{"report_id":"967606af-3754-49c9-bf63-8bfe7a948976","version":6,"status":"done","tags":[],"date":"2026-05-19T13:29:29Z","url":{"schema":"http","addr":"nadextla.live","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"ip":{"addr":"104.219.248.240","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"nadextla.live/","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"title":"Nadextla","dom":{"size":7284,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"6d9846aafcfef51cd57e19977ffb8187","sha1":"9a418c80627fc5f1e56efce320d1006778b0e849","sha256":"6aaae9101558794739366e1ef834a93d11bb1a4e73591ef3b96fef8a66550f44","sha512":"762378f13621e1efeab0d9ad7c96abac84bb01c81562aa2887aef811283aaa9b2f8258e8e3ddbf834f998ecff8ca391e7237f08ece91c035146957548b416b5b","ssdeep":"96:lH2HjEfToWEmtkc3tz7wjrtccTxDiCePxY0fxTFF3QZmvmbn:lWIbDHtkcZ0jrtc2xiCePxAn","tlshash":"c6e1f9039b07c85a814055f6b13af0b5c0f678a9f8ab8cd464ad279315db7be223e658","dom_hash":"domhash13b5160775a3bd8768ac8ace4542c481","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nadextla.live","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"ip":{"addr":"104.219.248.240","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-23T13:29:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"nadextla.live","ip":{"addr":"104.219.248.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-05-19T13:28:30.197864Z","last_seen":"2026-05-19T13:28:30.197864Z","alert_count":0,"request_count":24,"received_data":1045380,"sent_data":27331,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"Tidio","description":"Tidio is a customer communication product. It provides multi-channel support so users can communicate with customers on the go. Live chat, messenger, or email are all supported.","website":"https://www.tidio.com","common_platform_enumeration":"","icon":"Tidio.svg","categories":["Live chat"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"translate.yandex.net","ip":{"addr":"213.180.204.194","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"2000-11-14","domain_rank":123882,"first_seen":"2013-04-25T11:29:08Z","last_seen":"2026-05-18T23:39:47.355781Z","alert_count":0,"request_count":1,"received_data":466,"sent_data":495,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-17T22:21:01.756487Z","alert_count":0,"request_count":1,"received_data":23861,"sent_data":575,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"widgets.coingecko.com","ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-03-26","domain_rank":3132971,"first_seen":"2018-07-05T11:10:42Z","last_seen":"2026-05-15T11:33:56.936458Z","alert_count":0,"request_count":1,"received_data":231845,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"translate.google.com","ip":{"addr":"172.217.20.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":609,"first_seen":"2012-05-30T01:30:32Z","last_seen":"2026-05-18T16:57:48.017843Z","alert_count":0,"request_count":1,"received_data":230,"sent_data":463,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.tidio.co","ip":{"addr":"104.26.0.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2014-06-01","domain_rank":120056,"first_seen":"2014-11-27T09:26:14Z","last_seen":"2026-05-14T04:47:10.097218Z","alert_count":0,"request_count":1,"received_data":537,"sent_data":410,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"use.fontawesome.com","ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":6983,"first_seen":"2017-01-30T04:43:25Z","last_seen":"2026-05-18T00:59:15.098575Z","alert_count":0,"request_count":1,"received_data":55151,"sent_data":475,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-17T22:18:09.532627Z","alert_count":0,"request_count":1,"received_data":35763,"sent_data":550,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nadextla.live/","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"ip":{"addr":"104.219.248.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"19bc027f5e3c981fa341c51fabbeaa49","sha1":"d1d9fdfcb6a29cf2997a22d698ead2b66d25d318","sha256":"dde22802646322c9c6220b43a334419338818a1951a88a3c11ac717254e33bd6","sha512":"aee59d2abe8a593e6a6ac2b4cb371a362be5f0e83bb53e582e199f58c3caa972f11000702b185bd85c9c0c0c758ab5bd557fcdac14e3894a061f98dd10b82eef","ssdeep":"","tlshash":"3f317982528f54e786f3a2f274aefc51e6b972a8e8c2cdec145d068442d3977764c368","size":1615,"data":"","first_seen":"2026-03-12T13:49:18.446067Z","last_seen":"2026-05-19T13:29:31.919444Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadextla.live/temp/custom/js/bootstrap.min.js","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"ip":{"addr":"104.219.248.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6895e8cd60b62646ce12426015888f58","sha1":"de908c9ed184d74eb525fa7a30449b67fc3a1c14","sha256":"eb795deda8983fa5310627c9584cf3f3b95d272567113500059018b3941cb267","sha512":"f43dfd388488b509a66879608c35d7c1155f93dcec33ca875082f59f35552740d65e9a344a044d7ec534f0278a6bb6f0ed81047f73dcf615f7dcd76e0a482009","ssdeep":"768:tVYe0yK2vHVRS323ufp0NagHDFR82Qs+miD5W5MsgQZmJPliB6BBoBFeq:tVc+U2QK+GM4ZIwwoqq","tlshash":"f343b80a725478b2059f9176917f420bb736798ae50bc26cb91d98ed1e7cc893227f3c","size":55775,"data":"","first_seen":"2023-03-07T01:06:56Z","last_seen":"2026-05-20T14:31:13.336576Z","times_seen":4118,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadextla.live/temp/custom/js/livestamp.min.js","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"ip":{"addr":"104.219.248.