{"report_id":"7e2ef157-4bbf-43b9-8993-204396452cf5","version":6,"status":"done","tags":[],"date":"2026-03-11T02:48:40Z","url":{"schema":"https","addr":"mexcfd.com/","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":0,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"mexcfd.com/","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"title":"Mex CFD : Forex Broker – Low Spread | High Dynamic Leverage","dom":{"size":206028,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (62416)","md5":"f28875e66580ea4cf87549f70ce17c3e","sha1":"cbfde81f1bec5c89f6c61aa4e05d372c3d3ec78e","sha256":"2baf96b86cdbe90a473235e9f58b1e4e6f5f434ac25adbc2e775c639258cc647","sha512":"97655814c60abbfa32120e5aa927b6baca551942ca99f90874f47876815b10a1d3d144c93ad62c8b4ffffb511768ee6ca91f760d7bdd3eb1d3a412164b3af1d0","ssdeep":"6144:M8o6kp60TXBkF7qRun01n9PHd+oP+3XWpGTleDq8Za39/4A7KE2/rXI6TGH7mSs1:cNx","tlshash":"5914dba17b852839211f13afe04bb30c61da9e92ea0eb1d5f4fec15846e5f9135f121e","dom_hash":"domhashf9d9f26720e1f4341b137ae8984c1da2","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"mexcfd.com/","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":0,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-15T02:48:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-08T22:33:42.678774Z","alert_count":0,"request_count":1,"received_data":1140836,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"mexcfd.com","ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"domain_registered":"2024-10-11","domain_rank":0,"first_seen":"2026-03-03T03:47:53.665905Z","last_seen":"2026-03-03T03:47:53.665905Z","alert_count":59,"request_count":59,"received_data":6638220,"sent_data":28650,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"particles.js","description":"Particles.js is a JavaScript library for creating particles.","website":"https://github.com/VincentGarreau/particles.js","common_platform_enumeration":"","icon":"","categories":["JavaScript graphics"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"WordPress:6.9.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Elementor:3.24.6","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"parallax.js:1.0","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"192.178.202.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-08T22:15:01.701196Z","alert_count":0,"request_count":8,"received_data":305618,"sent_data":4349,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-08T22:19:32.591288Z","alert_count":0,"request_count":1,"received_data":180286,"sent_data":1143,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/royal-elementor-addons/assets/js/lib/jarallax/jarallax.min.js?ver=1.12.7","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb41ed612d3bd175a500efdd4a3577a9","sha1":"58b26c82be66cd197eeba18a1682cdb0e8300a09","sha256":"0e8046d1329ee32048030b15b473e89574c1a96f1fe350e2f6fe2bbbdb1916af","sha512":"14f9721d53b68c3c8df7bdb18717232427ee7a765b953bab5046a00076a72be196292a3640c539f6ebc4173315291a63e08cec23d923798b085f278558b32f2d","ssdeep":"192:b9L5RK5fPMcgPbCp35vkQ14Yftfw9+Th+/isY1QmA0gkzdgbB1jXcfAsoTucjvVT:xPrbCPwUtfrSGzWbBqfAsoCcJrP/","tlshash":"1762d95c3221722186fb72ed201f630eb235957481aaca61712cc9fe7b65d8d41f3f6a","size":15408,"data":"","first_seen":"2023-03-07T12:23:24Z","last_seen":"2026-06-13T16:38:27.633054Z","times_seen":12544,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/starter-templates-zip-preview-js-extra","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"a922de72cce6370dad20866d4335c02e","sha1":"89f01126e9fd1250644ed6b0ad6d7abf82c4d576","sha256":"8df4470af50d9827133ac49f7337ccc222059b95efaf3b491f0749235f97e8ec","sha512":"9ce19ccb1c7213f72c6ebf7f7e31e8eef54374571d87672513e5994eaff639d526ad9712ba3e83b394298a8ec23e87e06738de536e7262966c358b1b3965e33e","ssdeep":"","tlshash":"10319224f27419b2057389bdc51fc2a8949d6a43cd2ed709bd5dd96c21e675f0914703","size":1467,"data":"","first_seen":"2025-12-03T14:28:53.762651Z","last_seen":"2026-06-10T09:24:09.774217Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/elementor-frontend-js-before","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ccafdab0e9f88fcd3a441c486b6f7894","sha1":"9d18c5cbfa830d08d780856b42e88e0a4646bd10","sha256":"b0767ceecf296a9a53bced35f69813720964caffbbf986bd40f65370e9223969","sha512":"5bc60817c2a731a9788f39a65d075a44811fcbea11dfe3f35941d37e3b8a906c412ebebef7db5894e313086ea404e3cf7b323af1a98c47eb771e8b61343e527d","ssdeep":"","tlshash":"94719420f9455abf83e397b0791bbb03596c092ad041bcb9f4ed886d14f5a68270be47","size":3783,"data":"","first_seen":"2026-03-11T02:48:47.906978Z","last_seen":"2026-03-11T03:30:44.059768Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.8.3","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ef9204a7af2a5426621dcb478cbbb18","sha1":"3576353c10ec109664743f318dc8a33b49667781","sha256":"5ee20f2609117478c407ec61ff4e83d2bf9fb526d8cb1612702a1491c6613f96","sha512":"ed29a8eca113c9103c7928036795fd193b906069e7d23b0493dd6bd04bd674ff045f2dedeb7db93d3a3fdb3d6168eb6b053f526da92a159f62d6837cada90057","ssdeep":"384:uYE9Gy3GyPyxbomcFD4ryHjdDuPoDo3oEKnnknUyCdyGvyoQUyltXj4pyoEq2Vh1:uYEPx6xbomcFDTHj8PoDo3oEKnAfRoQv","tlshash":"f6b282aa6200263604fe1be7f5daabc4767110affe0944115878cc5e19a8fd351f1afd","size":23659,"data":"","first_seen":"2024-10-03T04:39:22Z","last_seen":"2026-06-13T12:52:45.008231Z","times_seen":828,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.24.6","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"650f6d97d5efb2781f897b385c4c94a0","sha1":"d2c05e33461656f84cf31ce29ab51aef79a6b561","sha256":"d4a6a819218b18c9bd0095d7ba200469ac95a835ca55da1f8374b520407f5f59","sha512":"fd9614e07a5c067c51eaf86fd79b4601463dbcb5aaaf7fa60390bed76db48dcad61db151da6506858b29d9d68ab9d19cc40d3a0e2d7b6cfbb98805bf072d89c8","ssdeep":"768:ERxjjLRkR68ZvxH2Ea/AfjSfufVgLIH1/QlKEAzBc5G8TSebsvT2C8UlBSB5oodA:ERxvLRkR681xH2EanufVtfEAzBc5TTS9","tlshash":"800307127192d4aa418f48b7b433021cb3654dcdb402b59db1bdace6a5b1e8373b6bb4","size":41321,"data":"","first_seen":"2024-10-10T08:49:40Z","last_seen":"2026-06-12T14:13:18.229602Z","times_seen":577,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/royal-elementor-addons/assets/js/frontend.min.js?ver=1.7.1026","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c23ef586c3c25e146042840a6243545","sha1":"01f3e10f2ec87b86cea040a3932140626289149c","sha256":"1d2b441e3c64640fe0bef8a95da821156976269cceee6b4bbf0b0062b48e475b","sha512":"833e8c409924c6176fda01fdd09d2475c019d8bfe9eb40c2fa903ebc26cdc198eeacb02253297c293e75ca1bc3cf315d3c50926c119f9cd1b58968b390a6e71f","ssdeep":"6144:NMKesfVGqothnos8HU1y3qbZ6LoSbuh0RD6dmj4bT3M0MlhSveB0OPFP:/fVGTCvPFP","tlshash":"1334d545f12561f380ff11b7416bba8031255cb2cb038894a1b7997a0eb9de6a373f6d","size":230501,"data":"","first_seen":"2025-06-10T12:05:03.734321Z","last_seen":"2026-06-13T15:32:31.688451Z","times_seen":1016,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-13T17:33:36.781558Z","times_seen":833527,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"75810f544b2ee064bf93a0a002fc4aaa","sha1":"57f544719ad2c5fce856e26872f25e24a2ed59cd","sha256":"152620764cd2f93e069abe9e7333ad846b32a877354b4e659b0187c96fd0aa69","sha512":"a5877801d94ee1ecb8b9d8e43f5678e577ebe84dac9e254b4fa4886144feb48fbf332b0fe7b949ab08886c5c1f9eb308f9c6088cd05641bf23ee4d8f5f37f46a","ssdeep":"","tlshash":"6701c01cf044101445f77039d0bf7757b6137c76662b00c7428c88b82e2cb388d639c5","size":705,"data":"","first_seen":"2025-12-02T23:16:37.220963Z","last_seen":"2026-06-13T09:06:59.987276Z","times_seen":10115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-06-13T17:30:15.61041Z","times_seen":302245,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/royal-elementor-addons/assets/js/modal-popups.min.js?ver=1.7.1026","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"882f9ab8e7a5564230105bdaf3c9c8f0","sha1":"477df0a4e4b3a8e806283a58bd853420a944bd68","sha256":"ffe90abf1e3a9fa01e7b3b4b0d36b8d76d918e2ec9895f06f40b5de446362146","sha512":"ae4005bad6dedf019a21d0088a78ae86295fa375891ecad6d0cbc1540cfed772bef45601038a1051acd9937bd724e784ed327f8c0466abb163ed94986be67f7a","ssdeep":"192:TC6aOhw2n2THrKpC3NSAPjqSnS9ahohrkKeZB:zaOhw2n2THrKpC3NlS9ahohrkKM","tlshash":"2032fce8f3cdf10b51be307ad86e02ec523d543175125c3abda81a5129d099d8369fbe","size":11524,"data":"","first_seen":"2023-03-09T22:30:34Z","last_seen":"2026-06-13T16:05:28.19756Z","times_seen":10637,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/gtranslate/js/float.js?ver=6.9.2","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8654659b8cdb0b24ca22ace0b814a207","sha1":"28903756bef7a08db9eaf5beb2cecfdefc4f907f","sha256":"9a7ea502345704dd8c1ec3c0cccd5aa0794afedd17143e031a0a87b26a909320","sha512":"c02b80d40dd4300e6df4c2bb082e120d23b78c0677bb6179d1ecb1d1750011a3f9e3fd5b9ca988be293a0391ba8a9f2930fb1726234b8fd0af7ebe564e42b6ee","ssdeep":"384:vzCKMPZATN09o0mtvwfEXMb5TZ/dDsKCnfYI:vVMhAh060svwcX0T1dMh","tlshash":"9da2c62921b3003a49531265efff165c607a02b78004ec24bfaeddc2dfd59a9caa77d5","size":22996,"data":"","first_seen":"2025-04-21T16:06:03.254421Z","last_seen":"2026-06-13T17:57:09.756352Z","times_seen":4553,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9.2","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-06-13T17:33:36.773586Z","times_seen":268603,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d8175d8609012ab16cffd6a79b0e107","sha1":"30bfc0a545c1f81ea3372cc4f2bf62843b5ae7ca","sha256":"d62b100b1b584503697f88b5f2d2c03c52bf346a3c6dd7fff2d3c5483b0a2c81","sha512":"d240f8007743cdae91b1d7fcc4d4133eaea2f088de0eed8de5fac0967c89a0ad7d9d25270591fecb6c4ae88966da294dc250e7506a53f12da1f43e0860143e5e","ssdeep":"","tlshash":"772120e370a39c9e48cf248b34221d57f1570d68b8c9901ef8aa08db3472e893362634","size":1360,"data":"","first_seen":"2024-10-10T08:49:41Z","last_seen":"2026-06-10T12:47:08.02701Z","times_seen":470,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wpr-addons-js-js-extra","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"ebda20eab64252cc9fb5a9824668cf4b","sha1":"1f476cdc93ef41a795ccabbf3e1eeb095481c1a0","sha256":"7b5108e84b7063b21110391e687bdf79d66fa571ebacf8ba36a6861f2ec0f931","sha512":"ab3811ec1c28ba371fee6f706c6e844af9f48f49eada25a2f4652d49d5f93a7a63d479862e5e80fd33622921b44e6f896df7bd1cf0a0e16c50599a6f533e947a","ssdeep":"","tlshash":"b431103ac9e50a730fdf8df0550e2f82e0999c63f2c998c0c5dddc6a0628c949f8500c","size":1841,"data":"","first_seen":"2026-03-11T02:48:47.916434Z","last_seen":"2026-03-11T03:30:44.062441Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6176656c8c20110c1cd828dc1572aa82","sha1":"164592add0aaaa4f3011947534df10367d19b68f","sha256":"114e4844267c8b96c009afaaf2e4884d126c8f3f8db0e460f378a5dc02b1d1b2","sha512":"49db075bb3d12501a0706a04c1624aea311e7d51eedc6588c7c3c70011146204c50835651b87a55c479e1aa85f34bb92fa10c8a3e780bd7ac4c9f10b818015d4","ssdeep":"","tlshash":"e181869ae77638dbb2f900f2697e0d47eb614435d6c8d438c9bea3141cb5893c274b46","size":4095