{"report_id":"87aa63a1-2aff-4ba0-8ea1-a62d7d67d966","version":0,"status":"done","tags":[],"date":"2026-09-21T09:53:09Z","url":{"schema":"http","addr":"xtradegrok.org/","fqdn":"xtradegrok.org","domain":"xtradegrok.org","tld":"org"},"ip":{"addr":"104.21.37.158","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xtradegrok.org/?lang=en","fqdn":"xtradegrok.org","domain":"xtradegrok.org","tld":"org"},"title":"xTradeGrok - Automated Crypto Trading","dom":{"size":171421,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (45578)","md5":"d17d24e875c24ddd2132b6a7c28d4c87","sha1":"1a4f96efc66a484fd52e899273e8713ba55ad30c","sha256":"66f25de518db95951186896f49a922924c9c6b87dd438c3bdae1058e8fb25016","sha512":"70ad9d94f0d5f28d74d4d81e6e8e0042090c27d9b29b996a7ec2f6592803e9f29256b32f969937df0d7c5a43064d623022ce1de51b3fe01841f6591be190ea18","ssdeep":"1536:uuuCt1YLOxwOJUVWJzvhdPNLcyz9VTsu3GpiFFzMcBA0BsBoXJY7G4:rtKSXtzbT8piFFzHA0B8oXO7G4","tlshash":"20f31f27526935224433c3c530bd573be69aae0ffa960a443eecd7f61fe9ca0641b119","dom_hash":"domhashe5dc53483255b3749b338c3981375836","first_seen":"2026-09-21T09:53:11.836187Z","last_seen":"2026-09-21T09:53:11.836187Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"xtradegrok.org/","fqdn":"xtradegrok.org","domain":"xtradegrok.org","tld":"org"},"ip":{"addr":"104.21.37.158","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-26T09:53:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"xtradegrok.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"xtradegrok.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"xtradegrok.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"xtradegrok.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"xtradegrok.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"xtradegrok.org","ip":{"addr":"104.21.37.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-08","domain_rank":0,"first_seen":"2026-09-21T09:49:21.71723Z","last_seen":"2026-09-21T09:49:21.71723Z","alert_count":40,"request_count":8,"received_data":721504,"sent_data":3811,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"SiteGround","description":"SiteGround is a web hosting service.","website":"https://www.siteground.com","common_platform_enumeration":"","icon":"siteground.svg","categories":["PaaS","Hosting"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-09-20T23:17:00.144243Z","alert_count":0,"request_count":4,"received_data":373468,"sent_data":2145,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":1,"received_data":1249,"sent_data":505,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":1,"received_data":129185,"sent_data":551,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xtradegrok.org/","fqdn":"xtradegrok.org","domain":"xtradegrok.org","tld":"org"},"ip":{"addr":"104.21.37.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cddfc8778932cfb2470cbf9f3051355f","sha1":"4f9c6815b5c5ba6d1f05daab44ac96da2313c2a3","sha256":"786a3a1680799e1a5354c790f93b8f35697f0a9831b597fb279ebafab6b6ee5c","sha512":"aada89783556a1fae6053ea33dcff21d7ac210b9a8cc9d0da16eb37d689fd62580fe184df6932e50964faf2a7fa3fe9f24c65917e7c4323a4a95624d46c4f114","ssdeep":"384:+TymVCUjMTg2LKV4gUQy8BUNTYLMhHmdOBRSka0L29DkhXB/6r3ji0inioioi5YA:+mmVCetTQ8mTDSTX3GpiFF6pOMc3","tlshash":"54e2196e630e21e24cc43b5a7e7db1f6722d893b5e0048ea749c5b3537eee84c011b66","size":32854,"data":"","first_seen":"2026-07-18T18:18:05.147421Z","last_seen":"2026-09-21T09:53:11.84704Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtradegrok.org/","fqdn":"xtradegrok.org","domain":"xtradegrok.org","tld":"org"},"ip":{"addr":"104.21.37.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d58ffaf4ddf7966b436013ff583026b","sha1":"188ed6e175c8ec67f7aa6fda11b2cfda43def1d2","sha256":"d28726fe0520a10a328cecccfff3431029542ce23023ad389003498ed3562fd6","sha512":"aa14b848f374dd33607af091f7aafec7e6bce8370b5faadbc81799264d42bb8f2c2819b21a2ea46f405beac3f62d5b3cea5fc126e4f7afee1d4f43434e5d7241","ssdeep":"","tlshash":"0121ac4836b3257214233329d64fd20530302a636d5af611748c9b9e5f11d62873eafd","size":1299,"data":"","first_seen":"2026-07-18T18:18:05.148239Z","last_seen":"2026-09-21T09:53:11.847532Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtradegrok.org/assets/app.js","fqdn":"xtradegrok.org","domain":"xtradegrok.org","tld":"org"},"ip":{"addr":"104.21.37.