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1d6370e267b3aaf2045e69eef7ed17a","sha1":"34a700591d34f795a479516b7f72fb2ead5fec5b","sha256":"f2beb92898142c10e2661c03c9d7d6ac4931df2c95fe0ac6b06cda7a4a1b9e02","sha512":"0b744879a24259e2b930b3d24ab56cb0306f4b06a6656ed483281ce2bdb582e56a91eae8cbdc110436ae810b2c010fa6dc766c31656f12281c34cafb8ee19728","ssdeep":"","tlshash":"7621aaacf284b58519c3a460513f66197791b3bd9d4c8490aa6293d0cf7aa4b713be38","size":1414,"data":"","first_seen":"2023-03-07T01:18:22Z","last_seen":"2026-05-19T13:29:31.913648Z","times_seen":413,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadextla.live/temp/custom/js/imagesloaded.pkgd.min.js","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"ip":{"addr":"104.219.248.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2c1a80b99251b7b94726b41312fb160","sha1":"6d3e11174e22668e69df236e5c4542168f7cbfec","sha256":"96abf166b3cbb5f7df525d86fdeeeccea4af3c120b19bc26b0613530a94e8b44","sha512":"4b93d9f46c4964ed7ab53f6bdd6269fd269f9f7d5ebbcb96af382531a8434f876c9a0a96a27458f60ae4de3fb7b5fb8fafd58936c7e8a0e47b1a2ec72f95b68f","ssdeep":"96:bwRxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7J:bwjrycrr3rKvE9IjRxjGjgNhdTLo3re+","tlshash":"19b122cd77a27535229af0b3a21f020f72b6406e6918815d7959ecf65cfcd192633bb0","size":5594,"data":"","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-05-20T20:16:01.429093Z","times_seen":20107,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadextla.live/temp/custom/js/bootstrap-select.js","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"ip":{"addr":"104.219.248.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5b04d645561ef0310c7918f03ae43fc9","sha1":"9a6ae4d0aae724a7e032d8d505d9b8816477d739","sha256":"186e4c2c470e3c1c76997b7a4dfd0f618b38311582e0578db05ccada6fd43c6c","sha512":"1a5e1405749a94daa777e7f0c96bfea84d27c174228e8a6f546100325144e133efc430bbd847813d3e8c1223efc15fc927922c337ad61f6cff03106070c6e569","ssdeep":"1536:o68KYv2GWk/QIkzliZEkZe38kykPDpcLmLV2+DgwetQeMT2pY+0S9hNtmk09F3KQ:A7uKbQ0hNM8KmI","tlshash":"e3b3945925a6113582ab30ab4e9f5048b539811f9d06ed283cac93cc6fd4d38a1f7ff6","size":111455,"data":"","first_seen":"2023-03-07T16:17:07Z","last_seen":"2026-05-20T10:02:43.747372Z","times_seen":453,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadextla.live/temp/custom/js/jquery.min.js","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"ip":{"addr":"104.219.248.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","size":86927,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-05-20T23:44:02.612082Z","times_seen":130053,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadextla.live/temp/custom/js/popper.min.js","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"ip":{"addr":"104.219.248.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e58cd01528ac4394af369c152c17bc2","sha1":"9496922c892ea80e86d868c4509610d61a1f2847","sha256":"587c080125b135d29a931ed371e50ffc1a9641831c1087de2cd74532815f4560","sha512":"0e7b227e2dc4a8d7410da7fbcccd531bb3f4d151a29af485d50094888ff172859d2336c8b0fa3959fda4e7223c3d630a0589debaa204c1450299b4132c02b5aa","ssdeep":"384:fmQkLrwVOQzirVyKnxRs8gB9Db5HjiWn8xHOxvRVgD75zBY5vImg3FzGpL9ARdO/:WLsgQziJp3MDb5OxHOxvYD73Y5vQzyL3","tlshash":"2292b3cc3294b06643ab91a7a0af960eb2339875610e9410f19df2d97c30ef9917fd79","size":20973,"data":"","first_seen":"2023-03-07T01:06:56Z","last_seen":"2026-05-20T13:27:44.939257Z","times_seen":7359,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadextla.live/temp/custom/js/jquery.form.js","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"ip":{"addr":"104.219.248.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab627b3d962b9d7ba28d2c9c4f507006","sha1":"5306bf157b6126d0b43982fb8b3fae7c560b6a89","sha256":"23fc25133ed072cdf7dae575213067b1da3c6843b2a0e489c8b7fc984c60ce6b","sha512":"f6955b951fc46a60880e2230aec83d0f423b9560b7c4eb5f715f966df544dca7cffd1db57834766efc0968c8273f005ea5f4f23d10884f8c89ffb7bc4e7f638d","ssdeep":"768:Dh7+wDM1YuW+WkeBzYU6w+fAV66lPZ0Pjma3ij6lOTwIDuliMIzMSV9MwMGM+zYU:9iwDM1YuW+WkeBEfcPZ079SjCOoliMIB","tlshash":"3d13a24a69eb12a2192330b94bef90497639d0231108dda17d4c53d0afd4db4a6fafe8","size":43811,"data":"","first_seen":"2023-03-11T21:18:39Z","last_seen":"2026-05-19T19:11:53.77162Z","times_seen":561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadextla.live/temp/custom/js/moment.js","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"ip":{"addr":"104.219.248.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0941fc7ec3988352c959e5b3da86f666","sha1":"f5ff9e6fdcddb2951851412bc021015b6b59054c","sha256":"1fd8c0cfffd02e40cecbf9f313d1b86988a342d90bb7d16f1a67544f0064ea0b","sha512":"5afde44d2c0b90bfbf3292b794e80ab6c4e7e653b59e675eb2fee4f6459c22ed23a00268e0ac48b01e3fad03d45ffd4cfcc35e3026d16fbff64bf7f61488412d","ssdeep":"1536:4OpyD1Cb6yVBXfW1vCUUtQQTj06HPU3KQFSNF1T7cbF/nlzUIKHCIioTo3v2BcC:4OpyDJu8XUtQQSO1T7cbF/nlz3wq2BB","tlshash":"42e31b4a69e760224623b2794fef5405aa38c517150ede097c8da3d4af81c7847fafec","size":150941,"data":"","first_seen":"2023-03-07T16:46:41Z","last_seen":"2026-05-20T14:09:07.378533Z","times_seen":1225,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadextla.live/","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"ip":{"addr":"104.219.248.