,"data":"","first_seen":"2026-03-03T03:47:58.492665Z","last_seen":"2026-03-11T03:30:44.058753Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-13T17:33:36.774813Z","times_seen":904814,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/astra-theme-js-js-extra","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f40b8f8a195262b70a7786dd92176514","sha1":"4a199e22bb79390bef6e9208f0fc1561c73975d0","sha256":"b2782c461823a2d9552cbaa55ccc48acf6504df9f989420067bd787c2e952f4c","sha512":"dbf18860a49a5bbf1bd3df247548e4621c7436060c1a095bf5273722f7e9721defc5762b182e8d9662a2a69bb7d77d3f809f28692ec37379431c71e36cf66449","ssdeep":"","tlshash":"6d212200c0c32e0066cb8c325021cf24b0fdd2a0c1d0f08caa3c864472e3b1f1768209","size":1294,"data":"","first_seen":"2026-03-03T03:47:58.478702Z","last_seen":"2026-03-11T03:30:44.061642Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/superpwa-register-sw-js-extra","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7347624e0c20c1283631a6dbd2e52cac","sha1":"be9b253f7cafd63d1a5623b65bef48a4e6983e7f","sha256":"66ffb6f05808537b1c9fc52997363ca1576cf14439363d2a70736989a199235b","sha512":"359b04df3c38ed07a2d2db17cf0dad408450c98dc7be6310e27e42921e45bb6d64c3d6afc83588efab9af48b9a5fe55c5d4ac8e752cc7b4181d1354d3d330158","ssdeep":"","tlshash":"38217d16eee91d27c786eaf25c0f926505b81af7e6c0c040cdc54c1957a44c14b27606","size":1400,"data":"","first_seen":"2026-03-03T03:47:58.482706Z","last_seen":"2026-03-11T03:30:44.065173Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/dist/template-preview/main.js?ver=06758d4d807d9d22c6ea","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"60d72450a6829bb918b07075e6273d16","sha1":"fad4e52c06b86b8df6a4220707aad9c01ff74f7e","sha256":"4a8bd33bfe771e0bd46fade45435a9fa2d0c3a8af2409b1f5a74a6b96b03faa9","sha512":"77307ced72814f611ffe6786fa16a3d81356476cd60581c08441eeb3c365c4937cf4a8b781411f129443306a6ca39ade298af0762edc34ac34ee001d27e9d28b","ssdeep":"192:tXCj6InyYlqqOre482UO7N1gqts1SIVje5L1Cd+eLXPMo56MxdC:u6IyYlq/i482UO7NW1vV65AxrUowMxdC","tlshash":"2dd1b63a3224d9380bfa4aefb978e3d4f464b419f90392e4c99ccf0925b5d43139476a","size":6581,"data":"","first_seen":"2024-01-04T16:48:42Z","last_seen":"2026-06-13T17:07:56.721298Z","times_seen":12077,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/gt_widget_script_78222181-js-before","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e6b7814686260863b6861588f2538f4","sha1":"a7b0cda1cd9f29e26bf3c2a11d1c28f26df5688d","sha256":"2ee71c789bfafae0a951799ce77792a0d6219ffeb79057e1ce1454d29c6ff5f1","sha512":"350ff4d6be2a29da00e020566aaffc14aaf85b4492cd74976e372e7e2a4117422390a4a974f8013a2605cc9d6d5da4f641805e1814e1d25a5a57392b82d0966c","ssdeep":"","tlshash":"5f31c928d52058b8238ea331eada8f4946b980f4d6b83c04fb4e081d2bd112b0386687","size":1625,"data":"","first_seen":"2026-03-11T02:48:47.920057Z","last_seen":"2026-03-11T03:30:44.06584Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.24.6","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a34bdbecd4477e6584a8d16ab0759c1","sha1":"ffa04176d8ac3faf769b7c05094a6853fdd90705","sha256":"0be5cfce38027ab2b0684d571062cb428b40962791261518159d32970486468d","sha512":"ae8f3101c4cab84cf8aebb7ad52c6c96e00516fea894958a73920c7918e6a486a8be69d6769a23026d615c26e8899ccfdeff4399144586df8a8f5e6bf930b15a","ssdeep":"96:BpsNt0jqf9fz9Af8nDmDllCjNVobVDPkqflkxwvT8S2:TsNCjw9fhHyD4N4FPkyXgS2","tlshash":"44a141d41b90fc6735e035c5a01aa731762fc0337c1bb8c1fa22dced98e8a9187a9931","size":4997,"data":"","first_seen":"2024-10-10T08:49:41Z","last_seen":"2026-06-12T14:13:18.28375Z","times_seen":577,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/jquery-js-after","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"40addbc03d02806cb471956912a07a04","sha1":"6314db6fdea1b85a5d8faf4fba9b3cd1f6cbe897","sha256":"3a96f36908dc72fb08a85a1f08f9cdce24d6a452ecb71fba334f092a9044804f","sha512":"71ad53fa4e7d7154ecfeb725cebf28f121dd28f48eb84dd69f93fda480c7a259083d7439ae7caf8c386c72a879db705f3b542386744776621d1781fbb3139c38","ssdeep":"","tlshash":"be019c1cf044101445f7703990bf7756b6137876e62b0086428c88b82e2cb388d63985","size":805,"data":"","first_seen":"2025-12-03T21:12:38.307283Z","last_seen":"2026-06-13T11:05:31.618731Z","times_seen":72,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-includes/js/dist/dom-ready.min.js?ver=f77871ff7694fffea381","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4bc17cc45ca91ab0f09dea134975c51","sha1":"3c03312717fb495c051d02a3d27ec0d8abc2557d","sha256":"5a43a22e48f94b7a45a9a9b1a107f197213b73307fdfa2e6b2daadab264f94d2","sha512":"f8e537a2168b94875bb7ddb9a20037c5bc79831c8b4e726f224f8d7c723c5c4b4512551697cf7bfb6ce4b5f8365dc1c027107ffe3435ea27c686f5ae96d921e7","ssdeep":"","tlshash":"bbf0d4705445edf071bc80e6442d53c1b5219039372270f14b8cdcb569e0f96127ede7","size":457,"data":"","first_seen":"2024-04-03T10:12:48Z","last_seen":"2026-06-13T17:31:26.141088Z","times_seen":104982,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6e434b0b4f43ec7216073eed1f3ffb51","sha1":"8d8a4ab1ed63889095bdf38ba646319b639feabc","sha256":"dd0ec57abf154d52c161fae92db6014f042417d9660679097ae55287041ec52e","sha512":"20978b9f1afc586c91351ef67791224fb5469004a1ebb5af608a05f643103a358e605d2c54cdba2174bc35c266ec963690d5d1fc3f80a045f4c33fc5f67b9ab7","ssdeep":"","tlshash":"6d110cf3b3dd907fbaae6d66193402cd6a1c90735c100a5bfeac3575cc8042538b1d40","size":922,"data":"","first_seen":"2024-04-08T18:49:14Z","last_seen":"2026-06-13T16:48:56.31161Z","times_seen":217214,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/super-progressive-web-apps/public/js/register-sw.js?ver=2.2.36","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ddf8a30093001202ab9b7d97c5430e1","sha1":"e4ee90b6d77a2bd605c9854cb33c6847afadbe10","sha256":"8f15beb7592f409bda523a5b8e3e69fc80b1a852f3b29ffb63ec32037519fc84","sha512":"a0742d909558822f461094564d38f96f60daeb77986800889a500626147ca7a28ce2ef801aef87f65efdfbfcbe654b56a5d76cd87b068abc95bf5169eedbea27","ssdeep":"768:+Vuq052j3ht8D3Qw78OVxBeQ28OVKxHQxKttr7KQY3QK:Muq052Dr8Dgw78O9ePVKxHQXQGQK","tlshash":"f4f2c751376cd53b70b623aac9bb968afe7ec376b101903af54898502398c101b769fd","size":34317,"data":"","first_seen":"2025-04-01T20:11:11.918318Z","last_seen":"2026-05-15T20:31:13.011479Z","times_seen":112,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/royal-elementor-addons/assets/js/lib/particles/particles.js?ver=3.0.6","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f10f10368bb1407fe7a0b392952ee5ab","sha1":"6d41b2dfd94b9b8e8b96b95d1258f57efb11aada","sha256":"89c8e085c3da89b31fd63bf88102068b931e58d1de9b64a2b29728ac28827d28","sha512":"146e059a32de4af6784f8596ee7c0cab003fb04cce9f99748c78dc793f8de545ffb1315a060963061156a53462fa7e18bb1220be7a244d7d0843d44e13463440","ssdeep":"384:TxzjtwGGs5YQWS+ngXFlkjXEFOcQmxm3DO3p3z8CIopbubAi4OUlLqozr+XDhYnT:9t+BDcpz88pbuM+Uo0r+XUd1YTebBCQL","tlshash":"31131e8d5bfb18632697b1b84fdf8001e73080db1a8b95a5fc6c0258cf98655d29efe4","size":43009,"data":"","first_seen":"2023-03-07T12:23:24Z","last_seen":"2026-06-13T16:38:27.638807Z","times_seen":12886,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.24.6","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"65b14e77a11c2baffca6e3bc0ebc4598","sha1":"41411f5e9440995a516347cdebcb5465abe5ffa1","sha256":"e76fe1ddf34b81940a8c974fc571b1c51a778c80d826fba7dee495582630e26b","sha512":"5fb3a081097a60551f31a2bef8d25cb4ae5070b8e98a2a2e27c7e348c49ea1ecf9ecca31de767485e8f1e466c7ad2600dcd54d2dda93ac59a9425ebae5262aa7","ssdeep":"1536:4eAjA679C+QRNtewmXC4WHqMPBWPbx84XwCRfYNQAzeLHeBHmjknzRNS4cR8+StQ:2wmJjAOIOV2BCWju0ELv","tlshash":"df73d9963112b8b707ef81eb701b150ae22318e8b409b46d797ccdfb55b0e8623b6775","size":80657,"data":"","first_seen":"2024-10-10T08:49:41Z","last_seen":"2026-06-12T14:13:18.254849Z","times_seen":571,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/royal-elementor-addons/assets/js/lib/parallax/parallax.min.js?ver=1.0","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"41e3d2f548dd440d36a9cb2697349533","sha1":"30925a369f90caf5db0c2f7e845ced8d8e5afb05","sha256":"9d9e06fb9a97436f2d652149d48331c5ec9eab5fd6c27b496b055c319d6a4e67","sha512":"dd108fa2daaa0b8170a07b19c31b1ad5f17d1aeb6947436d6720b7738e6ab0b5466ab48ed34243e4f21a5ffb5ea6f1a0b05063cf3d0f073b3ab02bdb3e7012b7","ssdeep":"192:d0KW9KgqL4+UaWCjVYTY2tPtt5uM+FjgpfMiXuwv8S/X8/VUVTJTsjNn1Sp:mKVWCynJduMpfMAuwESP8/m3Ton1Sp","tlshash":"297296d97322b421657b622321afc70e713175261984809cf538c8db6eb9d4a736ffb8","size":17272,"data":"","first_seen":"2023-03-07T12:03:46Z","last_seen":"2026-06-13T16:38:27.639236Z","times_seen":13220,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mexcfd.com/wp-content/uploads/2025/07/logo-mexEurope-1-1.png","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:07.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/logo-mexEurope-1-1.png HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 01 Jul 2025 08:33:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2644\r\ndate: Wed, 11 Mar 2026 02:48:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2644,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 41, 8-bit/color RGBA, non-interlaced","md5":"f7439f9397d1ae947f56ca6f9138d8c0","sha1":"6e4bbe2e02e6d9b225e38d47ac7d6d036af1f719","sha256":"0fd742ba4954b7792612731a408c70e8cbc95919ab2b6c36648b258bc664fbc6","sha512":"d799dd34540ef20298ae513270ec65f7a395693bbf5c85039e2c6a4edd95944d2ef50f3e5b22a0a2daed869d19a221192f1fb8b0fc69de4f2d6195508451857a","ssdeep":"","tlshash":"8a515c9f805ddb90dece56570c1d6251db9189cd2a2ad38c5e93c5a8da837834208ac4","first_seen":"2026-03-03T03:47:32.063598Z","last_seen":"2026-03-11T03:30:43.999261Z","times_seen":4,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.202.