image/gif\r\nx-content-type-options: nosniff\r\nserver: cafe\r\ncontent-length: 42\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"d89746888da2d9510b64a9f031eaecd5","sha1":"d5fceb6532643d0d84ffe09c40c481ecdf59e15a","sha256":"ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629","sha512":"d5da26b5d496edb0221df1a4057a8b0285d15592a8f8dc7016a294df37ed335f3fde6a2252962e0df38b62847f8b771463a0124ef3f84299f262ed9d9d3cee4c","ssdeep":"","tlshash":"c4900023fa808000c3a8c2300a0b238a2b8c80200a28030b80ae208cec3a3a22c03020","first_seen":"2023-04-05T02:54:03Z","last_seen":"2026-06-14T01:31:37.704739Z","times_seen":948355,"resource_available":true,"data":null}},"time_used":206,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":206,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/desktop/media_asset/e6baed4eecf4ba7f9a5c2fcf97aad110.webp","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:03.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/desktop/media_asset/e6baed4eecf4ba7f9a5c2fcf97aad110.webp HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-03801.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:03 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6642\r\ntraceparent: 00-e5620126f4e5c768f8349a71d286d2c7-cdf55e9755ef7353-01\r\nlast-modified: Tue, 28 Oct 2025 08:17:54 GMT\r\netag: \"f2a90faef41c53fb4af747c8cbf25485\"\r\nexpires: Thu, 13 Nov 2025 16:22:44 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc22\r\nage: 3385\r\ncache: HIT\r\nx-cached-since: 2026-01-25T16:04:38+00:00\r\naccept-ranges: bytes\r\nx-shard: sto5-shard0-default_443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6642,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 960x278, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f2a90faef41c53fb4af747c8cbf25485","sha1":"54855a9fb307c4ecc9afea135838328cf439162e","sha256":"993540582d4cab4dc40ba13392f7460f30f0b656ff1e413abe9c20387000cc92","sha512":"c6f5e9a6238a864affd37952ba241b4e5a01dbfad9a18e22b53ea00e6f3acbbf114a5752f0b5faecd89efa6d24990df365113d7321543d0d44cfab1987f123a8","ssdeep":"96:MdOd7t6i+bJODeMN38LbY5gZQpRDH/ij1TgpEV6iuRjxNY4wos4RWNFCjMzlAm92:MduSOXsv6DfiR8fisNk9X3qUhpg","tlshash":"d7d1b074a2c81a958a299e763e763dab6e81039c31bcb6d674b5d5c8c50843fede7030","first_seen":"2025-11-13T15:27:51.525317Z","last_seen":"2026-06-12T16:40:10.785834Z","times_seen":2132,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-03801.world/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json","fqdn":"1xlite-03801.world","domain":"1xlite-03801.world","tld":"world"},"ip":{"addr":"83.147.224.168","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:03.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-03801.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Nov 2025 08:12:53 GMT","end":"Tue, 24 Feb 2026 08:12:52 GMT"},"fingerprint":{"sha1":"68:D8:EA:EB:4C:1A:04:AC:2A:DD:98:D4:E6:5C:A8:72:E6:AF:A5:FE","sha256":"F1:0B:50:F5:08:17:82:B7:89:E9:A7:A1:68:BE:9E:A3:4D:79:03:A5:83:9C:7C:FB:69:9E:58:61:98:1B:23:67"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json HTTP/1.1\r\nHost: 1xlite-03801.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: ceccc701-6436-4c91-a9f9-0a750ed2bf64\r\nContent-Length: 19\r\nOrigin: https://1xlite-03801.world\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=U5PgqGl2TE6sPcbtBDWyAg==; lng=en; fatman_uuid=ceccc701-6436-4c91-a9f9-0a750ed2bf64; tzo=3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":19,"data":"{\"w\":55,\"state\":[]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sun, 25 Jan 2026 17:01:03 GMT\r\ncontent-type: application/json\r\ncontent-length: 2\r\nx-dt: 285\r\nx-time-ng: 0.001\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.007, wf-uht;dur=0.011\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"d751713988987e9331980363e24189ce","sha1":"97d170e1550eee4afc0af065b78cda302a97674c","sha256":"4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945","sha512":"b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af","ssdeep":"","tlshash":"c7100000000000000000000000000000000003000000c0000000000000000000000000","first_seen":"2023-03-08T00:02:47Z","last_seen":"2026-06-14T01:26:51.712314Z","times_seen":293141,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-25","alert":"Sinkholed","trigger":"1xlite-03801.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/09213e96ddd4ceb268d87bfc7e5f72d1.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:03.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/1-285/desktop/media_asset/09213e96ddd4ceb268d87bfc7e5f72d1.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-03801.world/\r\nOrigin: https://1xlite-03801.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:03 GMT\r\ncontent-type: application/json\r\ntraceparent: 00-8d853373fc1952faf98944f1ba5954bd-67ec072a3719c218-01\r\nlast-modified: Wed, 24 Dec 2025 19:02:56 GMT\r\netag: W/\"917f249d7ba3f198ffcd4c0996b36c68\"\r\ncontent-encoding: gzip\r\nexpires: Wed, 24 Dec 2025 20:20:34 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.045\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc18\r\nage: 2086\r\ncache: HIT\r\nx-cached-since: 2026-01-25T16:26:17+00:00\r\nx-shard: sto5-shard0-default_443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18124,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"917f249d7ba3f198ffcd4c0996b36c68","sha1":"5097c10634e403da22a92ee62d12f504c024e479","sha256":"ceabc18fbbc228992e212623f9528f47119c7d3623879141a7a877bf8d27651f","sha512":"5e9ce3dbd4c35499115291c61a6c78f093e0782f87fa34154f899c0776ec1d19f3a82bfc960b851d6f2ab8e18d5fb1ce7a2b4a52a5f27bc32f69254ef9aabdf9","ssdeep":"96:7tb7Ba79eu4QWGAdryCiQFpzLJLJeHZVZYpH3UGHSTSSbbGiJinHQyu7Bn2:K7kJ2VK3UsyinHQd78","tlshash":"b48235d9bae41c33112b60bed5e7f91ae3cc1f479d4aa8287e9c6d4c1b6050500aed7e","first_seen":"2025-12-24T19:43:26.562976Z","last_seen":"2026-03-01T21:06:43.444084Z","times_seen":274,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/7ccc349c39.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:03.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/7ccc349c39.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-03801.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:03 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-2f38f85f373efdc165a556b8ca266114-1495edb6a300dad8-01\r\nlast-modified: Fri, 23 Jan 2026 09:25:05 GMT\r\netag: W/\"7ab9e144f1e16ca28fe89c5f6adab6c5\"\r\nx-amz-meta-mtime: 1769160184.301785956\r\ncontent-encoding: gzip\r\nexpires: Sat, 24 Jan 2026 09:28:07 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc14\r\nage: 27147\r\ncache: HIT\r\nx-cached-since: 2026-01-25T09:28:36+00:00\r\nx-shard: sto5-shard0-default_443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3677,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3676)","md5":"7ab9e144f1e16ca28fe89c5f6adab6c5","sha1":"72edc46eb430f3e6d285ea1d58965691c085543c","sha256":"0aeb71656c1947155e819ef5efb1205bc28aedb8aef455b0db45270b1756e201","sha512":"0012ed58317cd4171fecd55d4681f695b5be800f4882d2e7f25edf04e5fd5540529cfb8c6c4ca79603e6b64e7dfa9fd57cfbafb16a10cc4c951847d9157d7b77","ssdeep":"","tlshash":"867186466c74f5f6bb0782a43d1304f0cb1fac2ae0544adad1b4cbbc169d4952532f53","first_seen":"2026-01-23T14:50:02.473206Z","last_seen":"2026-01-29T09:40:33.666281Z","times_seen":35,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-icons/1.0.923/285/country.svg","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:03.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-icons/1.0.923/285/country.svg HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-03801.