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7b65ee2c6c1b4643ca78170bd7983d2","sha1":"6edf25e7ec93fdf47c07775409ae4d33281e7873","sha256":"44fe3d155d5f7a2f81d518875b14e6aae427a36289972553b3086392b85306d0","sha512":"dae9de1af166acac9aed829e5c506275a8fdf470e12275da73d9dfc3c16d901bba6c5664f5a1eede94667ea2f8c4ea66b7d029bcde6fbc90abe7f1e2ea27e382","ssdeep":"384:0GkFVD8tlpiTH4RvUdj1DEOdZCL5xZ4zsjWM/63Nuqia1tU:cD8gTH4RvqEgm","tlshash":"bca240ea34f31132897721fe6bcb5205362951032c46e9597eac43011fc9fad97b3ba9","size":22554,"data":"","first_seen":"2026-07-18T18:18:05.145424Z","last_seen":"2026-09-21T09:53:11.844124Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@17.0.0/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f3a2154b225b6257161c4dfc9b89c9c","sha1":"16b798cbb9e22cd4e1d710a8de7b12734551ca00","sha256":"acaefecc2a438420ae02baa357bb498ac4abec71c80ba9e3c2b7079cacf256c2","sha512":"ae1f7ce0811e3ec97105009feb364b2ebedb402a63f0f250fb82550a91863e170181283cc867049be7ff4df64a6b0db7719fcd33438e03f7fccc0e61f9686a10","ssdeep":"3072:yxJ0MDz3ojrs3OwPl0n04Xl31AfO+2x1+w+Whnz6RNC7sSUrVjHoLOTpCAtQ594Z:yxJRDY9lx1+w+WwugJ","tlshash":"fd34ceebda3c9736a1d97b35968eb3cd5a8cbc93c848567826c3b54f53788e0706c205","size":245184,"data":"","first_seen":"2023-03-07T01:38:25Z","last_seen":"2026-10-13T16:33:29.328697Z","times_seen":944,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@17.0.0/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f0fd4db134888591bffa8029d619835","sha1":"f811a2dfb28282ced4affdb9dd324d018b303f9e","sha256":"393f7860ee7bb5ec83fcf1a2118623edee656c56b980fba9a9d3a28bd6cc7bca","sha512":"50f7423245a2d23d974a265184779c8b70524e6c9d40cc3731eab82867a406fc24668bfe9da72045f0f3adac98c63a5df6db42f167f6d8284b802a0bdd14309a","ssdeep":"768:k1D7GzOml+D45YMJR3kWGYUOesxjTKbjvT4N3RR:AfIkWYOeajTKbQ1","tlshash":"bed20aa973511636a89ae0a1597f16476ebf30015a84cc8cb87ecdcc1fecec9a1b5734","size":29059,"data":"","first_seen":"2023-04-14T18:07:27Z","last_seen":"2026-10-13T18:27:36.954352Z","times_seen":683,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"Loaded translations from lang.php","filename":"https://xtradegrok.org/assets/app.js","line_number":73,"column_number":25},{"level":"log","text":"Вызов функции getGA4ClientId","filename":"https://xtradegrok.org/","line_number":1336,"column_number":17},{"level":"log","text":"Document Cookies:","filename":"https://xtradegrok.org/","line_number":1338,"column_number":17},{"level":"error","text":"GA4 Client ID не найден для обновления URL","filename":"https://xtradegrok.org/","line_number":1359,"column_number":21}]},"http":[{"url":{"schema":"https","addr":"xtradegrok.org/form/img/trustpilot-light.png","fqdn":"xtradegrok.org","domain":"xtradegrok.org","tld":"org"},"ip":{"addr":"104.21.37.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xtradegrok.org/","date":"2026-09-21T09:52:39.890Z","timestamp":1789984359890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtradegrok.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 18:03:24 GMT","end":"Mon, 02 Nov 2026 19:03:17 GMT"},"fingerprint":{"sha1":"3F:22:A5:5B:A8:1F:1B:A3:3F:AD:C1:BF:F7:26:8D:1B:30:04:54:E7","sha256":"05:41:A5:96:F9:56:56:BE:C2:79:03:45:1B:2D:FB:0B:7A:A4:62:0D:D6:D8:99:0C:A5:24:13:F7:8C:02:72:A6"}}},"request":{"raw":"GET /form/img/trustpilot-light.png HTTP/1.1\r\nHost: xtradegrok.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xtradegrok.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 09:52:40 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 18 Feb 2026 10:14:51 GMT\r\netag: \"168d9-64b16756683ad\"\r\naccept-ranges: bytes\r\ncache-control: private\r\nexpires: Tue, 21 Sep 2027 09:52:40 GMT\r\nx-httpd-modphp: 1\r\nhost-header: 6b7412fb82ca5edfd0917e3957f05d89\r\nx-proxy-cache: MISS\r\nx-proxy-cache-info: 0 NC:000000 UP:\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=beL1gFur45YyYfe0rEJsBToQwekSyEZz4FzGyHE1DjrKGSKqVg6wVA%2FMwKG7jCkKPhaHdww9yOiCs36Be2MC81fcpQr0HRb7o4BJKd16bjVuh7NSMeeG1UT1k8v2rlBe4w%3D%3D\"}]}\r\ncf-ray: a3e82da96b92a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 92377\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"SiteGround","description":"SiteGround is a web hosting service.","website":"https://www.siteground.com","common_platform_enumeration":"","icon":"siteground.svg","categories":["PaaS","Hosting"]}],"data":{"size":92377,"size_decoded":93230,"mime_type":"image/png","magic":"PNG image data, 1134 x 490, 8-bit/color RGBA, non-interlaced","md5":"75d6957cffd23a61e528f281c76c1bfc","sha1":"a2330556f4ddb70cf985ec4ce5bd1f05491a8f29","sha256":"34bac1dff95d5e6cb136e6815617f6563de2b2ac09bb14562f1b3952c4b04616","sha512":"878cb73d5b756f54672e124a8d299160a99b28ae44ace06b3b77ee75d1451c955cd0c8e806d4750c53587ab7d5b0a85dc2274148364d6050eac57a28d4b99b79","ssdeep":"1536:Uua9Ao/rpQsalF4MQ+iMBBiYDu3YaWQgLfcDY/VzMzj1V9c3hlyrHxZHHZZDr:Uuu3/rt04MpKYQgLfP/96v9c3hqH7fr","tlshash":"1093f10990b5cb195cab12f750244f674efa70af85ec683dd129b16d2c04eb72b42adf","first_seen":"2025-11-26T17:55:25.054049Z","last_seen":"2026-09-21T09:53:11.838115Z","times_seen":4,"resource_available":false,"data":null}},"time_used":587,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":334,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"xtradegrok.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"xtradegrok.