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d87e82f12920658b1c40d667070ee620","sha1":"ed246af21de1222057f6655fe17133aee5745a4a","sha256":"c78ce093a4087768548ce4d01ff2950c1965fed7828be68a61e980cdf43809b1","sha512":"0a0b974cb8542cf83a1d3bbd778d677157fd3300477301482cbeef154232e7b5f7009d88e885cf14e88e2dfc32356de58e7d21017e617b67f62815d11b7f6432","ssdeep":"","tlshash":"50c02b2b61f17f84450ea207f21a00ac3b5409c991304876357c2d0c07ff1f4abd7484","size":152,"data":"","first_seen":"2025-07-22T08:29:21.806877Z","last_seen":"2026-05-19T13:29:31.920292Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"nadextla.live/temp/custom/slick/slick-theme.css","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"ip":{"addr":"104.219.248.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nadextla.live/","date":"2026-05-19T13:29:08.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadextla.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 24 Mar 2026 00:00:00 GMT","end":"Thu, 08 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:C5:3B:4E:1C:33:60:9A:6B:42:D5:3B:8D:DA:77:44:5C:78:12:FB","sha256":"2C:82:14:9D:AD:93:A9:5C:45:2F:58:2D:E4:FE:E1:5F:65:AD:7F:CC:F8:5B:B8:F0:73:FD:28:10:E6:24:27:56"}}},"request":{"raw":"GET /temp/custom/slick/slick-theme.css HTTP/1.1\r\nHost: nadextla.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadextla.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im04eE1LT1hYT3AyQXRHWEowOTRwN2c9PSIsInZhbHVlIjoiRmlRQ3lEdzhSV3hYaGNSMHBZbzRwYXFCSXVBYVFjTHZaZDhrNTJOQ2c1MVc4Y2VSSXdheVQ1Z00zQXFKRlk5aGZ2bjdleGFCRHh6NkhhYUNhV2k5bkdhMVNRdFFWSUc0ZGtid1FKeDQ1QlZtZmVkTXBSTWdOdlBMZGExaFRYVG8iLCJtYWMiOiJhMWRkZmQ2ZjMxMDRhY2FkZTA0OThkODc5YmMyNDk5OGE1MzFhNzdmNTg5ZThjMjBlMWVjNzAwYzhkNGJlNTIxIiwidGFnIjoiIn0%3D; nadextla_session=eyJpdiI6IlFzMkh4QzFGbVdpR1QyVEhBNDMxMUE9PSIsInZhbHVlIjoiNVQzVkdDcWw4NWthMGEyZm9NUlRuSjhKbXJXOXdDR0IxTzl6WDVsek5tYW5yQ2dXWXAxQzMwTnhLQTlCYlVkTFlsMUFLNGpUOEVJRWp0bHhRMXQ3VzJ5bmJTQ1lCaldHamI2VGgvSTZta2R2bWNuTFY5K3F3VUp6VnZyUjhCL2ciLCJtYWMiOiIzODQxYzc3MDRiYjk1NTQ5YTY5ODI3YTQzNWFlZmYwYzFlM2ZmMjEwYTYwNTljYmE0YjcwMTE4YmFkNmNkNDg5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 May 2026 13:29:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 08 Mar 2026 23:19:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1165\r\ndate: Tue, 19 May 2026 13:29:08 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5362,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"5d5467913e6993e7ce475116c74587a9","sha1":"7a9aee7ad36f6eba9a213967b052cb807a02c7a2","sha256":"e69bdf0d68f559df15d9fbddb2b0346b78895aa6e06de6c87236b28d5e2be5ae","sha512":"025c4c8e04461f15b402c00fad86fcd56e71bcdf856471b9036a4a50bc5fc73fa8a57a45287fb5683df6932bf990b74b76c8f9044a6830c53b085bca0ea18a79","ssdeep":"96:+V15CEXdql+MeDpaX806FjAf8YwkKbZk5PueS/Fj93:SP3XdcTGp6804Af8YwkKbZk5Pu1l93","tlshash":"5ab113aca506e1c6163388803fa30755eb9b30431f110eacffa413545fbe0ac5ad9b9d","first_seen":"2023-05-11T19:38:54Z","last_seen":"2026-05-19T13:29:31.890457Z","times_seen":392,"resource_available":false,"data":null}},"time_used":1208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadextla.live/temp/custom/css/main.css","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"ip":{"addr":"104.219.248.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nadextla.live/","date":"2026-05-19T13:29:08.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadextla.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 24 Mar 2026 00:00:00 GMT","end":"Thu, 08 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:C5:3B:4E:1C:33:60:9A:6B:42:D5:3B:8D:DA:77:44:5C:78:12:FB","sha256":"2C:82:14:9D:AD:93:A9:5C:45:2F:58:2D:E4:FE:E1:5F:65:AD:7F:CC:F8:5B:B8:F0:73:FD:28:10:E6:24:27:56"}}},"request":{"raw":"GET /temp/custom/css/main.css HTTP/1.1\r\nHost: nadextla.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadextla.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im04eE1LT1hYT3AyQXRHWEowOTRwN2c9PSIsInZhbHVlIjoiRmlRQ3lEdzhSV3hYaGNSMHBZbzRwYXFCSXVBYVFjTHZaZDhrNTJOQ2c1MVc4Y2VSSXdheVQ1Z00zQXFKRlk5aGZ2bjdleGFCRHh6NkhhYUNhV2k5bkdhMVNRdFFWSUc0ZGtid1FKeDQ1QlZtZmVkTXBSTWdOdlBMZGExaFRYVG8iLCJtYWMiOiJhMWRkZmQ2ZjMxMDRhY2FkZTA0OThkODc5YmMyNDk5OGE1MzFhNzdmNTg5ZThjMjBlMWVjNzAwYzhkNGJlNTIxIiwidGFnIjoiIn0%3D; nadextla_session=eyJpdiI6IlFzMkh4QzFGbVdpR1QyVEhBNDMxMUE9PSIsInZhbHVlIjoiNVQzVkdDcWw4NWthMGEyZm9NUlRuSjhKbXJXOXdDR0IxTzl6WDVsek5tYW5yQ2dXWXAxQzMwTnhLQTlCYlVkTFlsMUFLNGpUOEVJRWp0bHhRMXQ3VzJ5bmJTQ1lCaldHamI2VGgvSTZta2R2bWNuTFY5K3F3VUp6VnZyUjhCL2ciLCJtYWMiOiIzODQxYzc3MDRiYjk1NTQ5YTY5ODI3YTQzNWFlZmYwYzFlM2ZmMjEwYTYwNTljYmE0YjcwMTE4YmFkNmNkNDg5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 May 2026 13:29:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 08 Mar 2026 23:19:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7274\r\ndate: Tue, 19 May 2026 13:29:08 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":39430,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"b39b120d982a43061d75aff36836cb66","sha1":"3cc164da9117c9aa3ff45f851b6cd730df19ec3f","sha256":"0b901f67aabcda491e6312f3b76e33088cc544e4c645805025c4b4fa9ba7893a","sha512":"048ea04696d476cca6ea3bcaabd9b038f39c28bbd3e491eea296ea532fb276ebe8783f62f2562e9f9c494df49842572ca0ac33e91a5361e4080782d780cb9fa9","ssdeep":"192:B/JTy7mDXgPQ4DFcDwDFcDWDFdDlXds3IQh7a2TAsDElyHSXmtGsd0+NUCcHNGXo:8KaYjDHjhUCNQ1jzp7PGX2fMd5Xedb","tlshash":"0803509cda1621037237dab867e20756fb6440a3cb02056cbbddb3518ff45b88662edd","first_seen":"2025-04-28T01:39:11.801543Z","last_seen":"2026-05-19T13:29:31.891597Z","times_seen":220,"resource_available":false,"data":null}},"time_used":4918,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4918,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadextla.live/temp/custom/js/bootstrap-select.js","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"ip":{"addr":"104.219.248.