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-03801.world/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:03 GMT\r\ncontent-type: image/svg+xml\r\ntraceparent: 00-1f9a4eda3e20d8013f32fc15638b1f13-6f434e68f2a9774f-01\r\nlast-modified: Thu, 22 Jan 2026 12:52:48 GMT\r\netag: W/\"e755054847ccc09de8ac9bdf2c4326d6\"\r\nx-amz-meta-mtime: 1769086353.715488317\r\ncontent-encoding: gzip\r\nexpires: Fri, 23 Jan 2026 12:56:05 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc10\r\nage: 14643\r\ncache: HIT\r\nx-cached-since: 2026-01-25T12:57:00+00:00\r\nx-shard: sto5-shard0-default_443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":217418,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e755054847ccc09de8ac9bdf2c4326d6","sha1":"1461e05caf5c7bfda69a9a45127a8f78dc37a9ec","sha256":"d03bc4c7e0d2d128ba647df7ef393f9e856ff0b98b09d6d2849bdaaaded8e7b9","sha512":"2a6e1617fe4b5f4039431564fdb2d90f8a4a930ea555e10133b9d07809ebe56f64cfc9000de709289b2cb9143664bb8e334cabf2d49c7c20dac9ba8ed0eee9ce","ssdeep":"3072:hgvO+igz5Wy8EjUskAnA3ZJ9QeVCLpE74OWuhgwlKqjk71xhbXVjGYLGS/suV1SM:uqCLpPOWuq5vaSueoO7","tlshash":"08245554b099b14c2a8363e8c7afa5e1133e61db71da419938e993d8520e3dffe83950","first_seen":"2025-08-28T01:30:48.467208Z","last_seen":"2026-05-07T11:42:09.284783Z","times_seen":1871,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-03801.world/en?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","fqdn":"1xlite-03801.world","domain":"1xlite-03801.world","tld":"world"},"ip":{"addr":"83.147.224.168","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-25T17:01:02.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-03801.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Nov 2025 08:12:53 GMT","end":"Tue, 24 Feb 2026 08:12:52 GMT"},"fingerprint":{"sha1":"68:D8:EA:EB:4C:1A:04:AC:2A:DD:98:D4:E6:5C:A8:72:E6:AF:A5:FE","sha256":"F1:0B:50:F5:08:17:82:B7:89:E9:A7:A1:68:BE:9E:A3:4D:79:03:A5:83:9C:7C:FB:69:9E:58:61:98:1B:23:67"}}},"request":{"raw":"GET /en?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7 HTTP/1.1\r\nHost: 1xlite-03801.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Sun, 25 Jan 2026 17:01:02 GMT\r\ncontent-length: 0\r\nlocation: /en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\r\nset-cookie: platform_type=desktop; Path=/; Expires=Wed, 28 Jan 2026 17:01:02 GMT; Secure; SameSite=None; Partitioned\ngw-mm=; Path=/; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Secure; SameSite=None; Partitioned\ngw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; Path=/; Expires=Wed, 28 Jan 2026 17:01:02 GMT; Secure\nauid=U5PgqGl2TE6sPcbtBDWyAg==; path=/; secure; httponly; samesite=lax\r\nx-dt: 285\r\nx-gw-blk-redirect-reason: block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.013, wf-uht;dur=0.011\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":3434,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-14T01:33:42.567327Z","times_seen":16400444,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":101,"dns":13,"connect":27,"send":0,"wait":40,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-25","alert":"Sinkholed","trigger":"1xlite-03801.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-ui/3.3.563/Desktop/Default/client.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:03.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-ui/3.3.563/Desktop/Default/client.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-03801.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:03 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-fb6bc1bc147791bfdba1df3a41510b27-3a8a197a4be141a9-01\r\nlast-modified: Wed, 14 Jan 2026 11:00:40 GMT\r\netag: W/\"03ccc0234d7319d0b02147ac3d337a34\"\r\nx-amz-meta-mtime: 1768388438.796427759\r\ncontent-encoding: gzip\r\nexpires: Wed, 21 Jan 2026 10:17:19 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc19\r\nage: 24170\r\ncache: HIT\r\nx-cached-since: 2026-01-25T10:18:13+00:00\r\nx-shard: sto5-shard0-default_443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":726890,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"03ccc0234d7319d0b02147ac3d337a34","sha1":"494cd809c30c1f02bf866f31be24a5e3a3e8a9c4","sha256":"dbfbd02fcc10b89dd8f5fba4baa84c042bd24c160fab9e6f969bbc5a85479560","sha512":"3a4f6265cd90474877d0f45598aebbcae1a122f691edf543b7e58b84bcc36b13ba63b1dd3ea0d5fc642fb0cdfa244fa7bf11806da103dab2ef712a3e5a0e2148","ssdeep":"12288:nnSvjMb4OAD03pDTuFiJDUZxzMjfPQfIHSKRulRwg:KMb4OAD03pDTuYcwg","tlshash":"9cf4a51cf29d92343e37e62162945ffc6620b7079b231d6ef4aa064a0ec35437196dbb","first_seen":"2026-01-21T18:13:14.006299Z","last_seen":"2026-02-04T06:28:02.396465Z","times_seen":90,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_f978b4369d.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:13.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_f978b4369d.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-03801.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:13 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 389\r\ntraceparent: 00-6cef7e39548942c7d597a0dd410b16a0-83992a4b4ccbad54-01\r\nlast-modified: Fri, 23 Jan 2026 15:40:19 GMT\r\netag: \"3a4af5789426796fafd3970de96371be\"\r\nx-amz-meta-mtime: 1769182747.601962316\r\nexpires: Sun, 25 Jan 2026 09:58:20 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc17\r\nage: 25367\r\ncache: HIT\r\nx-cached-since: 2026-01-25T09:58:26+00:00\r\naccept-ranges: bytes\r\nx-shard: sto5-shard0-default_443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":389,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (388)","md5":"3a4af5789426796fafd3970de96371be","sha1":"ebdd29b76f8e6d20d0f1e41b17e032080872ff2b","sha256":"09adb51065cb406cb94d9809a73d3a05a29ad79ff58c1042790bee2308a88a8c","sha512":"e2a8d26c266ae1347566c938c7e1dc2944f7b228b2ac2bf0ef6dc37375edb82a348cce310a05b9a117139ca00d09ec23ec53509dbd9286b14aa8bb9a3d5f73b4","ssdeep":"","tlshash":"93e0684fb19a4c35168a78e843f5d70822d7226520473c21abac982c3964aabc417e5d","first_seen":"2025-12-18T00:40:38.932063Z","last_seen":"2026-06-09T11:30:02.086699Z","times_seen":1747,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_f84004e523.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:02.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_f84004e523.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-03801.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-03801.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:02 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-889ae5b2cd0b8c32b2e9b8b2b28cccf4-847bdb0245fdb955-01\r\nlast-modified: Fri, 23 Jan 2026 15:40:19 GMT\r\netag: W/\"b52b0468a89928ac4f5491d84b23b9da\"\r\nx-amz-meta-mtime: 1769182747.601962316\r\ncontent-encoding: gzip\r\nexpires: Sun, 25 Jan 2026 11:19:24 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc17\r\nage: 19965\r\ncache: HIT\r\nx-cached-since: 2026-01-25T11:28:17+00:00\r\nx-shard: sto5-shard0-default_443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5355,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (5354)","md5":"b52b0468a89928ac4f5491d84b23b9da","sha1":"a9ea1f64b65e6191c59676c686c51b060c7f2894","sha256":"e638e7e679d5cd6a547e47ebca2b1c6a13023e80d42fd89139ab021f6aed3c57","sha512":"faefa82305b6be705bafc627991a35f1a32d679358a72ea81cb3551b0a3708997017d946ed2984f683a5514eab417ee5806627c0db89bf3b3820c38f5bd12e4b","ssdeep":"96:y0EbBQ77VHY+R5f4wQL5cdj5JeEaiq4vupNFZFZLiG:obBQ77VHY+R5f4wQL5cdXQzZLiG","tlshash":"5ab11e8dedf5c03a8a27bc12135c8e3d1735f997d9211d9ef25c83a554c3b9201d0eaa","first_seen":"2025-12-03T12:27:09.709217Z","last_seen":"2026-01-29T09:40:33.621374Z","times_seen":485,"resource_available":false,"data":null}},"time_used":268,"timings":{"blocked":129,"dns":37,"connect":9,"send":0,"wait":8,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refpa749456.pro/L?