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"xtradegrok.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"xtradegrok.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"xtradegrok.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xtradegrok.org/form/ipgeo/index.php","fqdn":"xtradegrok.org","domain":"xtradegrok.org","tld":"org"},"ip":{"addr":"104.21.37.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xtradegrok.org/","date":"2026-09-21T09:52:42.001Z","timestamp":1789984362001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtradegrok.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 18:03:24 GMT","end":"Mon, 02 Nov 2026 19:03:17 GMT"},"fingerprint":{"sha1":"3F:22:A5:5B:A8:1F:1B:A3:3F:AD:C1:BF:F7:26:8D:1B:30:04:54:E7","sha256":"05:41:A5:96:F9:56:56:BE:C2:79:03:45:1B:2D:FB:0B:7A:A4:62:0D:D6:D8:99:0C:A5:24:13:F7:8C:02:72:A6"}}},"request":{"raw":"GET /form/ipgeo/index.php HTTP/1.1\r\nHost: xtradegrok.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xtradegrok.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 09:52:42 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: private\r\nexpires: Wed, 23 Sep 2026 09:52:42 GMT\r\nx-httpd-modphp: 1\r\nhost-header: 6b7412fb82ca5edfd0917e3957f05d89\r\nx-proxy-cache: MISS\r\nx-proxy-cache-info: 0 NC:000000 UP:\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E8NJcVGQrcZCfVRGZKMImM%2BObnfeFJGZbEPPlM0iQp5Ol21wEo%2FRgkaQM0Fa5w7uuWKJ5SW%2BKXfNqY8MWunQzCJHgu3JkZazeHZD0ijIl2q3XO9AJcy44MvkRRn7M3NlmQ%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3e82db6aeaca0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"SiteGround","description":"SiteGround is a web hosting service.","website":"https://www.siteground.com","common_platform_enumeration":"","icon":"siteground.svg","categories":["PaaS","Hosting"]}],"data":{"size":105,"size_decoded":895,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"9e2579d45d84ac62fa20a90cac6c3031","sha1":"e09ac5ff262f598ee7e7c004587da2566021be9e","sha256":"19271c4f48e4da26b3c2d9ad78f43684763124fa4f07fedf7b1e82761607ca58","sha512":"515001b9291446bf15f43b716f530ddacea207003adfeca999801a291b242de90ab773f16e3f107b0af7aa85f0f1c716a23e7150c4c6abb6d637880aaf4f8baa","ssdeep":"","tlshash":"2db0122f40220d568461c189e4423c03418d0543efd41f2b90c82fc690fd0bc0300540","first_seen":"2024-05-23T10:18:48Z","last_seen":"2026-10-08T07:23:52.543295Z","times_seen":47,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":209,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"xtradegrok.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"xtradegrok.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"xtradegrok.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"xtradegrok.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"xtradegrok.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xtradegrok.org/","fqdn":"xtradegrok.org","domain":"xtradegrok.org","tld":"org"},"ip":{"addr":"104.21.37.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-21T09:52:35.406Z","timestamp":1789984355406,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtradegrok.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 18:03:24 GMT","end":"Mon, 02 Nov 2026 19:03:17 GMT"},"fingerprint":{"sha1":"3F:22:A5:5B:A8:1F:1B:A3:3F:AD:C1:BF:F7:26:8D:1B:30:04:54:E7","sha256":"05:41:A5:96:F9:56:56:BE:C2:79:03:45:1B:2D:FB:0B:7A:A4:62:0D:D6:D8:99:0C:A5:24:13:F7:8C:02:72:A6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xtradegrok.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 21 Sep 2026 09:52:39 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: private\r\nexpires: Wed, 23 Sep 2026 09:52:39 GMT\r\nx-httpd-modphp: 1\r\nhost-header: 6b7412fb82ca5edfd0917e3957f05d89\r\nx-proxy-cache: MISS\r\nx-proxy-cache-info: 0 NC:000000 UP:\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cwp0XM%2F2BbH1kH%2FNSfDFIDaIS3KB5W7XlVzkXTw8S%2B09PYdUgqWiL4HGVMRGx2OqtjTAQjiA6Fvb5qCO%2F6gICePEm9FsFKiJqC3MRvO19z4%2FthMi8wpnmK2b%2F1xVoaK8gQ%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3e82da58ea0b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"SiteGround","description":"SiteGround is a web hosting service.","website":"https://www.siteground.com","common_platform_enumeration":"","icon":"siteground.svg","categories":["PaaS","Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":98299,"size_decoded":25747,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (360), with CRLF, LF line terminators","md5":"04dbbf308f44f3943ed3b60ed134817f","sha1":"537cc476093be7f33435c03f4b764550bbab27c6","sha256":"822ce1824e70a02ebe2aec594b36fa62da9fe1defb18631ea25ab9e3d3179ba1","sha512":"4a6f0ee24dd93b3e32caee4eccc99327dccdb2cf372192ffcb7ad2e3a582a552dd161ea63d8676dc76d728a3922207b1ed3a304b3fd0390780e0eee9febf01c9","ssdeep":"1536:Ruu/3icDGL6CbWQpI7Yv7Qv3+NdaJ+Sm/V:h3viLSQpI7YjQvYdaISm/V","tlshash":"86a3f92e72fc0126489357d5bbb8e32abe6ce51bc64501d431ac4bb42fe2c94c527b6d","first_seen":"2026-07-18T18:18:05.137879Z","last_seen":"2026-09-21T09:53:11.839524Z","times_seen":3,"resource_available":true,"data":null}},"time_used":4236,"timings":{"blocked":-1,"dns":39,"connect":34,"send":0,"wait":377,"receive":0,"ssl":3786},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"xtradegrok.