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mexcfd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 08:03:22 GMT\r\nexpires: Fri, 05 Mar 2027 08:03:22 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 499485\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-06-13T17:32:43.136724Z","times_seen":187379,"resource_available":false,"data":null}},"time_used":694,"timings":{"blocked":251,"dns":1,"connect":56,"send":0,"wait":190,"receive":2,"ssl":191},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/uploads/elementor/css/post-12.css?ver=1753369575","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-12.css?ver=1753369575 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 24 Jul 2025 15:06:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3296\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40496,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (40496), with no line terminators","md5":"77dc68fda662f8a14e5bdfe67a5e47da","sha1":"4d6bf17997b0da0d5db4146f0772ee3eba2652f2","sha256":"04b14e469a4d83793b8e1b9bfab5accf0d3b9f3b9241d29744151db8da37fb18","sha512":"55cb41096d901bfaee0de29eda9e1d2258a4636abc1730a2db5960bc99631c5485d0161d3c42436b942c25c3492dcbedf74c0e409670e35405bb106c76bfc3a4","ssdeep":"768:t6htqCrDphVufodXtgmJDtaOtMIVe1oHW2DCafgL7x:tmrvufoRtgmJD9MEjW2DCafgp","tlshash":"650303d17d435224712f25bf2053a69c71284cced57e7ad6fca26053f4baca633e0a29","first_seen":"2026-03-03T03:47:58.472688Z","last_seen":"2026-03-11T03:30:44.006328Z","times_seen":3,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.8.3","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/js/minified/frontend.min.js?ver=4.8.3 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 08 Oct 2024 12:08:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5267\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":23659,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (23659), with no line terminators","md5":"0ef9204a7af2a5426621dcb478cbbb18","sha1":"3576353c10ec109664743f318dc8a33b49667781","sha256":"5ee20f2609117478c407ec61ff4e83d2bf9fb526d8cb1612702a1491c6613f96","sha512":"ed29a8eca113c9103c7928036795fd193b906069e7d23b0493dd6bd04bd674ff045f2dedeb7db93d3a3fdb3d6168eb6b053f526da92a159f62d6837cada90057","ssdeep":"384:uYE9Gy3GyPyxbomcFD4ryHjdDuPoDo3oEKnnknUyCdyGvyoQUyltXj4pyoEq2Vh1:uYEPx6xbomcFDTHj8PoDo3oEKnAfRoQv","tlshash":"f6b282aa6200263604fe1be7f5daabc4767110affe0944115878cc5e19a8fd351f1afd","first_seen":"2024-10-03T04:39:22Z","last_seen":"2026-06-13T12:52:45.008231Z","times_seen":828,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/gtranslate/flags/svg/en.svg","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.939Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/plugins/gtranslate/flags/svg/en.svg HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:07 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 01 Jul 2025 08:37:39 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 429\r\ndate: Wed, 11 Mar 2026 02:48:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":862,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f9bbc4885a348eff84e4ef4155121fae","sha1":"afaa1646576b96aa105a66c3273f13f0cb30e0c3","sha256":"de46013c87c1d6b0e4804a6bd8be50f2c5f961c5adbc42ba40b8913af33afe75","sha512":"b0e944509060a802c1b2d4c014070e41bd9b8af4d1969670094cecdff21b537b14a2d64e3368881f49694bd9582f10ee58674b90e0e7acf36e70d51c0b08b664","ssdeep":"","tlshash":"5211a384996a505c2c86c6cbfed46e8443ff72cef6650984644d229c7149d9f47c4b1d","first_seen":"2023-04-08T13:53:30Z","last_seen":"2026-06-13T15:45:37.022372Z","times_seen":12155,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/uploads/2025/07/CFDs_Forex_CFDs_Metals_CFDs_Shares_CFDs_Indices_Trading_Broker.mp4","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:07.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/CFDs_Forex_CFDs_Metals_CFDs_Shares_CFDs_Indices_Trading_Broker.mp4 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ncontent-type: video/mp4\r\nlast-modified: Thu, 24 Jul 2025 15:05:26 GMT\r\ncontent-range: bytes 0-1189707/1189708\r\ncontent-length: 1189708\r\ndate: Wed, 11 Mar 2026 02:48:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1189708,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"fb329863574fe96e0e7f1a74c26fc74a","sha1":"6825583b942b7118fea0507461f00e899401d740","sha256":"0b7dbf16a5ec25265e9a08a6aa5f81381d6d5d6dedb0040119f45b00b4032970","sha512":"5a0dcda2a73d5cd30bbd0f1b2241913219bf67034e3c684dd1eb99fb32da99a0a004c98d00fd53eb26ef4e010241b0a9bc60ff7dad9fa5a4ed481dcb5fcd57bb","ssdeep":"24576:f/G9eR5YnKh5IVMIcXnbCx19BA3L+DyJN:f3R5f9IcrueLyyJN","tlshash":"f82533859ddb328fed789ffe248ed10e5553b3b79219d3c709e8828d260918cedad190","first_seen":"2026-03-03T03:47:58.42619Z","last_seen":"2026-03-11T03:30:44.031425Z","times_seen":3,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/uploads/elementor/css/global.css?ver=1736937649","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/global.css?ver=1736937649 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 15 Jan 2025 10:40:49 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1277\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15563,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6697)","md5":"fe27b96e09905921f394e8891c6362b9","sha1":"15c8b65c8903bb1718921db4f9177c22327fca9f","sha256":"2e73887e0624379c8a18b26965c407aeda99b9d814e5db9f9936a41f511645bf","sha512":"bb9cd0a78cc162d843959fe924a30bc795607292e4c991a55605d0521ff5f87410ec1b9acc613f272c8daa28ff84993202be31f865668e021e72ff7e09e24fa7","ssdeep":"192:CVFCJW/CB7J7PypJtwcHWRkXNW7t7Dd5qMCp6It0eyBrrYjBcD0NS6H0S6MSH6HR:QqRDydf","tlshash":"8e6257887c23d026b977046f758ff43c141c64ddac5acbeaf49c811689fbf26a324625","first_seen":"2023-04-06T16:55:42Z","last_seen":"2026-06-11T16:16:27.559489Z","times_seen":457,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/elementor/assets/css/widget-social-icons.min.css?ver=3.24.0","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-social-icons.min.css?ver=3.24.0 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 14 Oct 2024 09:33:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1056\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4875,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4835)","md5":"4740b50c2dc0032c30824b587f59bd0e","sha1":"73806fccb03d7a3c12eb7b081d4ea4d73256842d","sha256":"b5fd3381abfd24295190049bcebe42c941efca9f9937b7307b64e596236686b5","sha512":"f6e4d82750ca7d80e70256b952a48f3bcbe07f21fa9d8b4e794ca4b73e5175c0888f4b2e78eee2254220b8ad0498bf7be0b6e1409b9bb78c891278feaa31e6c4","ssdeep":"48:BJUOgAozmcb8slNf3U7vjfQIeyiZ8Fu2ifnFNZP1NsXUyG9eoL:B3oz/8mU7jfQL7aFu2if3Jf9HL","tlshash":"91a18a51be4f9586721f002a0993f309d01912c5dc8c6f78f856b1ae59b6bf43a73eb2","first_seen":"2024-10-10T21:20:02Z","last_seen":"2026-06-10T12:47:08.046996Z","times_seen":205,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 16 Apr 2025 07:26:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6812\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21464,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-06-13T17:30:15.61041Z","times_seen":302245,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.8.3","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/css/minified/main.min.css?ver=4.8.3 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 08 Oct 2024 12:08:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8204\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43154,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (40972)","md5":"a51a3b6427764fa855249fdfdb592dd6","sha1":"486538a3d1eba64427d3d73811a11ca2e094991e","sha256":"7d1ff689bac95b3806d663556b25cd5138145c1546c947616292a01bb9ba53e6","sha512":"54d65fb3843dbb61a0da576fb3d8b9c1c1a9decbf6b6c9f264aa3482b3e884de74c1a555195d3c7ec11ff21834b8672d4a090aae227cc0eeb3c332e2e15a533c","ssdeep":"768:mR7Ork1rhDYollnk+FHkqdCzxdvN3JR2/WLmiyCFS7VHQtBU5PT1enhm2a7ZAR2s:mVVd+eHQtBU5PTwDuaP","tlshash":"2e13d9a157d031296233873efad6b9082a654313e70f26e7f8eb9764c9c57d705b2a0c","first_seen":"2024-09-12T07:41:27Z","last_seen":"2026-06-13T14:35:37.459513Z","times_seen":4605,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.24.6","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=3.24.6 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 14 Oct 2024 09:33:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 119\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":254,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"b7e63ef9ee7cae0c9a41b3fb9abcbeb4","sha1":"54c03435a03377a6c27bac3b63b9f3c96cd3f73d","sha256":"d540d6a1a46efbf518af1ed8ae22ee1f057320c2cadf602852a2c55a3671c65b","sha512":"da2bd15afb9e28c1d04a0f03e0b9acbaae551fddff5b54c243b199ca7d5633d884495ca02e3f274017b4fae4ec2fd6f56b85c9d43778fdac96881a5056acca6a","ssdeep":"","tlshash":"c4d05e40752743c2301e49292aab2a9a2cd00ddde346db909ce1626666bacc82777120","first_seen":"2024-10-10T14:54:51Z","last_seen":"2026-06-12T14:13:18.214763Z","times_seen":420,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CMontserrat%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CPoppins%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic\u0026display=swap\u0026ver=6.9.2","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"6B:DB:3B:B8:9F:A1:8E:49:35:74:D9:D8:24:91:F2:5E:42:56:2F:58","sha256":"37:ED:DF:C4:FB:A3:96:16:9E:47:69:CE:86:A5:35:8E:B5:3A:0B:0B:6A:A1:08:A2:DF:DE:6C:7C:31:BE:94:B1"}}},"request":{"raw":"GET /css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CRoboto+Slab%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CMontserrat%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic%7CPoppins%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic%2C400%2C400italic%2C500%2C500italic%2C600%2C600italic%2C700%2C700italic%2C800%2C800italic%2C900%2C900italic\u0026display=swap\u0026ver=6.9.2 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 11 Mar 2026 02:48:06 GMT\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":179600,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"26bd1aa595b7c3556a1a905fc9a7f818","sha1":"f09716cfbee9a57973db6efa4cd9f99559a0c218","sha256":"a6ea1e2c85450e9f6971081f104b572933597744fb6dfca3d4a8c83ec2e709f7","sha512":"dbc61a3609a07255363d7824fc26bb295c6af3d1369165a425a30b44ce7a95dba5bb39e4af4ff71b6a341ee8229c4b3bbc6078b6b18ed0ca38dc45fda1c2a543","ssdeep":"768:0Zds8FdCWQpEA3mkiDdD9DADNDgBDUKD7DnDdAgTQgUUhaWWHncXgLUahdPuOJ+3:4ZQDSVUvWtALyl83uRt","tlshash":"6e040f91041b9440ab831cd223cf7f36fe1ea2617051d079abfd5eaaaddbc62136476c","first_seen":"2026-02-27T07:59:58.573317Z","last_seen":"2026-06-12T03:08:27.0739Z","times_seen":59,"resource_available":false,"data":null}},"time_used":507,"timings":{"blocked":203,"dns":1,"connect":29,"send":0,"wait":54,"receive":0,"ssl":217},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 28 Aug 2023 17:14:23 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29744\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-06-13T17:33:36.774813Z","times_seen":904814,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.202.