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","fqdn":"refpa749456.pro","domain":"refpa749456.pro","tld":"pro"},"ip":{"addr":"91.186.206.194","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-25T17:01:01.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refpa749456.pro","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 05:18:47 GMT","end":"Mon, 16 Mar 2026 05:18:46 GMT"},"fingerprint":{"sha1":"4C:94:45:C6:B9:C1:22:D0:F1:3D:2A:00:14:B9:DD:1D:6D:01:90:44","sha256":"95:6C:FE:FB:C8:07:0D:4D:D1:6D:07:37:05:AD:CC:33:47:D0:F8:07:05:62:9D:B8:3D:26:4A:B4:5A:94:38:FA"}}},"request":{"raw":"GET /L?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7 HTTP/1.1\r\nHost: refpa749456.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 303 See Other\r\nserver: Angie\r\ndate: Sun, 25 Jan 2026 17:01:02 GMT\r\nlocation: https://1xlite-03801.world:443/en?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\r\nset-cookie: A_355_v=0; expires=Mon, 26 Jan 2026 17:01:02 GMT; path=/; secure\nA_355_c=1; expires=Mon, 26 Jan 2026 17:01:02 GMT; path=/; secure\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: wf-uht;dur=0.011\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"303","status_text":"See Other","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":3434,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-14T01:33:42.567327Z","times_seen":16400444,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":101,"dns":14,"connect":28,"send":0,"wait":39,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/version.json","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:02.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /version.json HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-03801.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-03801.world/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:02 GMT\r\ncontent-type: application/json\r\ncontent-length: 11\r\ntraceparent: 00-7e03d23630b03f5ba4a2f305999425a3-de6857acdef7aea6-01\r\nlast-modified: Sat, 24 Jan 2026 15:55:51 GMT\r\netag: \"ad92eaa35226a3757122eb27a129eab2\"\r\nx-amz-meta-mtime: 1769270151.809094564\r\nexpires: Sat, 24 Jan 2026 15:59:29 GMT\r\ncache-control: max-age=60\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc21\r\nage: 17\r\ncache: HIT\r\nx-cached-since: 2026-01-25T17:00:45+00:00\r\naccept-ranges: bytes\r\nx-shard: sto5-shard0-default_443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11,"size_decoded":0,"mime_type":"application/json","magic":"ASCII text","md5":"ad92eaa35226a3757122eb27a129eab2","sha1":"ae7fd95dbdff3efd897024b9e4dc34296ed10dc3","sha256":"967947de63eabd16635fdae14a866f65ace824ebefbc83485fa25bcc520bac15","sha512":"87fd35c9199425fb14b17e0c3abac89a01389628a18f734a7beaddae65c91bd67178dafb4bc6af431b59458b45813da35e49c5ad8db8574dbeeda5b8e414b2b6","ssdeep":"","tlshash":"2850003030000c00f00003000000300030cc3000cc03000c0c03000000300c0000f0f0","first_seen":"2026-01-24T20:35:43.687123Z","last_seen":"2026-01-26T11:35:20.298373Z","times_seen":22,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:02.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-03801.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:02 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63748\r\ntraceparent: 00-65054f52a188f6147d5f67017ee5fc91-48c61640f20673ae-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"6887b6f24414dbc612dbf42ccdc76b70\"\r\nexpires: Fri, 17 Jan 2025 10:48:52 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc21\r\nage: 1343\r\ncache: HIT\r\nx-cached-since: 2026-01-25T16:38:39+00:00\r\naccept-ranges: bytes\r\nx-shard: sto5-shard0-default_443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63748, version 1.0","md5":"6887b6f24414dbc612dbf42ccdc76b70","sha1":"8068d3abfbc6cbf35b55919da45b1f4d2d136238","sha256":"fc5c015fc32518f1ed810fa84ca28941eb9d5a3c81acc8df69a4dbbeedef7b0c","sha512":"00f08f9dd648972c9571547e06172d5505dd13f577fe2e65a497d3856172807ac11c996984e4138d2eb2ac784257fe61864aee15752fe9e9e76f98db931e0c2a","ssdeep":"1536:KtdCG+Dz6RxAx457zL0ASEn091Y0H1mTOzI/OzMFOoTX4u:MMG+yRpzN091Y0VtI/pOoTt","tlshash":"8b5302485551fae2cac3073c0f7a89dbb37a776d519224cd98b69f830d37964bea2070","first_seen":"2023-06-14T19:15:49Z","last_seen":"2026-06-13T13:44:24.690865Z","times_seen":10652,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-03801.world/favicon.ico","fqdn":"1xlite-03801.world","domain":"1xlite-03801.world","tld":"world"},"ip":{"addr":"83.147.224.168","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:02.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-03801.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Nov 2025 08:12:53 GMT","end":"Tue, 24 Feb 2026 08:12:52 GMT"},"fingerprint":{"sha1":"68:D8:EA:EB:4C:1A:04:AC:2A:DD:98:D4:E6:5C:A8:72:E6:AF:A5:FE","sha256":"F1:0B:50:F5:08:17:82:B7:89:E9:A7:A1:68:BE:9E:A3:4D:79:03:A5:83:9C:7C:FB:69:9E:58:61:98:1B:23:67"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 1xlite-03801.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=U5PgqGl2TE6sPcbtBDWyAg==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: Angie\r\ndate: Sun, 25 Jan 2026 17:01:02 GMT\r\ncontent-length: 0\r\nlocation: /en/block\r\nset-cookie: gw-mm=; Path=/; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Secure; SameSite=None; Partitioned\ngw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; Path=/; Expires=Wed, 28 Jan 2026 17:01:02 GMT; Secure\r\nx-dt: 285\r\nx-gw-blk-redirect-reason: block\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.003, wf-uht;dur=0.013\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]}],"data":{"size":3434,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-14T01:33:42.567327Z","times_seen":16400444,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-25","alert":"Sinkholed","trigger":"1xlite-03801.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_base-app_1222199311.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:02.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/shared-assets/Desktop/__shared_base-app_1222199311.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-03801.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-a9742f38600e3188e3f2f135b62bde5b-5dd14ecad7192cd7-01\r\nlast-modified: Fri, 23 Jan 2026 15:40:18 GMT\r\netag: W/\"2b26dc38d87c2ccf330b4c6cf4b99d22\"\r\nx-amz-meta-mtime: 1769182747.596962138\r\ncontent-encoding: gzip\r\nexpires: Sun, 25 Jan 2026 09:18:50 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc18\r\nage: 27570\r\ncache: HIT\r\nx-cached-since: 2026-01-25T09:21:32+00:00\r\nx-shard: sto5-shard0-default_443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1638450,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (23791)","md5":"118c63d4e649d387e10204427a12bbdd","sha1":"500979386197e652b76602b1b00534ae8a692f9b","sha256":"98bfb37f05cf966ce6b26fbe41297307786ece2ecb17ba47977b60d3143ca995","sha512":"d64429d38c2920b9f8f6997ca12754b152d8a90cd365d00aeeb2b0124d5d538e7f2646f5e7a334cf0592d4d9fd977e39a87365770d6fe5d93646e0e8479c5a9e","ssdeep":"24576:RFLjP8EGOow5wtQgRISDDADzr2A2k4TJCfLd/n/w:RFLjP8EGOv5wPRISDDADzr2A2k4TJSBQ","tlshash":"60259e65f112791339e755e5a0671387ba9c499ed40ce894f2ebcde43a8b40022eef7c","first_seen":"2026-01-23T14:50:02.465236Z","last_seen":"2026-01-29T09:40:33.633284Z","times_seen":46,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-03801.world/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json","fqdn":"1xlite-03801.world","domain":"1xlite-03801.world","tld":"world"},"ip":{"addr":"83.147.224.168","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:03.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-03801.