| 1xlite-032472.top/en?tag=d_85563m_16303c_[]MS[]null[]null[]general[]{site_id}_d22490_l46998_clickunder |  46.32.182.119 | 302 Found | 252 kB |
URL User Request GET HTTP/21xlite-032472.top/en?tag=d_85563m_16303c_[]MS[]null[]null[]general[]{site_id}_d22490_l46998_clickunder IP46.32.182.119:443
CertificateIssuerLet's Encrypt Subject1xlite-032472.top Fingerprint67:A5:DB:FC:AB:A3:CB:3D:16:5D:64:68:CE:5C:77:27:83:DD:D9:57 ValidityWed, 25 Dec 2024 09:21:50 GMT - Tue, 25 Mar 2025 09:21:49 GMT
File typeHTML document, ASCII text, with very long lines (58509) Size252 kB (252246 bytes) Hash3e15678e80b4d2e4c4cf74bc09d1f1a5 161a379ab9c26c6ba9d3bac9494a866bfb22ad5e 49ce1caced5118e3073e8806ed262cb2d1edd3ec085987ee6248c77399bb3d7b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /en?tag=d_85563m_16303c_[]MS[]null[]null[]general[]{site_id}_d22490_l46998_clickunder HTTP/1.1
Host: 1xlite-032472.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Sat, 25 Jan 2025 07:28:44 GMT
link: <https://v3.traincdn.com/sys-ui/2.3.48/Desktop/Default/client.css>; rel=preload; as=style; crossorigin=anonymous
location: /en/block
server-timing: dt_total;dur=0.010, total;dur=24;desc="Nuxt Server Time", wf-uht;dur=0.036
set-cookie: platform_type=desktop; Path=/; Expires=Tue, 28 Jan 2025 07:28:44 GMT; Secure; SameSite=None; Partitioned
lng=en; Path=/
cookies_agree_type=3; Path=/
tzo=1; Path=/
is12h=0; Path=/
referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_16303c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l46998_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; Path=/; Expires=Wed, 26 Mar 2025 07:28:44 GMT
reflinkid=d_85563m_16303c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l46998_clickunder; Path=/; Expires=Sat, 25 Jan 2025 08:28:44 GMT
postback_watcher=; Path=/; Expires=Sat, 25 Jan 2025 07:28:48 GMT
auid=LiC2d2eUkqxAPhpPAz0SAg==; path=/; secure; httponly; samesite=lax
x-dt: 285
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
|
|
| 1xlite-032472.top/main-static/47b9c1da/check-ob.js | 46.32.182.119 | 200 OK | 219 B |
URL GET HTTP/21xlite-032472.top/main-static/47b9c1da/check-ob.js IP46.32.182.119:443
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerLet's Encrypt Subject1xlite-032472.top Fingerprint67:A5:DB:FC:AB:A3:CB:3D:16:5D:64:68:CE:5C:77:27:83:DD:D9:57 ValidityWed, 25 Dec 2024 09:21:50 GMT - Tue, 25 Mar 2025 09:21:49 GMT
File typeJavaScript source, ASCII text Hashc065700c9c8c493403359e1f2baa10d9 4630fe729e70bdf63fa7ba6c84ec277fd1f51030 1e61f0c82ae82ffcf503fcd4b4c8ae27b32c11e19b882d5d13f3c44364c893f4
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /main-static/47b9c1da/check-ob.js HTTP/1.1
Host: 1xlite-032472.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-032472.top/en/block
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_16303c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l46998_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_16303c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l46998_clickunder; postback_watcher=; auid=LiC2d2eUkqxAPhpPAz0SAg==
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:44 GMT
content-type: text/javascript; charset=utf-8
content-length: 219
last-modified: Fri, 24 Jan 2025 09:03:04 GMT
etag: "c065700c9c8c493403359e1f2baa10d9"
x-amz-meta-mtime: 1737709383.919535591
expires: Sun, 26 Jan 2025 07:28:31 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/version.json |  185.244.209.62 | 200 OK | 11 B |
URL GET HTTP/2v3.traincdn.com/version.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash0c746b13eeb7506cefd57f8d03f74db2 ae7d40ed6da90275d06d5850a7f4d6c7360cf4a4 61aacc1883273b6ab0a5559d2800f603631a3ddf42807ce58e90e488c61caf00
GET /version.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-032472.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:44 GMT
content-type: application/json
content-length: 11
traceparent: 00-e1ea56ba930c1655aeb5fa4b8232c141-947098cebf524a1a-01
last-modified: Fri, 24 Jan 2025 09:03:04 GMT
etag: "0c746b13eeb7506cefd57f8d03f74db2"
x-amz-meta-mtime: 1737709384.603537503
expires: Fri, 24 Jan 2025 09:06:26 GMT
cache-control: max-age=60
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 28
cache: HIT
x-cached-since: 2025-01-25T07:28:16+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/CuImo7CT.css | 185.244.209.62 | 200 OK | 650 B |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/CuImo7CT.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeASCII text, with very long lines (649) Hash2229547d50a851e3f9c39e19cdcf4751 faaf12acea401378e691df74690b6dc0eaacfa11 7cfe9ce64aa88e9db8abacc1821a7ed463e9b9aa224852291922071ea8806f47
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/CuImo7CT.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-032472.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:44 GMT
content-type: text/css; charset=utf-8
content-length: 650
traceparent: 00-3673a415201136a5af3fce78ce5f3323-1ccb2b1cea50c339-01
last-modified: Thu, 16 Jan 2025 12:01:29 GMT
etag: "2229547d50a851e3f9c39e19cdcf4751"
x-amz-meta-mtime: 1737028741.202096736
expires: Thu, 23 Jan 2025 12:27:12 GMT
cache-control: max-age=86400
x-time-ng: 0.003
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 68451
cache: HIT
x-cached-since: 2025-01-24T12:27:53+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 | 185.244.209.62 | 200 OK | 64 kB |
URL GET HTTP/2v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 63748, version 1.0 Hash6887b6f24414dbc612dbf42ccdc76b70 8068d3abfbc6cbf35b55919da45b1f4d2d136238 fc5c015fc32518f1ed810fa84ca28941eb9d5a3c81acc8df69a4dbbeedef7b0c
GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:45 GMT
content-type: font/woff2
content-length: 63748
traceparent: 00-7b40131de8485cfdb5ef0dad2f700ef8-7658e95607a63633-01
last-modified: Wed, 14 Jun 2023 09:49:53 GMT
etag: "6887b6f24414dbc612dbf42ccdc76b70"
expires: Thu, 16 Jan 2025 10:32:14 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 475
cache: HIT
x-cached-since: 2025-01-25T07:20:50+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 | 185.244.209.62 | 200 OK | 64 kB |
URL GET HTTP/2v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 63920, version 1.0 Hasha65527fcb58f66a7cfbc0e6b160538b4 45d260e7fa343401b5bb0df982a014f53e2d253b fb13c3a1cbac60649b76f7d7f85c1645d35ac69b85ce5f4eb0692505ecc2cd45
GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Bold.woff2 HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:45 GMT
content-type: font/woff2
content-length: 63920
traceparent: 00-e710c1406378a06115a8536787897e7e-e1a7a13336ffeb95-01
last-modified: Wed, 14 Jun 2023 09:49:53 GMT
etag: "a65527fcb58f66a7cfbc0e6b160538b4"
expires: Thu, 16 Jan 2025 10:45:34 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1090
cache: HIT
x-cached-since: 2025-01-25T07:10:35+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/47b9c1da/desktop/default/Page.Block-dc060fb4.js | 185.244.209.62 | 200 OK | 476 B |
URL GET HTTP/2v3.traincdn.com/main-static/47b9c1da/desktop/default/Page.Block-dc060fb4.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (476), with no line terminators Hashacfefbeecf242eb38145fcaf86a902dd bfa392f147e417cb67d7d27f005131c9acfcd126 e5e87499ec0a931c9b9600ff0cc6d637b5c3f570b32341412704ed4bf24344c6
GET /main-static/47b9c1da/desktop/default/Page.Block-dc060fb4.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-032472.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:45 GMT
content-type: text/javascript; charset=utf-8
content-length: 476
traceparent: 00-daade4c7067447c2fb8b84acfaace347-345208ba6493862a-01
last-modified: Fri, 24 Jan 2025 09:00:19 GMT
etag: "acfefbeecf242eb38145fcaf86a902dd"
x-amz-meta-mtime: 1737709217.031067955
expires: Sat, 25 Jan 2025 09:33:25 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 78891
cache: HIT
x-cached-since: 2025-01-24T09:33:54+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/b5cd9a5e87d930de856c92da15aa121e.png | 185.244.209.62 | 200 OK | 653 B |
URL GET HTTP/2v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/b5cd9a5e87d930de856c92da15aa121e.png IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typePNG image data, 32 x 32, 8-bit colormap, non-interlaced Hashe6f0766cbd95db33da44e7a9140648f2 5f196b1bfe8c3f92bd2ebcd67124e72e81ae6aaf c0399d478788d5d483f104a2e8cb7c32f41cb40e9df0c22e831b2bfa2db63ec0
GET /genfiles/cms/1-285/desktop/media_asset/b5cd9a5e87d930de856c92da15aa121e.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-032472.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:45 GMT
content-type: image/png
content-length: 653
traceparent: 00-82724c9e76f8920602f04a7b054e3138-6fc052daecbbe585-01
last-modified: Wed, 26 Jun 2024 08:18:02 GMT
etag: "e6f0766cbd95db33da44e7a9140648f2"
expires: Thu, 16 Jan 2025 10:46:36 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1050
cache: HIT
x-cached-since: 2025-01-25T07:11:15+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-ui/2.3.48/Desktop/Default/client.css | 185.244.209.62 | 200 OK | 299 kB |
URL GET HTTP/2v3.traincdn.com/sys-ui/2.3.48/Desktop/Default/client.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Size299 kB (299382 bytes) Hash6f3615281f45b80082a8bcd3b8a6917d ee96d259c5498f489247fa89003e9b57d581429f 2545e7fafa923359607b790cdc7a48f523a4d77910be1cb382075897277d44ac
GET /sys-ui/2.3.48/Desktop/Default/client.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-032472.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:44 GMT
content-type: text/css; charset=utf-8
traceparent: 00-104d86b62238ef0361982448b0b1eccc-94e711747dae0fe3-01
last-modified: Wed, 15 Jan 2025 09:51:46 GMT
etag: W/"d037203b6db6edbc64b162b70550a1b3"
x-amz-meta-mtime: 1736934703.897720635
content-encoding: gzip
expires: Thu, 23 Jan 2025 12:27:03 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 68451
cache: HIT
x-cached-since: 2025-01-24T12:27:53+00:00
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/47b9c1da/desktop/default/vendors/app-3ab4978e.js | 185.244.209.62 | 200 OK | 319 kB |
URL GET HTTP/2v3.traincdn.com/main-static/47b9c1da/desktop/default/vendors/app-3ab4978e.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Size319 kB (319248 bytes) Hashc37c1174a60560696bcacf1bd336a4f5 5a0890bf10a155f3c9db623040cd1f12cfc57d5c 8456aec13c5aa1870269870490b6f5c2ffee1d70f50c79710891876af80635c5
GET /main-static/47b9c1da/desktop/default/vendors/app-3ab4978e.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-032472.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:45 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-e72c8aa7853a09f5b8e68a320a7cb436-c7a0ccf6605d3cf6-01
last-modified: Fri, 24 Jan 2025 09:00:20 GMT
etag: W/"e345e1657282edab3fb12b39f05ae579"
x-amz-meta-mtime: 1737709217.059068033
content-encoding: gzip
expires: Sat, 25 Jan 2025 09:33:25 GMT
cache-control: max-age=86400
x-time-ng: 0.004
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 78891
cache: HIT
x-cached-since: 2025-01-24T09:33:54+00:00
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/47b9c1da/desktop/default/vendors/plugins.v-tooltip-fbbf9263.js | 185.244.209.62 | 200 OK | 26 kB |
URL GET HTTP/2v3.traincdn.com/main-static/47b9c1da/desktop/default/vendors/plugins.v-tooltip-fbbf9263.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hashb1986496da91c7c0cd11f881cef84a09 882c188e38cc555245602137a8962792c45c3754 5cca0656c99c502ef4249823516465603660736d80e1fc3f0d8e8bec7815bf51
GET /main-static/47b9c1da/desktop/default/vendors/plugins.v-tooltip-fbbf9263.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-032472.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:45 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-498b00f9f034c487e40734222eb8a123-31dbb8088158ca06-01
last-modified: Fri, 24 Jan 2025 09:00:20 GMT
etag: W/"a685ae00f314eb051c72a7d446634d2b"
x-amz-meta-mtime: 1737709217.059068033
content-encoding: gzip
expires: Sat, 25 Jan 2025 09:33:25 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 78890
cache: HIT
x-cached-since: 2025-01-24T09:33:55+00:00
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/47b9c1da/desktop/default/vendors/plugins.vue-notification-2810a002.js | 185.244.209.62 | 200 OK | 5.0 kB |
URL GET HTTP/2v3.traincdn.com/main-static/47b9c1da/desktop/default/vendors/plugins.vue-notification-2810a002.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hashcf7244f370289f3006e9d1ac95923e8b 87e1090a205a774712dd0109e19d1526af8acd51 112e0893baef3d7ba268b4f52dcb4a35297a5b5423ea912df2105ed992edf477