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mexcfd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 08:03:22 GMT\r\nexpires: Fri, 05 Mar 2027 08:03:22 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 499485\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-06-13T17:32:43.136724Z","times_seen":187379,"resource_available":false,"data":null}},"time_used":930,"timings":{"blocked":439,"dns":1,"connect":57,"send":0,"wait":44,"receive":7,"ssl":376},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/uploads/2025/07/logo-mexEurope-1-1.png","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:07.343Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/logo-mexEurope-1-1.png HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:07 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 01 Jul 2025 08:33:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2644\r\ndate: Wed, 11 Mar 2026 02:48:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2644,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 41, 8-bit/color RGBA, non-interlaced","md5":"f7439f9397d1ae947f56ca6f9138d8c0","sha1":"6e4bbe2e02e6d9b225e38d47ac7d6d036af1f719","sha256":"0fd742ba4954b7792612731a408c70e8cbc95919ab2b6c36648b258bc664fbc6","sha512":"d799dd34540ef20298ae513270ec65f7a395693bbf5c85039e2c6a4edd95944d2ef50f3e5b22a0a2daed869d19a221192f1fb8b0fc69de4f2d6195508451857a","ssdeep":"","tlshash":"8a515c9f805ddb90dece56570c1d6251db9189cd2a2ad38c5e93c5a8da837834208ac4","first_seen":"2026-03-03T03:47:32.063598Z","last_seen":"2026-03-11T03:30:43.999261Z","times_seen":4,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/royal-elementor-addons/assets/js/lib/particles/particles.js?ver=3.0.6","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/plugins/royal-elementor-addons/assets/js/lib/particles/particles.js?ver=3.0.6 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 01 Jul 2025 08:37:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8740\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43009,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"f10f10368bb1407fe7a0b392952ee5ab","sha1":"6d41b2dfd94b9b8e8b96b95d1258f57efb11aada","sha256":"89c8e085c3da89b31fd63bf88102068b931e58d1de9b64a2b29728ac28827d28","sha512":"146e059a32de4af6784f8596ee7c0cab003fb04cce9f99748c78dc793f8de545ffb1315a060963061156a53462fa7e18bb1220be7a244d7d0843d44e13463440","ssdeep":"384:TxzjtwGGs5YQWS+ngXFlkjXEFOcQmxm3DO3p3z8CIopbubAi4OUlLqozr+XDhYnT:9t+BDcpz88pbuM+Uo0r+XUd1YTebBCQL","tlshash":"31131e8d5bfb18632697b1b84fdf8001e73080db1a8b95a5fc6c0258cf98655d29efe4","first_seen":"2023-03-07T12:23:24Z","last_seen":"2026-06-13T16:38:27.638807Z","times_seen":12886,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/uploads/2023/12/64f860d0f1ff75c367698385_img-home.webp","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/uploads/2023/12/64f860d0f1ff75c367698385_img-home.webp HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/wp-content/uploads/elementor/css/post-12.css?ver=1753369575\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:06 GMT\r\ncontent-type: image/webp\r\nlast-modified: Sun, 10 Dec 2023 06:46:33 GMT\r\naccept-ranges: bytes\r\ncontent-length: 46182\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":46182,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7a75a5392df0e8565c679ee874e89921","sha1":"e9c7f7bfff18349c1a6813342d3684a7d0114550","sha256":"96fab5db078fafbbc43655c0a2916e8b56e67c648ba3a0b35ceebd300b7524f4","sha512":"0940fd4ba4e5d4814466dee933e70dcd20032032faf640927dcebee840501a913846def3461c689cdd61e89a8e1fb449e8b6c7e5777f4809000dd3cc04f7727c","ssdeep":"768:uW7jnWim9i2Fq9mornWI18vKzLLjm4q6E56THtC2EjeKkN/VtJtfBHcb4uN:D7jnpm9i2s9IkW4k56TNjEM/VhBHS/N","tlshash":"3c2302fe24cddc49e370827484b7561e157e98eab7f5fab0524e4b282c0bc485a4d25b","first_seen":"2026-03-03T03:47:58.416556Z","last_seen":"2026-03-11T03:30:44.048388Z","times_seen":3,"resource_available":false,"data":null}},"time_used":233,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Jun 2023 05:49:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4678\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-06-13T17:33:36.781558Z","times_seen":833527,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/royal-elementor-addons/assets/js/lib/parallax/parallax.min.js?ver=1.0","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/plugins/royal-elementor-addons/assets/js/lib/parallax/parallax.min.js?ver=1.0 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 01 Jul 2025 08:37:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5022\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":17272,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (17272), with no line terminators","md5":"41e3d2f548dd440d36a9cb2697349533","sha1":"30925a369f90caf5db0c2f7e845ced8d8e5afb05","sha256":"9d9e06fb9a97436f2d652149d48331c5ec9eab5fd6c27b496b055c319d6a4e67","sha512":"dd108fa2daaa0b8170a07b19c31b1ad5f17d1aeb6947436d6720b7738e6ab0b5466ab48ed34243e4f21a5ffb5ea6f1a0b05063cf3d0f073b3ab02bdb3e7012b7","ssdeep":"192:d0KW9KgqL4+UaWCjVYTY2tPtt5uM+FjgpfMiXuwv8S/X8/VUVTJTsjNn1Sp:mKVWCynJduMpfMAuwESP8/m3Ton1Sp","tlshash":"297296d97322b421657b622321afc70e713175261984809cf538c8db6eb9d4a736ffb8","first_seen":"2023-03-07T12:03:46Z","last_seen":"2026-06-13T16:38:27.639236Z","times_seen":13220,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/gtranslate/js/float.js?ver=6.9.2","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/plugins/gtranslate/js/float.js?ver=6.9.2 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 01 Jul 2025 08:37:39 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6320\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22996,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3129)","md5":"8654659b8cdb0b24ca22ace0b814a207","sha1":"28903756bef7a08db9eaf5beb2cecfdefc4f907f","sha256":"9a7ea502345704dd8c1ec3c0cccd5aa0794afedd17143e031a0a87b26a909320","sha512":"c02b80d40dd4300e6df4c2bb082e120d23b78c0677bb6179d1ecb1d1750011a3f9e3fd5b9ca988be293a0391ba8a9f2930fb1726234b8fd0af7ebe564e42b6ee","ssdeep":"384:vzCKMPZATN09o0mtvwfEXMb5TZ/dDsKCnfYI:vVMhAh060svwcX0T1dMh","tlshash":"9da2c62921b3003a49531265efff165c607a02b78004ec24bfaeddc2dfd59a9caa77d5","first_seen":"2025-04-21T16:06:03.254421Z","last_seen":"2026-06-13T17:57:09.756352Z","times_seen":4553,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/uploads/2023/12/aatr.png","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/uploads/2023/12/aatr.png HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/wp-content/uploads/elementor/css/post-12.css?ver=1753369575\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Dec 2023 13:38:17 GMT\r\naccept-ranges: bytes\r\ncontent-length: 422178\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":422178,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 559 x 379, 8-bit/color RGBA, non-interlaced","md5":"5891dbf50ed656cc8f59a45edbd26eb5","sha1":"9bbf5e0d83105af4596349a57ba79acf07ddc0d5","sha256":"7160b9ca4e3e13d6f98d87fafc6500a070b05d0f1eb56f35f2c01b9dc0bce301","sha512":"b661dc5325ea59c08348c7d3a40803995a71ce5f62ff4f35c7ee12553509d549613fc4bea6e1ebe6643701218bf636f2589311148b0c99d9594e53ae9bb7892c","ssdeep":"12288:2E9Q0HmqG+f0jCP/+B+w3HE3QzdPUY5vjIwyMhmLQ:/Q0vkCPG8w3KQzeAvjIBMw0","tlshash":"bc9423e0a5197c3bc3ed383319102c8a3514afc7d99fab44a1a6694ef6c1ff40d63a25","first_seen":"2026-03-03T03:47:58.470541Z","last_seen":"2026-03-11T03:30:44.041672Z","times_seen":3,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":213,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-includes/js/wp-emoji-release.min.js?ver=6.9.2","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:07.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9.2 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Wed, 03 Dec 2025 07:21:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4949\r\ndate: Wed, 11 Mar 2026 02:48:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-06-13T17:33:36.773586Z","times_seen":268603,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":107,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/uploads/2024/10/scottish-pic-home-1.jpg","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:07.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/uploads/2024/10/scottish-pic-home-1.jpg HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:07 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 14 Oct 2024 13:18:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 148434\r\ndate: Wed, 11 Mar 2026 02:48:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":148434,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, baseline, precision 8, 914x824, components 3","md5":"9113be641e472cd4ded6033dd1995559","sha1":"3c5bafc6f3f773c7de79c67e192eb9a1ea3860fc","sha256":"1f44ef6fd2626e4f4151422a12341c8cf69641cb86695282870e09efcbe47523","sha512":"f48f463b4aee3439e7f298784c65bf301301ff0c08825ddd4ea7b2dd707927a66fd403862888972d65e1b4312b1dc797e8d5db0ac5024c1cbdd8b34d1eaa466c","ssdeep":"3072:H7QRm8IaDgivm4cArndVJ8DGn2c1C+THOkUwAAFBuVH85Ys/gb5CWj5nYa:cRm8IbMd7WUr1CWQUCH85Ysu3jSa","tlshash":"76e3f009a296cfeef2cc4b7012d3ab27715bc5b30c97a25010471005eee787d7aa767a","first_seen":"2026-03-03T03:47:58.420186Z","last_seen":"2026-03-11T03:30:44.03882Z","times_seen":3,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/uploads/elementor/css/post-6.css?ver=1736937649","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-6.css?ver=1736937649 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 15 Jan 2025 10:40:49 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 311\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1107,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1107), with no line terminators","md5":"95873b7936cfcd4d83d7683a7b385ccf","sha1":"8c5f5d5d1799b63ec4e063566135cef60908abfc","sha256":"9cb6eefb0fa78c916a42be9a4c23923f0e641931873d462cef8c71865a4d365d","sha512":"53056e2fe601a0953255aeadf2fa5ec3dbdd7a49349d44879ecdf2bc84781e2ac82916b8f7ab100bf31873d953b23edffa292db84ee43582d771f98f6627d332","ssdeep":"","tlshash":"4d1126457a27d036e0b7092f91d3a02c112cd86b625fcadff41d8649f9bea066268647","first_seen":"2023-09-18T19:59:15Z","last_seen":"2026-06-13T09:31:58.038057Z","times_seen":872,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/royal-elementor-addons/assets/css/lib/animations/text-animations.min.css?ver=1.7.1026","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/plugins/royal-elementor-addons/assets/css/lib/animations/text-animations.min.css?ver=1.7.1026 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Jul 2025 08:37:29 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1439\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14235,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (14235), with no line terminators","md5":"be772e0853f97a3f9fa7a81000820d07","sha1":"bbbd67b2745e0c9130fe6ff4d031f5c3126787ec","sha256":"346722bc13d0c169275c62d4642f968f5d7c1b639b842778c48df558d8954e17","sha512":"f5892f13157e7a4386f5c5d8a9c0b4d616b1a372c840c130469664974530985254f595032e948ac647cfe932b3f54e163dc3d27253ef03ab2c2d79e2abf46530","ssdeep":"96:+oyE3JVskwkk4VUDkSeIt3J+5ViF539mX/+/MzKHlUyrWXdSaBTuW9WxEzg/d:+CB5k4eJOVir39e4MzfdSaaEz2","tlshash":"c452ba76a8d1128dc5379e7487df4aa8071deb536a228cde3305384fc3537eda6a8613","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-06-13T16:38:27.632426Z","times_seen":12941,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/uploads/2023/12/65577f338e890ec68d1a8574_world-trade.png","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/uploads/2023/12/65577f338e890ec68d1a8574_world-trade.png HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/wp-content/uploads/elementor/css/post-12.css?ver=1753369575\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 14 Dec 2023 15:35:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2424672\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2424672,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1723 x 1016, 8-bit/color RGBA, non-interlaced","md5":"75858b9170193b795d3dd3d78375bc93","sha1":"8e355a220ea54dfb7a9f6f040bc8fb1936d278ac","sha256":"dffad4758bc67c6d98e5891f95a1927f3612a2cf5ee65fcfcc92e27a6ab0b40a","sha512":"a86ce1342277aacf1e90c6ada59764b2ef0edf3d482a2ace6236cdf30bc849831abc671e32939ee5b7e9fad00de7141f4630211eba85607c049ccc7a5504099e","ssdeep":"12288:TrXJ6BlFZmkPoKUqaeX2ZtNL9m/8x1HxuNUBTEY09yhk6LIoFPU+JofExMzQEuR8:YBMl13eX2Z9mup5PofSm3xVsk","tlshash":"222533dcf86a223fc847578e82c8a538b4d1a87d1b65a7b098f50ee5bf8e05545013fb","first_seen":"2026-03-03T03:47:58.440964Z","last_seen":"2026-03-11T03:30:44.000832Z","times_seen":3,"resource_available":false,"data":null}},"time_used":464,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":401,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.202.