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"xtradegrok.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"xtradegrok.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"xtradegrok.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"xtradegrok.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@17.0.0/build/css/intlTelInput.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xtradegrok.org/","date":"2026-09-21T09:52:39.881Z","timestamp":1789984359881,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@17.0.0/build/css/intlTelInput.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xtradegrok.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 17.0.0\r\nx-jsd-version-type: version\r\netag: W/\"62a6-2TFKUghaK7bShEIbsYpMVG7Lc9Q\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 450399\r\ndate: Mon, 21 Sep 2026 09:52:40 GMT\r\nx-served-by: cache-fra-eddf8230044-FRA, cache-bma-essb1270038-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 2775\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25254,"size_decoded":3554,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a69aa970266649e0b08c2cb4bc166568","sha1":"d9314a52085a2bb6d284421bb18a4c546ecb73d4","sha256":"ad32b1248207ba91fb945a37d38e7c9deafcba849245872203482db42930d491","sha512":"8315a8c3c328eaaea92dad571ff09c1fc2728920c4b62c0957bf04f83f903f41156ac16cf30297ab5e86f022c3e022764a7a271ebe0b9bfc98d9f488dbe71b9b","ssdeep":"384:HzITF7FWhTmwAmDQTeIcQeIWi7mZlsaAaniXlvhdB:HqF7FWh/Hib","tlshash":"a4b236678bb32945b92bf2a1196406a237375c0bf81a4f2d63d639bddf490e014f37a1","first_seen":"2023-04-05T15:31:11Z","last_seen":"2026-10-14T19:29:58.117845Z","times_seen":30339,"resource_available":true,"data":null}},"time_used":2009,"timings":{"blocked":-1,"dns":34,"connect":41,"send":0,"wait":85,"receive":1800,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtradegrok.org/assets/lang.php","fqdn":"xtradegrok.org","domain":"xtradegrok.org","tld":"org"},"ip":{"addr":"104.21.37.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xtradegrok.org/","date":"2026-09-21T09:52:42.004Z","timestamp":1789984362004,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtradegrok.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 18:03:24 GMT","end":"Mon, 02 Nov 2026 19:03:17 GMT"},"fingerprint":{"sha1":"3F:22:A5:5B:A8:1F:1B:A3:3F:AD:C1:BF:F7:26:8D:1B:30:04:54:E7","sha256":"05:41:A5:96:F9:56:56:BE:C2:79:03:45:1B:2D:FB:0B:7A:A4:62:0D:D6:D8:99:0C:A5:24:13:F7:8C:02:72:A6"}}},"request":{"raw":"GET /assets/lang.php HTTP/1.1\r\nHost: xtradegrok.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xtradegrok.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 09:52:42 GMT\r\ncontent-type: application/json; charset=utf-8\r\nvary: Accept-Encoding\r\ncache-control: private\r\nexpires: Wed, 23 Sep 2026 09:52:42 GMT\r\nx-httpd-modphp: 1\r\nhost-header: 6b7412fb82ca5edfd0917e3957f05d89\r\nx-proxy-cache: MISS\r\nx-proxy-cache-info: 0 NC:000000 UP:\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ehM2DQzSmZihEl2HWW%2Bh5u0ByOO0KF5ZgsbagskTb1vmoiaOtDTjUJ497UVzo8QwvEMqA6Q%2BNQ4mHrp0EQ6PHWVZ890j20gqf4xnNlFIWItuNhL6qvv7Jr5xmbLq8bIq2w%3D%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: a3e82db6aeafa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"SiteGround","description":"SiteGround is a web hosting service.","website":"https://www.siteground.com","common_platform_enumeration":"","icon":"siteground.svg","categories":["PaaS","Hosting"]}],"data":{"size":411620,"size_decoded":82412,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"10d880937063cb3e086e423292db73b2","sha1":"8c9dfa89d9aca8a5cc5704856c7ec8fb443bca0d","sha256":"3eb087e5d4d4829baaf128e7c13846dbb254a319c082448a8da42ef241b737d6","sha512":"3669d4c57a1f5dc773bb5a3d3c02b16d86cfb06d21a9b1f5fc2b3a53543f4cb74591f896d7c761b5f6d0bb91bdb9ee3925500d343ecfd3123af32546a8d0528a","ssdeep":"6144:YjKC+EvImcn2UGN/G2zDnk4yjKCGifeHz4G4XbOcyiWDcq5PrFqm6:07UGN/G2zDnk4IK5PrFqm6","tlshash":"8a94843ec4600db70586612b98653247b524469b2f54bce83b8cc51c1fddaafc1ba7be","first_seen":"2026-07-18T18:18:05.136911Z","last_seen":"2026-09-21T09:53:11.840825Z","times_seen":3,"resource_available":true,"data":null}},"time_used":335,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":162,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"xtradegrok.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"xtradegrok.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"xtradegrok.