GET /main-static/47b9c1da/desktop/default/vendors/plugins.vue-notification-2810a002.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-032472.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:45 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-30e8993848b73991c3965315cec1e0c2-6077555c03896319-01
last-modified: Fri, 24 Jan 2025 09:00:20 GMT
etag: W/"f6c5a202b198a4c0d45dc605993aeafd"
x-amz-meta-mtime: 1737709217.059068033
content-encoding: gzip
expires: Sat, 25 Jan 2025 09:33:25 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 78890
cache: HIT
x-cached-since: 2025-01-24T09:33:55+00:00
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/site-admin/colors/5b2250f464951c6b1d4b2cfa25b00f4c.css | 185.244.209.62 | 200 OK | 8.2 kB |
URL GET HTTP/2v3.traincdn.com/genfiles/site-admin/colors/5b2250f464951c6b1d4b2cfa25b00f4c.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hash9e29601d29350ca2d18ab70fbdf3c552 4545b73f883771dfa2672cf13fc71e0db3f24497 14a6946ceec061ac7abe7101671acdf6d1a8f97918bfe6545f171e03d92c96cc
GET /genfiles/site-admin/colors/5b2250f464951c6b1d4b2cfa25b00f4c.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-032472.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:45 GMT
content-type: text/css
traceparent: 00-0528b38391bf60b2f078af360427b147-a67b8e2a3574508a-01
last-modified: Fri, 24 Jan 2025 11:28:52 GMT
etag: W/"5b2250f464951c6b1d4b2cfa25b00f4c"
cache-control: max-age=3600
content-encoding: gzip
expires: Fri, 24 Jan 2025 14:12:08 GMT
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 3241
cache: HIT
x-cached-since: 2025-01-25T06:34:44+00:00
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/D1iYNtOZ.css | 185.244.209.62 | 200 OK | 4.2 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/D1iYNtOZ.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hashbd4e988accd8dc757bf94998ddf42e3f a970160b0692b8e40d541086c6c489e628e76f4b a7a6ff85d9f5af78c7c30855e3fcbfb66f21fdc2bdde96a46c6d4af54d25fb71
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/D1iYNtOZ.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-032472.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:44 GMT
content-type: text/css; charset=utf-8
traceparent: 00-33e7db12184c552bb43c0e567383b0c8-7f50e71699017e68-01
last-modified: Thu, 16 Jan 2025 12:01:29 GMT
etag: W/"a161ab64e426c2e67de9bb720e159e76"
x-amz-meta-mtime: 1737028741.202096736
content-encoding: gzip
expires: Thu, 23 Jan 2025 12:27:28 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 68451
cache: HIT
x-cached-since: 2025-01-24T12:27:53+00:00
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/7eb49f3cb95029f19a7a99d6483a332d.json | 185.244.209.62 | 200 OK | 182 B |
URL GET HTTP/2v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/7eb49f3cb95029f19a7a99d6483a332d.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hashe4c69ca8e3916987138c95a26642f53a 411149ef1233c191122618916dc7fa4965a30f7c 9bbbe99b83a20d3d0bd65ab0b343de560c6d437a74a4835786bbd6a58bb0e08e
GET /genfiles/cms/1-285/desktop/media_asset/7eb49f3cb95029f19a7a99d6483a332d.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-032472.top/
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:45 GMT
content-type: application/json
content-length: 182
traceparent: 00-7328dd1f00ef60cc49d8e7e21e8ee0fe-d733fea0df64be37-01
last-modified: Fri, 17 May 2024 06:18:09 GMT
etag: "e4c69ca8e3916987138c95a26642f53a"
expires: Thu, 16 Jan 2025 11:02:52 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1464
cache: HIT
x-cached-since: 2025-01-25T07:04:21+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/77d274ae92641bcba2aa23003b9148b0.json | 185.244.209.62 | 200 OK | 673 B |
URL GET HTTP/2v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/77d274ae92641bcba2aa23003b9148b0.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hashfb89b3f86b1e1fb8bcf38c14cac3ede6 211c1b3d342a27a3c939315ed8855447ec7d9f8b eeb252831a20e08086da75a3e7bd821a3c8585d9f84be8bb7c215cd83c9a8c9f
GET /genfiles/cms/1-285/desktop/media_asset/77d274ae92641bcba2aa23003b9148b0.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-032472.top/
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:45 GMT
content-type: application/json
content-length: 673
traceparent: 00-9952587f5fc0a96c5deed4beedb5352e-f84fd46be3546781-01
last-modified: Sat, 18 May 2024 04:20:46 GMT
etag: "fb89b3f86b1e1fb8bcf38c14cac3ede6"
expires: Thu, 16 Jan 2025 11:01:41 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1464
cache: HIT
x-cached-since: 2025-01-25T07:04:21+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/98f724b77568f44429da8babd1b679b3.json | 185.244.209.62 | 200 OK | 3.7 kB |
URL GET HTTP/2v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/98f724b77568f44429da8babd1b679b3.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hash75c7442c85811fa43a28790d5b86f6b9 7959d06d43187d7e314eba4e8b1983c6bcf1848e 379d785b39fb599bf0c998a0cea2ac793950306e3ec49311995dc2e46bff6d56
GET /genfiles/cms/1-285/desktop/media_asset/98f724b77568f44429da8babd1b679b3.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-032472.top/
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:45 GMT
content-type: application/json
traceparent: 00-13dd5148eed9d9c07ba4117aa545ca2e-7c27fd6779483e64-01
last-modified: Wed, 15 Jan 2025 12:23:16 GMT
etag: W/"676ec11eff720c830185b6d21e7c7d30"
content-encoding: gzip
expires: Thu, 16 Jan 2025 11:02:51 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1464
cache: HIT
x-cached-since: 2025-01-25T07:04:21+00:00
X-Firefox-Spdy: h2
|
|
| 1xlite-032472.top/version.json?timestamp=1737790126020 | 46.32.182.119 | 200 OK | 11 B |
URL GET HTTP/21xlite-032472.top/version.json?timestamp=1737790126020 IP46.32.182.119:443
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerLet's Encrypt Subject1xlite-032472.top Fingerprint67:A5:DB:FC:AB:A3:CB:3D:16:5D:64:68:CE:5C:77:27:83:DD:D9:57 ValidityWed, 25 Dec 2024 09:21:50 GMT - Tue, 25 Mar 2025 09:21:49 GMT
Hash0c746b13eeb7506cefd57f8d03f74db2 ae7d40ed6da90275d06d5850a7f4d6c7360cf4a4 61aacc1883273b6ab0a5559d2800f603631a3ddf42807ce58e90e488c61caf00
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /version.json?timestamp=1737790126020 HTTP/1.1
Host: 1xlite-032472.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-032472.top/en/block
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_16303c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l46998_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_16303c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l46998_clickunder; postback_watcher=; auid=LiC2d2eUkqxAPhpPAz0SAg==; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:46 GMT
content-type: application/json
content-length: 11
last-modified: Fri, 24 Jan 2025 09:03:04 GMT
etag: "0c746b13eeb7506cefd57f8d03f74db2"
x-amz-meta-mtime: 1737709384.603537503
expires: Sat, 25 Jan 2025 07:29:46 GMT
cache-control: max-age=60
x-time-ng: 0.000
accept-ranges: bytes
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.010
X-Firefox-Spdy: h2
|
|
| 1xlite-032472.top/seo-module-api/api/public/v1/analytics-counters?project[id]=285&domain[host]=1xlite-032472.top | 46.32.182.119 | 200 OK | 116 B |
URL GET HTTP/21xlite-032472.top/seo-module-api/api/public/v1/analytics-counters?project[id]=285&domain[host]=1xlite-032472.top IP46.32.182.119:443
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerLet's Encrypt Subject1xlite-032472.top Fingerprint67:A5:DB:FC:AB:A3:CB:3D:16:5D:64:68:CE:5C:77:27:83:DD:D9:57 ValidityWed, 25 Dec 2024 09:21:50 GMT - Tue, 25 Mar 2025 09:21:49 GMT
Hashc3b99d303306b462b1ed909b7b95987b 2d839df95274b9c85fd354e45127067095186ffa 387b26258a25650ddd79a1e7c0be2697a66584f5280152825a6605c6586d38a3
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /seo-module-api/api/public/v1/analytics-counters?project[id]=285&domain[host]=1xlite-032472.top HTTP/1.1
Host: 1xlite-032472.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-032472.top/en/block
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_16303c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l46998_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_16303c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l46998_clickunder; postback_watcher=; auid=LiC2d2eUkqxAPhpPAz0SAg==; window_width=1920
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:46 GMT
content-type: application/json
content-length: 116
cache-control: max-age=1200, must-revalidate, public, s-maxage=1800, stale-if-error=86400, stale-while-revalidate=300
x-content-digest: en6d0e5d6e0146a49c358c0eaad1d2ef38
age: 625
x-request-id: 4de5f79c5cde564d641b846249d544c7
x-request-guid: 4de5f79c5cde564d641b846249d544c7
content-encoding: br
x-time-ng: 0.002
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: p;dur=1.8100738525391, wf-uht;dur=0.014
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/shared-assets/__shared_fast_deep_equal_ORMYJPSV.js | 185.244.209.62 | 200 OK | 865 B |
URL GET HTTP/2v3.traincdn.com/sys-static/shared-assets/__shared_fast_deep_equal_ORMYJPSV.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (840) Hashe42d2bda0bda350e6cb507a391561910 fd6785beb70e406347acd6af79b73a609a65abb7 59e1f2ebd2ec588a043cdfb338403916451f301c50c7ace4549c0171c9659e88
GET /sys-static/shared-assets/__shared_fast_deep_equal_ORMYJPSV.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:46 GMT
content-type: text/javascript; charset=utf-8
content-length: 865
traceparent: 00-b15f1f8ab575435c56560ed7a7ff02ca-2e8f84f3704b312f-01
last-modified: Fri, 24 Jan 2025 09:12:28 GMT
etag: "e42d2bda0bda350e6cb507a391561910"
x-amz-meta-mtime: 1737709765.869983787
expires: Sat, 25 Jan 2025 09:56:28 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 77538
cache: HIT
x-cached-since: 2025-01-24T09:56:28+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 1xlite-032472.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json | 46.32.182.119 | 200 OK | 23 B |
URL POST HTTP/21xlite-032472.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json IP46.32.182.119:443
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerLet's Encrypt Subject1xlite-032472.top Fingerprint67:A5:DB:FC:AB:A3:CB:3D:16:5D:64:68:CE:5C:77:27:83:DD:D9:57 ValidityWed, 25 Dec 2024 09:21:50 GMT - Tue, 25 Mar 2025 09:21:49 GMT
Hash94d0b3c9d3f27e256356324ba40d59c1 cfbf66dce321a044eac4fa7be7346b20f04ef666 4eba06fedaa0ffe860180a447a1d61546d97bb653f9b5330ae7f1c3830bb12c7
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1
Host: 1xlite-032472.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-032472.top/en/block
Content-Type: application/json
X-Lang: en
X-Uuid: 4407e9b4-bf0d-4e58-8960-22531ca55cd7
Content-Length: 88
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_16303c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l46998_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_16303c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l46998_clickunder; postback_watcher=; auid=LiC2d2eUkqxAPhpPAz0SAg==; window_width=1280; che_g=74c4b154-db9d-68b1-570f-a5cf63b8156a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:46 GMT
content-type: application/json
content-length: 23
x-dt: 285
x-time-ng: 0.001
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.010, wf-uht;dur=0.012
X-Firefox-Spdy: h2
|
|
| 1xlite-032472.top/checker/redirect/stat/run/ | 46.32.182.119 | 200 OK | 14 B |
URL GET HTTP/21xlite-032472.top/checker/redirect/stat/run/ IP46.32.182.119:443
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerLet's Encrypt Subject1xlite-032472.top Fingerprint67:A5:DB:FC:AB:A3:CB:3D:16:5D:64:68:CE:5C:77:27:83:DD:D9:57 ValidityWed, 25 Dec 2024 09:21:50 GMT - Tue, 25 Mar 2025 09:21:49 GMT
Hash2de0d0acfd684235f066bd0ec0c9e3df 68d0cb64805a42d7e40f43e8e198986b43dd6b69 9682f312f23e078bb135f23ea5a178b178e75c02d33672f20044d18c6d258928
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /checker/redirect/stat/run/ HTTP/1.1
Host: 1xlite-032472.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-032472.top/en/block
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_16303c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l46998_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_16303c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l46998_clickunder; postback_watcher=; auid=LiC2d2eUkqxAPhpPAz0SAg==; window_width=1280; che_g=74c4b154-db9d-68b1-570f-a5cf63b8156a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:46 GMT
content-type: application/json
content-length: 14
x-time-ng: 0.001
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.011