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mexcfd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 08:03:22 GMT\r\nexpires: Fri, 05 Mar 2027 08:03:22 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 499485\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-06-13T17:32:43.136724Z","times_seen":187379,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":175,"dns":1,"connect":44,"send":0,"wait":44,"receive":56,"ssl":128},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/uploads/elementor/css/post-2346.css?ver=1751359482","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-2346.css?ver=1751359482 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Jul 2025 08:44:42 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2560\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":33710,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8708)","md5":"b2e82883d3fab006f6fe482d9e25c447","sha1":"42ab6df3af1ecf44a0b5937697fd90565170133e","sha256":"6abab6908c8aca44f98deb3fe989e4ddcf2eeeb5c0d18a3e2f844bb2cde465b6","sha512":"ae378057b4a92498b5fd9851e4a56c2d15b4976371e79c79095e15b2905cb0b7dfd50713f2d46775ec61c48a6126120200bc42fc162f85708351dc77fd2d0198","ssdeep":"192:F0m8lu3Gil5SLYQ6KInz9C7QgBce4o4WkvFvuBBgIBgH08DvwuA6Zu6uDY7hnqhK:V5Nn87Ezf2gWgkan37GGo6nDiDvhogS","tlshash":"58e217a37c935138b91f281ba567aacc1a241dc9d7f923cafeb1541ba872d4137f0e14","first_seen":"2026-03-03T03:47:58.412528Z","last_seen":"2026-03-11T03:30:44.013716Z","times_seen":3,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-includes/js/dist/dom-ready.min.js?ver=f77871ff7694fffea381","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-includes/js/dist/dom-ready.min.js?ver=f77871ff7694fffea381 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Thu, 04 Apr 2024 16:49:06 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 275\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":457,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (422)","md5":"e4bc17cc45ca91ab0f09dea134975c51","sha1":"3c03312717fb495c051d02a3d27ec0d8abc2557d","sha256":"5a43a22e48f94b7a45a9a9b1a107f197213b73307fdfa2e6b2daadab264f94d2","sha512":"f8e537a2168b94875bb7ddb9a20037c5bc79831c8b4e726f224f8d7c723c5c4b4512551697cf7bfb6ce4b5f8365dc1c027107ffe3435ea27c686f5ae96d921e7","ssdeep":"","tlshash":"bbf0d4705445edf071bc80e6442d53c1b5219039372270f14b8cdcb569e0f96127ede7","first_seen":"2024-04-03T10:12:48Z","last_seen":"2026-06-13T17:31:26.141088Z","times_seen":104982,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/royal-elementor-addons/assets/js/modal-popups.min.js?ver=1.7.1026","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/plugins/royal-elementor-addons/assets/js/modal-popups.min.js?ver=1.7.1026 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 01 Jul 2025 08:37:31 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2634\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":11524,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"882f9ab8e7a5564230105bdaf3c9c8f0","sha1":"477df0a4e4b3a8e806283a58bd853420a944bd68","sha256":"ffe90abf1e3a9fa01e7b3b4b0d36b8d76d918e2ec9895f06f40b5de446362146","sha512":"ae4005bad6dedf019a21d0088a78ae86295fa375891ecad6d0cbc1540cfed772bef45601038a1051acd9937bd724e784ed327f8c0466abb163ed94986be67f7a","ssdeep":"192:TC6aOhw2n2THrKpC3NSAPjqSnS9ahohrkKeZB:zaOhw2n2THrKpC3NlS9ahohrkKM","tlshash":"2032fce8f3cdf10b51be307ad86e02ec523d543175125c3abda81a5129d099d8369fbe","first_seen":"2023-03-09T22:30:34Z","last_seen":"2026-06-13T16:05:28.19756Z","times_seen":10637,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/uploads/2023/12/655cca9c13ee01cf3b31ef18_tws-new-flipped22-p-1600.png","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/uploads/2023/12/655cca9c13ee01cf3b31ef18_tws-new-flipped22-p-1600.png HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/wp-content/uploads/elementor/css/post-12.css?ver=1753369575\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 07 Dec 2023 13:47:48 GMT\r\naccept-ranges: bytes\r\ncontent-length: 459914\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":459914,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1600 x 943, 8-bit colormap, non-interlaced","md5":"bc6f210113324708f486fa1d13b04b11","sha1":"19a055e23a32197f5e22816dbdd4b180605394d5","sha256":"596a23e8279d1c77a919d8e3598304ce8fd7f4bfc13fa084d9f472ca8b7e11a2","sha512":"661b6c4e79ad02bb411e1b6dd7b638ccfec19d836e7693265e7741e9f7f2f40ca09cc388fd9f51c5ae1a1949b3c2c1a6e5f0c8badf203d1899a97ea515fac0a7","ssdeep":"12288:BdafuzKL7NKpQFbGawL1AR98b2afPycWBvIosvLx:BYjxKpQj6K98aa74Gx","tlshash":"fda4236aa441b2f0c8989332cfd9ad577dc0951d3bcde2c59211cae5ee2c1a1f9543ce","first_seen":"2026-03-03T03:47:58.415041Z","last_seen":"2026-03-11T03:30:44.020117Z","times_seen":3,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.202.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mexcfd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 10 Mar 2026 23:55:58 GMT\r\nexpires: Wed, 10 Mar 2027 23:55:58 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nage: 10329\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-06-13T17:30:15.612603Z","times_seen":244969,"resource_available":false,"data":null}},"time_used":756,"timings":{"blocked":310,"dns":1,"connect":57,"send":0,"wait":134,"receive":0,"ssl":251},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:07.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 14 Oct 2024 09:33:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 600\r\ndate: Wed, 11 Mar 2026 02:48:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1360,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1320)","md5":"3d8175d8609012ab16cffd6a79b0e107","sha1":"30bfc0a545c1f81ea3372cc4f2bf62843b5ae7ca","sha256":"d62b100b1b584503697f88b5f2d2c03c52bf346a3c6dd7fff2d3c5483b0a2c81","sha512":"d240f8007743cdae91b1d7fcc4d4133eaea2f088de0eed8de5fac0967c89a0ad7d9d25270591fecb6c4ae88966da294dc250e7506a53f12da1f43e0860143e5e","ssdeep":"","tlshash":"772120e370a39c9e48cf248b34221d57f1570d68b8c9901ef8aa08db3472e893362634","first_seen":"2024-10-10T08:49:41Z","last_seen":"2026-06-10T12:47:08.02701Z","times_seen":470,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=1.7.1026\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:06 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Mon, 14 Oct 2024 09:33:39 GMT\r\naccept-ranges: bytes\r\ncontent-length: 78196\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":78196,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78196, version 331.-31261","md5":"e8a427e15cc502bef99cfd722b37ea98","sha1":"a9922842a120a7f1eaced667480c5e185a106d69","sha256":"d0b4256abed72481585662971262eabee345c19f837af00d7ce24239d3b40eef","sha512":"113775748a4166c07e58c26cf6db7fed473732dc6124b8ee0f0dcc0d6439eb2ab2c5d9e01c67324fdf9de4105349cf30cc5796a0b0e0ce9a08f337b9d4e10b7b","ssdeep":"1536:1iGQV8Q8UOUMUd5UY3qyCkHQCCz2LL1F+u3MHLGxe3U:QVWuF33qy7HQchFz8HnU","tlshash":"3273121cf567643ef6a8e05f3c38256d4fd5c724e2e68a06748db808c4ce71d90879b6","first_seen":"2023-04-05T08:37:56Z","last_seen":"2026-06-13T17:30:15.604426Z","times_seen":151849,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":182,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/elementor/assets/css/widget-text-editor.min.css?ver=3.24.6","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-text-editor.min.css?ver=3.24.6 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 14 Oct 2024 09:33:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 198\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":704,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (664)","md5":"57515903c54a52a5dcc60a5cbfa788d2","sha1":"63c5473d82e66eab8327d0749d40dad1cb8838b2","sha256":"8689070c5c1f1faef3710a98cdb1c1db37f98f074adcb765367b39209b77c854","sha512":"e87a58ae81e18cdd11fc7b7ed69b10dd94e4627e8e6aa57a817909889cf3bb3c05d9905d93be13c84b3cbe18dcfee934ad8884ea0abd41ed26e702733d56d2d3","ssdeep":"","tlshash":"a3016d2af9436001721f483f056b21ce289e94cbe622d750fae8641b317ac893722b34","first_seen":"2024-10-10T08:49:41Z","last_seen":"2026-06-12T14:13:18.272954Z","times_seen":393,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/elementor/assets/lib/animations/styles/zoomIn.min.css?ver=3.24.6","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/styles/zoomIn.min.css?ver=3.24.6 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 14 Oct 2024 09:33:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 106\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":106,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7339af1b7f9c226094755fe645ff381a","sha1":"47eaf7b16cc7a2b5d729cdfcc7b38042e02d43b3","sha256":"af6953d433e9b119661eac422ce9c9e09a195a0a68ad42ad392e960df31201cc","sha512":"d9f851c919e3620434835ff980060d917136526dfa8cf1efe1b8a0f7bdf41605b6b4a9fe1577cbac895eb5cd3fcbf97edaa040ea4b448537249e4417bc95c102","ssdeep":"","tlshash":"dfb012448945059d414501f365849f84446c4bce36721d972cd008584f552ed31c2103","first_seen":"2024-09-12T11:59:50Z","last_seen":"2026-06-13T16:01:31.37634Z","times_seen":11584,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css?ver=3.24.3","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-list.min.css?ver=3.24.3 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 14 Oct 2024 09:33:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 866\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9929,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9889)","md5":"afb97b65824d8188e4747d8084e3a95e","sha1":"865cffb1a1440ca585af7e49c83eb677a745f809","sha256":"64fe15769d339a882a7b7442a3edd5585e4cf2fb360034775446d170bde76d47","sha512":"5a7423a42236d1fc9eb96c1f4f860ee0b5dd1ec0d10bd160aa81e7d0fddd3eeebe7fc1d7a153e4833fc61fad180e718073002638ceaf6ba2f5d8aad35ee40a7b","ssdeep":"96:B4W9CIKzCZ1KI/G+tl+A0zbjiviRILvo6kjO6AHReKuLjYvcv5VV:KW9CIKCG+tl+A0zb+qi6AHReKuLj6eh","tlshash":"ab22d3817d63814e16ff641b501b184ca1d9d4cde9bbecd5e8a66203c6fbec43b31928","first_seen":"2024-10-10T08:49:41Z","last_seen":"2026-06-12T14:13:18.21781Z","times_seen":186,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.css?ver=5.15.3","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/fontawesome.css?ver=5.15.3 