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Nov 2025 08:12:53 GMT","end":"Tue, 24 Feb 2026 08:12:52 GMT"},"fingerprint":{"sha1":"68:D8:EA:EB:4C:1A:04:AC:2A:DD:98:D4:E6:5C:A8:72:E6:AF:A5:FE","sha256":"F1:0B:50:F5:08:17:82:B7:89:E9:A7:A1:68:BE:9E:A3:4D:79:03:A5:83:9C:7C:FB:69:9E:58:61:98:1B:23:67"}}},"request":{"raw":"POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1\r\nHost: 1xlite-03801.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\r\nContent-Type: application/json\r\nX-Lang: en\r\nX-Uuid: ceccc701-6436-4c91-a9f9-0a750ed2bf64\r\nContent-Length: 48\r\nOrigin: https://1xlite-03801.world\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=U5PgqGl2TE6sPcbtBDWyAg==; lng=en; fatman_uuid=ceccc701-6436-4c91-a9f9-0a750ed2bf64; tzo=3\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":48,"data":"{\"w\":55,\"sw\":1280,\"sh\":1024,\"e\":10273,\"sids\":[]}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: Angie\r\ndate: Sun, 25 Jan 2026 17:01:03 GMT\r\ncontent-type: application/json\r\ncontent-length: 23\r\nx-dt: 285\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nserver-timing: dt_total;dur=0.074, wf-uht;dur=0.011\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"df16a805436c08f1699ee16d994ca16d","sha1":"cccfbcd867fcd86c7247f435ee41d27c1fde1d29","sha256":"a7b39de22ce8e76e15eafd30085851a227142023acdccfecc422ed7fd4eea2b6","sha512":"3ba48f43c0a8c2d1cc7a57bbc332d02943a198b0e61882c373fd655fb71fd848d245b45289c9fd06e2f5401c3e1562422abcce6a9b2a177fbd8222cd1d58f4c9","ssdeep":"","tlshash":"417000322308a0080022000302023ba88820a8000230222000c00200202ace8820ac02","first_seen":"2026-01-25T17:01:32.224403Z","last_seen":"2026-01-25T17:01:32.224403Z","times_seen":1,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-25","alert":"Sinkholed","trigger":"1xlite-03801.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/4d416977b5.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:03.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/4d416977b5.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-03801.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-03801.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:03 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-ae7060153d51ce16f4478cb190db9b3d-ce95e46c54ebc6eb-01\r\nlast-modified: Fri, 23 Jan 2026 09:25:05 GMT\r\netag: W/\"5c33927153f6d628ea771eb51a514b09\"\r\nx-amz-meta-mtime: 1769160184.295785435\r\ncontent-encoding: gzip\r\nexpires: Sun, 25 Jan 2026 01:51:53 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc15\r\nage: 54545\r\ncache: HIT\r\nx-cached-since: 2026-01-25T01:51:58+00:00\r\nx-shard: sto5-shard0-default_443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3884,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3883)","md5":"5c33927153f6d628ea771eb51a514b09","sha1":"40390b90d99b2d3408d597d24daedc4bf614beda","sha256":"302ec7f61d1e628eba933d5b3c75a98f3135bbbd45af794476a0fcbdf145a9c5","sha512":"edde36cc3523543858227617d05807be04053a8b6a1569452abb135fd96074f99252834da9f54d31ae23bc06d06dcb3a1f57ad65e44686dbfc837ff8d94d82ca","ssdeep":"","tlshash":"19818c58bcaf409cfc37df210bdb5e188276b122d11692c8f841953a2ddb98794f149f","first_seen":"2025-11-13T15:27:51.581732Z","last_seen":"2026-02-17T23:36:16.903884Z","times_seen":837,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/site-admin/css_vars/d47c7051b33fd4cf012dd1ba88ca9381.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:03.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/site-admin/css_vars/d47c7051b33fd4cf012dd1ba88ca9381.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-03801.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:03 GMT\r\ncontent-type: text/css\r\ncontent-length: 44\r\ntraceparent: 00-8184690ec2140ef177b5b5abeb7d6855-1f851b4637f6857e-01\r\nlast-modified: Tue, 18 Nov 2025 11:33:29 GMT\r\netag: \"d47c7051b33fd4cf012dd1ba88ca9381\"\r\ncache-control: max-age=3600\r\nexpires: Tue, 18 Nov 2025 13:28:42 GMT\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc18\r\nage: 873\r\ncache: HIT\r\nx-cached-since: 2026-01-25T16:46:30+00:00\r\naccept-ranges: bytes\r\nx-shard: sto5-shard0-default_443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"d47c7051b33fd4cf012dd1ba88ca9381","sha1":"e8f4a550dc1526e29bbf41e19812174061129e0d","sha256":"d23ddf603e1bea345e3f913800e533ecea691174a25c9f0a40ea8b6eb17e4c95","sha512":"67ba4c3cbeb528f80648ab2833e973436b5f58817ebb69c754b06e50370f279bf18d0f6abb031ebbabb75867e0691cba11b3dc33ea9e85da3438a7e40510ef49","ssdeep":"","tlshash":"729004d4f50c33503455c75710dd44d111c4135f4511355cd5533c11f443c40cc505cc","first_seen":"2025-07-16T20:50:43.408412Z","last_seen":"2026-03-26T08:17:17.906604Z","times_seen":1364,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-03801.world/en/block","fqdn":"1xlite-03801.world","domain":"1xlite-03801.world","tld":"world"},"ip":{"addr":"83.147.224.168","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:02.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-03801.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Nov 2025 08:12:53 GMT","end":"Tue, 24 Feb 2026 08:12:52 GMT"},"fingerprint":{"sha1":"68:D8:EA:EB:4C:1A:04:AC:2A:DD:98:D4:E6:5C:A8:72:E6:AF:A5:FE","sha256":"F1:0B:50:F5:08:17:82:B7:89:E9:A7:A1:68:BE:9E:A3:4D:79:03:A5:83:9C:7C:FB:69:9E:58:61:98:1B:23:67"}}},"request":{"raw":"GET /en/block HTTP/1.1\r\nHost: 1xlite-03801.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=U5PgqGl2TE6sPcbtBDWyAg==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 203 Non Authoritative\r\nserver: Angie\r\ndate: Sun, 25 Jan 2026 17:01:02 GMT\r\ncontent-type: text/html;charset=utf-8\r\ncontent-length: 3434\r\nserver-timing: dt_total;dur=0.086, dt_total;dur=0.004, total;dur=3;desc=\"MF\"\r\nset-cookie: gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; Path=/; Expires=Wed, 28 Jan 2026 17:01:02 GMT; Secure\r\nvary: Accept-Encoding\r\nx-dt: 285, 285\r\nx-time-ng: 0.004\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"203","status_text":"Non Authoritative","fingerprints":[{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]}],"data":{"size":3434,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3029)","md5":"f2b9a61b6c48a68d9e5e1f12c6090bcf","sha1":"edcba415aa683894c95a9e63940b31959cc9d242","sha256":"27914ba5d155ece454831fb8ff6ebb411e0041b22de864e500ff69459598292c","sha512":"c8e2ee73a0de263bfaae41c9a611b75708ffb4fe0e5119274742fd01a160a79280919a3d553d814c4156f37decf5c3c1d5bbcac4bb89bcf8261bba84542d80c9","ssdeep":"","tlshash":"6a61e637603ccb3f4522455d8a02ba0adecc287b7148e94ce57c4e8d27c62cba417a57","first_seen":"2026-01-23T14:50:02.444237Z","last_seen":"2026-01-29T09:40:33.634078Z","times_seen":38,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-25","alert":"Sinkholed","trigger":"1xlite-03801.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KFGPRJ2V","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:13.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"66:A1:61:62:8E:0D:AB:F0:EF:5F:4C:AF:37:49:48:06:29:96:E9:34","sha256":"D7:A4:98:64:D8:F7:BE:4D:88:E8:1A:4B:70:69:43:46:6E:47:36:BD:31:38:07:95:66:16:C2:14:9E:82:E8:9B"}}},"request":{"raw":"GET /gtm.js?id=GTM-KFGPRJ2V HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-03801.world/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 25 Jan 2026 17:01:13 GMT\r\nexpires: Sun, 25 Jan 2026 17:01:13 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Sun, 25 Jan 2026 15:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 129097\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":373541,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (7836)","md5":"bf254f7d5a97f9576750fed5539c599f","sha1":"f9441f2dc3ecd76853e920700ffff827ff39ec6f","sha256":"64c72f6c2f7a790934f99e148cbc1c1a720d571e8e18cac5fa76fb1c597298f3","sha512":"be5740ba3352f7d34d5e611b04e8598a8dd370cf2d6ea1d99a88c6b8e6a36f4369f36c66df62a1e09bee26dc73f1f23bc2feec11c30c5373852025304368ff46","ssdeep":"6144:wJmMvKXQAxJ508RYoeXDIItDmlFldbKKCY5dqwaiKX8:EmMSXQAxJ508RYPIItDIdqR8","tlshash":"4a841acdb7d6746683a2b478403f114ba13b7a92f44cc894f186d8e42e74aaa0177f7d","first_seen":"2026-01-25T15:07:12.689871Z","last_seen":"2026-01-25T17:01:32.22701Z","times_seen":2,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":72,"dns":7,"connect":9,"send":0,"wait":27,"receive":38,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/e27425a6cf.