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/shared-assets/__shared_libphonenumber_js_62MR2OUM.js | 185.244.209.62 | 200 OK | 52 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/shared-assets/__shared_libphonenumber_js_62MR2OUM.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hash6e615f1b8bd3905fb373f59248e139e4 5b38efa906846fb1ec6078fa20152945cb460bb6 78bdc48d52651e648400c2398989a53551f236b27a1191d1d278973290e86bb0
GET /sys-static/shared-assets/__shared_libphonenumber_js_62MR2OUM.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:46 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-ee9e32201b694e5777cc3d72135d80ed-c3f097618d7cff0e-01
last-modified: Fri, 24 Jan 2025 07:46:23 GMT
etag: W/"382948808b1330a7a717d99dfd278acb"
x-amz-meta-mtime: 1737704647.35954868
content-encoding: gzip
expires: Sat, 25 Jan 2025 09:56:28 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 77538
cache: HIT
x-cached-since: 2025-01-24T09:56:28+00:00
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_base-app_lUiBTGbP.js | 185.244.209.62 | 200 OK | 270 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_base-app_lUiBTGbP.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Size270 kB (269757 bytes) Hash4b1655b325abb1483373a14e908ba6fc 2f9b2266e792bcc0ec97bb9c3e7f0f9b8f94772f 2211e3c4b21353c8c0ec7db4adbf2a836453fd3ee521e7d2f5715db207bb3e6c
GET /sys-static/shared-assets/Desktop/__shared_base-app_lUiBTGbP.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:46 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-6df8b381f3b4fab9d9748d7d85ba397b-6b33b082fa04df22-01
last-modified: Wed, 22 Jan 2025 08:09:41 GMT
etag: W/"e6dbde9f88defcc7c52d0f625309c0e2"
x-amz-meta-mtime: 1737533121.063572431
content-encoding: gzip
expires: Thu, 23 Jan 2025 12:23:10 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 68717
cache: HIT
x-cached-since: 2025-01-24T12:23:29+00:00
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/1c0cd0740fccd19a9816be06e69f0a1b.json | 185.244.209.62 | 200 OK | 473 B |
URL GET HTTP/2v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/1c0cd0740fccd19a9816be06e69f0a1b.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hashe67aa19ef00fd2285c7b4ecbb6018306 5b01d4786d6fbfbd5de7901eb4359a55466f434a 135c1042c31e3674d8a1b3b9e7179f4f36868048ca6058ea458ff291b8880b5e
GET /genfiles/cms/1-285/desktop/media_asset/1c0cd0740fccd19a9816be06e69f0a1b.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-032472.top/
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:46 GMT
content-type: application/json
content-length: 473
traceparent: 00-b8d5d721436fd65b4620371f61c494cb-add25899f82c2cb5-01
last-modified: Thu, 16 May 2024 20:41:30 GMT
etag: "e67aa19ef00fd2285c7b4ecbb6018306"
expires: Thu, 16 Jan 2025 11:19:55 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1095
cache: HIT
x-cached-since: 2025-01-25T07:10:31+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/1b971b84fe10ebd62b918973bbbce120.json | 185.244.209.62 | 200 OK | 406 B |
URL GET HTTP/2v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/1b971b84fe10ebd62b918973bbbce120.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash39fde6a5275961cbbab7d73f1235f56e 534312eec2fc8dddb0b269908fbb28075640f0af c8407b32fc3b929906018b21f8aec25aa56f6cf49be5e0300ca52b5a2d0e9a98
GET /genfiles/cms/1-285/desktop/media_asset/1b971b84fe10ebd62b918973bbbce120.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-032472.top/
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:46 GMT
content-type: application/json
content-length: 406
traceparent: 00-5f8cc3d4b7537e9829eff841c5e596f0-07e3a053a9a6e07e-01
last-modified: Wed, 05 Jun 2024 07:44:12 GMT
etag: "39fde6a5275961cbbab7d73f1235f56e"
expires: Thu, 16 Jan 2025 11:19:55 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1095
cache: HIT
x-cached-since: 2025-01-25T07:10:31+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/437a72a65fc10ef89c2833eacb513eda.json | 185.244.209.62 | 200 OK | 245 B |
URL GET HTTP/2v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/437a72a65fc10ef89c2833eacb513eda.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash158d1271ad904e98b54f460bb5b828af 2098f50a727cd68e1f5e0fd8d40c0cfde88faf43 5f250d09be4bf35ac625fb35faae0f664de6bc43b9aa3525425b3f11895084bf
GET /genfiles/cms/1-285/desktop/media_asset/437a72a65fc10ef89c2833eacb513eda.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-032472.top/
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:46 GMT
content-type: application/json
content-length: 245
traceparent: 00-419afd8de4c9fc6456f884d53e04a0ed-60abe44f856f9369-01
last-modified: Sat, 18 May 2024 07:21:30 GMT
etag: "158d1271ad904e98b54f460bb5b828af"
expires: Thu, 16 Jan 2025 10:57:33 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1464
cache: HIT
x-cached-since: 2025-01-25T07:04:22+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/9kbgqgDA.js | 185.244.209.62 | 200 OK | 2.4 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/9kbgqgDA.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hashe0629f80aebc07ac072052d6082ee6ed bea43e9686498ee00b140aa3537000d9c6f5f103 f1bb86c88509300ffa8c5fd8db27c66c25e0b1e166fa934d101d7300045bddf5
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/9kbgqgDA.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:46 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-d71db59a8d6cc800f4a7864d5a6fe007-9e36059dfb56ddc4-01
last-modified: Thu, 16 Jan 2025 12:01:29 GMT
etag: W/"08be028667d14af0038fe725905f6727"
x-amz-meta-mtime: 1737028741.202096736
content-encoding: gzip
expires: Thu, 23 Jan 2025 12:28:06 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 68415
cache: HIT
x-cached-since: 2025-01-24T12:28:31+00:00
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/shared-assets/__shared_accept_language_parser_F4H4E7NH.js | 185.244.209.62 | 200 OK | 1.4 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/shared-assets/__shared_accept_language_parser_F4H4E7NH.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hashf806f5587c01b438254335ea43525f65 e8f8742dd9cfab048f5e1f2d10f677a615cacb4f d7aa56ad973f917d2e126209fe2b84bae2fdcafd1e9032d3eb43e68c013bab6c
GET /sys-static/shared-assets/__shared_accept_language_parser_F4H4E7NH.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:46 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-bc00d4aa91973da3484d380160149506-3c985a0cb75840a0-01
last-modified: Fri, 24 Jan 2025 07:46:23 GMT
etag: W/"268c88e3fff4b1ae77e5109cba692e17"
x-amz-meta-mtime: 1737704647.358548597
content-encoding: gzip
expires: Sat, 25 Jan 2025 09:56:35 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 77531
cache: HIT
x-cached-since: 2025-01-24T09:56:35+00:00
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_block_pages/en/dictionary_2579b0e62e11dfdc9944af80a7135015.json | 185.244.209.62 | 200 OK | 12 kB |
URL GET HTTP/2v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_block_pages/en/dictionary_2579b0e62e11dfdc9944af80a7135015.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hash0ec8b919ba8b96e81784551cc8299c01 5872bf1f9c71b8646da8e2a804a0deb1a798abf7 3afc8c17fc94ee941b8b008964446f7c7ff5ef0a44dfe8bf5d5c79f8896b734b
GET /genfiles/web-app-v2/dictionary2/v3_block_pages/en/dictionary_2579b0e62e11dfdc9944af80a7135015.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-032472.top/
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:46 GMT
content-type: application/json; charset=utf-8
traceparent: 00-d20ca5ec5c3b3055d77ccbadec54d250-a5326ad69c55da28-01
last-modified: Fri, 15 Nov 2024 09:45:51 GMT
etag: W/"69ebea31f035c654ca3d565d6a96540e"
cache-control: max-age=3600
content-encoding: gzip
expires: Thu, 16 Jan 2025 10:55:29 GMT
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1004
cache: HIT
x-cached-since: 2025-01-25T07:12:02+00:00
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/47b9c1da/desktop/default/Betting.Core-32ad8e8f.js | 185.244.209.62 | 200 OK | 8.1 kB |
URL GET HTTP/2v3.traincdn.com/main-static/47b9c1da/desktop/default/Betting.Core-32ad8e8f.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hashd38cabab88444d93e26726a2bbe43a4c 9b52035b126aaee3172db1460c54d549309a2044 0bff3ee45734a89919faa36ee3d1cbd098c0a934eb8bb2b08cb9b04a578b1574
GET /main-static/47b9c1da/desktop/default/Betting.Core-32ad8e8f.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-032472.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:46 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-293b6ce3088a0c9830952efffbb337a3-cfb3f451c2b019a7-01
last-modified: Fri, 24 Jan 2025 09:00:19 GMT
etag: W/"50857a08b29e5f846a815aae5d54fd57"
x-amz-meta-mtime: 1737709217.023067933
content-encoding: gzip
expires: Sat, 25 Jan 2025 09:33:25 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 78890
cache: HIT
x-cached-since: 2025-01-24T09:33:56+00:00
X-Firefox-Spdy: h2
|
|
| 1xlite-032472.top/web-api/session | 46.32.182.119 | 204 No Content | 0 B |
URL GET HTTP/21xlite-032472.top/web-api/session IP46.32.182.119:443
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerLet's Encrypt Subject1xlite-032472.top Fingerprint67:A5:DB:FC:AB:A3:CB:3D:16:5D:64:68:CE:5C:77:27:83:DD:D9:57 ValidityWed, 25 Dec 2024 09:21:50 GMT - Tue, 25 Mar 2025 09:21:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /web-api/session HTTP/1.1
Host: 1xlite-032472.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-032472.top/en/block
content-type: application/json
x-requested-with: XMLHttpRequest
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_16303c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l46998_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_16303c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l46998_clickunder; auid=LiC2d2eUkqxAPhpPAz0SAg==; window_width=1280; che_g=74c4b154-db9d-68b1-570f-a5cf63b8156a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Sat, 25 Jan 2025 07:28:54 GMT
cache-control: no-cache, private
server-timing: dt_total;dur=0.019, p;dur=18.877, wf-uht;dur=0.034
set-cookie: SESSION=96103a558decc5cb03dd553817ba6fdc; path=/; secure; httponly; samesite=lax
x-dt: 285
x-time-ng: 0.020, 0.021
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
|
|
| 1xlite-032472.top/hd-api/external/apps/c5e31d5915661de4393e3f1489b00ebc4497dd48/api.js | 46.32.182.119 | 200 OK | 416 B |
URL GET HTTP/21xlite-032472.top/hd-api/external/apps/c5e31d5915661de4393e3f1489b00ebc4497dd48/api.js IP46.32.182.119:443
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerLet's Encrypt Subject1xlite-032472.top Fingerprint67:A5:DB:FC:AB:A3:CB:3D:16:5D:64:68:CE:5C:77:27:83:DD:D9:57 ValidityWed, 25 Dec 2024 09:21:50 GMT - Tue, 25 Mar 2025 09:21:49 GMT
File typeJavaScript source, ASCII text, with very long lines (594) Hashbd2e3553032ba63e3b6b3200a743bc8d a15c755742b456440614377121fadba24bd3e220 66103e021ac66e5ac2a26dfa09c44b567a455096dd77bfd809295cae281e2046
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /hd-api/external/apps/c5e31d5915661de4393e3f1489b00ebc4497dd48/api.js HTTP/1.1
Host: 1xlite-032472.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-032472.top/en/block
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_16303c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l46998_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_16303c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l46998_clickunder; auid=LiC2d2eUkqxAPhpPAz0SAg==; window_width=1280; che_g=74c4b154-db9d-68b1-570f-a5cf63b8156a; SESSION=96103a558decc5cb03dd553817ba6fdc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:54 GMT
content-type: text/javascript; charset=utf-8
content-length: 416
cache-control: public, max-age=300
content-encoding: gzip
etag: bd2e3553032ba63e3b6b3200a743bc8d
vary: Accept-Encoding
x-dt: 285
x-request-guid: 52694fb3670626018a482b78cac55ad4
x-time-ng: 0.001
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.006, wf-uht;dur=0.013
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| 1xlite-032472.top/hd-api/external/assets/hdf.js | 46.32.182.119 | 200 OK | 1.6 kB |
URL GET HTTP/21xlite-032472.top/hd-api/external/assets/hdf.js IP46.32.182.119:443
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerLet's Encrypt Subject1xlite-032472.top Fingerprint67:A5:DB:FC:AB:A3:CB:3D:16:5D:64:68:CE:5C:77:27:83:DD:D9:57 ValidityWed, 25 Dec 2024 09:21:50 GMT - Tue, 25 Mar 2025 09:21:49 GMT
File typeC++ source, ASCII text, with very long lines (874) Hash2f26a679e9d54a65e6578e947cc5bdf2 1b984864aa7b3e28231ac7cea3c199435dbdc6bf 1e3c4bd81a1cd9ee02e42a42802d5c18cbdb3f3a11c0b2732eb11bd12263020c