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 14 Oct 2024 09:33:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12526\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":72184,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"aae648ec410260f859ac89e58a8372c1","sha1":"f7320458aadcbaa2ed94c43c8d7ddb9361d0b106","sha256":"d417b6ed49cb6ae3dfe2b0bab5d865472052cd0286a9478c74cbb09a02a56d0d","sha512":"88c7cfdc35aa5e4ecbd8023b966758f30aa7d1f5367820a1443922988c06a4a5a96fc500fab19985a090cbc85c9e2e5db63470e50fbc93f5596fee59346c3b73","ssdeep":"768:0bUiiiukQWIsjoQCSsncTpsTO3DNnYGmLN0yPburmvXnH4:0giii1IohCSicdsa3DNnYGeZPK4XY","tlshash":"d963dcfee1ff10944311e4812643e2e4f329b66cec8a4c98d2a67d9df1c165ca186bdd","first_seen":"2024-05-17T06:44:22Z","last_seen":"2026-06-13T17:38:48.710467Z","times_seen":32492,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/royal-elementor-addons/assets/css/frontend.min.css?ver=1.7.1026","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/plugins/royal-elementor-addons/assets/css/frontend.min.css?ver=1.7.1026 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Jul 2025 08:37:29 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 44750\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":412976,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"69b195890871489e67fda4ccf312fbc8","sha1":"1679ceb554fff91424ad3016de876723623eb776","sha256":"aaa13aae14c89034b02e795546b820eba18c547e0d0980ea8f6c07aa8a193e50","sha512":"bf34982222defbc8fbf890bc12f33d003e0b12d671625eea4f33e1b6cb5de8b52983d8f6360afe4181ba7cf9bf85df2fa50897acf25a1af198a8b1c3d5aa2a85","ssdeep":"6144:xxZpDKmkq0SsE8rT+bCSWtsmz4T6wtAiXA90gaXE16P26:/Ww","tlshash":"4194973354512304dd27ca3597ef63e49638e962673219fcb242664b8bcb9c403bba5f","first_seen":"2025-06-10T12:05:03.721872Z","last_seen":"2026-06-12T10:48:18.150381Z","times_seen":1009,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/uploads/2025/07/logo-mexEurope-1-1.png","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.406Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/logo-mexEurope-1-1.png HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 01 Jul 2025 08:33:03 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2644\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2644,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 86 x 41, 8-bit/color RGBA, non-interlaced","md5":"f7439f9397d1ae947f56ca6f9138d8c0","sha1":"6e4bbe2e02e6d9b225e38d47ac7d6d036af1f719","sha256":"0fd742ba4954b7792612731a408c70e8cbc95919ab2b6c36648b258bc664fbc6","sha512":"d799dd34540ef20298ae513270ec65f7a395693bbf5c85039e2c6a4edd95944d2ef50f3e5b22a0a2daed869d19a221192f1fb8b0fc69de4f2d6195508451857a","ssdeep":"","tlshash":"8a515c9f805ddb90dece56570c1d6251db9189cd2a2ad38c5e93c5a8da837834208ac4","first_seen":"2026-03-03T03:47:32.063598Z","last_seen":"2026-03-11T03:30:43.999261Z","times_seen":4,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.24.6","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.24.6 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 14 Oct 2024 09:33:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12152\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41321,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (41281)","md5":"650f6d97d5efb2781f897b385c4c94a0","sha1":"d2c05e33461656f84cf31ce29ab51aef79a6b561","sha256":"d4a6a819218b18c9bd0095d7ba200469ac95a835ca55da1f8374b520407f5f59","sha512":"fd9614e07a5c067c51eaf86fd79b4601463dbcb5aaaf7fa60390bed76db48dcad61db151da6506858b29d9d68ab9d19cc40d3a0e2d7b6cfbb98805bf072d89c8","ssdeep":"768:ERxjjLRkR68ZvxH2Ea/AfjSfufVgLIH1/QlKEAzBc5G8TSebsvT2C8UlBSB5oodA:ERxvLRkR681xH2EanufVtfEAzBc5TTS9","tlshash":"800307127192d4aa418f48b7b433021cb3654dcdb402b59db1bdace6a5b1e8373b6bb4","first_seen":"2024-10-10T08:49:40Z","last_seen":"2026-06-12T14:13:18.229602Z","times_seen":577,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/elementor/assets/css/widget-icon-list.min.css?ver=3.24.6","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-list.min.css?ver=3.24.6 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 14 Oct 2024 09:33:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 866\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9929,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9889)","md5":"afb97b65824d8188e4747d8084e3a95e","sha1":"865cffb1a1440ca585af7e49c83eb677a745f809","sha256":"64fe15769d339a882a7b7442a3edd5585e4cf2fb360034775446d170bde76d47","sha512":"5a7423a42236d1fc9eb96c1f4f860ee0b5dd1ec0d10bd160aa81e7d0fddd3eeebe7fc1d7a153e4833fc61fad180e718073002638ceaf6ba2f5d8aad35ee40a7b","ssdeep":"96:B4W9CIKzCZ1KI/G+tl+A0zbjiviRILvo6kjO6AHReKuLjYvcv5VV:KW9CIKCG+tl+A0zb+qi6AHReKuLj6eh","tlshash":"ab22d3817d63814e16ff641b501b184ca1d9d4cde9bbecd5e8a66203c6fbec43b31928","first_seen":"2024-10-10T08:49:41Z","last_seen":"2026-06-12T14:13:18.21781Z","times_seen":186,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.css?ver=5.15.3","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.css?ver=5.15.3 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 14 Oct 2024 09:33:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 296\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":732,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (312)","md5":"1f1c6abbb54c6d189b7263e0861fae8a","sha1":"6bc092e1e58b2fa6364bc17b02443ade0c6d32f1","sha256":"5009a34e30063ffb89185274681b359ae8c7dac19a606d5b1456ee3524cbc9b0","sha512":"7dd9accf0a69d2a89009443de17d6f09c3ca55e62fe9c7c4d3f12f89354b11559d83436fbc4befc8618ccbe0fe46fea657743d758e543b79a3d039ce36852b33","ssdeep":"","tlshash":"8f0164b0810510048a40091a2bdfbf28ae09a245781daea572239c1edcf4e4d61faf0d","first_seen":"2023-04-10T17:28:04Z","last_seen":"2026-06-13T17:38:48.696462Z","times_seen":32149,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/uploads/2023/12/64f84dcda0f473527cf780b3_client_portal-p-500.webp","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/uploads/2023/12/64f84dcda0f473527cf780b3_client_portal-p-500.webp HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:06 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 07 Dec 2023 08:49:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12666\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12666,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3e2593bc0c5e7559c6ea40d25f9b4594","sha1":"625bf9b3391137c834a54b1d24de036ff9791f88","sha256":"2cf18755119dbe4c48e1ce9ed1f7ab8d4abd04dc43fca777347519bf5b33a133","sha512":"a791446b0ed9c51b6a665bf06e9c2974e1bdc021af43dd6491ec221c44def32f58b06a3c83a569bc42ea69083cf1d15090f29f3ff3e3af71525990123372905d","ssdeep":"384:lraZcLCSi0/dsrZJ+99i3X9dqAO9gxeyGaBVBUULE4ms:lraZcuxZrZJSAH1ey/m","tlshash":"6942c0188259613cf1c7583bb640c128e611356dcc7fbc8f22f6bbf3a4a54a52554b56","first_seen":"2026-03-03T03:47:58.451093Z","last_seen":"2026-03-11T03:30:44.009865Z","times_seen":3,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/royal-elementor-addons/assets/js/lib/jarallax/jarallax.min.js?ver=1.12.7","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/plugins/royal-elementor-addons/assets/js/lib/jarallax/jarallax.min.js?ver=1.12.7 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 01 Jul 2025 08:37:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5006\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":15408,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15255)","md5":"cb41ed612d3bd175a500efdd4a3577a9","sha1":"58b26c82be66cd197eeba18a1682cdb0e8300a09","sha256":"0e8046d1329ee32048030b15b473e89574c1a96f1fe350e2f6fe2bbbdb1916af","sha512":"14f9721d53b68c3c8df7bdb18717232427ee7a765b953bab5046a00076a72be196292a3640c539f6ebc4173315291a63e08cec23d923798b085f278558b32f2d","ssdeep":"192:b9L5RK5fPMcgPbCp35vkQ14Yftfw9+Th+/isY1QmA0gkzdgbB1jXcfAsoTucjvVT:xPrbCPwUtfrSGzWbBqfAsoCcJrP/","tlshash":"1762d95c3221722186fb72ed201f630eb235957481aaca61712cc9fe7b65d8d41f3f6a","first_seen":"2023-03-07T12:23:24Z","last_seen":"2026-06-13T16:38:27.633054Z","times_seen":12544,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/AlexMexem/mexem-redesign/video/mobileHero3.webm","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:07.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /gh/AlexMexem/mexem-redesign/video/mobileHero3.webm HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: video/webm\r\nx-jsd-version: master\r\nx-jsd-version-type: branch\r\netag: W/\"116556-6heJqqlwcRNMOr574auweO8inwM\"\r\naccept-ranges: bytes\r\nage: 38753\r\ncontent-range: bytes 0-1140053/1140054\r\ndate: Wed, 11 Mar 2026 02:48:07 GMT\r\nx-served-by: cache-fra-eddf8230143-FRA, cache-hel1410024-HEL\r\nx-cache: HIT, MISS\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 1140054\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1140054,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"ca49dc79cca0bedbf7b8a2fff1a23e0b","sha1":"9eb4034164a085c049a98520d12bc4baa7efa7c6","sha256":"df062ef18a9986e39a963e28313d7db25a499e75849a8d0f10c4522e3b8e29bf","sha512":"b8f0ea3e4c41cba5604bd06656cc37913b95b1d5124d316701ada123f592f3664a04145165e6813a4c4ec744fdd867fc8bdbd5b47f6553eef09e98724e24286b","ssdeep":"24576:+O2OTLGUP7vP8qx6cJzgXga7n6LeW+SKiYuUKj8n8RSY:+O2PUvEwNNq6h+tqWn8RSY","tlshash":"d12523c87b108787e8425834e811db075a9c66b814f3af5cc41e75eac26163edf5aef8","first_seen":"2026-03-03T03:47:58.447863Z","last_seen":"2026-03-11T03:30:44.032266Z","times_seen":3,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":44,"dns":1,"connect":13,"send":0,"wait":171,"receive":103,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/astra-sites/inc/lib/onboarding/assets/dist/template-preview/main.js?ver=06758d4d807d9d22c6ea","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/plugins/astra-sites/inc/lib/onboarding/assets/dist/template-preview/main.js?ver=06758d4d807d9d22c6ea HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 01 Jul 2025 08:37:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2086\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6581,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6581), with no line terminators","md5":"60d72450a6829bb918b07075e6273d16","sha1":"fad4e52c06b86b8df6a4220707aad9c01ff74f7e","sha256":"4a8bd33bfe771e0bd46fade45435a9fa2d0c3a8af2409b1f5a74a6b96b03faa9","sha512":"77307ced72814f611ffe6786fa16a3d81356476cd60581c08441eeb3c365c4937cf4a8b781411f129443306a6ca39ade298af0762edc34ac34ee001d27e9d28b","ssdeep":"192:tXCj6InyYlqqOre482UO7N1gqts1SIVje5L1Cd+eLXPMo56MxdC:u6IyYlq/i482UO7NW1vV65AxrUowMxdC","tlshash":"2dd1b63a3224d9380bfa4aefb978e3d4f464b419f90392e4c99ccf0925b5d43139476a","first_seen":"2024-01-04T16:48:42Z","last_seen":"2026-06-13T17:07:56.721298Z","times_seen":12077,"resource_available":true,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.202.