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:03.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/e27425a6cf.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-03801.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-03801.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:03 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-88493601cc8bb5b5bfa1bb23bcb2eb86-21eb0a991d9d1da1-01\r\nlast-modified: Fri, 23 Jan 2026 09:25:05 GMT\r\netag: W/\"544ea803a3df8e55e85706a646f95614\"\r\nx-amz-meta-mtime: 1769160184.308786564\r\ncontent-encoding: gzip\r\nexpires: Sat, 24 Jan 2026 16:25:56 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc22\r\nage: 2101\r\ncache: HIT\r\nx-cached-since: 2026-01-25T16:26:02+00:00\r\nx-shard: sto5-shard0-default_443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":2867,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2866)","md5":"544ea803a3df8e55e85706a646f95614","sha1":"ae409064324337a44a066208ec8fa7166bbfd628","sha256":"8991a0d7246dce731aee299bf16a3acbf1f59d5f36776c27e8cfcb7e77b3732e","sha512":"bc0360c2cfce28bc29b49404fe3e3230546cb7b7aebea9936246d7e99f78ac7a66b5143adea22a527739ba10799d93f73cde16c0363961b1b1632e39ddb5e6a7","ssdeep":"","tlshash":"c0516adef8b9d5752d33f022d70c5eb95930b527c5214e82f48c93a125c3a922aa1dae","first_seen":"2025-11-12T14:09:39.097866Z","last_seen":"2026-02-06T09:24:24.17097Z","times_seen":1064,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/d755687362.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:03.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/d755687362.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-03801.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:03 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-39d1f004907fac7037a080fe19dc6a57-c9e18ca78901536f-01\r\nlast-modified: Fri, 23 Jan 2026 09:25:05 GMT\r\netag: W/\"64079da1f8626708fb1bf43a74ea38ae\"\r\nx-amz-meta-mtime: 1769160184.305786303\r\ncontent-encoding: gzip\r\nexpires: Sat, 24 Jan 2026 09:28:07 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc10\r\nage: 27147\r\ncache: HIT\r\nx-cached-since: 2026-01-25T09:28:36+00:00\r\nx-shard: sto5-shard0-default_443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1782,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1781)","md5":"64079da1f8626708fb1bf43a74ea38ae","sha1":"b1cf3e27d65d22c605fb7a4ba3fbd11f25d98a3d","sha256":"4316cf9c959efab15b715fdea4f48ba446afe1c97fda51e3cf31d3a4421b143f","sha512":"ad43aa3d8f77983484b4a660119d0d63a7a3f0d345c334955d1caa6a9e670b1afb0a6c98bf21d542f187e31bd1b7d98bdcde5b59823e745a145c1aede7299816","ssdeep":"","tlshash":"e631544a7ca4a4e3ab7703ffbd1250f4460d794ad29d04874de8476c220e0941b1bb52","first_seen":"2026-01-23T14:50:02.487438Z","last_seen":"2026-01-29T09:40:33.667162Z","times_seen":35,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?frm=0\u0026dl=https%3A%2F%2F1xlite-03801.world%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026rnd=1311910687.1769360474\u0026dt=1xBet\u0026auid=28406754.1769360474\u0026navt=n\u0026npa=1\u0026_tu=KA\u0026gtm=45be61m0v9192592245z89180563600za20gzb9180563600zd9180563600xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527907~104528500~104684208~104684211~105391253~115495940~115938465~115938469~116682875~116992597~117025847~117041587\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-16664555628\u0026tid=AW-16664555628\u0026tft=1769360474093\u0026tfd=12188","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:14.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"A8:07:E4:29:1F:DC:18:F7:9D:4E:B4:B1:E3:DE:8B:8E:C7:50:9F:F4","sha256":"D1:3C:D1:40:94:0C:B9:C2:51:D7:CA:E9:9A:B6:25:51:0F:E5:17:F1:6F:FF:2E:58:C6:FA:6A:72:54:B1:96:46"}}},"request":{"raw":"POST /ccm/collect?frm=0\u0026dl=https%3A%2F%2F1xlite-03801.world%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026rnd=1311910687.1769360474\u0026dt=1xBet\u0026auid=28406754.1769360474\u0026navt=n\u0026npa=1\u0026_tu=KA\u0026gtm=45be61m0v9192592245z89180563600za20gzb9180563600zd9180563600xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527907~104528500~104684208~104684211~105391253~115495940~115938465~115938469~116682875~116992597~117025847~117041587\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-16664555628\u0026tid=AW-16664555628\u0026tft=1769360474093\u0026tfd=12188 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://1xlite-03801.world/\r\nOrigin: https://1xlite-03801.world\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 17:01:14 GMT\r\npragma: no-cache\r\ncontent-type: text/plain\r\ncache-control: no-cache, no-store, must-revalidate\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://1xlite-03801.world\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-14T01:33:42.567327Z","times_seen":16400444,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?frm=0\u0026dl=https%3A%2F%2F1xlite-03801.world%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026rnd=1311910687.1769360474\u0026dt=1xBet\u0026auid=28406754.1769360474\u0026navt=n\u0026npa=1\u0026_tu=KA\u0026gtm=45be61m0v9192592245z89180563600za20gzb9180563600zd9180563600xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527907~104528500~104684208~104684211~105391253~115495940~115938465~115938469~116682875~116992597~117025847~117041587\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-16664555628\u0026tid=AW-16664555628\u0026tft=1769360474093\u0026tfd=12188\u0026img=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:14.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"A8:07:E4:29:1F:DC:18:F7:9D:4E:B4:B1:E3:DE:8B:8E:C7:50:9F:F4","sha256":"D1:3C:D1:40:94:0C:B9:C2:51:D7:CA:E9:9A:B6:25:51:0F:E5:17:F1:6F:FF:2E:58:C6:FA:6A:72:54:B1:96:46"}}},"request":{"raw":"GET /ccm/collect?frm=0\u0026dl=https%3A%2F%2F1xlite-03801.world%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026rnd=1311910687.1769360474\u0026dt=1xBet\u0026auid=28406754.1769360474\u0026navt=n\u0026npa=1\u0026_tu=KA\u0026gtm=45be61m0v9192592245z89180563600za20gzb9180563600zd9180563600xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=103116026~103200004~104527907~104528500~104684208~104684211~105391253~115495940~115938465~115938469~116682875~116992597~117025847~117041587\u0026apve=1\u0026apvf=f\u0026apvc=0\u0026tids=AW-16664555628\u0026tid=AW-16664555628\u0026tft=1769360474093\u0026tfd=12188\u0026img=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-03801.