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /hd-api/external/assets/hdf.js HTTP/1.1
Host: 1xlite-032472.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-032472.top/en/block
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_16303c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l46998_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_16303c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l46998_clickunder; auid=LiC2d2eUkqxAPhpPAz0SAg==; window_width=1280; che_g=74c4b154-db9d-68b1-570f-a5cf63b8156a; SESSION=96103a558decc5cb03dd553817ba6fdc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:54 GMT
content-type: text/javascript; charset=utf-8
content-length: 1622
cache-control: public, max-age=300
content-encoding: gzip
etag: 2f26a679e9d54a65e6578e947cc5bdf2
vary: Accept-Encoding
x-dt: 285
x-request-guid: 33ecc4fb41d94690ef86a1e0730d85ef
x-time-ng: 0.001
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.017, wf-uht;dur=0.013
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 | 185.244.209.62 | 200 OK | 64 kB |
URL GET HTTP/2v3.traincdn.com/genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 63748, version 1.0 Hash6887b6f24414dbc612dbf42ccdc76b70 8068d3abfbc6cbf35b55919da45b1f4d2d136238 fc5c015fc32518f1ed810fa84ca28941eb9d5a3c81acc8df69a4dbbeedef7b0c
GET /genfiles/cms/1/desktop/fonts/Roboto/Roboto-Regular.woff2 HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:54 GMT
content-type: font/woff2
content-length: 63748
traceparent: 00-f3e93b58bd7800155aa3f2ccc1d9ebaa-9671f62d9b3d71bf-01
last-modified: Wed, 14 Jun 2023 09:49:53 GMT
etag: "6887b6f24414dbc612dbf42ccdc76b70"
expires: Thu, 16 Jan 2025 10:32:14 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 484
cache: HIT
x-cached-since: 2025-01-25T07:20:50+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/ca0b35c4fc049f15180d875f935913b8.json | 185.244.209.62 | 200 OK | 66 kB |
URL GET HTTP/2v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/ca0b35c4fc049f15180d875f935913b8.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hash7bfd8ca29f62a7f683ffc01a7391481e 7e72f604c15cd45ee5ef0282dfd9fe1748ac38c3 4a1acb6863c836f7820f25fd68694604f84ef114cf3e8401463d4361900b68b6
GET /genfiles/cms/1-285/desktop/media_asset/ca0b35c4fc049f15180d875f935913b8.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-032472.top/
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:45 GMT
content-type: application/json
traceparent: 00-8e5c9f562bf3d9f159007ae005a3e946-886a8d10373e435b-01
last-modified: Wed, 20 Nov 2024 09:20:07 GMT
etag: W/"ca7f8dc261bfa0bedbe26c6196957093"
content-encoding: gzip
expires: Thu, 16 Jan 2025 10:57:42 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1464
cache: HIT
x-cached-since: 2025-01-25T07:04:21+00:00
X-Firefox-Spdy: h2
|
|
| 1xlite-032472.top/hd-api/external/verify | 46.32.182.119 | 200 OK | 513 B |
URL POST HTTP/21xlite-032472.top/hd-api/external/verify IP46.32.182.119:443
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerLet's Encrypt Subject1xlite-032472.top Fingerprint67:A5:DB:FC:AB:A3:CB:3D:16:5D:64:68:CE:5C:77:27:83:DD:D9:57 ValidityWed, 25 Dec 2024 09:21:50 GMT - Tue, 25 Mar 2025 09:21:49 GMT
Hash1b6ba754ba84b723266eae91efd5191b 2ec203eb5d621c76091b65285f1b3cdb7b5d96b1 43be00f660f8ca1455a18722a0f041c82cdf91879086b4376dd65c36d42d9eb6
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /hd-api/external/verify HTTP/1.1
Host: 1xlite-032472.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-032472.top/en/block
Content-Type: text/plain;charset=UTF-8
Content-Length: 74377
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_16303c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l46998_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_16303c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l46998_clickunder; auid=LiC2d2eUkqxAPhpPAz0SAg==; window_width=1280; che_g=74c4b154-db9d-68b1-570f-a5cf63b8156a; SESSION=96103a558decc5cb03dd553817ba6fdc
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:55 GMT
content-type: application/json
content-length: 513
content-encoding: gzip
vary: Accept-Encoding
x-dt: 285
x-request-guid: e75a38065c2a28683a8c19f1c7f14f82
x-time-ng: 0.004
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.021, wf-uht;dur=0.039
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_registration/en/dictionary_60c452a4b57f0b9231563ee81a5a97da.json | 185.244.209.62 | 200 OK | 112 kB |
URL GET HTTP/2v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_registration/en/dictionary_60c452a4b57f0b9231563ee81a5a97da.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Size112 kB (112345 bytes) Hash1bbdcc6fdd17c7f5ca5794db1f4a94b4 6ba4f3ecc8dbeb99abf97714c4d5bba582edca83 b1010049f81f5242497d3df1b05e4284f636316a56e1ee6db0a311a7e466e052
GET /genfiles/web-app-v2/dictionary2/v3_registration/en/dictionary_60c452a4b57f0b9231563ee81a5a97da.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-032472.top/
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:45 GMT
content-type: application/json; charset=utf-8
traceparent: 00-cea2b8a0f633e6aae5951dade1dc094a-50bcf1661323e951-01
last-modified: Tue, 17 Dec 2024 16:05:25 GMT
etag: W/"9bb1f5ace96285c93e391e2fbc8a2b60"
cache-control: max-age=3600
content-encoding: gzip
expires: Thu, 16 Jan 2025 10:28:31 GMT
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 2944
cache: HIT
x-cached-since: 2025-01-25T06:39:41+00:00
X-Firefox-Spdy: h2
|
|
| 1xlite-032472.top/hd-api/external/01949c5d-1816-7883-a43e-fa29f01b577d.js | 46.32.182.119 | 200 OK | 228 kB |
URL GET HTTP/21xlite-032472.top/hd-api/external/01949c5d-1816-7883-a43e-fa29f01b577d.js IP46.32.182.119:443
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerLet's Encrypt Subject1xlite-032472.top Fingerprint67:A5:DB:FC:AB:A3:CB:3D:16:5D:64:68:CE:5C:77:27:83:DD:D9:57 ValidityWed, 25 Dec 2024 09:21:50 GMT - Tue, 25 Mar 2025 09:21:49 GMT
Size228 kB (228347 bytes) Hashd0b67adf97a7a4e06b6a9dbc8d257002 a76b504b48f04d36b24fba32e07d1bd8c2b4eb23 244448ba921b94c92d69c4eb1e1bff2217309bfcbc85534b1d669fa5b12aa7a1
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /hd-api/external/01949c5d-1816-7883-a43e-fa29f01b577d.js HTTP/1.1
Host: 1xlite-032472.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-032472.top/en/block
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_16303c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l46998_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_16303c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l46998_clickunder; auid=LiC2d2eUkqxAPhpPAz0SAg==; window_width=1280; che_g=74c4b154-db9d-68b1-570f-a5cf63b8156a; SESSION=96103a558decc5cb03dd553817ba6fdc
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:54 GMT
content-type: text/javascript; charset=utf-8
cache-control: private, max-age=0, must-revalidate
content-encoding: gzip
vary: Accept-Encoding
x-dt: 285
x-hd-trace-id: b866cf2b-e3ed-4480-91d5-09eaea30cf86
x-request-guid: 871266d5371a40869468042bc338ecb6
x-time-ng: 0.002
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.019, wf-uht;dur=0.016
X-Firefox-Spdy: h2
|
|
| radar.cedexis.com/1/23802/radar.js |  45.54.49.5 | 302 Moved Temporarily | 138 B |
URL GET HTTP/1.1radar.cedexis.com/1/23802/radar.js IP45.54.49.5:443 ASN#63911 NetActuate, Inc
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerDigiCert Inc Subjectradar.cedexis.com Fingerprint33:58:79:8E:87:A5:C3:05:CA:E2:82:50:61:CF:72:83:BD:64:80:C1 ValidityFri, 29 Mar 2024 00:00:00 GMT - Fri, 28 Mar 2025 23:59:59 GMT
File typeHTML document, ASCII text, with CRLF line terminators Hashaff950cab4c0265e21d401db15f1026d f03e18461817f7a6546c8bf8fa8d686d7e30aca0 753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /1/23802/radar.js HTTP/1.1
Host: radar.cedexis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-032472.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Sat, 25 Jan 2025 07:28:56 GMT
Content-Type: text/html
Content-Length: 138
Connection: keep-alive
Location: /1707728419/stub.js
Expires: Sat, 25 Jan 2025 07:38:56 GMT
Cache-Control: max-age=600
Vary: User-Agent,DNT
|
|
| v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_coupon/en/dictionary_9514726ab1e70b389311f9cca2350b8c.json | 185.244.209.62 | 200 OK | 95 kB |
URL GET HTTP/2v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_coupon/en/dictionary_9514726ab1e70b389311f9cca2350b8c.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hash7dea36e4f3202567af547809b8220918 d89ef14591f10bb9797d945cf3f7502a9ddfede4 66d042b834c6b23afa8d0e68b401af5f541edc67b2ea9413377e7b0fb72f6f87
GET /genfiles/web-app-v2/dictionary2/v3_coupon/en/dictionary_9514726ab1e70b389311f9cca2350b8c.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-032472.top/
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:45 GMT
content-type: application/json; charset=utf-8
traceparent: 00-572b36f94af667b38252d45ec896feee-1b38335efb57ab2b-01
last-modified: Tue, 14 Jan 2025 18:06:00 GMT
etag: W/"87e0b0fb7cdcc6570063fa443b80d36d"
cache-control: max-age=3600
content-encoding: gzip
expires: Thu, 16 Jan 2025 10:05:19 GMT
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 2944
cache: HIT
x-cached-since: 2025-01-25T06:39:41+00:00
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/entry-Bthv_Gug.js | 185.244.209.62 | 200 OK | 133 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/entry-Bthv_Gug.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Size133 kB (133333 bytes) Hash0dddfe02705f1ebcc0b64267e79ee3fc 75eaf61dcc0a963191da49cee1fd67cbbb500b0e d1962a9cce6c52a319c269062c17b5105e3fb5cc24ab1407c5c7f889f370178d
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/entry-Bthv_Gug.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-032472.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:46 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-e80b0c7b664350e9eefeaad3561d236a-467cce7c4ce10161-01
last-modified: Thu, 16 Jan 2025 12:01:29 GMT
etag: W/"92d3f6d9d171d7255db9d87594c1856b"
x-amz-meta-mtime: 1737028741.203096818
content-encoding: gzip
expires: Thu, 23 Jan 2025 12:28:05 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 68417
cache: HIT
x-cached-since: 2025-01-24T12:28:29+00:00
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66&l=dataLayer&cx=c>m=45He51n0v9180563600za200 | 142.250.74.168 | 200 OK | 141 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66&l=dataLayer&cx=c>m=45He51n0v9180563600za200 IP142.250.74.168:443
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint10:26:0A:38:A4:FD:1E:F0:80:EB:EE:D7:0A:8D:41:1D:CB:DB:54:82 ValidityMon, 06 Jan 2025 08:36:08 GMT - Mon, 31 Mar 2025 08:36:07 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (12472) Size141 kB (140715 bytes) Hash6ec6a7375468f4fc104e816cd29839ff 1ce23bb81ec3cb36ae4d4232e6376ba4ebef3416 64b0cd9dea6cd42afcbe1d284ec5049a9bcb2c781e541b0977b5b53a607cb34c
GET /gtag/js?id=G-7JGWL9SV66&l=dataLayer&cx=c>m=45He51n0v9180563600za200 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-032472.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 25 Jan 2025 07:28:56 GMT
expires: Sat, 25 Jan 2025 07:28:56 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0"}],}
server: Google Tag Manager
content-length: 140715
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| radar.cedexis.com/1707728419/stub.js | 45.54.49.5 | 200 OK | 271 B |
URL GET HTTP/1.1radar.cedexis.com/1707728419/stub.js IP45.54.49.5:443 ASN#63911 NetActuate, Inc
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerDigiCert Inc Subjectradar.cedexis.com Fingerprint33:58:79:8E:87:A5:C3:05:CA:E2:82:50:61:CF:72:83:BD:64:80:C1 ValidityFri, 29 Mar 2024 00:00:00 GMT - Fri, 28 Mar 2025 23:59:59 GMT
File typeJavaScript source, ASCII text Hash82dec77fd0353c7c71ce053b8601387e fbbca95419e1d0c042e0a5fdf10f380aca66188c 39f2b7b0fa78d37d0c84d2d6618bd635d86fd683d9bcdd5729850cb2a62522f7
GET /1707728419/stub.js HTTP/1.1
Host: radar.cedexis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-032472.top/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 25 Jan 2025 07:28:56 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 12 Feb 2024 09:50:42 GMT
Vary: Accept-Encoding
ETag: W/"65c9e9f2-186"
Expires: Sat, 08 Feb 2025 07:28:56 GMT
Cache-Control: max-age=1209600, public
Content-Encoding: gzip
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-7JGWL9SV66>m=45je51n0v897130004za200zb9180563600&_p=1737790136162&gcd=13l3lPl2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=102067555~102067808~102081485~102123608&cid=1903036011.1737790137&ecid=2063633784&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_eu=AEA&_s=1&sid=1737790136&sct=1&seg=0&dl=https%3A%2F%2F1xlite-032472.top%2Fen%2Fblock&dt=1xBet&en=scroll&ep.optimize_id=GTM-5R4MT54&epn.percent_scrolled=90&upn.ref_id=1&tfd=13411 | 216.239.32.36 | 204 No Content | 0 B |