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nadextla.live/","date":"2026-05-19T13:29:08.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadextla.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 24 Mar 2026 00:00:00 GMT","end":"Thu, 08 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:C5:3B:4E:1C:33:60:9A:6B:42:D5:3B:8D:DA:77:44:5C:78:12:FB","sha256":"2C:82:14:9D:AD:93:A9:5C:45:2F:58:2D:E4:FE:E1:5F:65:AD:7F:CC:F8:5B:B8:F0:73:FD:28:10:E6:24:27:56"}}},"request":{"raw":"GET /temp/custom/js/bootstrap-select.js HTTP/1.1\r\nHost: nadextla.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadextla.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im04eE1LT1hYT3AyQXRHWEowOTRwN2c9PSIsInZhbHVlIjoiRmlRQ3lEdzhSV3hYaGNSMHBZbzRwYXFCSXVBYVFjTHZaZDhrNTJOQ2c1MVc4Y2VSSXdheVQ1Z00zQXFKRlk5aGZ2bjdleGFCRHh6NkhhYUNhV2k5bkdhMVNRdFFWSUc0ZGtid1FKeDQ1QlZtZmVkTXBSTWdOdlBMZGExaFRYVG8iLCJtYWMiOiJhMWRkZmQ2ZjMxMDRhY2FkZTA0OThkODc5YmMyNDk5OGE1MzFhNzdmNTg5ZThjMjBlMWVjNzAwYzhkNGJlNTIxIiwidGFnIjoiIn0%3D; nadextla_session=eyJpdiI6IlFzMkh4QzFGbVdpR1QyVEhBNDMxMUE9PSIsInZhbHVlIjoiNVQzVkdDcWw4NWthMGEyZm9NUlRuSjhKbXJXOXdDR0IxTzl6WDVsek5tYW5yQ2dXWXAxQzMwTnhLQTlCYlVkTFlsMUFLNGpUOEVJRWp0bHhRMXQ3VzJ5bmJTQ1lCaldHamI2VGgvSTZta2R2bWNuTFY5K3F3VUp6VnZyUjhCL2ciLCJtYWMiOiIzODQxYzc3MDRiYjk1NTQ5YTY5ODI3YTQzNWFlZmYwYzFlM2ZmMjEwYTYwNTljYmE0YjcwMTE4YmFkNmNkNDg5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 08 Mar 2026 23:19:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 24735\r\ndate: Tue, 19 May 2026 13:29:08 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":111455,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (301)","md5":"5b04d645561ef0310c7918f03ae43fc9","sha1":"9a6ae4d0aae724a7e032d8d505d9b8816477d739","sha256":"186e4c2c470e3c1c76997b7a4dfd0f618b38311582e0578db05ccada6fd43c6c","sha512":"1a5e1405749a94daa777e7f0c96bfea84d27c174228e8a6f546100325144e133efc430bbd847813d3e8c1223efc15fc927922c337ad61f6cff03106070c6e569","ssdeep":"1536:o68KYv2GWk/QIkzliZEkZe38kykPDpcLmLV2+DgwetQeMT2pY+0S9hNtmk09F3KQ:A7uKbQ0hNM8KmI","tlshash":"e3b3945925a6113582ab30ab4e9f5048b539811f9d06ed283cac93cc6fd4d38a1f7ff6","first_seen":"2023-03-07T16:17:07Z","last_seen":"2026-05-20T10:02:43.747372Z","times_seen":453,"resource_available":true,"data":null}},"time_used":5692,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5499,"receive":193,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadextla.live/temp/custom/css/bootstrap-select.css","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"ip":{"addr":"104.219.248.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nadextla.live/","date":"2026-05-19T13:29:08.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadextla.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 24 Mar 2026 00:00:00 GMT","end":"Thu, 08 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:C5:3B:4E:1C:33:60:9A:6B:42:D5:3B:8D:DA:77:44:5C:78:12:FB","sha256":"2C:82:14:9D:AD:93:A9:5C:45:2F:58:2D:E4:FE:E1:5F:65:AD:7F:CC:F8:5B:B8:F0:73:FD:28:10:E6:24:27:56"}}},"request":{"raw":"GET /temp/custom/css/bootstrap-select.css HTTP/1.1\r\nHost: nadextla.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadextla.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im04eE1LT1hYT3AyQXRHWEowOTRwN2c9PSIsInZhbHVlIjoiRmlRQ3lEdzhSV3hYaGNSMHBZbzRwYXFCSXVBYVFjTHZaZDhrNTJOQ2c1MVc4Y2VSSXdheVQ1Z00zQXFKRlk5aGZ2bjdleGFCRHh6NkhhYUNhV2k5bkdhMVNRdFFWSUc0ZGtid1FKeDQ1QlZtZmVkTXBSTWdOdlBMZGExaFRYVG8iLCJtYWMiOiJhMWRkZmQ2ZjMxMDRhY2FkZTA0OThkODc5YmMyNDk5OGE1MzFhNzdmNTg5ZThjMjBlMWVjNzAwYzhkNGJlNTIxIiwidGFnIjoiIn0%3D; nadextla_session=eyJpdiI6IlFzMkh4QzFGbVdpR1QyVEhBNDMxMUE9PSIsInZhbHVlIjoiNVQzVkdDcWw4NWthMGEyZm9NUlRuSjhKbXJXOXdDR0IxTzl6WDVsek5tYW5yQ2dXWXAxQzMwTnhLQTlCYlVkTFlsMUFLNGpUOEVJRWp0bHhRMXQ3VzJ5bmJTQ1lCaldHamI2VGgvSTZta2R2bWNuTFY5K3F3VUp6VnZyUjhCL2ciLCJtYWMiOiIzODQxYzc3MDRiYjk1NTQ5YTY5ODI3YTQzNWFlZmYwYzFlM2ZmMjEwYTYwNTljYmE0YjcwMTE4YmFkNmNkNDg5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 May 2026 13:29:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 08 Mar 2026 23:19:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2208\r\ndate: Tue, 19 May 2026 13:29:08 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":12860,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF, LF line terminators","md5":"3c13518e758f95b39f33ce9249aef2ea","sha1":"edbb8b3ed265e6a52a60d58aa45309f1716fb056","sha256":"032c55f8092688bd96e242ab5c1b7c63d8c04bd502ef4bfadb277e7ac57ddf47","sha512":"6cad1c0d0875376ef0cc6f9cb0a1bc161a535ba54301a9ef48b9005974d729c924496b81ae36d46e3b3beb96e75d7b7244a2bf66c2323493c5db70a728787561","ssdeep":"192:NAEV3IkN9UXliukFaFfF70Vi2Ar9kyWSDCJiUzuDcL5:kliu9F70Vi2ArLlDCJn","tlshash":"1242119db3d202704099806a398a7e6677dee451324eccb973dfe25c2f80543e9377a6","first_seen":"2023-05-22T09:42:17Z","last_seen":"2026-05-19T13:29:31.894224Z","times_seen":405,"resource_available":false,"data":null}},"time_used":5693,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5693,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadextla.live/temp/custom/slick/slick.js","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"ip":{"addr":"104.219.248.