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npragma: no-cache\r\ncache-control: no-cache, no-store, must-revalidate\r\ndate: Sun, 25 Jan 2026 17:01:14 GMT\r\ncontent-type: text/plain\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-14T01:33:42.567327Z","times_seen":16400444,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aaakmnr.com/v2/check","fqdn":"aaakmnr.com","domain":"aaakmnr.com","tld":"com"},"ip":{"addr":"31.220.27.154","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://s.painamour.com/h/2770/m25uuqneqv4fvnnjzhlixlgjwktuk556r32pn2w2vr5hq4l2pz7gieduafrcp565sgou4kqzzm3z6tpmk3r6w7osgpq6y67iohfo5rxmqc2nnipvnsbetrsjujzfrxsm7xl3lxujrko43dltrbi5lwmm3okk7nfwtz3o2sfnzhxjm4wdgrgpersvcesmkya2zjyh3hlsjjxomlfajfljs5l7zjfy5jtd7nimx32fqrklbxetvqy2a4l2lbyze3mw7tt7ytubot6uricvjhbhpsnbssjufr2hodlwmk2divhgsq34lz2fiyt5pzmuovl7ofxx262cmmbhy27uknbls4pcvxk6q5naorfzmqte3bhft4lsntve33fn76jfujgllfgnnuv2ozzpzakdmbivayrwjqgm4qjbd7jgyssifqf6u4xpv5coqrpx3f4z2y4o5n5yeuktfeadaxjsffyvmrkzpv5we7ltijsvi6laoqyxefiuariros2lnfahycdr5rjevqld636ics6hjjbhguzwjumcwf63onq56mdfywuwrnkimmvhs2m6jn3mbpdsxbkppnpawpbkr77v6fbpc4lufauhqwdaifzf64ypmf7cybkgkv7huzrjerawaubmhmtdi4cfieaqifyxdrajnnhtrphz3www3n3elsxyzguuoq437ts6pbfovpg4my3czhjmtvepwwi3te2rcpe4hmneieukpunvvwumtmvhxnlgc5l5dqbaywt2mdvn3n4nnjva6qlan7i5gqlw5dmhw7uq22op4ywmnbovqc2ku7zjqbgzg34s3sos2ceem3qpo4pfyethhmrdzqw5z3nor3edbuf6ryoj5hj7pj2t2bfn5tgspa======?u=https://refpa749456.pro/L?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\u0026pb=b53d8e2ad6094a2c8a0466f2c882e18f\u0026click_id=cnv1bb87247345116b480f1dafce93906f7\u0026r=registration","date":"2026-01-25T17:01:01.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aaakmnr.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 11:12:11 GMT","end":"Tue, 14 Apr 2026 11:12:10 GMT"},"fingerprint":{"sha1":"EC:D6:44:4F:28:46:9E:5E:AA:81:20:28:0F:15:FC:F9:39:79:05:0B","sha256":"D8:D6:E8:FF:25:4F:42:6D:DD:59:C5:12:CD:D8:4D:CC:B1:6B:1F:80:07:A5:74:0E:B9:69:23:06:6D:E3:12:AC"}}},"request":{"raw":"POST /v2/check HTTP/1.1\r\nHost: aaakmnr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3599\r\nOrigin: https://s.painamour.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s.painamour.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3599,"data":"{\"version\":\"1.0.2\",\"v18\":false,\"v19\":false,\"v20\":false,\"v124\":false,\"v129\":\"00000000\",\"v130\":\"111000000000\",\"v131\":{\"101\":0,\"108\":0,\"112\":1,\"114\":1,\"122\":1,\"123\":0,\"135\":1,\"139\":1,\"141\":1,\"151\":1,\"154\":0,\"166\":1,\"167\":0,\"171\":0,\"179\":1,\"182\":1,\"189\":1,\"197\":0,\"199\":0,\"201\":1,\"209\":0,\"215\":1,\"217\":1,\"223\":1,\"231\":1,\"241\":1,\"269\":1,\"271\":1,\"272\":1,\"280\":1,\"285\":1,\"287\":1,\"293\":1,\"298\":0,\"299\":1,\"301\":1,\"302\":1,\"312\":0,\"314\":1,\"317\":1,\"318\":1,\"326\":1,\"329\":0,\"332\":1,\"336\":1,\"338\":1,\"343\":1,\"347\":1,\"349\":1,\"350\":1,\"359\":1,\"365\":0,\"385\":1,\"394\":1,\"406\":0,\"407\":1,\"412\":1,\"415\":0,\"419\":0,\"420\":1,\"421\":1,\"430\":1,\"431\":1,\"432\":1,\"434\":1,\"436\":1,\"438\":1,\"440\":1,\"466\":0,\"469\":0,\"473\":1,\"477\":1,\"478\":1,\"488\":0,\"496\":1,\"499\":1,\"506\":1,\"510\":1,\"511\":1,\"512\":1,\"513\":1,\"525\":1,\"528\":1,\"529\":1,\"535\":1,\"541\":1,\"558\":1,\"561\":1,\"575\":1,\"589\":1,\"591\":1,\"594\":1,\"595\":0,\"597\":1,\"610\":1,\"618\":1,\"621\":1,\"622\":0,\"625\":0,\"632\":1,\"642\":0,\"645\":1,\"650\":0,\"657\":1,\"669\":1,\"670\":0,\"675\":1,\"676\":1,\"677\":1,\"680\":1,\"682\":1,\"686\":1,\"690\":0,\"694\":1,\"701\":1,\"702\":0,\"711\":0,\"714\":1,\"715\":1,\"722\":0,\"730\":1,\"731\":1,\"736\":1,\"737\":1,\"748\":1,\"752\":1,\"755\":1,\"759\":0,\"767\":0,\"768\":1,\"783\":1,\"803\":1,\"805\":1,\"813\":1,\"816\":1,\"823\":1,\"824\":1,\"826\":0,\"830\":0,\"838\":1,\"861\":1,\"863\":0,\"866\":1,\"868\":1,\"871\":1,\"877\":1,\"882\":1,\"887\":1,\"889\":0,\"895\":1,\"896\":1,\"906\":0,\"910\":1,\"913\":1,\"915\":1,\"917\":0,\"932\":0,\"935\":1,\"937\":1,\"941\":1,\"945\":1,\"959\":1,\"964\":1,\"967\":0,\"974\":1,\"976\":1,\"992\":1,\"995\":1,\"998\":1,\"999\":1},\"v132\":[0],\"v128\":\"111\",\"v106\":false,\"v119\":0,\"v133\":\"c,m,s:13.3333px Sans;f:16px serif;sf,ca,em:146;ss,su:140\",\"v17\":100,\"v12\":1280,\"v11\":1024,\"v57\":1280,\"v58\":1024,\"v16\":\"landscape-primary\",\"v14\":0,\"v15\":0,\"v13\":false,\"v118\":false,\"v10\":48,\"v55\":true,\"v54\":\"llvmpipe\",\"v56\":\"Mesa\",\"v51\":\"llvmpipe\",\"v53\":\"WebGL 1.0\",\"v52\":\"WebGL GLSL ES 1.0\",\"v25\":null,\"v24\":false,\"v26\":\"https:\",\"v35\":1769360461686,\"v34\":0,\"v155\":\"UTC\",\"v43\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"v23\":\"en-US\",\"v28\":\"\",\"v115\":\"https://s.painamour.com/h/2770/m25uuqneqv4fvnnjzhlixlgjwktuk556r32pn2w2vr5hq4l2pz7gieduafrcp565sgou4kqzzm3z6tpmk3r6w7osgpq6y67iohfo5rxmqc2nnipvnsbetrsjujzfrxsm7xl3lxujrko43dltrbi5lwmm3okk7nfwtz3o2sfnzhxjm4wdgrgpersvcesmkya2zjyh3hlsjjxomlfajfljs5l7zjfy5jtd7nimx32fqrklbxetvqy2a4l2lbyze3mw7tt7ytubot6uricvjhbhpsnbssjufr2hodlwmk2divhgsq34lz2fiyt5pzmuovl7ofxx262cmmbhy27uknbls4pcvxk6q5naorfzmqte3bhft4lsntve33fn76jfujgllfgnnuv2ozzpzakdmbivayrwjqgm4qjbd7jgyssifqf6u4xpv5coqrpx3f4z2y4o5n5yeuktfeadaxjsffyvmrkzpv5we7ltijsvi6laoqyxefiuariros2lnfahycdr5rjevqld636ics6hjjbhguzwjumcwf63onq56mdfywuwrnkimmvhs2m6jn3mbpdsxbkppnpawpbkr77v6fbpc4lufauhqwdaifzf64ypmf7cybkgkv7huzrjerawaubmhmtdi4cfieaqifyxdrajnnhtrphz3www3n3elsxyzguuoq437ts6pbfovpg4my3czhjmtvepwwi3te2rcpe4hmneieukpunvvwumtmvhxnlgc5l5dqbaywt2mdvn3n4nnjva6qlan7i5gqlw5dmhw7uq22op4ywmnbovqc2ku7zjqbgzg34s3sos2ceem3qpo4pfyethhmrdzqw5z3nor3edbuf6ryoj5hj7pj2t2bfn5tgspa======?u=https://refpa749456.pro/L?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\u0026pb=b53d8e2ad6094a2c8a0466f2c882e18f\u0026click_id=cnv1bb87247345116b480f1dafce93906f7\u0026r=registration\",\"v150\":\"\",\"v156\":false,\"v44\":\"kdm\",\"v45\":\"2770\",\"v46\":\"30\",\"v47\":\"1\",\"v48\":\"1540714332717053\",\"v49\":\"7522433\",\"v50\":\"-5026502712051138714\",\"v108\":\"445222885\",\"v109\":\"0\",\"v110\":\"\",\"v22\":\"redirect\",\"v111\":\"-6457423890208195649\",\"v116\":\"358725\",\"v117\":\"-2105507843\",\"v151\":\"0\",\"v154\":\"\",\"v134\":\"156475496\",\"v135\":\"b24781cf-78e0-4de8-b15b-dd3885f8f2fd\",\"v149\":\"-6457423890208195649\",\"v120\":\"document\",\"v121\":\"navigate\",\"v122\":\"cross-site\",\"v123\":null}"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:01 GMT\r\ncontent-type: application/json\r\ncontent-length: 0\r\naccept-ch: Width, Viewport-Width, DPR, Device-Memory, Downlink, RTT, ECT, Save-Data, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version\r\naccess-control-allow-headers: X-Requested-With, Cache-Control, Content-Type\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://s.painamour.com\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-14T01:33:42.567327Z","times_seen":16400444,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","fqdn":"1xlite-03801.world","domain":"1xlite-03801.world","tld":"world"},"ip":{"addr":"83.147.224.168","port":443,"asn":0,"as":"","country":"Iran","country_code":"IR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-25T17:01:02.