URL POST HTTP/2region1.analytics.google.com/g/collect?v=2&tid=G-7JGWL9SV66>m=45je51n0v897130004za200zb9180563600&_p=1737790136162&gcd=13l3lPl2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=102067555~102067808~102081485~102123608&cid=1903036011.1737790137&ecid=2063633784&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_eu=AEA&_s=1&sid=1737790136&sct=1&seg=0&dl=https%3A%2F%2F1xlite-032472.top%2Fen%2Fblock&dt=1xBet&en=scroll&ep.optimize_id=GTM-5R4MT54&epn.percent_scrolled=90&upn.ref_id=1&tfd=13411 IP216.239.32.36:443
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint10:26:0A:38:A4:FD:1E:F0:80:EB:EE:D7:0A:8D:41:1D:CB:DB:54:82 ValidityMon, 06 Jan 2025 08:36:08 GMT - Mon, 31 Mar 2025 08:36:07 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-7JGWL9SV66>m=45je51n0v897130004za200zb9180563600&_p=1737790136162&gcd=13l3lPl2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=102067555~102067808~102081485~102123608&cid=1903036011.1737790137&ecid=2063633784&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&_eu=AEA&_s=1&sid=1737790136&sct=1&seg=0&dl=https%3A%2F%2F1xlite-032472.top%2Fen%2Fblock&dt=1xBet&en=scroll&ep.optimize_id=GTM-5R4MT54&epn.percent_scrolled=90&upn.ref_id=1&tfd=13411 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-032472.top/
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://1xlite-032472.top
date: Sat, 25 Jan 2025 07:28:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:136:0
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:136:0"}],}
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| region1.analytics.google.com/g/collect?v=2&tid=G-7JGWL9SV66>m=45je51n0v897130004za200zb9180563600&_p=1737790136162&em=tv.1~em.ODS1igyfeIhzOTHENqwIfH1sb8t0oxg8FT6iY2YCmeo&_gaz=1&gcd=13l3lPl2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=102067555~102067808~102081485~102123608&cid=1903036011.1737790137&ecid=2063633784&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&ec_mode=a&_s=2&sid=1737790136&sct=1&seg=0&dl=https%3A%2F%2F1xlite-032472.top%2Fen%2Fblock&dt=1xBet&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.optimize_id=GTM-5R4MT54&tfd=13411 | 216.239.32.36 | 204 No Content | 0 B |
URL POST HTTP/2region1.analytics.google.com/g/collect?v=2&tid=G-7JGWL9SV66>m=45je51n0v897130004za200zb9180563600&_p=1737790136162&em=tv.1~em.ODS1igyfeIhzOTHENqwIfH1sb8t0oxg8FT6iY2YCmeo&_gaz=1&gcd=13l3lPl2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=102067555~102067808~102081485~102123608&cid=1903036011.1737790137&ecid=2063633784&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&ec_mode=a&_s=2&sid=1737790136&sct=1&seg=0&dl=https%3A%2F%2F1xlite-032472.top%2Fen%2Fblock&dt=1xBet&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.optimize_id=GTM-5R4MT54&tfd=13411 IP216.239.32.36:443
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint10:26:0A:38:A4:FD:1E:F0:80:EB:EE:D7:0A:8D:41:1D:CB:DB:54:82 ValidityMon, 06 Jan 2025 08:36:08 GMT - Mon, 31 Mar 2025 08:36:07 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-7JGWL9SV66>m=45je51n0v897130004za200zb9180563600&_p=1737790136162&em=tv.1~em.ODS1igyfeIhzOTHENqwIfH1sb8t0oxg8FT6iY2YCmeo&_gaz=1&gcd=13l3lPl2l1l1&npa=1&dma_cps=syphamo&dma=1&tag_exp=102067555~102067808~102081485~102123608&cid=1903036011.1737790137&ecid=2063633784&ul=en-us&sr=1280x1024&frm=0&pscdl=noapi&ec_mode=a&_s=2&sid=1737790136&sct=1&seg=0&dl=https%3A%2F%2F1xlite-032472.top%2Fen%2Fblock&dt=1xBet&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&ep.optimize_id=GTM-5R4MT54&tfd=13411 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-032472.top/
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://1xlite-032472.top
date: Sat, 25 Jan 2025 07:28:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:136:0
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:136:0"}],}
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7JGWL9SV66&cid=1903036011.1737790137>m=45je51n0v897130004za200zb9180563600&aip=1&dma=1&dma_cps=syphamo&gcd=13l3lPl2l1l1&npa=1&frm=0&tag_exp=102067555~102067808~102081485~102123608&tag_exp=102067555~102067808~102081485~102123608&z=1624168462 | 142.250.74.131 | 200 OK | 42 B |
URL GET HTTP/2www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7JGWL9SV66&cid=1903036011.1737790137>m=45je51n0v897130004za200zb9180563600&aip=1&dma=1&dma_cps=syphamo&gcd=13l3lPl2l1l1&npa=1&frm=0&tag_exp=102067555~102067808~102081485~102123608&tag_exp=102067555~102067808~102081485~102123608&z=1624168462 IP142.250.74.131:443
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerGoogle Trust Services Subject*.google.no Fingerprint9B:87:46:80:51:F3:57:BB:58:27:17:EE:9E:AD:71:D4:7D:6D:F1:83 ValidityMon, 06 Jan 2025 08:38:56 GMT - Mon, 31 Mar 2025 08:38:55 GMT
File typeGIF image data, version 89a, 1 x 1 Hashd89746888da2d9510b64a9f031eaecd5 d5fceb6532643d0d84ffe09c40c481ecdf59e15a ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-7JGWL9SV66&cid=1903036011.1737790137>m=45je51n0v897130004za200zb9180563600&aip=1&dma=1&dma_cps=syphamo&gcd=13l3lPl2l1l1&npa=1&frm=0&tag_exp=102067555~102067808~102081485~102123608&tag_exp=102067555~102067808~102081485~102123608&z=1624168462 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-032472.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 25 Jan 2025 07:28:56 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/47b9c1da/desktop/default/vendors/plugins.vue-js-modal-5cca31b7.js | 185.244.209.62 | 200 OK | 9.1 kB |
URL GET HTTP/2v3.traincdn.com/main-static/47b9c1da/desktop/default/vendors/plugins.vue-js-modal-5cca31b7.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (26717), with no line terminators Hash3db44d2bf30809af2dcd3357d3514079 b7527b6cc5c8dcc7c0729e17f0bfca7dcf4d9c56 58a11607e8fa92823701b78dc8bcb8ff5f8e36c8ef9250666e5112c7c95c066b
GET /main-static/47b9c1da/desktop/default/vendors/plugins.vue-js-modal-5cca31b7.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-032472.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:45 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-36b9ced28b2b2ef9f0ecbf437c0b8fcc-c16c01ec6ed40002-01
last-modified: Fri, 24 Jan 2025 09:00:20 GMT
etag: W/"3db44d2bf30809af2dcd3357d3514079"
x-amz-meta-mtime: 1737709217.059068033
content-encoding: gzip
expires: Sat, 25 Jan 2025 09:33:25 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 78890
cache: HIT
x-cached-since: 2025-01-24T09:33:55+00:00
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/shared-assets/__shared_popper_js_5I5UQEBA.js | 185.244.209.62 | 200 OK | 14 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/shared-assets/__shared_popper_js_5I5UQEBA.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hash9e60cd3d973d43d919a0e4f9bb9e74ca 57bfb4976b71aeb6bd6af348af8edb6fcf82ece8 a66a1912675163a2f5caef805db89b6b2acdfa1de2d5db8843da6e483bc1b23a
GET /sys-static/shared-assets/__shared_popper_js_5I5UQEBA.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:46 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-0140c591869e467e5469cbd8af0fa2bf-b6e327902c5bbe64-01
last-modified: Fri, 24 Jan 2025 07:46:23 GMT
etag: W/"6cb09f9375675899743ac6e31bcf0b0d"
x-amz-meta-mtime: 1737704647.360548764
content-encoding: gzip
expires: Sat, 25 Jan 2025 10:04:52 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 77034
cache: HIT
x-cached-since: 2025-01-24T10:04:52+00:00
X-Firefox-Spdy: h2
|
|
| 1xlite-032472.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json | 46.32.182.119 | 200 OK | 23 B |
URL POST HTTP/21xlite-032472.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json IP46.32.182.119:443
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerLet's Encrypt Subject1xlite-032472.top Fingerprint67:A5:DB:FC:AB:A3:CB:3D:16:5D:64:68:CE:5C:77:27:83:DD:D9:57 ValidityWed, 25 Dec 2024 09:21:50 GMT - Tue, 25 Mar 2025 09:21:49 GMT
Hashbf129e7ac5509aa17e7105a7f75a4770 18e9eca6bfdd6f366c4cc856e963976f36bc92a8 1cbd0707d3c9c12c3912bef1f47e617fe106f3d5c447156fc8fa40c6c86199c9
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/event.json HTTP/1.1
Host: 1xlite-032472.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-032472.top/en/block
Content-Type: application/json
X-Lang: en
X-Uuid: 4407e9b4-bf0d-4e58-8960-22531ca55cd7
Content-Length: 109
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_16303c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l46998_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_16303c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l46998_clickunder; auid=LiC2d2eUkqxAPhpPAz0SAg==; window_width=1280; che_g=74c4b154-db9d-68b1-570f-a5cf63b8156a; SESSION=96103a558decc5cb03dd553817ba6fdc; _gcl_au=1.1.711531401.1737790137; _ga_7JGWL9SV66=GS1.1.1737790136.1.0.1737790136.60.0.2063633784; _ga=GA1.1.1903036011.1737790137
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:57 GMT
content-type: application/json
content-length: 23
x-dt: 285
x-time-ng: 0.000
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.007, wf-uht;dur=0.012
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/site-admin/css_vars/f506188b04c16eaa9c664ed23f7ce58e.css | 185.244.209.62 | 200 OK | 46 B |
URL GET HTTP/2v3.traincdn.com/genfiles/site-admin/css_vars/f506188b04c16eaa9c664ed23f7ce58e.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hashf506188b04c16eaa9c664ed23f7ce58e 08d068d7fa5a84beb06ba924a35d84d6bfdab30a b9bfda0e940104e190b19543b94a10d120643bd1516d3ca2d266a0af6c0966e9
GET /genfiles/site-admin/css_vars/f506188b04c16eaa9c664ed23f7ce58e.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-032472.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:45 GMT
content-type: text/css
content-length: 46
traceparent: 00-0f1edac796c626140123471fccf5036b-10e03272f37aa182-01
last-modified: Fri, 12 Apr 2024 13:46:52 GMT
etag: "f506188b04c16eaa9c664ed23f7ce58e"
cache-control: max-age=3600
expires: Thu, 16 Jan 2025 10:51:06 GMT
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 3075
cache: HIT
x-cached-since: 2025-01-25T06:37:30+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_forgot_password/en/dictionary_28cb4e6b9a8be3afbcbc2a6b22ab3393.json | 185.244.209.62 | 200 OK | 3.5 kB |
URL GET HTTP/2v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_forgot_password/en/dictionary_28cb4e6b9a8be3afbcbc2a6b22ab3393.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (3690), with no line terminators Hashf2e705877a451c1d6297f18a0d09b8b0 78e994cf53ef3d6ef8024eda5225926b7641e38b ed1fea1eb8e1aa7acaa8f9feba9c7f8963cee50bbca7caf4c93fa23a38d42f93
GET /genfiles/web-app-v2/dictionary2/v3_forgot_password/en/dictionary_28cb4e6b9a8be3afbcbc2a6b22ab3393.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-032472.top/
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:45 GMT
content-type: application/json; charset=utf-8
traceparent: 00-75a69082a54466f8c5cb42d7c6b04129-7642503405dbdce0-01
last-modified: Tue, 03 Dec 2024 08:05:32 GMT
etag: W/"273bec90c875f74d2f5ef70f9e32db45"
cache-control: max-age=3600
content-encoding: gzip
expires: Thu, 16 Jan 2025 10:56:28 GMT
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 2901
cache: HIT
x-cached-since: 2025-01-25T06:40:24+00:00
X-Firefox-Spdy: h2
|
|
| refpamjeql.top/L?tag=d_85563m_16303c_[]MS[]null[]null[]general[]{site_id}_d22490_l46998_clickunder&site=85563&ad=16303 |  45.135.120.31 | 303 See Other | 252 kB |
URL User Request GET HTTP/2refpamjeql.top/L?tag=d_85563m_16303c_[]MS[]null[]null[]general[]{site_id}_d22490_l46998_clickunder&site=85563&ad=16303 IP45.135.120.31:443
CertificateIssuerLet's Encrypt Subjectrefpamjeql.top FingerprintF2:46:10:14:CE:6C:49:F9:63:62:4F:95:D0:6E:AA:D5:B4:F8:DE:80 ValidityMon, 11 Nov 2024 05:17:33 GMT - Sun, 09 Feb 2025 05:17:32 GMT
Size252 kB (252246 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /L?tag=d_85563m_16303c_[]MS[]null[]null[]general[]{site_id}_d22490_l46998_clickunder&site=85563&ad=16303 HTTP/1.1
Host: refpamjeql.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 303 See Other
server: nginx
date: Sat, 25 Jan 2025 07:28:43 GMT
location: https://1xlite-032472.top:443/en?tag=d_85563m_16303c_[]MS[]null[]null[]general[]{site_id}_d22490_l46998_clickunder
set-cookie: A_16303_v=0; expires=Sun, 26 Jan 2025 07:28:43 GMT; path=/; secure
A_16303_c=1; expires=Sun, 26 Jan 2025 07:28:43 GMT; path=/; secure