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nadextla.live/","date":"2026-05-19T13:29:08.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadextla.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 24 Mar 2026 00:00:00 GMT","end":"Thu, 08 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:C5:3B:4E:1C:33:60:9A:6B:42:D5:3B:8D:DA:77:44:5C:78:12:FB","sha256":"2C:82:14:9D:AD:93:A9:5C:45:2F:58:2D:E4:FE:E1:5F:65:AD:7F:CC:F8:5B:B8:F0:73:FD:28:10:E6:24:27:56"}}},"request":{"raw":"GET /temp/custom/slick/slick.js HTTP/1.1\r\nHost: nadextla.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadextla.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im04eE1LT1hYT3AyQXRHWEowOTRwN2c9PSIsInZhbHVlIjoiRmlRQ3lEdzhSV3hYaGNSMHBZbzRwYXFCSXVBYVFjTHZaZDhrNTJOQ2c1MVc4Y2VSSXdheVQ1Z00zQXFKRlk5aGZ2bjdleGFCRHh6NkhhYUNhV2k5bkdhMVNRdFFWSUc0ZGtid1FKeDQ1QlZtZmVkTXBSTWdOdlBMZGExaFRYVG8iLCJtYWMiOiJhMWRkZmQ2ZjMxMDRhY2FkZTA0OThkODc5YmMyNDk5OGE1MzFhNzdmNTg5ZThjMjBlMWVjNzAwYzhkNGJlNTIxIiwidGFnIjoiIn0%3D; nadextla_session=eyJpdiI6IlFzMkh4QzFGbVdpR1QyVEhBNDMxMUE9PSIsInZhbHVlIjoiNVQzVkdDcWw4NWthMGEyZm9NUlRuSjhKbXJXOXdDR0IxTzl6WDVsek5tYW5yQ2dXWXAxQzMwTnhLQTlCYlVkTFlsMUFLNGpUOEVJRWp0bHhRMXQ3VzJ5bmJTQ1lCaldHamI2VGgvSTZta2R2bWNuTFY5K3F3VUp6VnZyUjhCL2ciLCJtYWMiOiIzODQxYzc3MDRiYjk1NTQ5YTY5ODI3YTQzNWFlZmYwYzFlM2ZmMjEwYTYwNTljYmE0YjcwMTE4YmFkNmNkNDg5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 08 Mar 2026 23:19:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14215\r\ndate: Tue, 19 May 2026 13:29:08 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":87157,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"b2073e9d729aebe024baeb056a38b19b","sha1":"953aca90a26721bfa8a7037e2565efe4b7f4561b","sha256":"f5118c2117300dcd406002417f201608dc046ee26b0680d4c1c93ecd01d7cc2d","sha512":"ea536849460febedcc830e2ab0e72e5e5817763b2dd3bb13740e531f0a51460c33495f27ca621936d982ef00a64bd77d7c19563344521b67324295cc21d1da11","ssdeep":"1536:TOBYDpH7DRTtwn7158/HVqg8d/ZMuY2cpQX6iO:TOBYDpbDRTtwn7158/HVqg8dxMuY+O","tlshash":"3a83128f5552131688b333b9ae56c12cf7bb91374101969dbddc4289afb04148beafec","first_seen":"2023-03-07T12:10:25Z","last_seen":"2026-05-20T19:50:54.058478Z","times_seen":544,"resource_available":true,"data":null}},"time_used":12318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12317,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.tidio.co/ggsggsgggg","fqdn":"code.tidio.co","domain":"tidio.co","tld":"co"},"ip":{"addr":"104.26.0.115","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nadextla.live/","date":"2026-05-19T13:29:08.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tidio.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 18:57:07 GMT","end":"Wed, 22 Jul 2026 19:57:03 GMT"},"fingerprint":{"sha1":"EF:26:C4:2A:CB:E2:83:16:B4:53:B5:CF:6E:85:7C:AA:DA:A2:26:0F","sha256":"70:4B:53:AD:C6:32:73:F5:C8:5B:91:5F:7F:3E:C6:BF:1A:9E:61:B3:B8:A8:A3:4C:A6:BA:37:F3:8D:F4:93:89"}}},"request":{"raw":"GET /ggsggsgggg HTTP/1.1\r\nHost: code.tidio.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadextla.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Tue, 19 May 2026 13:29:08 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 9\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JKgSjvOoH0oVgOsscAm6dUKyG7Slkv0WDTK7N1ezQj%2Fhfb1b4fqQyxiWD6MojUwRdX4h7f2qpvS%2FcHdZsOUtkcFh9Fy%2FnX19u%2BFFYQd3lzskPDx52moivVELjurYNVs%3D\"}]}\r\ncf-ray: 9fe372e4af2ba0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T23:50:58.05423Z","times_seen":15504075,"resource_available":true,"data":null}},"time_used":479,"timings":{"blocked":50,"dns":0,"connect":33,"send":0,"wait":346,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"use.fontawesome.com/releases/v5.7.1/css/all.css","fqdn":"use.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.27.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nadextla.live/","date":"2026-05-19T13:29:08.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"use.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 23 Apr 2026 04:30:42 GMT","end":"Wed, 22 Jul 2026 05:30:36 GMT"},"fingerprint":{"sha1":"13:A8:C3:10:C1:19:3F:93:6B:0E:8F:1F:8A:5E:F0:D5:AA:B3:0E:B5","sha256":"9F:52:1F:FC:F1:4E:62:ED:CA:52:A1:90:90:18:0D:F9:2E:FD:64:67:3F:07:CC:25:3A:A1:C2:02:E0:AF:E4:FB"}}},"request":{"raw":"GET /releases/v5.7.1/css/all.css HTTP/1.1\r\nHost: use.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nadextla.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadextla.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 May 2026 13:29:08 GMT\r\ncontent-type: text/css\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\nage: 185878\r\nlast-modified: Fri, 22 Sep 2023 01:45:49 GMT\r\nvary: Origin\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KaTLa4btWsT9C3cccy84DaIUu5ubfnw3IcFXF2uBvfeyL2rScliRh34yCnCYUIcWPCMHbuETRpmjm5q7YcprQwsG4YjJSO7%2FIrPDpZf3gDzJEeJqsCPT7odOqn23Njdq0tUVWNoO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"7b1d7f457d056ace7b230b587b9f3753\"\r\ncontent-encoding: br\r\ncf-ray: 9fe372e6af77b4fd-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54456,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (54456), with no line terminators","md5":"7b1d7f457d056ace7b230b587b9f3753","sha1":"4e0b45eedbe0c405f1faff0d5236a9ee0ff2065b","sha256":"9c099acc093abd2df85eaa34052ad36fe69b6ed16582c14aecd2928baa3b63bf","sha512":"dccd340ffae7f27fb66555c13bd1e26f418a369926f0c49453f7b654db610f2058c4a586f817ed35861cb848d7972ad23badfbb627733015df13bb109b420d52","ssdeep":"768:6V31Uz1RPq4NvvU63HJYkQCZ/WMQyjJKp7CzsGnQzU:6czrC4NnzHSBCkgu7cs1w","tlshash":"e8330bb8e54c41d9a732c04fbf82b2bc61b6f73ce5910d95f00e691c2ad26a811c9f79","first_seen":"2023-04-05T14:01:20Z","last_seen":"2026-05-20T19:47:06.554084Z","times_seen":14217,"resource_available":false,"data":null}},"time_used":881,"timings":{"blocked":409,"dns":1,"connect":34,"send":0,"wait":42,"receive":0,"ssl":393},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadextla.live/temp/custom/js/jquery.form.js","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"ip":{"addr":"104.219.248.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nadextla.live/","date":"2026-05-19T13:29:08.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadextla.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 24 Mar 2026 00:00:00 GMT","end":"Thu, 08 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:C5:3B:4E:1C:33:60:9A:6B:42:D5:3B:8D:DA:77:44:5C:78:12:FB","sha256":"2C:82:14:9D:AD:93:A9:5C:45:2F:58:2D:E4:FE:E1:5F:65:AD:7F:CC:F8:5B:B8:F0:73:FD:28:10:E6:24:27:56"}}},"request":{"raw":"GET /temp/custom/js/jquery.form.js HTTP/1.1\r\nHost: nadextla.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadextla.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im04eE1LT1hYT3AyQXRHWEowOTRwN2c9PSIsInZhbHVlIjoiRmlRQ3lEdzhSV3hYaGNSMHBZbzRwYXFCSXVBYVFjTHZaZDhrNTJOQ2c1MVc4Y2VSSXdheVQ1Z00zQXFKRlk5aGZ2bjdleGFCRHh6NkhhYUNhV2k5bkdhMVNRdFFWSUc0ZGtid1FKeDQ1QlZtZmVkTXBSTWdOdlBMZGExaFRYVG8iLCJtYWMiOiJhMWRkZmQ2ZjMxMDRhY2FkZTA0OThkODc5YmMyNDk5OGE1MzFhNzdmNTg5ZThjMjBlMWVjNzAwYzhkNGJlNTIxIiwidGFnIjoiIn0%3D; nadextla_session=eyJpdiI6IlFzMkh4QzFGbVdpR1QyVEhBNDMxMUE9PSIsInZhbHVlIjoiNVQzVkdDcWw4NWthMGEyZm9NUlRuSjhKbXJXOXdDR0IxTzl6WDVsek5tYW5yQ2dXWXAxQzMwTnhLQTlCYlVkTFlsMUFLNGpUOEVJRWp0bHhRMXQ3VzJ5bmJTQ1lCaldHamI2VGgvSTZta2R2bWNuTFY5K3F3VUp6VnZyUjhCL2ciLCJtYWMiOiIzODQxYzc3MDRiYjk1NTQ5YTY5ODI3YTQzNWFlZmYwYzFlM2ZmMjEwYTYwNTljYmE0YjcwMTE4YmFkNmNkNDg5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 08 Mar 2026 23:19:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 11763\r\ndate: Tue, 19 May 2026 13:29:08 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":43811,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"ab627b3d962b9d7ba28d2c9c4f507006","sha1":"5306bf157b6126d0b43982fb8b3fae7c560b6a89","sha256":"23fc25133ed072cdf7dae575213067b1da3c6843b2a0e489c8b7fc984c60ce6b","sha512":"f6955b951fc46a60880e2230aec83d0f423b9560b7c4eb5f715f966df544dca7cffd1db57834766efc0968c8273f005ea5f4f23d10884f8c89ffb7bc4e7f638d","ssdeep":"768:Dh7+wDM1YuW+WkeBzYU6w+fAV66lPZ0Pjma3ij6lOTwIDuliMIzMSV9MwMGM+zYU:9iwDM1YuW+WkeBEfcPZ079SjCOoliMIB","tlshash":"3d13a24a69eb12a2192330b94bef90497639d0231108dda17d4c53d0afd4db4a6fafe8","first_seen":"2023-03-11T21:18:39Z","last_seen":"2026-05-19T19:11:53.77162Z","times_seen":561,"resource_available":true,"data":null}},"time_used":3763,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3762,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadextla.live/temp/custom/js/imagesloaded.pkgd.min.js","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"ip":{"addr":"104.219.248.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nadextla.live/","date":"2026-05-19T13:29:08.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadextla.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 24 Mar 2026 00:00:00 GMT","end":"Thu, 08 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:C5:3B:4E:1C:33:60:9A:6B:42:D5:3B:8D:DA:77:44:5C:78:12:FB","sha256":"2C:82:14:9D:AD:93:A9:5C:45:2F:58:2D:E4:FE:E1:5F:65:AD:7F:CC:F8:5B:B8:F0:73:FD:28:10:E6:24:27:56"}}},"request":{"raw":"GET /temp/custom/js/imagesloaded.pkgd.min.js HTTP/1.1\r\nHost: nadextla.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadextla.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im04eE1LT1hYT3AyQXRHWEowOTRwN2c9PSIsInZhbHVlIjoiRmlRQ3lEdzhSV3hYaGNSMHBZbzRwYXFCSXVBYVFjTHZaZDhrNTJOQ2c1MVc4Y2VSSXdheVQ1Z00zQXFKRlk5aGZ2bjdleGFCRHh6NkhhYUNhV2k5bkdhMVNRdFFWSUc0ZGtid1FKeDQ1QlZtZmVkTXBSTWdOdlBMZGExaFRYVG8iLCJtYWMiOiJhMWRkZmQ2ZjMxMDRhY2FkZTA0OThkODc5YmMyNDk5OGE1MzFhNzdmNTg5ZThjMjBlMWVjNzAwYzhkNGJlNTIxIiwidGFnIjoiIn0%3D; nadextla_session=eyJpdiI6IlFzMkh4QzFGbVdpR1QyVEhBNDMxMUE9PSIsInZhbHVlIjoiNVQzVkdDcWw4NWthMGEyZm9NUlRuSjhKbXJXOXdDR0IxTzl6WDVsek5tYW5yQ2dXWXAxQzMwTnhLQTlCYlVkTFlsMUFLNGpUOEVJRWp0bHhRMXQ3VzJ5bmJTQ1lCaldHamI2VGgvSTZta2R2bWNuTFY5K3F3VUp6VnZyUjhCL2ciLCJtYWMiOiIzODQxYzc3MDRiYjk1NTQ5YTY5ODI3YTQzNWFlZmYwYzFlM2ZmMjEwYTYwNTljYmE0YjcwMTE4YmFkNmNkNDg5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 08 Mar 2026 23:19:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1712\r\ndate: Tue, 19 May 2026 13:29:08 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5594,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5477)","md5":"e2c1a80b99251b7b94726b41312fb160","sha1":"6d3e11174e22668e69df236e5c4542168f7cbfec","sha256":"96abf166b3cbb5f7df525d86fdeeeccea4af3c120b19bc26b0613530a94e8b44","sha512":"4b93d9f46c4964ed7ab53f6bdd6269fd269f9f7d5ebbcb96af382531a8434f876c9a0a96a27458f60ae4de3fb7b5fb8fafd58936c7e8a0e47b1a2ec72f95b68f","ssdeep":"96:bwRxr6JAXgWWwrrSTrmM4KvlGC89QPjRxq2uVBXeHRGKrc4oPUGPgNhd+qLoBV7J:bwjrycrr3rKvE9IjRxjGjgNhdTLo3re+","tlshash":"19b122cd77a27535229af0b3a21f020f72b6406e6918815d7959ecf65cfcd192633bb0","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-05-20T20:16:01.429093Z","times_seen":20107,"resource_available":true,"data":null}},"time_used":4919,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4919,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.yandex.net/website-widget/v1/widget.js?widgetId=ytWidget\u0026pageLang=tr\u0026widgetTheme=dark\u0026autoMode=true","fqdn":"translate.yandex.net","domain":"yandex.net","tld":"net"},"ip":{"addr":"213.180.204.194","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nadextla.live/","date":"2026-05-19T13:29:08.