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"1xlite-03801.world","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Nov 2025 08:12:53 GMT","end":"Tue, 24 Feb 2026 08:12:52 GMT"},"fingerprint":{"sha1":"68:D8:EA:EB:4C:1A:04:AC:2A:DD:98:D4:E6:5C:A8:72:E6:AF:A5:FE","sha256":"F1:0B:50:F5:08:17:82:B7:89:E9:A7:A1:68:BE:9E:A3:4D:79:03:A5:83:9C:7C:FB:69:9E:58:61:98:1B:23:67"}}},"request":{"raw":"GET /en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7 HTTP/1.1\r\nHost: 1xlite-03801.world\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: platform_type=desktop; gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; auid=U5PgqGl2TE6sPcbtBDWyAg==\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 203 Non Authoritative\r\nserver: Angie\r\ndate: Sun, 25 Jan 2026 17:01:02 GMT\r\ncontent-type: text/html;charset=utf-8\r\ncontent-length: 3434\r\nserver-timing: dt_total;dur=0.073, dt_total;dur=0.005, total;dur=2;desc=\"MF\"\r\nset-cookie: gw-blk=eyJ0ZW1wbGF0ZSI6MSwicnVsZSI6MjI5NH0=; Path=/; Expires=Wed, 28 Jan 2026 17:01:02 GMT; Secure\r\nvary: Accept-Encoding\r\nx-dt: 285, 285\r\nx-time-ng: 0.006\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"203","status_text":"Non Authoritative","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Angie","description":"Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version.","website":"https://angie.software/en/","common_platform_enumeration":"","icon":"default.svg","categories":["Web servers"]},{"name":"C","description":"C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system.","website":"https://www.open-std.org/jtc1/sc22/wg14/","common_platform_enumeration":"","icon":"C.png","categories":["Programming languages"]},{"name":"Perl","description":"Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages.","website":"https://perl.org","common_platform_enumeration":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","icon":"Perl.png","categories":["Programming languages"]}],"data":{"size":3434,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (3029)","md5":"f2b9a61b6c48a68d9e5e1f12c6090bcf","sha1":"edcba415aa683894c95a9e63940b31959cc9d242","sha256":"27914ba5d155ece454831fb8ff6ebb411e0041b22de864e500ff69459598292c","sha512":"c8e2ee73a0de263bfaae41c9a611b75708ffb4fe0e5119274742fd01a160a79280919a3d553d814c4156f37decf5c3c1d5bbcac4bb89bcf8261bba84542d80c9","ssdeep":"","tlshash":"6a61e637603ccb3f4522455d8a02ba0adecc287b7148e94ce57c4e8d27c62cba417a57","first_seen":"2026-01-23T14:50:02.444237Z","last_seen":"2026-01-29T09:40:33.634078Z","times_seen":38,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-01-25","alert":"Sinkholed","trigger":"1xlite-03801.world","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/non-embedded.css","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:02.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/non-embedded.css HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-03801.world/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:02 GMT\r\ncontent-type: text/css; charset=utf-8\r\ntraceparent: 00-09515c02146c77bd9038b5286831988d-b01321b67391a30f-01\r\nlast-modified: Fri, 23 Jan 2026 09:25:05 GMT\r\netag: W/\"124cc24d18351af1656eae12be6975c9\"\r\nx-amz-meta-mtime: 1769160184.309786651\r\ncontent-encoding: gzip\r\nexpires: Sat, 24 Jan 2026 13:56:15 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.003\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc18\r\nage: 11084\r\ncache: HIT\r\nx-cached-since: 2026-01-25T13:56:18+00:00\r\nx-shard: sto5-shard0-default_443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50203,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (50202)","md5":"124cc24d18351af1656eae12be6975c9","sha1":"9fcf552112c0d0405f116a0c075ebad921a599c3","sha256":"736db5bdc9562cb0d626cce25730c516183749db3f8228c5d3e566316adccc12","sha512":"7d68a9abd66737f299a36dedc3aa1406711e2ad10497ffd96dfe2ac136c5813342ad89102fb333fffed1b3a8dbf6efbca1b8b4df9aa72e78a2815e2108b62002","ssdeep":"384:FdHpVLkq1Tk9wE1rx1ixddVbVBZYYBJ+JuqQr9C4GWkHjB5lc:XcQvZYY4Qr/sHlc","tlshash":"0633750acd801257be7b893a3584fb0865e4e54bed730e2df459d0448fe7e9f26a03a5","first_seen":"2025-11-25T12:36:55.909711Z","last_seen":"2026-03-05T12:27:01.087128Z","times_seen":561,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":85,"dns":37,"connect":9,"send":0,"wait":8,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/1d47b07fd6.js","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:03.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /sys-static/sys-technical-pages-app-static/Desktop/Default/1d47b07fd6.js HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://1xlite-03801.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:03 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ntraceparent: 00-9e7966a47e8fac575e6e78ef99cb42b6-61281a71fd3565c9-01\r\nlast-modified: Fri, 23 Jan 2026 09:25:05 GMT\r\netag: W/\"020f1926ed5e6b97d81570c640fb0b75\"\r\nx-amz-meta-mtime: 1769160184.291785088\r\ncontent-encoding: gzip\r\nexpires: Sat, 24 Jan 2026 09:28:06 GMT\r\ncache-control: max-age=86400\r\nx-time-ng: 0.002\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc17\r\nage: 27147\r\ncache: HIT\r\nx-cached-since: 2026-01-25T09:28:36+00:00\r\nx-shard: sto5-shard0-default_443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":1322,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1310)","md5":"020f1926ed5e6b97d81570c640fb0b75","sha1":"26df2b5bd19f8f78a4732f257d8869e18a934cf1","sha256":"7da8291246142c735fc7cc0feebf6228643cf3afcdc68bdd1de8a4d88d471f78","sha512":"e00b6707abec22993ff35f9eab8a3f57acf63dd2d8499d379800e7f02a6b4033da430295e787190e71d167ff51a0f7d06eb50d62e6e07e3b78061ce8aa0efe90","ssdeep":"","tlshash":"a82195ba7df4f0394b104afd382434a1438b3ea7858f909905c803a50347054692afb7","first_seen":"2026-01-23T14:50:02.447762Z","last_seen":"2026-01-29T09:40:33.650022Z","times_seen":35,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2","fqdn":"v3.traincdn.com","domain":"traincdn.com","tld":"com"},"ip":{"addr":"80.240.113.62","port":443,"asn":199524,"as":"G-Core Labs S.A.","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:03.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.traincdn.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 16 Dec 2025 00:00:00 GMT","end":"Fri, 15 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"2C:ED:08:D6:4A:C2:81:ED:6F:55:AB:70:5D:D3:1C:9C:1A:5A:9F:05","sha256":"8B:2C:5C:5C:1A:73:14:D9:18:4E:BF:B8:81:B4:A3:EB:D9:E7:55:08:46:E5:70:6E:6A:AA:B4:07:73:C9:57:C8"}}},"request":{"raw":"GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 HTTP/1.1\r\nHost: v3.traincdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://1xlite-03801.world\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://v3.traincdn.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 25 Jan 2026 17:01:03 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 63920\r\ntraceparent: 00-26dd03fc2af9e5f701111df529df6f92-0622fe1567d4cc30-01\r\nlast-modified: Wed, 14 Jun 2023 09:49:53 GMT\r\netag: \"a65527fcb58f66a7cfbc0e6b160538b4\"\r\nexpires: Fri, 19 Dec 2025 20:08:09 GMT\r\ncache-control: max-age=3600\r\nx-time-ng: 0.000\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccess-control-allow-origin: *\r\nx-id: sto5-hw-edge-gc17\r\nage: 290\r\ncache: HIT\r\nx-cached-since: 2026-01-25T16:56:13+00:00\r\naccept-ranges: bytes\r\nx-shard: sto5-shard0-default_443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Gcore","description":"Gcore is a public cloud and content delivery network (CDN) company.","website":"https://gcore.com","common_platform_enumeration":"","icon":"Gcore.svg","categories":["CDN"]}],"data":{"size":63920,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 63920, version 1.0","md5":"a65527fcb58f66a7cfbc0e6b160538b4","sha1":"45d260e7fa343401b5bb0df982a014f53e2d253b","sha256":"fb13c3a1cbac60649b76f7d7f85c1645d35ac69b85ce5f4eb0692505ecc2cd45","sha512":"8448e96abe326f43285b2d8b0d75beaf0e9c9e051e8754841d907b30eb303ae24c447011306da6a1703b9192d02aeff76a4517bdf94ec6e7dc360ce3538802af","ssdeep":"1536:UIG3hJMkJeK8ic5iZGnJ4URj9vqXOQ6UqYdbuA5RVK1:UL31hcLlRjDQ6Uq4W1","tlshash":"7f5302df8de32a148ff78772668885f4f4927c68898c8e7345526a8907f07d6b96c04f","first_seen":"2023-05-07T18:04:27Z","last_seen":"2026-06-13T23:54:42.23666Z","times_seen":10502,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2F1xlite-03801.world%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026rnd=1311910687.1769360474\u0026dt=1xBet\u0026auid=28406754.1769360474\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He61m0v9180563600za200zd9180563600xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=102015666~103116026~103200004~104527907~104528500~104684208~104684211~105391252~115938465~115938469~116185179~116185180~116682875~116992597~117041588~117042506\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1769360473686\u0026tfd=11779\u0026img=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.100","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://1xlite-03801.world/en/block?