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"xtradegrok.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"xtradegrok.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@17.0.0/build/js/utils.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xtradegrok.org/","date":"2026-09-21T09:52:42.766Z","timestamp":1789984362766,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@17.0.0/build/js/utils.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xtradegrok.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 57371\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 17.0.0\r\nx-jsd-version-type: version\r\netag: W/\"3bdc0-FreYy7niLNTh1xCo3nsSc0VRygA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 1422687\r\ndate: Mon, 21 Sep 2026 09:52:42 GMT\r\nx-served-by: cache-fra-eddf8230149-FRA, cache-bma-essb1270074-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":245184,"size_decoded":58147,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1654)","md5":"8f3a2154b225b6257161c4dfc9b89c9c","sha1":"16b798cbb9e22cd4e1d710a8de7b12734551ca00","sha256":"acaefecc2a438420ae02baa357bb498ac4abec71c80ba9e3c2b7079cacf256c2","sha512":"ae1f7ce0811e3ec97105009feb364b2ebedb402a63f0f250fb82550a91863e170181283cc867049be7ff4df64a6b0db7719fcd33438e03f7fccc0e61f9686a10","ssdeep":"3072:yxJ0MDz3ojrs3OwPl0n04Xl31AfO+2x1+w+Whnz6RNC7sSUrVjHoLOTpCAtQ594Z:yxJRDY9lx1+w+WwugJ","tlshash":"fd34ceebda3c9736a1d97b35968eb3cd5a8cbc93c848567826c3b54f53788e0706c205","first_seen":"2023-03-07T01:38:25Z","last_seen":"2026-10-13T16:33:29.328697Z","times_seen":944,"resource_available":true,"data":null}},"time_used":528,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":485,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtradegrok.org/assets/style.css","fqdn":"xtradegrok.org","domain":"xtradegrok.org","tld":"org"},"ip":{"addr":"104.21.37.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xtradegrok.org/","date":"2026-09-21T09:52:39.878Z","timestamp":1789984359878,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtradegrok.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 18:03:24 GMT","end":"Mon, 02 Nov 2026 19:03:17 GMT"},"fingerprint":{"sha1":"3F:22:A5:5B:A8:1F:1B:A3:3F:AD:C1:BF:F7:26:8D:1B:30:04:54:E7","sha256":"05:41:A5:96:F9:56:56:BE:C2:79:03:45:1B:2D:FB:0B:7A:A4:62:0D:D6:D8:99:0C:A5:24:13:F7:8C:02:72:A6"}}},"request":{"raw":"GET /assets/style.css HTTP/1.1\r\nHost: xtradegrok.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xtradegrok.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 09:52:40 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 08 Feb 2026 13:46:46 GMT\r\netag: W/\"8c54-64a5040e0a786\"\r\ncache-control: private\r\nexpires: Wed, 21 Oct 2026 09:52:40 GMT\r\nx-httpd-modphp: 1\r\nhost-header: 6b7412fb82ca5edfd0917e3957f05d89\r\nx-proxy-cache: MISS\r\nx-proxy-cache-info: 0 NC:000000 UP:\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y971yuAMgM4CyiA1mUcttIIasmt4MuzPIpewxVl6f786Guwhho8uRP%2FW80kmmvQcVZkd7fm6xZ3CErH6gS5qdJIaIi%2Fpi0x67t9UAb%2FBV0Qu3mnqLEF7f9EHSA70LAnJtA%3D%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-ray: a3e82da95b8ea0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"SiteGround","description":"SiteGround is a web hosting service.","website":"https://www.siteground.com","common_platform_enumeration":"","icon":"siteground.svg","categories":["PaaS","Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35924,"size_decoded":6410,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"69777291064ab160515397a46c233b5e","sha1":"789a72a69376d95b6e3d2263a302c3b6ca1b7690","sha256":"462efaa372994517419c5e646b808437fdd6d90700ec01017aa08b5266dec24a","sha512":"4e9f7d2b4bf24b2d5d82d485819b698e95bf5967f85f4bedf17c77dd18ae7f2e9bb21e2e10422a659e2fee8db97956848123a020acf0c6d2efda9f417deb89d5","ssdeep":"768:avjzFTE1IvbQV7SxxaLoOK5KJShSk99Bw:ojzVE1IvbK7SxxaLoOK5KJShSk99u","tlshash":"02f2208436739b66b93ba56d5beee64d33286047440dcde93a8831198fc83fd9611f4c","first_seen":"2026-07-18T18:18:05.138878Z","last_seen":"2026-09-21T09:53:11.842105Z","times_seen":3,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"xtradegrok.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"xtradegrok.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"xtradegrok.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"xtradegrok.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"xtradegrok.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/icon?family=Material+Icons","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xtradegrok.org/","date":"2026-09-21T09:52:39.880Z","timestamp":1789984359880,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:15 GMT","end":"Fri, 27 Nov 2026 08:06:14 GMT"},"fingerprint":{"sha1":"4A:94:E8:7C:D6:24:98:F0:09:11:DC:AA:71:9C:1B:6F:0E:37:D6:F9","sha256":"27:EB:1A:85:AA:03:02:5C:92:96:B5:9A:18:1B:65:94:2D:6C:B8:A3:56:3D:E9:F8:5F:E3:62:83:5C:A8:C0:59"}}},"request":{"raw":"GET /icon?family=Material+Icons HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xtradegrok.