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"translate.yandex.net","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 11 Apr 2026 21:23:26 GMT","end":"Tue, 15 Sep 2026 20:59:59 GMT"},"fingerprint":{"sha1":"87:3A:4E:3C:AB:F3:8C:5D:84:59:2F:84:92:40:7F:98:5D:1E:5D:6B","sha256":"5B:BD:7F:E4:2A:2A:A5:13:04:EC:78:2E:67:68:D7:4B:22:7A:0F:7C:ED:C4:E8:B5:68:2E:05:D0:64:40:3B:9F"}}},"request":{"raw":"GET /website-widget/v1/widget.js?widgetId=ytWidget\u0026pageLang=tr\u0026widgetTheme=dark\u0026autoMode=true HTTP/1.1\r\nHost: translate.yandex.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadextla.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 429 Too Many Requests\r\nset-cookie: _yasc=WovbYFmL3WrBhToD45H3+kSWEXqrkTLFsnihva2TQZxCpB5CYtBWF5wxxzl6y5HDay8=.MTc3OTE5NzM0ODc2MQ==; domain=.yandex.net; path=/; expires=Fri, 16 May 2036 13:29:08 GMT; secure\nbh=YKTLsdAGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Expires=Wed, 23 Jun 2027 13:29:08 GMT; SameSite=None; Secure\r\naccept-ch: Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Sec-CH-UA-Bitness\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"429","status_text":"Too Many Requests","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/x-javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T23:50:58.05423Z","times_seen":15504075,"resource_available":true,"data":null}},"time_used":573,"timings":{"blocked":227,"dns":0,"connect":83,"send":0,"wait":91,"receive":0,"ssl":169},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Archivo:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026amp;display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nadextla.live/","date":"2026-05-19T13:29:13.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"25:C3:78:A0:E1:97:BA:8A:CE:43:FA:9C:BF:89:EF:DD:A3:CD:9C:40","sha256":"C1:18:7F:C1:92:8E:D0:83:CA:E8:62:DB:BE:FE:89:B2:84:13:70:FA:0E:40:65:D2:B6:8C:09:37:73:46:4D:4B"}}},"request":{"raw":"GET /css2?family=Archivo:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026amp;display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadextla.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 19 May 2026 13:29:13 GMT\r\ndate: Tue, 19 May 2026 13:29:13 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23175,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"da021909beab0ff8237ca3132d715150","sha1":"cb4dfe7ecbaffe34c9c0f7264a20376fea1c3c02","sha256":"c598de7a97f99eca9a992b31e0ae65ebb1c1744981af3d577c965041fcff3594","sha512":"2ce8f240884297d891fb4e24220c80e23067b7d9185aa514deeaa9b04269f061f1a0cf806096ab311b78ad83467682e96ddcf9d394fb0e9746c4bb7ce702ace7","ssdeep":"384:cO3B3u3UOCZVOrkOOc/3O9K4O+VZO3wyOYbbOJW8v9AeUtGv4RK0:ddeU9Al","tlshash":"89a2bc66142fa580aa472ce337df3d31df4fb194b450887a6ffd2898ac56c22636630c","first_seen":"2025-09-17T09:11:46.441038Z","last_seen":"2026-05-20T02:18:44.407818Z","times_seen":439,"resource_available":false,"data":null}},"time_used":872,"timings":{"blocked":411,"dns":1,"connect":291,"send":0,"wait":50,"receive":0,"ssl":117},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadextla.live/temp/custom/slick/slick.css","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"ip":{"addr":"104.219.248.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nadextla.live/","date":"2026-05-19T13:29:08.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadextla.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 24 Mar 2026 00:00:00 GMT","end":"Thu, 08 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:C5:3B:4E:1C:33:60:9A:6B:42:D5:3B:8D:DA:77:44:5C:78:12:FB","sha256":"2C:82:14:9D:AD:93:A9:5C:45:2F:58:2D:E4:FE:E1:5F:65:AD:7F:CC:F8:5B:B8:F0:73:FD:28:10:E6:24:27:56"}}},"request":{"raw":"GET /temp/custom/slick/slick.css HTTP/1.1\r\nHost: nadextla.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadextla.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im04eE1LT1hYT3AyQXRHWEowOTRwN2c9PSIsInZhbHVlIjoiRmlRQ3lEdzhSV3hYaGNSMHBZbzRwYXFCSXVBYVFjTHZaZDhrNTJOQ2c1MVc4Y2VSSXdheVQ1Z00zQXFKRlk5aGZ2bjdleGFCRHh6NkhhYUNhV2k5bkdhMVNRdFFWSUc0ZGtid1FKeDQ1QlZtZmVkTXBSTWdOdlBMZGExaFRYVG8iLCJtYWMiOiJhMWRkZmQ2ZjMxMDRhY2FkZTA0OThkODc5YmMyNDk5OGE1MzFhNzdmNTg5ZThjMjBlMWVjNzAwYzhkNGJlNTIxIiwidGFnIjoiIn0%3D; nadextla_session=eyJpdiI6IlFzMkh4QzFGbVdpR1QyVEhBNDMxMUE9PSIsInZhbHVlIjoiNVQzVkdDcWw4NWthMGEyZm9NUlRuSjhKbXJXOXdDR0IxTzl6WDVsek5tYW5yQ2dXWXAxQzMwTnhLQTlCYlVkTFlsMUFLNGpUOEVJRWp0bHhRMXQ3VzJ5bmJTQ1lCaldHamI2VGgvSTZta2R2bWNuTFY5K3F3VUp6VnZyUjhCL2ciLCJtYWMiOiIzODQxYzc3MDRiYjk1NTQ5YTY5ODI3YTQzNWFlZmYwYzFlM2ZmMjEwYTYwNTljYmE0YjcwMTE4YmFkNmNkNDg5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 May 2026 13:29:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 08 Mar 2026 