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mexcfd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 08:03:22 GMT\r\nexpires: Fri, 05 Mar 2027 08:03:22 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 499485\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-06-13T17:32:43.136724Z","times_seen":187379,"resource_available":false,"data":null}},"time_used":736,"timings":{"blocked":298,"dns":0,"connect":56,"send":0,"wait":137,"receive":2,"ssl":234},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/uploads/2023/12/64f84da5bbb31cf426658713_realtime_performance-p-500.webp","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:07.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/uploads/2023/12/64f84da5bbb31cf426658713_realtime_performance-p-500.webp HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:07 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 07 Dec 2023 08:49:50 GMT\r\naccept-ranges: bytes\r\ncontent-length: 9274\r\ndate: Wed, 11 Mar 2026 02:48:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9274,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ebcb34499c6d9006eacdbf74d2056f92","sha1":"3246b73e3c176d88f51946bd9afdbaa37448aabc","sha256":"15c8e9be7ea989a38e2b6324d93d8f97c73d1d367cf6b8a68d795eac393f6e9f","sha512":"a9800c968fce8cd544b816392f8a99b48663baeb2b27c9363fae45636673a9d0fb4ebbde35a4cf947a6436863211eef351efa6c6615ea99322aafd600f6ba8f2","ssdeep":"192:nGfwlikWWMxhBTjoGJ0rJLZBCtQvA+QZgo2NHxe/x44J4ld3XSJyiS1x:nbikWPhBTcG+Oi6ZgvRiWld3X+yiSP","tlshash":"2612bf8e21ce256c164829da1d7c1dbb5c4236c97ea34482ece9b1cf548ed5f32b630d","first_seen":"2026-03-03T03:47:58.453551Z","last_seen":"2026-03-11T03:30:44.034807Z","times_seen":3,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/super-progressive-web-apps/public/js/register-sw.js?ver=2.2.36","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/plugins/super-progressive-web-apps/public/js/register-sw.js?ver=2.2.36 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 01 Jul 2025 08:37:15 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8383\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":34317,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2042), with CRLF line terminators","md5":"6ddf8a30093001202ab9b7d97c5430e1","sha1":"e4ee90b6d77a2bd605c9854cb33c6847afadbe10","sha256":"8f15beb7592f409bda523a5b8e3e69fc80b1a852f3b29ffb63ec32037519fc84","sha512":"a0742d909558822f461094564d38f96f60daeb77986800889a500626147ca7a28ce2ef801aef87f65efdfbfcbe654b56a5d76cd87b068abc95bf5169eedbea27","ssdeep":"768:+Vuq052j3ht8D3Qw78OVxBeQ28OVKxHQxKttr7KQY3QK:Muq052Dr8Dgw78O9ePVKxHQXQGQK","tlshash":"f4f2c751376cd53b70b623aac9bb968afe7ec376b101903af54898502398c101b769fd","first_seen":"2025-04-01T20:11:11.918318Z","last_seen":"2026-05-15T20:31:13.011479Z","times_seen":112,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.202.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mexcfd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 08:03:22 GMT\r\nexpires: Fri, 05 Mar 2027 08:03:22 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nage: 499485\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":43136,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-06-13T17:32:43.136724Z","times_seen":187379,"resource_available":false,"data":null}},"time_used":586,"timings":{"blocked":157,"dns":1,"connect":63,"send":0,"wait":164,"receive":107,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.202.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mexcfd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 09 Mar 2026 15:58:33 GMT\r\nexpires: Tue, 09 Mar 2027 15:58:33 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nage: 125374\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-06-13T17:28:05.332178Z","times_seen":512100,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":143,"dns":0,"connect":0,"send":0,"wait":101,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-11T02:48:06.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://mexcfd.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://mexcfd.com/wp-json/wp/v2/pages/12\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://mexcfd.com/\u003e; rel=shortlink\r\netag: \"78-1773162027;br\"\r\nx-litespeed-cache: hit\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"particles.js","description":"Particles.js is a JavaScript library for creating particles.","website":"https://github.com/VincentGarreau/particles.js","common_platform_enumeration":"","icon":"","categories":["JavaScript graphics"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"WordPress:6.9.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Elementor:3.24.6","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"parallax.js:1.0","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":201685,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (62416), with CRLF, LF line terminators","md5":"6936cd0c1bdeea837ef3f685cf894892","sha1":"7840cdedf582512d7d8fe116747efd045ccadc4a","sha256":"b20b4978f7fee5457ccf9235b2159a0244d10ca169b6f33aa02b860c8a33f9fe","sha512":"c014fd23267c728286aa98569f4fbe68ecf55aa8d88064f510357a6794e7e8ee9c178bad4388c51237174cef03bbe9484cd284d003444abb0b1cdf611c20b45e","ssdeep":"6144:qN1ZdlRnoU6LSoduZsR4aaEOGFBEpbXWGJnLAijXd79/4A7KE2/rXI0JcBhiicYi:ymb","tlshash":"2214caa17a952836211f13afe00bb30c61da9d92eb0eb1e5f4fec15845e5f9236f121d","first_seen":"2026-03-11T02:48:47.892813Z","last_seen":"2026-03-11T03:30:44.050119Z","times_seen":2,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":91,"dns":27,"connect":30,"send":0,"wait":43,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/uploads/2023/12/64f856f311392cbb3e119eb8_stocks-p-500.webp","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/uploads/2023/12/64f856f311392cbb3e119eb8_stocks-p-500.webp HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:06 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 07 Dec 2023 08:49:58 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12168\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12168,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fb4a485f05f17c449d1b991f4a014d0f","sha1":"dad1bbd3965bbc38e5685def6c62bb2abaed5d7d","sha256":"9b0908bd435ea99b78b8c5d434f47cf5c7a8c5135987c06c2fc3b51e79ac52d6","sha512":"c4f9e8a146b4fafded1e9eee2887669a6a20db54f9a1d8d67e031584202cf748180368b848c7f1924711c453dc17952d285fffdd42fc4670c66d269a11e7df4c","ssdeep":"192:W2O6939VpPj9ZqOY0+oNRv04c1ctpG216TL4NH3fB1fEmt6SbgVqpoLWYPx0e7X/:W2739nNY0TRv04114LSvB1fEmtCMeWg","tlshash":"7342b012e8d25209fb98aa5f3f2d80b1d3e51c6443e4d1340b78e4a1f6f9b45351afad","first_seen":"2024-12-11T16:47:22.455979Z","last_seen":"2026-03-11T03:30:44.024697Z","times_seen":4,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/uploads/2023/12/64f85f44e20068093f56b703_global_trading-p-500.webp","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:07.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/uploads/2023/12/64f85f44e20068093f56b703_global_trading-p-500.webp HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:07 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 07 Dec 2023 12:25:23 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14938\r\ndate: Wed, 11 Mar 2026 02:48:07 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14938,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e7d1ac6d1340fa2b5a98e42a64a62633","sha1":"d7b79cfaf617e2c7e3f386f66c5a936e716e86f3","sha256":"848d1b152d7a7786d80c756bd8a62ac1c74f4eba84bddf02864760b742425a0d","sha512":"c79a28ca3675c8f25f37e8416e87b29276fb9e129e8061145de430e3c90c4b147a6c708a0c3ae7329170e50ef050a0de93050b68fa4d45d8da43429dfb1f8e65","ssdeep":"384:N7lEWG5XJRrnHuxpqGVYepp71UUZcFngWPLX:FlEWG5XJRDuUej715cFgWP7","tlshash":"2062e086b294bcdd9d02656487d9f0bc5c4af860e87d44f227e2929c4c8f8312735a6e","first_seen":"2026-03-03T03:47:58.411557Z","last_seen":"2026-03-11T03:30:43.993885Z","times_seen":3,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=2.4.2","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=2.4.2 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Jul 2025 08:41:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8154\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":79733,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (1646)","md5":"f9b1a38c6cbddba457610d9f7e0cc39c","sha1":"87e604f4d160e1bf8922d3e8544aa231a35137de","sha256":"22535ac164de118df829b7c354ee63ba5a41b4ea6ffb808350aa451d78edfaea","sha512":"2d1676e84e372b9262b7c92e3bd57d46b5205b5b4fd2218196bb92560583588b29bdd819b77ec5439c99be912489914a5d57f50e66b6114db2138094acc4c418","ssdeep":"768:02+Rm5ukW6EdVBSs+QXLjBnTGpIq5pbTpqzGI5eFV/ftc/yorXzFSSBlzfSKVn/1:02+Rm5ufoqDr1GLvQ","tlshash":"2573d8c61dc229749a16681da3ee93a457b60043cf35a9ac37ed821ccf82341b7f6b57","first_seen":"2025-06-09T19:34:43.416421Z","last_seen":"2026-06-13T14:31:28.986545Z","times_seen":4206,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=2.4.2","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=2.4.2 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Jul 2025 08:41:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 259\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":776,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a5bf64d5859ee94a3e8e93d592d6d2a0","sha1":"049eb63b42dbb820b06870a430f523bf06880721","sha256":"25825611ade7ceaed7df3862ec56dc91ad1d2be539966ef7bbe84306e51cfb08","sha512":"22c9c7ad86ad2b45124c5ff6b0a41e271ee176cfe0249c973877e51a1895f6d25c8f69b1c4eb565f5fe5e2befe2f4b80d4a89dcea57eeac43b3ae8e020469809","ssdeep":"","tlshash":"fe019024b14eb96412318c28f561857cb1be81075b05997275ecd19bfbde740c02e2c4","first_seen":"2023-04-05T05:47:47Z","last_seen":"2026-06-13T17:11:19.107373Z","times_seen":35822,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.24.6","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=3.24.6 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 14 Oct 2024 09:33:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 154\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":600,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (560)","md5":"77453d070b864f65e4316e798ea2eb32","sha1":"1dd8ddd43db25be96cf5f1db32507a703c3b015d","sha256":"9c8e5b60be3ff3908f2a8be00253d901c414fd09bae50322b124acc2417648ea","sha512":"ff386daaad0cccb7c28db580c04721cad63e5ed815ca4d892b36147d521bbb4bbd939a94cf893bb75e031a6ae64208e2cb376082e6ce75006a4d823bdcd808c1","ssdeep":"","tlshash":"2ef012237e0b94aa383f195b1143337c74944ec893a0a8d8edfa91436df4cb67334622","first_seen":"2024-10-10T08:49:41Z","last_seen":"2026-06-12T14:13:18.299539Z","times_seen":409,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.34.0","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.34.0 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 14 Oct 2024 