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 21 Sep 2026 09:52:40 GMT\r\ndate: Mon, 21 Sep 2026 09:52:40 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":565,"size_decoded":1025,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"2b7a8d84952a9183b106df19f711324e","sha1":"a92c5e12b422bba9ebb447e1852d9681487361bc","sha256":"282801a0d182035440d5ef6d429d227126d2e6720a52b91d31a7d746c758154e","sha512":"d7ef3f86fe9fa5730a118c688b8f779e82ec3695df5ec48953905ed078ef4d78a3c8005021574d936f69ff0467968b6e68fbcb0680894470abf8f26200af2e0c","ssdeep":"","tlshash":"c0f0c064be0a988566110c42370f3f164d1d401fa80ac8fe8b911d4c8cff1bb134670f","first_seen":"2025-09-17T21:11:07.996842Z","last_seen":"2026-10-15T03:35:10.688932Z","times_seen":84722,"resource_available":true,"data":null}},"time_used":515,"timings":{"blocked":-1,"dns":35,"connect":304,"send":0,"wait":65,"receive":0,"ssl":110},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@17.0.0/build/js/intlTelInput.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xtradegrok.org/","date":"2026-09-21T09:52:39.883Z","timestamp":1789984359883,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@17.0.0/build/js/intlTelInput.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xtradegrok.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 17.0.0\r\nx-jsd-version-type: version\r\netag: W/\"71aa-OcgjT/KlAKZC1bKdGHlKTO6jmTA\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 564509\r\ndate: Mon, 21 Sep 2026 09:52:40 GMT\r\nx-served-by: cache-fra-eddf8230052-FRA, cache-bma-essb1270038-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 10852\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29098,"size_decoded":11646,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26912)","md5":"0f0fd4db134888591bffa8029d619835","sha1":"f811a2dfb28282ced4affdb9dd324d018b303f9e","sha256":"393f7860ee7bb5ec83fcf1a2118623edee656c56b980fba9a9d3a28bd6cc7bca","sha512":"50f7423245a2d23d974a265184779c8b70524e6c9d40cc3731eab82867a406fc24668bfe9da72045f0f3adac98c63a5df6db42f167f6d8284b802a0bdd14309a","ssdeep":"768:k1D7GzOml+D45YMJR3kWGYUOesxjTKbjvT4N3RR:AfIkWYOeajTKbQ1","tlshash":"bed20aa973511636a89ae0a1597f16476ebf30015a84cc8cb87ecdcc1fecec9a1b5734","first_seen":"2023-04-14T18:07:27Z","last_seen":"2026-10-13T18:27:36.954352Z","times_seen":683,"resource_available":true,"data":null}},"time_used":2049,"timings":{"blocked":-1,"dns":33,"connect":0,"send":0,"wait":85,"receive":1841,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtradegrok.org/assets/app.js","fqdn":"xtradegrok.org","domain":"xtradegrok.org","tld":"org"},"ip":{"addr":"104.21.37.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xtradegrok.org/","date":"2026-09-21T09:52:39.884Z","timestamp":1789984359884,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtradegrok.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 18:03:24 GMT","end":"Mon, 02 Nov 2026 19:03:17 GMT"},"fingerprint":{"sha1":"3F:22:A5:5B:A8:1F:1B:A3:3F:AD:C1:BF:F7:26:8D:1B:30:04:54:E7","sha256":"05:41:A5:96:F9:56:56:BE:C2:79:03:45:1B:2D:FB:0B:7A:A4:62:0D:D6:D8:99:0C:A5:24:13:F7:8C:02:72:A6"}}},"request":{"raw":"GET /assets/app.js HTTP/1.1\r\nHost: xtradegrok.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xtradegrok.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 09:52:40 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 18 Feb 2026 10:30:17 GMT\r\netag: W/\"5846-64b16ac98d0a2\"\r\ncache-control: private\r\nexpires: Wed, 21 Oct 2026 09:52:40 GMT\r\nx-httpd-modphp: 1\r\nhost-header: 6b7412fb82ca5edfd0917e3957f05d89\r\nx-proxy-cache: MISS\r\nx-proxy-cache-info: 0 NC:000000 UP:\r\ncontent-encoding: br\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5kVJASYikTERMxCJVF%2FnmIl4p4oMiMbqW0DgSH%2BB3bC45dhtT0hUi%2Fw3fjNrQsMtIqXfeFwaLhhWVFTycoD9JiQEhK6dUOY7lINcs19CGx5OZwQIwAAO6pN45CjQ1gInPA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncf-ray: a3e82da96b8fa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"SiteGround","description":"SiteGround is a web hosting service.","website":"https://www.siteground.com","common_platform_enumeration":"","icon":"siteground.svg","categories":["PaaS","Hosting"]}],"data":{"size":22598,"size_decoded":6069,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"b7b65ee2c6c1b4643ca78170bd7983d2","sha1":"6edf25e7ec93fdf47c07775409ae4d33281e7873","sha256":"44fe3d155d5f7a2f81d518875b14e6aae427a36289972553b3086392b85306d0","sha512":"dae9de1af166acac9aed829e5c506275a8fdf470e12275da73d9dfc3c16d901bba6c5664f5a1eede94667ea2f8c4ea66b7d029bcde6fbc90abe7f1e2ea27e382","ssdeep":"384:0GkFVD8tlpiTH4RvUdj1DEOdZCL5xZ4zsjWM/63Nuqia1tU:cD8gTH4RvqEgm","tlshash":"bca240ea34f31132897721fe6bcb5205362951032c46e9597eac43011fc9fad97b3ba9","first_seen":"2026-07-18T18:18:05.145424Z","last_seen":"2026-09-21T09:53:11.844124Z","times_seen":3,"resource_available":true,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"xtradegrok.