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7","date":"2026-01-25T17:01:13.962Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 19:51:06 GMT","end":"Mon, 23 Mar 2026 19:51:05 GMT"},"fingerprint":{"sha1":"A8:07:E4:29:1F:DC:18:F7:9D:4E:B4:B1:E3:DE:8B:8E:C7:50:9F:F4","sha256":"D1:3C:D1:40:94:0C:B9:C2:51:D7:CA:E9:9A:B6:25:51:0F:E5:17:F1:6F:FF:2E:58:C6:FA:6A:72:54:B1:96:46"}}},"request":{"raw":"GET /ccm/collect?frm=0\u0026en=page_view\u0026dl=https%3A%2F%2F1xlite-03801.world%2Fen%2Fblock\u0026scrsrc=www.googletagmanager.com\u0026rnd=1311910687.1769360474\u0026dt=1xBet\u0026auid=28406754.1769360474\u0026navt=n\u0026npa=1\u0026ep.ads_data_redaction=0\u0026gtm=45He61m0v9180563600za200zd9180563600xea\u0026gcd=13l3l3l2l1l1\u0026dma_cps=syphamo\u0026dma=1\u0026tag_exp=102015666~103116026~103200004~104527907~104528500~104684208~104684211~105391252~115938465~115938469~116185179~116185180~116682875~116992597~117041588~117042506\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tft=1769360473686\u0026tfd=11779\u0026img=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://1xlite-03801.world/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 25 Jan 2026 17:01:13 GMT\r\ncontent-type: text/plain\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-14T01:33:42.567327Z","times_seen":16400444,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.painamour.com/h/2770/m25uuqneqv4fvnnjzhlixlgjwktuk556r32pn2w2vr5hq4l2pz7gieduafrcp565sgou4kqzzm3z6tpmk3r6w7osgpq6y67iohfo5rxmqc2nnipvnsbetrsjujzfrxsm7xl3lxujrko43dltrbi5lwmm3okk7nfwtz3o2sfnzhxjm4wdgrgpersvcesmkya2zjyh3hlsjjxomlfajfljs5l7zjfy5jtd7nimx32fqrklbxetvqy2a4l2lbyze3mw7tt7ytubot6uricvjhbhpsnbssjufr2hodlwmk2divhgsq34lz2fiyt5pzmuovl7ofxx262cmmbhy27uknbls4pcvxk6q5naorfzmqte3bhft4lsntve33fn76jfujgllfgnnuv2ozzpzakdmbivayrwjqgm4qjbd7jgyssifqf6u4xpv5coqrpx3f4z2y4o5n5yeuktfeadaxjsffyvmrkzpv5we7ltijsvi6laoqyxefiuariros2lnfahycdr5rjevqld636ics6hjjbhguzwjumcwf63onq56mdfywuwrnkimmvhs2m6jn3mbpdsxbkppnpawpbkr77v6fbpc4lufauhqwdaifzf64ypmf7cybkgkv7huzrjerawaubmhmtdi4cfieaqifyxdrajnnhtrphz3www3n3elsxyzguuoq437ts6pbfovpg4my3czhjmtvepwwi3te2rcpe4hmneieukpunvvwumtmvhxnlgc5l5dqbaywt2mdvn3n4nnjva6qlan7i5gqlw5dmhw7uq22op4ywmnbovqc2ku7zjqbgzg34s3sos2ceem3qpo4pfyethhmrdzqw5z3nor3edbuf6ryoj5hj7pj2t2bfn5tgspa======?u=https://refpa749456.pro/L?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\u0026pb=b53d8e2ad6094a2c8a0466f2c882e18f\u0026click_id=cnv1bb87247345116b480f1dafce93906f7\u0026r=registration","fqdn":"s.painamour.com","domain":"painamour.com","tld":"com"},"ip":{"addr":"104.21.63.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-25T17:01:01.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"painamour.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 23:20:11 GMT","end":"Tue, 21 Apr 2026 00:18:56 GMT"},"fingerprint":{"sha1":"48:1B:84:E8:13:A2:73:FB:71:3D:E4:57:3D:A3:6A:3C:2E:24:DC:73","sha256":"22:CB:9E:14:35:70:9C:92:8F:BB:0F:7D:05:60:20:83:6A:18:A3:5B:B3:A9:0D:6C:E0:BB:10:93:72:CA:8C:72"}}},"request":{"raw":"GET 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====?u=https://refpa749456.pro/L?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\u0026pb=b53d8e2ad6094a2c8a0466f2c882e18f\u0026click_id=cnv1bb87247345116b480f1dafce93906f7\u0026r=registration HTTP/1.1\r\nHost: s.painamour.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 25 Jan 2026 17:01:01 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\naccept-ch: Width, Viewport-Width, DPR, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version\r\nx-dns-prefetch-control: on\r\nlink: \u003chttps://refpa749456.pro\u003e; rel=\"preconnect\",\u003chttps://1xlite-8697429.bar\u003e; rel=\"preconnect\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uwcJ9OIsvYH3q14NX1sfyYakxY3ibLLBqprK0ZQKt8mbFbteejYP%2FgQAMwy8Sh%2BAwuDJjPQTmWsAfdBjRmKvLrAHmB3NOyQWZh9aqDM%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9c395482dc4c712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1435,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1435), with no line terminators","md5":"2e44f3d5fb710338484ff8417b4470b6","sha1":"43538cb247445d5084f1d831897040b4239cadb9","sha256":"6207fc11e8fd64560416cd04e0613487e39023da481b30f20e9dabb73094c0a9","sha512":"a2dbb5f75cda6b2aa3f3871be2b4daa22e86dd8e18be514e7ee2208eb2f38115f6936fa4bf345704e5d05333cab65f43dc86f7b52fc9c3d8c454bc5bada48e7f","ssdeep":"","tlshash":"91213151acf6c024014284aae565f45dbb3ee06d448ac8e8d2cea5f9158a7dfce1a0d8","first_seen":"2026-01-25T17:01:32.2313Z","last_seen":"2026-01-25T17:01:32.2313Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":26,"dns":8,"connect":1,"send":0,"wait":72,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.painamour.com/favicon.ico","fqdn":"s.painamour.com","domain":"painamour.com","tld":"com"},"ip":{"addr":"104.21.63.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://s.painamour.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====?u=https://refpa749456.pro/L?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\u0026pb=b53d8e2ad6094a2c8a0466f2c882e18f\u0026click_id=cnv1bb87247345116b480f1dafce93906f7\u0026r=registration","date":"2026-01-25T17:01:01.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"painamour.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 23:20:11 GMT","end":"Tue, 21 Apr 2026 00:18:56 GMT"},"fingerprint":{"sha1":"48:1B:84:E8:13:A2:73:FB:71:3D:E4:57:3D:A3:6A:3C:2E:24:DC:73","sha256":"22:CB:9E:14:35:70:9C:92:8F:BB:0F:7D:05:60:20:83:6A:18:A3:5B:B3:A9:0D:6C:E0:BB:10:93:72:CA:8C:72"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: s.painamour.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://s.painamour.com/h/2770/m25uuqneqv4fvnnjzhlixlgjwktuk556r32pn2w2vr5hq4l2pz7gieduafrcp565sgou4kqzzm3z6tpmk3r6w7osgpq6y67iohfo5rxmqc2nnipvnsbetrsjujzfrxsm7xl3lxujrko43dltrbi5lwmm3okk7nfwtz3o2sfnzhxjm4wdgrgpersvcesmkya2zjyh3hlsjjxomlfajfljs5l7zjfy5jtd7nimx32fqrklbxetvqy2a4l2lbyze3mw7tt7ytubot6uricvjhbhpsnbssjufr2hodlwmk2divhgsq34lz2fiyt5pzmuovl7ofxx262cmmbhy27uknbls4pcvxk6q5naorfzmqte3bhft4lsntve33fn76jfujgllfgnnuv2ozzpzakdmbivayrwjqgm4qjbd7jgyssifqf6u4xpv5coqrpx3f4z2y4o5n5yeuktfeadaxjsffyvmrkzpv5we7ltijsvi6laoqyxefiuariros2lnfahycdr5rjevqld636ics6hjjbhguzwjumcwf63onq56mdfywuwrnkimmvhs2m6jn3mbpdsxbkppnpawpbkr77v6fbpc4lufauhqwdaifzf64ypmf7cybkgkv7huzrjerawaubmhmtdi4cfieaqifyxdrajnnhtrphz3www3n3elsxyzguuoq437ts6pbfovpg4my3czhjmtvepwwi3te2rcpe4hmneieukpunvvwumtmvhxnlgc5l5dqbaywt2mdvn3n4nnjva6qlan7i5gqlw5dmhw7uq22op4ywmnbovqc2ku7zjqbgzg34s3sos2ceem3qpo4pfyethhmrdzqw5z3nor3edbuf6ryoj5hj7pj2t2bfn5tgspa======?u=https://refpa749456.pro/L?tag=s_4898313m_355c_817614_1540714332717053_358725_cnv1bb87247345116b480f1dafce93906f7\u0026pb=b53d8e2ad6094a2c8a0466f2c882e18f\u0026click_id=cnv1bb87247345116b480f1dafce93906f7\u0026r=registration\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Sun, 25 Jan 2026 17:01:01 GMT\r\npriority: u=6,i=?0\r\nage: 3262\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kIkXLFIPe%2FBzccgRabeowStCDzqzc%2BwkMt2V8I%2FCH25Efl7aYc2%2F3%2BiT5JWSpdQpLx6C%2BD8FLy66jqz1B40%2BD0fozyyGj0g2euCZ0G%2FQ9w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c395486beaa4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/x-icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-14T01:33:42.567327Z","times_seen":16400444,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}