09:33:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3746\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19862,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19816)","md5":"544ed889dd29e9def8d730bae7159340","sha1":"fc858346d648ac40f45cadd1ac3e06c1e5f1b60b","sha256":"224a04c6e185b4dec8dca82bdf2646e5af1a4f336d6f91f208c1dfceb06c5cb4","sha512":"82d72f6324bd21a2ffd85edd0fe91d76b0344be84db213d966f51baca5fb7e97a4e66ac030a48f0fd20bcae408e3bf6152e6b2b0b5188aa71eaa5535a7f57666","ssdeep":"192:wSF877iN3iCOy2bvGIdp8khugk8/H6qiMs7HqnFTSZq7RXDlCdkgIp:67iNyqEpXk8/aq8uFucbrgIp","tlshash":"4292dae5e46923c87b32c403e744f64c64d9f921cac89d19fa6f850c1ee16a316c6fb8","first_seen":"2024-09-10T20:44:21Z","last_seen":"2026-06-13T14:37:01.155199Z","times_seen":3179,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=1.7.1026","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=1.7.1026 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 14 Oct 2024 09:33:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12380\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":59344,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (59158)","md5":"74bab4578692993514e7f882cc15c218","sha1":"b6293bcfd851f963edbe859498570c4c0c7eaae4","sha256":"d87ddf917b7a1449ab45e2b8e3c98354629bdd65b6659c37e6023bbea1ce1386","sha512":"8810579bc7d6f74fa7b8b7122a56e6acf70b6b4393f76c4ed4122c67ecb00d6642beab1681c715de0168441bf4cfef1d2c9832007221477e5565cda833f808d7","ssdeep":"768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzl:0E0PxXE4YXJgndFTfy9lt5B","tlshash":"0a43fbb8e54c01c9b731c44bef82b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-06-13T17:30:01.992242Z","times_seen":101770,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.24.6","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.24.6 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 14 Oct 2024 09:33:36 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2071\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4997,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4957)","md5":"5a34bdbecd4477e6584a8d16ab0759c1","sha1":"ffa04176d8ac3faf769b7c05094a6853fdd90705","sha256":"0be5cfce38027ab2b0684d571062cb428b40962791261518159d32970486468d","sha512":"ae8f3101c4cab84cf8aebb7ad52c6c96e00516fea894958a73920c7918e6a486a8be69d6769a23026d615c26e8899ccfdeff4399144586df8a8f5e6bf930b15a","ssdeep":"96:BpsNt0jqf9fz9Af8nDmDllCjNVobVDPkqflkxwvT8S2:TsNCjw9fhHyD4N4FPkyXgS2","tlshash":"44a141d41b90fc6735e035c5a01aa731762fc0337c1bb8c1fa22dced98e8a9187a9931","first_seen":"2024-10-10T08:49:41Z","last_seen":"2026-06-12T14:13:18.28375Z","times_seen":577,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/elementor/assets/css/conditionals/e-swiper.min.css?ver=3.24.6","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/conditionals/e-swiper.min.css?ver=3.24.6 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 14 Oct 2024 09:33:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 890\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":10260,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10260), with no line terminators","md5":"f9a4d42bf66491dd2e49cd5a425bfc4e","sha1":"3cfe595ab53edf4ad7ba7b66be50442521f78dd6","sha256":"9bc52b3c4e9973d64baa482f332ed895f80d0cd2be37e6a49bf1a2e831eb5ac9","sha512":"92781fb595e1e551dc4425744692b61a1624ccfdd1c668842cddba252303a9d97f713b4ccaa828e196add56d10d912871b43aef3228a574eef4140e96858a0ac","ssdeep":"96:Vf0HhGhmdGtlDNURY5hs64Wcg3LNB7uo03z5VN:VAhGhmdG/NUkhs64Wcg3LNB7uo03z5VN","tlshash":"662252823f831123a36f4e5b282357bca7284dc18947b9aad2919c86d2f9cf5375fc50","first_seen":"2024-09-06T09:58:58Z","last_seen":"2026-06-13T15:15:11.207418Z","times_seen":11994,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.24.6","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.24.6 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 14 Oct 2024 09:33:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 20275\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":80657,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65496)","md5":"65b14e77a11c2baffca6e3bc0ebc4598","sha1":"41411f5e9440995a516347cdebcb5465abe5ffa1","sha256":"e76fe1ddf34b81940a8c974fc571b1c51a778c80d826fba7dee495582630e26b","sha512":"5fb3a081097a60551f31a2bef8d25cb4ae5070b8e98a2a2e27c7e348c49ea1ecf9ecca31de767485e8f1e466c7ad2600dcd54d2dda93ac59a9425ebae5262aa7","ssdeep":"1536:4eAjA679C+QRNtewmXC4WHqMPBWPbx84XwCRfYNQAzeLHeBHmjknzRNS4cR8+StQ:2wmJjAOIOV2BCWju0ELv","tlshash":"df73d9963112b8b707ef81eb701b150ae22318e8b409b46d797ccdfb55b0e8623b6775","first_seen":"2024-10-10T08:49:41Z","last_seen":"2026-06-12T14:13:18.254849Z","times_seen":571,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.24.6","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.24.6 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 14 Oct 2024 09:33:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6890\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":60705,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (60665)","md5":"cbcc74f242cc8ec4dce6b167230fc2b4","sha1":"f00d7515c9ecd7f5da63e33319b9c3d110513356","sha256":"4c56cd80de8ea1a2579b5ac28c51ea94460856bd3df2a5316435cded4a9ab1f3","sha512":"5ac576d8864412322e3d6d894aafb87d21e3fe6fdb7e12283016f79be6dc80a9396869f5a02d73b0a115ab006b25762323db95b138d84d0f6e26dcef1b58da6e","ssdeep":"384:U3mnJrvXwkHdFptDJw1ZNbt/fm5F5Cz9TMH46amP6amWFVzlRdnsvgnhBYXIuYYn:A5Kb3tgnlfUnlsvtQfk","tlshash":"b1532c627e13b22d256f582b93c7354c52a084c1ea4376d5f901c9139afedea3b35c2b","first_seen":"2024-10-10T01:45:02Z","last_seen":"2026-06-12T14:13:18.252055Z","times_seen":461,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/swiper/v8/css/swiper.min.css?ver=8.4.5 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 14 Oct 2024 09:33:39 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4248\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":16471,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16214)","md5":"a2431bc290cf34e330e11ec4cfce1247","sha1":"32a53342901fef5f4f4dbb26a555e730f84437a4","sha256":"c57e64fcb72bddafa9c38de574441c3e69ac6c961df96b0cad34da83658bd196","sha512":"87aef045472db25020faead697ec02813ba38d4e313caf437b4ca5cadbb7a7495805ac0b74e5de60cd84ccecab290b76d003eb1fadfcdaa70e650a597658ada9","ssdeep":"192:IbgmUJbiKneTT4bHZ+SKbnxup/a2AMQfHff71eesedOJ9A5Pz+c3At2/6:IdUbeTMbHZ+Vnh2AVfHfA4XYz","tlshash":"fa7234681340282753274f374b71cbb9d9b444d24b93896e91c0ee88d7b6cbd236f6e9","first_seen":"2023-04-05T10:48:11Z","last_seen":"2026-06-13T17:30:15.597583Z","times_seen":126775,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.css?ver=5.15.3","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.css?ver=5.15.3 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 14 Oct 2024 09:33:37 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 296\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":727,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (307)","md5":"8d37441d69ebc9b55dff2c7c214ef997","sha1":"9a292c8559131ea8838899863987ffdcfb4005ea","sha256":"93cf6e96459e42f9f656e03ec4800578dc2c021dcde475c9e5e891a7780b0866","sha512":"25e4e29eadc6a9c8b81b8e000726d8a9eea9d3378ca6faa641d5b9dcb64039ba97904fd0b2bf50a8303b7cd1194d08c80641025a635f8c3fd2ebd9217f824704","ssdeep":"","tlshash":"a201247d81022a504a8008152adabf689e99b0a6785c6f7572329c2eccf4e5961a9f0d","first_seen":"2023-04-09T05:14:34Z","last_seen":"2026-06-13T17:38:48.722018Z","times_seen":32272,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/royal-elementor-addons/assets/css/lib/animations/wpr-link-animations.min.css?ver=1.7.1026","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/plugins/royal-elementor-addons/assets/css/lib/animations/wpr-link-animations.min.css?ver=1.7.1026 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Wed, 18 Mar 2026 02:48:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 01 Jul 2025 08:37:29 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 626\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4724,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4724), with no line terminators","md5":"ab415582faf635654e3fa803d1ae084f","sha1":"374998f76d0440b897c92e1346fba4f2c971d4fc","sha256":"3c07cbd5bf727ae9fd18c05f02b9424cd94ca048c49200f5b7f9374ff3659eae","sha512":"6af8f53f86d169a19618833b93b9a65a2e0840532ea2cf7eb698ef39b6d6cc83d59f813e0e2adcb5f98dd8eb8080313edb1749e89a6362f92c19a005b1a4817a","ssdeep":"48:zJgtCbsYGtn9vfW7SZ9cE6AONQ/nUh+WtDYzUAm+llrem/B:J+9vfW7SYE6F+WWIAm+um/B","tlshash":"6da1ffa24d031eacd53fa600baab22e447eb5651e1f12969a1d1211743c32fbdc7ff46","first_seen":"2023-04-07T17:34:47Z","last_seen":"2026-06-13T07:39:27.766775Z","times_seen":1647,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mexcfd.com/wp-content/plugins/royal-elementor-addons/assets/js/frontend.min.js?ver=1.7.1026","fqdn":"mexcfd.com","domain":"mexcfd.com","tld":"com"},"ip":{"addr":"192.142.10.5","port":443,"asn":53107,"as":"EVEO S.A.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.mexcfd.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 12 Feb 2026 12:57:31 GMT","end":"Wed, 13 May 2026 12:57:30 GMT"},"fingerprint":{"sha1":"59:2E:B3:FD:FB:4C:0F:CE:3F:C4:0D:F9:39:57:14:7C:29:DA:F8:09","sha256":"D2:A8:84:16:93:30:DE:95:5B:52:62:DA:6B:CA:E0:DD:FB:9E:C8:D9:5E:60:37:92:BF:3D:4A:C5:99:D1:FF:2A"}}},"request":{"raw":"GET /wp-content/plugins/royal-elementor-addons/assets/js/frontend.min.js?ver=1.7.1026 HTTP/1.1\r\nHost: mexcfd.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mexcfd.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Tue, 01 Jul 2025 08:37:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 41875\r\ndate: Wed, 11 Mar 2026 02:48:06 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":230501,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8c23ef586c3c25e146042840a6243545","sha1":"01f3e10f2ec87b86cea040a3932140626289149c","sha256":"1d2b441e3c64640fe0bef8a95da821156976269cceee6b4bbf0b0062b48e475b","sha512":"833e8c409924c6176fda01fdd09d2475c019d8bfe9eb40c2fa903ebc26cdc198eeacb02253297c293e75ca1bc3cf315d3c50926c119f9cd1b58968b390a6e71f","ssdeep":"6144:NMKesfVGqothnos8HU1y3qbZ6LoSbuh0RD6dmj4bT3M0MlhSveB0OPFP:/fVGTCvPFP","tlshash":"1334d545f12561f380ff11b7416bba8031255cb2cb038894a1b7997a0eb9de6a373f6d","first_seen":"2025-06-10T12:05:03.734321Z","last_seen":"2026-06-13T15:32:31.688451Z","times_seen":1016,"resource_available":true,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-11","alert":"Phishing Block","trigger":"mexcfd.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.202.94","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mexcfd.com/","date":"2026-03-11T02:48:06.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://mexcfd.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 09 Mar 2026 15:58:33 GMT\r\nexpires: Tue, 09 Mar 2027 15:58:33 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nage: 125374\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-06-13T17:28:05.332178Z","times_seen":512100,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":138,"dns":0,"connect":0,"send":0,"wait":137,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}