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"xtradegrok.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"xtradegrok.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"xtradegrok.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"xtradegrok.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/intl-tel-input@17.0.0/build/img/flags.png","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xtradegrok.org/","date":"2026-09-21T09:52:42.009Z","timestamp":1789984362009,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/intl-tel-input@17.0.0/build/img/flags.png HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/intl-tel-input@17.0.0/build/css/intlTelInput.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 70857\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: image/png\r\nx-jsd-version: 17.0.0\r\nx-jsd-version-type: version\r\netag: W/\"114c9-IVcsl1Hlo9wgOVvvoPyzScMsSBE\"\r\naccept-ranges: bytes\r\nage: 1777096\r\ndate: Mon, 21 Sep 2026 09:52:42 GMT\r\nx-served-by: cache-fra-etou8220150-FRA, cache-bma-essb1270074-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70857,"size_decoded":71583,"mime_type":"image/png","magic":"PNG image data, 5652 x 15, 8-bit/color RGBA, non-interlaced","md5":"416250f60d785a2e02f17e054d2e4e44","sha1":"21572c9751e5a3dc20395befa0fcb349c32c4811","sha256":"0a012cf808a24573168308916092d2d4bd3f2b4af8e16b59167013cc77acee55","sha512":"cf1e7acf47464f00d206e9149475e22b8ea5a31727fa16344cd151384d850b83ece5e9abe4ac62861dba0dc3d3410955611d94665b60e2faa0c3d7a3d7c88404","ssdeep":"1536:cBBfgWxg7McnRdaRx9krb5LhxHG1gmvlpWUZA1eog3e7xr:Lg+3n3ax9kHV3Wgmdg2A1Y3elr","tlshash":"9763019797adf1d82a92274bef801109ae6c2b3d5d7c1da372cf1d532ae12c306c8586","first_seen":"2023-04-05T15:31:12Z","last_seen":"2026-10-15T02:13:41.076749Z","times_seen":26667,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":87,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtradegrok.org/form/img/trustpilot-dark.png","fqdn":"xtradegrok.org","domain":"xtradegrok.org","tld":"org"},"ip":{"addr":"104.21.37.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xtradegrok.org/","date":"2026-09-21T09:52:39.888Z","timestamp":1789984359888,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtradegrok.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 18:03:24 GMT","end":"Mon, 02 Nov 2026 19:03:17 GMT"},"fingerprint":{"sha1":"3F:22:A5:5B:A8:1F:1B:A3:3F:AD:C1:BF:F7:26:8D:1B:30:04:54:E7","sha256":"05:41:A5:96:F9:56:56:BE:C2:79:03:45:1B:2D:FB:0B:7A:A4:62:0D:D6:D8:99:0C:A5:24:13:F7:8C:02:72:A6"}}},"request":{"raw":"GET /form/img/trustpilot-dark.png HTTP/1.1\r\nHost: xtradegrok.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xtradegrok.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 09:52:40 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Wed, 18 Feb 2026 10:14:50 GMT\r\netag: \"9117-64b1675550321\"\r\naccept-ranges: bytes\r\ncache-control: private\r\nexpires: Tue, 21 Sep 2027 09:52:40 GMT\r\nx-httpd-modphp: 1\r\nhost-header: 6b7412fb82ca5edfd0917e3957f05d89\r\nx-proxy-cache: MISS\r\nx-proxy-cache-info: 0 NC:000000 UP:\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mpXvEAFRxO4sSO7qxs1PavU788xZpzut%2BhjMn%2BOhBkZmUkgdPDoh7qJQViblx7dkUcVl8k8pYaodJ20%2FjRlihsVKvRn%2F3pITO52SYbmseG2nOwEAFR3vO0CiO8KuSrqhCA%3D%3D\"}]}\r\ncf-ray: a3e82da96b91a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 37143\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"SiteGround","description":"SiteGround is a web hosting service.","website":"https://www.siteground.com","common_platform_enumeration":"","icon":"siteground.svg","categories":["PaaS","Hosting"]}],"data":{"size":37143,"size_decoded":38001,"mime_type":"image/png","magic":"PNG image data, 1134 x 490, 8-bit colormap, non-interlaced","md5":"e8e5bd54bfd5ebc74ba33f18f2570689","sha1":"9101e438fc8187b94b4e18e9899f0cee8d40376d","sha256":"f79bf3e895e8273b4599506de2c6f6a1b77ed145b786f41434567e74399cda8c","sha512":"a16fa9eab0ac788010ced65bc84cf6967dfdbe7030f555fa8a2140114b5fce21676627b10d2db45f12e55689d7346ebd8603627d5c83895122be0efba49eb7ff","ssdeep":"768:7rDMdkLILy+YdJPA4GvWWgGncbL9k7ebIHsSvdVVC:bMEaxGGTtcm7AD2dC","tlshash":"cff2f1441e71e99695925c63d88c7fb046f2ec9338bcb92a870c339ccab2d0657d6395","first_seen":"2025-11-26T17:55:25.059152Z","last_seen":"2026-09-21T09:53:11.845189Z","times_seen":4,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"xtradegrok.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"xtradegrok.