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: wf-uht;dur=0.001
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-ui/3.3.65/Desktop/Default/merged.css | 185.244.209.62 | 200 OK | 1.7 MB |
URL GET HTTP/2v3.traincdn.com/sys-ui/3.3.65/Desktop/Default/merged.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Size1.7 MB (1712582 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sys-ui/3.3.65/Desktop/Default/merged.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-032472.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:44 GMT
content-type: text/css; charset=utf-8
traceparent: 00-a09370fd9b7334bab8acb6fee388d00c-2c5e711bc97f4cab-01
last-modified: Fri, 24 Jan 2025 13:30:05 GMT
etag: W/"1e37b937d00f29906a6ca660e6154ac9"
x-amz-meta-mtime: 1737725311.981249513
content-encoding: gzip
expires: Sat, 25 Jan 2025 13:35:22 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 64380
cache: HIT
x-cached-since: 2025-01-24T13:35:44+00:00
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/47b9c1da/desktop/default/css/102861e6.css | 185.244.209.62 | 200 OK | 14 kB |
URL GET HTTP/2v3.traincdn.com/main-static/47b9c1da/desktop/default/css/102861e6.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeASCII text, with very long lines (14357), with no line terminators Hashe2ead5760ddca3c5e44ce5ac29f9803d b221b7815de1460df1a507df7bbbccf5a5804a80 2b250419073dd7f0fd991e6c47c9a671b64ed94dcb0e2282cb27dd6bbc1a04f8
GET /main-static/47b9c1da/desktop/default/css/102861e6.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-032472.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:44 GMT
content-type: text/css; charset=utf-8
traceparent: 00-a115192dda58d3489dae67faf80b9ebb-ee81c647ee951a77-01
last-modified: Fri, 24 Jan 2025 09:00:20 GMT
etag: W/"e2ead5760ddca3c5e44ce5ac29f9803d"
x-amz-meta-mtime: 1737709217.039067978
content-encoding: gzip
expires: Sat, 25 Jan 2025 09:33:24 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 78891
cache: HIT
x-cached-since: 2025-01-24T09:33:53+00:00
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/47b9c1da/desktop/default/css/6c9b1c36.css | 185.244.209.62 | 200 OK | 58 kB |
URL GET HTTP/2v3.traincdn.com/main-static/47b9c1da/desktop/default/css/6c9b1c36.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeASCII text, with very long lines (57970), with no line terminators Hash341a0537f0a844b0768bdc6e58378a88 1c39d8473d1ad8f85f5ae65d0e829d1c56bb1d1b 61a0998864d4e603197530c3980f2d18cd19569db8f7c020d94674baeef722be
GET /main-static/47b9c1da/desktop/default/css/6c9b1c36.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-032472.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:44 GMT
content-type: text/css; charset=utf-8
traceparent: 00-fb146d776358a5cfe10d647bb8beb4af-922d8c02894bfd87-01
last-modified: Fri, 24 Jan 2025 09:00:20 GMT
etag: W/"341a0537f0a844b0768bdc6e58378a88"
x-amz-meta-mtime: 1737709217.039067978
content-encoding: gzip
expires: Sat, 25 Jan 2025 09:33:24 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 78890
cache: HIT
x-cached-since: 2025-01-24T09:33:54+00:00
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/47b9c1da/desktop/default/app-b474c513.js | 185.244.209.62 | 200 OK | 618 kB |
URL GET HTTP/2v3.traincdn.com/main-static/47b9c1da/desktop/default/app-b474c513.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Size618 kB (617833 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /main-static/47b9c1da/desktop/default/app-b474c513.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-032472.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:45 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-33457810d145c8b447d6cbc73f121a6c-81a6dd099560242b-01
last-modified: Fri, 24 Jan 2025 09:00:20 GMT
etag: W/"d7f96e2daed89d493fe8878414e444df"
x-amz-meta-mtime: 1737709217.035067966
content-encoding: gzip
expires: Sat, 25 Jan 2025 09:33:25 GMT
cache-control: max-age=86400
x-time-ng: 0.003
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 78891
cache: HIT
x-cached-since: 2025-01-24T09:33:54+00:00
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/shared-assets/__shared_localforage_KSHPPCVF.js | 185.244.209.62 | 200 OK | 30 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/shared-assets/__shared_localforage_KSHPPCVF.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (30255) Hashd750d8afadf936c37b83cbcafdbba18d ec95777b14c5537b0d2576363f7591cee73a9655 f7a95c0ed0b017063d1bba414ee5097f7824d34a39c33db9f289919ee47c4f12
GET /sys-static/shared-assets/__shared_localforage_KSHPPCVF.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:46 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-1b4ba9b0f0172e05d564854b2b9b9dd9-d084b261c987ce9b-01
last-modified: Fri, 24 Jan 2025 07:46:23 GMT
etag: W/"d750d8afadf936c37b83cbcafdbba18d"
x-amz-meta-mtime: 1737704647.35954868
content-encoding: gzip
expires: Sat, 25 Jan 2025 09:56:28 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 77538
cache: HIT
x-cached-since: 2025-01-24T09:56:28+00:00
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/PKQRX_b5.js | 185.244.209.62 | 200 OK | 270 B |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/PKQRX_b5.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeASCII text, with no line terminators Hash41bfc42b774ef52359e818ad3183126f 41df2d45a39f3d54dcf5b3abdbc4d33fdc10c7d4 360e0d6beaa6f9f26dbb97f355f16e410809ebe9c7cdc3835ab7b53ed7e6c2a9
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/PKQRX_b5.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:46 GMT
content-type: text/javascript; charset=utf-8
content-length: 270
traceparent: 00-681019c19e1a792853025f963c60536e-aa319c329af469ed-01
last-modified: Thu, 16 Jan 2025 12:01:29 GMT
etag: "21545c1b5163b1aff8e5b501a8bf0e26"
x-amz-meta-mtime: 1737028741.202096736
expires: Thu, 23 Jan 2025 12:28:07 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 68415
cache: HIT
x-cached-since: 2025-01-24T12:28:31+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/47b9c1da/desktop/default/analytics-c4571eb0.js | 185.244.209.62 | 200 OK | 7.8 kB |
URL GET HTTP/2v3.traincdn.com/main-static/47b9c1da/desktop/default/analytics-c4571eb0.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (8037), with no line terminators Hash9de45d61b3840f892368bd9084842944 bbfc1d03582c9041982c95944417509300251586 a8bee2b3f9af624f76cbc0e768a1d345989fea6a263099fdc2fe7650dba81bdd
GET /main-static/47b9c1da/desktop/default/analytics-c4571eb0.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-032472.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:56 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-0b1a60d57bb6305d2e300c71a5cefcd8-ec2833b4994bca9d-01
last-modified: Fri, 24 Jan 2025 09:00:19 GMT
etag: W/"24a1947c1fdf79ab3fe41096d1094cb4"
x-amz-meta-mtime: 1737709217.035067966
content-encoding: gzip
expires: Sat, 25 Jan 2025 09:33:33 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 78890
cache: HIT
x-cached-since: 2025-01-24T09:34:06+00:00
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/destination?id=DC-14030178&l=dataLayer&cx=c>m=45He51n0v9180563600za200 | 142.250.74.168 | 200 OK | 245 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/destination?id=DC-14030178&l=dataLayer&cx=c>m=45He51n0v9180563600za200 IP142.250.74.168:443
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint10:26:0A:38:A4:FD:1E:F0:80:EB:EE:D7:0A:8D:41:1D:CB:DB:54:82 ValidityMon, 06 Jan 2025 08:36:08 GMT - Mon, 31 Mar 2025 08:36:07 GMT
File typeJavaScript source, ASCII text, with very long lines (5268) Size245 kB (244571 bytes) Hash1e2b94dbb64a8e1b35a57c7c8e092097 1f70004c57ef546592e1d6c10e7f0052c931ad1a b4c41cba350aa8e87a5334ae656e9515e7d3164844c5f46275eb89cd0ace488f
GET /gtag/destination?id=DC-14030178&l=dataLayer&cx=c>m=45He51n0v9180563600za200 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-032472.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 25 Jan 2025 07:28:56 GMT
expires: Sat, 25 Jan 2025 07:28:56 GMT
cache-control: private, max-age=900
last-modified: Sat, 25 Jan 2025 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcysghrgc:42:0
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcysghrgc:42:0"}],}
server: Google Tag Manager
content-length: 87249
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_f6dbc6e39ff73771bf13241da3516d87.json | 185.244.209.62 | 200 OK | 127 kB |
URL GET HTTP/2v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_f6dbc6e39ff73771bf13241da3516d87.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Size127 kB (127161 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /genfiles/web-app-v2/dictionary2/v3_main/en/dictionary_f6dbc6e39ff73771bf13241da3516d87.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-032472.top/
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:45 GMT
content-type: application/json; charset=utf-8
traceparent: 00-8060fd5b560089a892dc39d31f6dc67f-69e3079c09f5a85b-01
last-modified: Wed, 22 Jan 2025 16:05:49 GMT
etag: W/"98547e622a9f87869ea92e6bfe44dfc9"
cache-control: max-age=3600
content-encoding: gzip
expires: Wed, 22 Jan 2025 17:19:12 GMT
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 3282
cache: HIT
x-cached-since: 2025-01-25T06:34:03+00:00
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_express_day/en/dictionary_d33d208649ed1030df89e13e093c1b13.json | 185.244.209.62 | 200 OK | 831 B |
URL GET HTTP/2v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_express_day/en/dictionary_d33d208649ed1030df89e13e093c1b13.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (888), with no line terminators Hash4157235fcf6bda16308d18ab6113b6fb 9c83a215e38d608b4000c51585219c057aae8bf2 588e8095ca0a3883ec271e21846d3f03f210320e50ac478b9ae73813e4482cbb
GET /genfiles/web-app-v2/dictionary2/v3_express_day/en/dictionary_d33d208649ed1030df89e13e093c1b13.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-032472.top/
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:45 GMT
content-type: application/json; charset=utf-8
content-length: 831
traceparent: 00-0d443bb29966cf351bbbbd64cd2fce69-422200ce7c8a80fb-01
last-modified: Wed, 24 Jan 2024 16:06:20 GMT
etag: "5d35c8a9d00341303233a231c1adecdb"
cache-control: max-age=3600
expires: Thu, 16 Jan 2025 10:56:26 GMT
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 2362
cache: HIT
x-cached-since: 2025-01-25T06:49:23+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/bf723c7b79b6ce6aa267a76dc3f0a308.json | 185.244.209.62 | 200 OK | 2.0 kB |
URL GET HTTP/2v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/bf723c7b79b6ce6aa267a76dc3f0a308.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeASCII text, with very long lines (2258), with no line terminators Hash384c7b75c8400678aba79bac67d057dd 8f5bb6aa11a990dc0ead3f007085c61affebeaf0 c91c3087976d2e77000749bdc41e75e7199e0d69a9fd15e3bf7a7d57521899b2
GET /genfiles/cms/1-285/desktop/media_asset/bf723c7b79b6ce6aa267a76dc3f0a308.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-032472.top/
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:46 GMT
content-type: application/json
traceparent: 00-dbe5ea3c2ee660eac1d154f25ab7fcb4-1bdde08c7fc4a44d-01
last-modified: Wed, 15 Jan 2025 12:27:18 GMT
etag: W/"fdf7f1a656ad6df3359d2f2706bc0f1c"
content-encoding: gzip
expires: Thu, 16 Jan 2025 11:02:51 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1464
cache: HIT
x-cached-since: 2025-01-25T07:04:22+00:00
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/47b9c1da/desktop/default/runtime-c5698716.js | 185.244.209.62 | 200 OK | 24 kB |
URL GET HTTP/2v3.traincdn.com/main-static/47b9c1da/desktop/default/runtime-c5698716.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (23551), with no line terminators Hasha12588b17862f55f6379f7973fc863be 1f5f3e490a644018222f70df8fe8b2f3fbc94807 e3df36f354c359873c50c2f8e32694d36d744f8cfd79c0eb9c3dd8d4f69a0518
GET /main-static/47b9c1da/desktop/default/runtime-c5698716.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-032472.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:45 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-a5dd398d11054be5f540505373b9e078-222ea218d4588cf6-01
last-modified: Fri, 24 Jan 2025 09:00:20 GMT
etag: W/"a12588b17862f55f6379f7973fc863be"
x-amz-meta-mtime: 1737709217.055068021
content-encoding: gzip
expires: Sat, 25 Jan 2025 09:33:24 GMT
cache-control: max-age=86400
x-time-ng: 0.002
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 78891
cache: HIT
x-cached-since: 2025-01-24T09:33:54+00:00