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"xtradegrok.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"xtradegrok.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"xtradegrok.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/materialicons/v145/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xtradegrok.org/","date":"2026-09-21T09:52:41.946Z","timestamp":1789984361946,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:06:14 GMT","end":"Fri, 27 Nov 2026 08:06:13 GMT"},"fingerprint":{"sha1":"FC:62:2C:54:76:7E:15:10:00:DB:0B:9A:29:78:7E:31:F7:5C:17:C1","sha256":"44:EE:C5:6A:08:A1:AE:B6:0C:23:F4:3C:53:06:12:05:DD:B7:E6:D4:54:60:3B:8E:37:C2:E8:85:98:FD:83:85"}}},"request":{"raw":"GET /s/materialicons/v145/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://xtradegrok.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 128352\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 20 Sep 2026 10:07:48 GMT\r\nexpires: Mon, 20 Sep 2027 10:07:48 GMT\r\ncache-control: public, max-age=31536000\r\nage: 85494\r\nlast-modified: Wed, 17 Sep 2025 16:29:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":128352,"size_decoded":129185,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 128352, version 1.0","md5":"53436aca8627a49f4deaaa44dc9e3c05","sha1":"0bc0c675480d94ec7e8609dda6227f88c5d08d2c","sha256":"8265f64786397d6b832d1ca0aafdf149ad84e72759fffa9f7272e91a0fb015d1","sha512":"6655e0426eb0c78a7cb4d4216a3af7a6edd50aba8c92316608b1f79b8fc15f895cba9314beb7a35400228786e2a78a33e8c03322da04e0da94c2f109241547e8","ssdeep":"3072:b4XkN5u3RbAR2r4lJ8FBnP7fNblbKBRvqy:fGdA8FBP7fNb5y","tlshash":"91c3231efc32af9a2e1724ec288521809c1e92fbe0b3512cf565f437e76517d999ca09","first_seen":"2023-04-05T13:19:11Z","last_seen":"2026-10-15T03:20:22.865877Z","times_seen":95488,"resource_available":false,"data":null}},"time_used":792,"timings":{"blocked":0,"dns":35,"connect":48,"send":0,"wait":101,"receive":494,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtradegrok.org/assets/fav-icon.png","fqdn":"xtradegrok.org","domain":"xtradegrok.org","tld":"org"},"ip":{"addr":"104.21.37.158","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xtradegrok.org/","date":"2026-09-21T09:52:42.443Z","timestamp":1789984362443,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtradegrok.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 04 Aug 2026 18:03:24 GMT","end":"Mon, 02 Nov 2026 19:03:17 GMT"},"fingerprint":{"sha1":"3F:22:A5:5B:A8:1F:1B:A3:3F:AD:C1:BF:F7:26:8D:1B:30:04:54:E7","sha256":"05:41:A5:96:F9:56:56:BE:C2:79:03:45:1B:2D:FB:0B:7A:A4:62:0D:D6:D8:99:0C:A5:24:13:F7:8C:02:72:A6"}}},"request":{"raw":"GET /assets/fav-icon.png HTTP/1.1\r\nHost: xtradegrok.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://xtradegrok.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Mon, 21 Sep 2026 09:52:42 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 12 Feb 2026 09:25:25 GMT\r\netag: \"4161-64a9d11982698\"\r\naccept-ranges: bytes\r\ncache-control: private\r\nexpires: Tue, 21 Sep 2027 09:52:42 GMT\r\nx-httpd-modphp: 1\r\nhost-header: 6b7412fb82ca5edfd0917e3957f05d89\r\nx-proxy-cache: MISS\r\nx-proxy-cache-info: 0 NC:000000 UP:\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uoYYxn4EAP0dbVXsUEqsPYH4HH9xI4lgzoFN6Ge1OyK7I9ZpRfWjoo3%2B%2B5RbjzEQKTppDEf8Nv6Eh6w3SQ%2FMtWPxiJMH%2F6kuIccJLoP%2BXoeBJdGwBMqblAfCz25jmIyNgg%3D%3D\"}]}\r\ncf-ray: a3e82db96f35a0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16737\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"SiteGround","description":"SiteGround is a web hosting service.","website":"https://www.siteground.com","common_platform_enumeration":"","icon":"siteground.svg","categories":["PaaS","Hosting"]}],"data":{"size":16737,"size_decoded":17600,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"c00bef934e10739e56dd2758a05498a7","sha1":"20be4f83bfe52a1920fe70c8aac7207b93a0e4d6","sha256":"3b724e354f0edefc4528325636b990e06f0c383806c6cb9be72609d12ccedcf7","sha512":"d164c9986d0a5448f1d79c2926708f3ead6ce40f77788d8c5df2f7f8c11fa410850bf4b986ae21237d9a5685f23cf39d2eee7366b9e06445ed3409ee553fcfa8","ssdeep":"384:/QyiHhCKFNsPRg+B0j5tc5XGNh+16MQU5zwkw78bXKzZz3XA:6BX4NY5tcoNh+QPyTw7F9XA","tlshash":"b372c064a67d1095d69c07b0bdccbf2aa13b2fc19fe607d10763d9279e80394ad5bb40","first_seen":"2026-07-18T18:18:05.146326Z","last_seen":"2026-09-21T09:53:11.846178Z","times_seen":3,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":244,"receive":103,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"xtradegrok.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"xtradegrok.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"xtradegrok.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"xtradegrok.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"xtradegrok.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}}]}