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_game/en/dictionary_d3735ae52deabdb00e3d736326f9d798.json | 185.244.209.62 | 200 OK | 21 kB |
URL GET HTTP/2v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_game/en/dictionary_d3735ae52deabdb00e3d736326f9d798.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /genfiles/web-app-v2/dictionary2/v3_game/en/dictionary_d3735ae52deabdb00e3d736326f9d798.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-032472.top/
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:45 GMT
content-type: application/json; charset=utf-8
traceparent: 00-9edabfbc0d5de65bc3f6bbbc230540dc-d3da2a000c37eb99-01
last-modified: Thu, 23 Jan 2025 18:05:47 GMT
etag: W/"1bd41b39aeeba3906a1ab104ef181983"
cache-control: max-age=3600
content-encoding: gzip
expires: Thu, 23 Jan 2025 19:19:08 GMT
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 3249
cache: HIT
x-cached-since: 2025-01-25T06:34:36+00:00
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/47b9c1da/desktop/default/css/7fe5f71b.css | 185.244.209.62 | 200 OK | 3.3 kB |
URL GET HTTP/2v3.traincdn.com/main-static/47b9c1da/desktop/default/css/7fe5f71b.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeASCII text, with very long lines (3315), with no line terminators Hasha094ae2a980f9c9b48cfc132e74ab16c 61b5d23a03be10876ee135cc656e300653dffcb9 8539c401214dafe1264f86e601c2ba0e06d5b6d23b21d7dd343f28c3e6e738b4
GET /main-static/47b9c1da/desktop/default/css/7fe5f71b.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-032472.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:45 GMT
content-type: text/css; charset=utf-8
traceparent: 00-fa72d69bcf12e486f302d0b65424de5d-7c3b4bed786c43fb-01
last-modified: Fri, 24 Jan 2025 09:00:20 GMT
etag: W/"c610b8710368de3bf2f1c5bb581b6a3a"
x-amz-meta-mtime: 1737709217.039067978
content-encoding: gzip
expires: Sat, 25 Jan 2025 09:33:25 GMT
cache-control: max-age=86400
x-time-ng: 0.001
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 78890
cache: HIT
x-cached-since: 2025-01-24T09:33:55+00:00
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/09c57c19d4f24724ef9af0686b86845f.json | 185.244.209.62 | 200 OK | 3.6 kB |
URL GET HTTP/2v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/09c57c19d4f24724ef9af0686b86845f.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeASCII text, with very long lines (3907), with no line terminators Hashe2953e36428a9962227abae0f638f50f 08b2cec573c8af3a7ea882dbfa45767c22749359 1fba73584351a4187b71ec94508363d6680ef1fb20d04e55bbb4a98ce6a4bcda
GET /genfiles/cms/1-285/desktop/media_asset/09c57c19d4f24724ef9af0686b86845f.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-032472.top/
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:46 GMT
content-type: application/json
traceparent: 00-e69ba6343bacd0fd9b6c8aeab8dbdeb9-dfeb98a21988b1f7-01
last-modified: Mon, 23 Dec 2024 11:31:03 GMT
etag: W/"20162c0068a1990d739eb07c9725864e"
content-encoding: gzip
expires: Thu, 16 Jan 2025 11:19:55 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1095
cache: HIT
x-cached-since: 2025-01-25T07:10:31+00:00
X-Firefox-Spdy: h2
|
|
| 1xlite-032472.top/en/block | 46.32.182.119 | 203 Non Authoritative | 252 kB |
URL User Request GET HTTP/21xlite-032472.top/en/block IP46.32.182.119:443
CertificateIssuerLet's Encrypt Subject1xlite-032472.top Fingerprint67:A5:DB:FC:AB:A3:CB:3D:16:5D:64:68:CE:5C:77:27:83:DD:D9:57 ValidityWed, 25 Dec 2024 09:21:50 GMT - Tue, 25 Mar 2025 09:21:49 GMT
Size252 kB (252246 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /en/block HTTP/1.1
Host: 1xlite-032472.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_16303c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l46998_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_16303c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l46998_clickunder; postback_watcher=; auid=LiC2d2eUkqxAPhpPAz0SAg==
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 203 Non Authoritative
server: nginx
date: Sat, 25 Jan 2025 07:28:44 GMT
content-type: text/html; charset=utf-8
content-length: 252246
accept-ranges: none
link: <https://v3.traincdn.com/sys-ui/2.3.48/Desktop/Default/client.css>; rel=preload; as=style; crossorigin=anonymous
server-timing: dt_total;dur=0.003, total;dur=44;desc="Nuxt Server Time"
set-cookie: lng=en; Path=/
cookies_agree_type=3; Path=/
tzo=1; Path=/
is12h=0; Path=/
x-dt: 285
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=63072000; includeSubDomains; preload
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_reset_password/en/dictionary_612c6e919ca15d39cc751a619a3952c7.json | 185.244.209.62 | 200 OK | 765 B |
URL GET HTTP/2v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_reset_password/en/dictionary_612c6e919ca15d39cc751a619a3952c7.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (817), with no line terminators Hash650ef5c04f5755ace4a4b329cba51023 9bc6b9757126f90aa78c2912a387d7d5a076b357 b6b5ddad83547368d891603b76cbca90a8d575421b4fdef324696b98b5d178af
GET /genfiles/web-app-v2/dictionary2/v3_reset_password/en/dictionary_612c6e919ca15d39cc751a619a3952c7.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-032472.top/
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:45 GMT
content-type: application/json; charset=utf-8
content-length: 765
traceparent: 00-35b1713844fe0bb6854f00e6e24b17e0-1e2e97335bf8d084-01
last-modified: Wed, 11 Oct 2023 12:52:53 GMT
etag: "00f980f23f1b4c1ccee99ed49e0a8feb"
cache-control: max-age=3600
expires: Thu, 16 Jan 2025 10:53:47 GMT
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 2362
cache: HIT
x-cached-since: 2025-01-25T06:49:23+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/e7f91740f4be211afac731343dc63895.json | 185.244.209.62 | 200 OK | 14 kB |
URL GET HTTP/2v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/e7f91740f4be211afac731343dc63895.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash5f6393bd6febc268d33cb235c7eec194 819eb4409582bcea038e527fd5859dde2d13e0e7 9ae42c0a8d88add1a2d54faab5d819c619cb2a2a1eec7595fe1029a91449efb0
GET /genfiles/cms/1-285/desktop/media_asset/e7f91740f4be211afac731343dc63895.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-032472.top/
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:45 GMT
content-type: application/json
traceparent: 00-c57dc567f4a1c7b53432c454a5e2c09d-46f9f6464776a93b-01
last-modified: Fri, 17 May 2024 01:07:57 GMT
etag: W/"5f6393bd6febc268d33cb235c7eec194"
content-encoding: gzip
expires: Thu, 16 Jan 2025 11:02:52 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1464
cache: HIT
x-cached-since: 2025-01-25T07:04:21+00:00
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/shared-assets/__shared_chunk_6EO4CXC4.js | 185.244.209.62 | 200 OK | 610 B |
URL GET HTTP/2v3.traincdn.com/sys-static/shared-assets/__shared_chunk_6EO4CXC4.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (621), with no line terminators Hashf5768750051a8debea17ce89837e3bf7 fa1f86f4121d91916a9657a90a189b21272ff644 178069ce2b15dde7d59f819f48a74377221ae26632a210b09af003dd6e9390bb
GET /sys-static/shared-assets/__shared_chunk_6EO4CXC4.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:46 GMT
content-type: text/javascript; charset=utf-8
content-length: 610
traceparent: 00-d09cd2f949668db055d7b8cb8d1b3729-8453c6adea9d1455-01
last-modified: Fri, 24 Jan 2025 09:12:28 GMT
etag: "464c50409850b3095783d5b3b9a1b00d"
x-amz-meta-mtime: 1737709765.868983707
expires: Sat, 25 Jan 2025 09:56:28 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 77538
cache: HIT
x-cached-since: 2025-01-24T09:56:28+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/47b9c1da/desktop/default/DC-d6ce9225.js | 185.244.209.62 | 200 OK | 2.7 kB |
URL GET HTTP/2v3.traincdn.com/main-static/47b9c1da/desktop/default/DC-d6ce9225.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (2676), with no line terminators Hash9e4bc64081856ae2388e9f45beaa4629 9d83ab818ebd86029231e84fe115df070a7a36f5 ea8539b02208d473183f65968524d9c3963dcc958e6f05cebfc4ab9ad83cbf33
GET /main-static/47b9c1da/desktop/default/DC-d6ce9225.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-032472.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:46 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-f7eb48e9fc85187fd293887f6a777b00-4dbcdf38d2c06e72-01
last-modified: Fri, 24 Jan 2025 09:00:19 GMT
etag: W/"eb58f903ab3f8f12f83f68befa090822"
x-amz-meta-mtime: 1737709217.023067933
content-encoding: gzip
expires: Sat, 25 Jan 2025 09:33:25 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 78890
cache: HIT
x-cached-since: 2025-01-24T09:33:56+00:00
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/cca369af6198d7764a276e816ecf67dd.json | 185.244.209.62 | 200 OK | 12 kB |
URL GET HTTP/2v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/cca369af6198d7764a276e816ecf67dd.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hash6a4635ef54a2476b6606f4b98ba743d0 d41e0cbe241494ff70cfc50c8e398902b6f161c1 2a5fc3f71a70d1af1966f031dfd607226dbfc4a2f8edac1e602dd30655549fc3
GET /genfiles/cms/1-285/desktop/media_asset/cca369af6198d7764a276e816ecf67dd.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-032472.top/
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:46 GMT
content-type: application/json
traceparent: 00-98514322f30f8e03eb8bd1aa5f35ecf6-bdf93d0847ac6763-01
last-modified: Thu, 10 Oct 2024 12:42:28 GMT
etag: W/"6a4635ef54a2476b6606f4b98ba743d0"
content-encoding: gzip
expires: Thu, 16 Jan 2025 11:19:55 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1095
cache: HIT
x-cached-since: 2025-01-25T07:10:31+00:00
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/main-static/47b9c1da/desktop/default/commons/app-0a1c36f7.js | 185.244.209.62 | 200 OK | 138 kB |
URL GET HTTP/2v3.traincdn.com/main-static/47b9c1da/desktop/default/commons/app-0a1c36f7.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Size138 kB (137776 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /main-static/47b9c1da/desktop/default/commons/app-0a1c36f7.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-032472.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:45 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-c47aa81714bbf1d01cbbb8d1ed0bcac3-f8db28164b4e6fa1-01
last-modified: Fri, 24 Jan 2025 09:00:20 GMT
etag: W/"25c3542d7571a59fc23a20d6b7193a57"
x-amz-meta-mtime: 1737709217.035067966
content-encoding: gzip
expires: Sat, 25 Jan 2025 09:33:25 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 78891
cache: HIT
x-cached-since: 2025-01-24T09:33:54+00:00
X-Firefox-Spdy: h2
|
|
| 1xlite-032472.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json | 46.32.182.119 | 200 OK | 2 B |
URL POST HTTP/21xlite-032472.top/fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json IP46.32.182.119:443
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerLet's Encrypt Subject1xlite-032472.top Fingerprint67:A5:DB:FC:AB:A3:CB:3D:16:5D:64:68:CE:5C:77:27:83:DD:D9:57 ValidityWed, 25 Dec 2024 09:21:50 GMT - Tue, 25 Mar 2025 09:21:49 GMT
Hashd751713988987e9331980363e24189ce 97d170e1550eee4afc0af065b78cda302a97674c 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /fatman-api/a6f69e4388362d761ee5bb073edb23ae3d9341fb/ab.json HTTP/1.1
Host: 1xlite-032472.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-032472.top/en/block
Content-Type: application/json
X-Lang: en
X-Uuid: 4407e9b4-bf0d-4e58-8960-22531ca55cd7
Content-Length: 19
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Cookie: platform_type=desktop; lng=en; cookies_agree_type=3; tzo=1; is12h=0; referral_values=%7B%22type%22%3A%22reflinkid%22%2C%22val%22%3A%22d_85563m_16303c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l46998_clickunder%22%2C%22additional%22%3A%7B%22name_tag%22%3A%22tag%22%7D%7D; reflinkid=d_85563m_16303c_%5B%5DMS%5B%5Dnull%5B%5Dnull%5B%5Dgeneral%5B%5D%7Bsite_id%7D_d22490_l46998_clickunder; postback_watcher=; auid=LiC2d2eUkqxAPhpPAz0SAg==
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:45 GMT
content-type: application/json
content-length: 2
x-dt: 285
x-time-ng: 0.000
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: dt_total;dur=0.015, wf-uht;dur=0.011
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66 | 142.250.74.168 | 200 OK | 443 kB |
URL GET HTTP/2www.googletagmanager.com/gtag/js?id=G-7JGWL9SV66 IP142.250.74.168:443
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint10:26:0A:38:A4:FD:1E:F0:80:EB:EE:D7:0A:8D:41:1D:CB:DB:54:82 ValidityMon, 06 Jan 2025 08:36:08 GMT - Mon, 31 Mar 2025 08:36:07 GMT
Size443 kB (443300 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gtag/js?id=G-7JGWL9SV66 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-032472.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 25 Jan 2025 07:28:56 GMT
expires: Sat, 25 Jan 2025 07:28:56 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:838:0
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:838:0"}],}
server: Google Tag Manager
content-length: 140716
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtag/destination?id=AW-16664555628&l=dataLayer&cx=c>m=45He51n0v9180563600za200 | 142.250.74.168 | 200 OK | 301 kB |
URL GET HTTP/3www.googletagmanager.com/gtag/destination?id=AW-16664555628&l=dataLayer&cx=c>m=45He51n0v9180563600za200 IP142.250.74.168:443
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint10:26:0A:38:A4:FD:1E:F0:80:EB:EE:D7:0A:8D:41:1D:CB:DB:54:82 ValidityMon, 06 Jan 2025 08:36:08 GMT - Mon, 31 Mar 2025 08:36:07 GMT
File typeJavaScript source, ASCII text, with very long lines (5268) Size301 kB (300775 bytes) Hash9fac64520a04ffb1c58e1aff063c4eca 81ff5bab69b1070354507eb093d633989b8cc6fa cc3eb7b422ac6da4161016b7bba2952cb38dd381316b0bb15a536272e33aefd5
GET /gtag/destination?id=AW-16664555628&l=dataLayer&cx=c>m=45He51n0v9180563600za200 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-032472.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 25 Jan 2025 07:28:56 GMT
expires: Sat, 25 Jan 2025 07:28:56 GMT
cache-control: private, max-age=900
last-modified: Sat, 25 Jan 2025 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcysghrgc:42:0
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcysghrgc:42:0"}],}
server: Google Tag Manager
content-length: 103688
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_css_5be180.css | 185.244.209.62 | 200 OK | 5.9 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/shared-assets/Desktop/__shared_css_5be180.css IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeASCII text, with very long lines (5906), with no line terminators Hashf384acb0c03bc4efafdbc563760e5dc0 fc4246a7d998964ce201e853dd436b396eb6082e 6c8f1f5c4ac67399db68a199a036608aedc804ed96a5dc32733a2e9dbd074c44
GET /sys-static/shared-assets/Desktop/__shared_css_5be180.css HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-032472.top/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:44 GMT
content-type: text/css; charset=utf-8
traceparent: 00-26ef867802cdc86ef7e19eec7e66eaf8-e334ff2fee03658a-01
last-modified: Fri, 24 Jan 2025 07:46:23 GMT
etag: W/"7c714075eb939d26157c3cb143e39676"
x-amz-meta-mtime: 1737704647.33654675
content-encoding: gzip
expires: Sat, 25 Jan 2025 10:04:17 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 77067
cache: HIT
x-cached-since: 2025-01-24T10:04:17+00:00
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/shared-assets/__shared_vue_deps_PATB7KR4.js | 185.244.209.62 | 200 OK | 20 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/shared-assets/__shared_vue_deps_PATB7KR4.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sys-static/shared-assets/__shared_vue_deps_PATB7KR4.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:46 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-5471f648216188725878ecc53776ef86-74e31210d784151d-01
last-modified: Fri, 24 Jan 2025 07:46:23 GMT
etag: W/"219b2bf4ebab7fe0b8a06850fb28e8b3"
x-amz-meta-mtime: 1737704647.360548764
content-encoding: gzip
expires: Sat, 25 Jan 2025 09:56:28 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 77538
cache: HIT
x-cached-since: 2025-01-24T09:56:28+00:00
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/e3dd2d416ede1d7659584842878349f6.json | 185.244.209.62 | 200 OK | 1.1 kB |
URL GET HTTP/2v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/e3dd2d416ede1d7659584842878349f6.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeASCII text, with very long lines (1205), with no line terminators Hash7e57210fe3f01fd6a726a5ef7750785f 3466d373b62cd3e1c975ca7556e9ed8139f78360 b984b21e94d34c282acae49e1fd192038dd5a8cf2b1ae214fd4ac7ba86ee7048
GET /genfiles/cms/1-285/desktop/media_asset/e3dd2d416ede1d7659584842878349f6.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-032472.top/
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:46 GMT
content-type: application/json
traceparent: 00-0da689e6e149115e254e60ead5c0ee21-bff6f49df5f96598-01
last-modified: Thu, 16 May 2024 19:05:13 GMT
etag: W/"338264fc869e8f0b86b0d6c9d92102b0"
content-encoding: gzip
expires: Thu, 16 Jan 2025 11:19:55 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1095
cache: HIT
x-cached-since: 2025-01-25T07:10:31+00:00
X-Firefox-Spdy: h2
|
|
| www.googletagmanager.com/gtm.js?id=GTM-KFGPRJ2V | 142.250.74.168 | 200 OK | 304 kB |
URL GET HTTP/2www.googletagmanager.com/gtm.js?id=GTM-KFGPRJ2V IP142.250.74.168:443
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerGoogle Trust Services Subject*.google-analytics.com Fingerprint10:26:0A:38:A4:FD:1E:F0:80:EB:EE:D7:0A:8D:41:1D:CB:DB:54:82 ValidityMon, 06 Jan 2025 08:36:08 GMT - Mon, 31 Mar 2025 08:36:07 GMT
Size304 kB (303850 bytes) Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gtm.js?id=GTM-KFGPRJ2V HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-032472.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 25 Jan 2025 07:28:56 GMT
expires: Sat, 25 Jan 2025 07:28:56 GMT
cache-control: private, max-age=900
last-modified: Sat, 25 Jan 2025 06:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1080:0
cross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting
report-to: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1080:0"}],}
server: Google Tag Manager
content-length: 105508
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/8192228305b202797f207eeb6842287c.png | 185.244.209.62 | 200 OK | 5.2 kB |
URL GET HTTP/2v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/8192228305b202797f207eeb6842287c.png IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typePNG image data, 514 x 514, 8-bit colormap, non-interlaced Hashb9a636eef54b2844b571fe7de49184a7 bf653690790ced40eb3189da075a275d951d1607 001bfcdd52b658d46543a1aec889d35b73b3909b47097cc011b95e96fc9e3743
GET /genfiles/cms/1-285/desktop/media_asset/8192228305b202797f207eeb6842287c.png HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://1xlite-032472.top/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:46 GMT
content-type: image/png
content-length: 5202
traceparent: 00-d905d07ea16f851704c23490c44f887f-0dae68803ddd7836-01
last-modified: Wed, 26 Jun 2024 08:22:59 GMT
etag: "b9a636eef54b2844b571fe7de49184a7"
expires: Thu, 16 Jan 2025 11:18:57 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 2832
cache: HIT
x-cached-since: 2025-01-25T06:41:34+00:00
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_auth/en/dictionary_3302f5052cd12ca260cd946af7660ff0.json | 185.244.209.62 | 200 OK | 8.7 kB |
URL GET HTTP/2v3.traincdn.com/genfiles/web-app-v2/dictionary2/v3_auth/en/dictionary_3302f5052cd12ca260cd946af7660ff0.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typetroff or preprocessor input, Unicode text, UTF-8 text, with very long lines (9165), with no line terminators Hash15045e7ecd3e7ed1ec2c5dca3b78df8e c1afeb59e486fafa5db2b03a3f616ad754299689 21030d217c9887eee14ae3038c7f943d5e876ec51d888538b2ffa049891dc9e2
GET /genfiles/web-app-v2/dictionary2/v3_auth/en/dictionary_3302f5052cd12ca260cd946af7660ff0.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-032472.top/
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:45 GMT
content-type: application/json; charset=utf-8
traceparent: 00-52f8dfc08db648d3bed03ea225c6cadc-c7bec961f6cf2c7a-01
last-modified: Fri, 15 Nov 2024 12:25:26 GMT
etag: W/"c960df03c02866eb54a219e318dd1cc8"
cache-control: max-age=3600
content-encoding: gzip
expires: Thu, 16 Jan 2025 10:10:18 GMT
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 2956
cache: HIT
x-cached-since: 2025-01-25T06:39:29+00:00
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/d9842b87b9dabdc4cdc248c062355299.json | 185.244.209.62 | 200 OK | 7.3 kB |
URL GET HTTP/2v3.traincdn.com/genfiles/cms/1-285/desktop/media_asset/d9842b87b9dabdc4cdc248c062355299.json IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeASCII text, with very long lines (8082), with no line terminators Hashdc424c56188d2fb07cbb8b3cf4cf6334 d52dc8395a4dc996af20fb0e2b1ecbd62cb04120 103f4cda8ba430dbbe6a699d14ff96789d65a4e8b8f35447d4831dbca3de63ea
GET /genfiles/cms/1-285/desktop/media_asset/d9842b87b9dabdc4cdc248c062355299.json HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://1xlite-032472.top/
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:45 GMT
content-type: application/json
traceparent: 00-3076142589dc5090fa5db3c4f5c7955b-eac562e475eda3c6-01
last-modified: Thu, 23 Jan 2025 13:19:10 GMT
etag: W/"0614058b667e6dfa1cdecc6e0e53131c"
content-encoding: gzip
expires: Thu, 23 Jan 2025 14:50:28 GMT
cache-control: max-age=3600
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 1464
cache: HIT
x-cached-since: 2025-01-25T07:04:21+00:00
X-Firefox-Spdy: h2
|
|
| v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/ywYu240b.js | 185.244.209.62 | 200 OK | 5.5 kB |
URL GET HTTP/2v3.traincdn.com/sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/ywYu240b.js IP185.244.209.62:443 ASN#199524 G-Core Labs S.A.
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerSectigo Limited Subject*.traincdn.com Fingerprint71:CC:F4:85:58:3C:F4:8C:55:97:B4:2F:47:54:D1:16:BE:D5:A3:CA ValidityTue, 26 Nov 2024 00:00:00 GMT - Fri, 26 Dec 2025 23:59:59 GMT
File typeASCII text, with very long lines (5650), with no line terminators Hash9806e301700caf30acd3089de303f5a8 52facbfc09cd68ccfe0068164b675343f6d3e237 9691a2a6a0812aa7816e26a6fa9c7529df10f18eb348f8a7713759fa1709f0de
GET /sys-static/sys-technical-pages-app-static/Desktop/Default/44136fa355b3/ywYu240b.js HTTP/1.1
Host: v3.traincdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Referer: https://v3.traincdn.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 07:28:46 GMT
content-type: text/javascript; charset=utf-8
traceparent: 00-b88f4ca87a93d1ced5b648054b2759b7-cdb68b9eb05da308-01
last-modified: Thu, 16 Jan 2025 12:01:29 GMT
etag: W/"29317f40f64ddd062ced9e94b607702e"
x-amz-meta-mtime: 1737028741.203096818
content-encoding: gzip
expires: Thu, 23 Jan 2025 12:28:07 GMT
cache-control: max-age=86400
x-time-ng: 0.000
strict-transport-security: max-age=31536000; includeSubDomains
access-control-allow-origin: *
x-id: osix-hw-edge-gc4
age: 68415
cache: HIT
x-cached-since: 2025-01-24T12:28:31+00:00
X-Firefox-Spdy: h2
|
|
| www.google.com/ccm/collect?en=page_view&dl=https%3A%2F%2F1xlite-032472.top%2Fen%2Fblock&scrsrc=www.googletagmanager.com&frm=0&rnd=638721352.1737790137&dt=1xBet&auid=711531401.1737790137&navt=n&npa=1>m=45He51n0v9180563600za200&gcd=13l3l3l2l1l1&dma_cps=syphamo&dma=1&tag_exp=102067555~102067808~102081485~102123608&tft=1737790136528&tfd=13171&apve=1 | 142.250.178.100 | 200 OK | 0 B |
URL POST HTTP/2www.google.com/ccm/collect?en=page_view&dl=https%3A%2F%2F1xlite-032472.top%2Fen%2Fblock&scrsrc=www.googletagmanager.com&frm=0&rnd=638721352.1737790137&dt=1xBet&auid=711531401.1737790137&navt=n&npa=1>m=45He51n0v9180563600za200&gcd=13l3l3l2l1l1&dma_cps=syphamo&dma=1&tag_exp=102067555~102067808~102081485~102123608&tft=1737790136528&tfd=13171&apve=1 IP142.250.178.100:443
Requested byhttps://1xlite-032472.top/en/block CertificateIssuerGoogle Trust Services Subjectwww.google.com Fingerprint53:F5:E3:47:F6:DC:80:83:14:A1:CE:39:7B:A1:98:61:74:03:86:E2 ValidityMon, 06 Jan 2025 08:37:56 GMT - Mon, 31 Mar 2025 08:37:55 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /ccm/collect?en=page_view&dl=https%3A%2F%2F1xlite-032472.top%2Fen%2Fblock&scrsrc=www.googletagmanager.com&frm=0&rnd=638721352.1737790137&dt=1xBet&auid=711531401.1737790137&navt=n&npa=1>m=45He51n0v9180563600za200&gcd=13l3l3l2l1l1&dma_cps=syphamo&dma=1&tag_exp=102067555~102067808~102081485~102123608&tft=1737790136528&tfd=13171&apve=1 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://1xlite-032472.top
DNT: 1
Connection: keep-alive
Referer: https://1xlite-032472.top/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
content-type: text/plain
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
date: Sat, 25 Jan 2025 07:28:57 GMT
pragma: no-cache
vary: Origin, X-Origin, Referer
server: scaffolding on HTTPServer2
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://1xlite-032472.top
access-control-expose-headers: date,vary,vary,vary,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
0.0.0.0