23:19:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 478\r\ndate: Tue, 19 May 2026 13:29:08 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1830,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"68a281f599d6a4fa5e8cab54bc5f59fe","sha1":"515cb38cbd76ebee91d05f7544758f4eceaac07e","sha256":"1b786863757c336ef237105e2560e02e2e54b90781ecafb63732662caffe4cbb","sha512":"e001ba8f09719604413c08ad5aa641cc9a5fe286c2d049fa0e86e12972f3d0a72e2cbbb9322734766aaad2fd892ba98c8cc5c91a290da36dd9f36995fe861857","ssdeep":"","tlshash":"2e3119dc0152c5d68b3384444fd38649eeefa0930c241698ba8d47098fbfae8a9c5e77","first_seen":"2023-04-13T11:05:16Z","last_seen":"2026-05-19T13:29:31.902837Z","times_seen":636,"resource_available":false,"data":null}},"time_used":970,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":970,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadextla.live/temp/custom/images/menu.svg","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"ip":{"addr":"104.219.248.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nadextla.live/","date":"2026-05-19T13:29:08.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadextla.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 24 Mar 2026 00:00:00 GMT","end":"Thu, 08 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:C5:3B:4E:1C:33:60:9A:6B:42:D5:3B:8D:DA:77:44:5C:78:12:FB","sha256":"2C:82:14:9D:AD:93:A9:5C:45:2F:58:2D:E4:FE:E1:5F:65:AD:7F:CC:F8:5B:B8:F0:73:FD:28:10:E6:24:27:56"}}},"request":{"raw":"GET /temp/custom/images/menu.svg HTTP/1.1\r\nHost: nadextla.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadextla.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im04eE1LT1hYT3AyQXRHWEowOTRwN2c9PSIsInZhbHVlIjoiRmlRQ3lEdzhSV3hYaGNSMHBZbzRwYXFCSXVBYVFjTHZaZDhrNTJOQ2c1MVc4Y2VSSXdheVQ1Z00zQXFKRlk5aGZ2bjdleGFCRHh6NkhhYUNhV2k5bkdhMVNRdFFWSUc0ZGtid1FKeDQ1QlZtZmVkTXBSTWdOdlBMZGExaFRYVG8iLCJtYWMiOiJhMWRkZmQ2ZjMxMDRhY2FkZTA0OThkODc5YmMyNDk5OGE1MzFhNzdmNTg5ZThjMjBlMWVjNzAwYzhkNGJlNTIxIiwidGFnIjoiIn0%3D; nadextla_session=eyJpdiI6IlFzMkh4QzFGbVdpR1QyVEhBNDMxMUE9PSIsInZhbHVlIjoiNVQzVkdDcWw4NWthMGEyZm9NUlRuSjhKbXJXOXdDR0IxTzl6WDVsek5tYW5yQ2dXWXAxQzMwTnhLQTlCYlVkTFlsMUFLNGpUOEVJRWp0bHhRMXQ3VzJ5bmJTQ1lCaldHamI2VGgvSTZta2R2bWNuTFY5K3F3VUp6VnZyUjhCL2ciLCJtYWMiOiIzODQxYzc3MDRiYjk1NTQ5YTY5ODI3YTQzNWFlZmYwYzFlM2ZmMjEwYTYwNTljYmE0YjcwMTE4YmFkNmNkNDg5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 May 2026 13:29:08 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Sun, 08 Mar 2026 23:19:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 481\r\ndate: Tue, 19 May 2026 13:29:08 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":982,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"464397bb0033a309123c20bdc1306166","sha1":"1dd2aff9a642f3c01942fafa22fa27483762f223","sha256":"dc1db702ebdb8a1218082fd20e55ec5a0af59e92393f2a7ab7f9bacc790499a2","sha512":"4009186075ca4204205219bdd31c92c89ae212af6a4c90688687333e02bba751ac4a6eecb54d363c42e7821d13e25e5100df3add3e8f9d1b05f5512e9c477f90","ssdeep":"","tlshash":"a311214f4752dcbe243643a877f425c63bf08c57c1b149e09a273c37f42d5608e99168","first_seen":"2025-04-28T01:39:11.795951Z","last_seen":"2026-05-19T13:29:31.90387Z","times_seen":370,"resource_available":false,"data":null}},"time_used":6659,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6659,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadextla.live/temp/custom/images/about.jpg","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"ip":{"addr":"104.219.248.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nadextla.live/","date":"2026-05-19T13:29:08.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadextla.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 24 Mar 2026 00:00:00 GMT","end":"Thu, 08 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:C5:3B:4E:1C:33:60:9A:6B:42:D5:3B:8D:DA:77:44:5C:78:12:FB","sha256":"2C:82:14:9D:AD:93:A9:5C:45:2F:58:2D:E4:FE:E1:5F:65:AD:7F:CC:F8:5B:B8:F0:73:FD:28:10:E6:24:27:56"}}},"request":{"raw":"GET /temp/custom/images/about.jpg HTTP/1.1\r\nHost: nadextla.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadextla.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im04eE1LT1hYT3AyQXRHWEowOTRwN2c9PSIsInZhbHVlIjoiRmlRQ3lEdzhSV3hYaGNSMHBZbzRwYXFCSXVBYVFjTHZaZDhrNTJOQ2c1MVc4Y2VSSXdheVQ1Z00zQXFKRlk5aGZ2bjdleGFCRHh6NkhhYUNhV2k5bkdhMVNRdFFWSUc0ZGtid1FKeDQ1QlZtZmVkTXBSTWdOdlBMZGExaFRYVG8iLCJtYWMiOiJhMWRkZmQ2ZjMxMDRhY2FkZTA0OThkODc5YmMyNDk5OGE1MzFhNzdmNTg5ZThjMjBlMWVjNzAwYzhkNGJlNTIxIiwidGFnIjoiIn0%3D; nadextla_session=eyJpdiI6IlFzMkh4QzFGbVdpR1QyVEhBNDMxMUE9PSIsInZhbHVlIjoiNVQzVkdDcWw4NWthMGEyZm9NUlRuSjhKbXJXOXdDR0IxTzl6WDVsek5tYW5yQ2dXWXAxQzMwTnhLQTlCYlVkTFlsMUFLNGpUOEVJRWp0bHhRMXQ3VzJ5bmJTQ1lCaldHamI2VGgvSTZta2R2bWNuTFY5K3F3VUp6VnZyUjhCL2ciLCJtYWMiOiIzODQxYzc3MDRiYjk1NTQ5YTY5ODI3YTQzNWFlZmYwYzFlM2ZmMjEwYTYwNTljYmE0YjcwMTE4YmFkNmNkNDg5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 May 2026 13:29:08 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 08 Mar 2026 23:19:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 43712\r\ndate: Tue, 19 May 2026 13:29:08 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":43712,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 82\", baseline, precision 8, 570x590, components 3","md5":"6662d34c4f26f1f26586d8b0718889cc","sha1":"1ca95815bd8c654a8365e6139c7bfc3c7e0af298","sha256":"48fb855c939d83924f83ac5349c8ef9d349ed88299720755a5c4870c5e6374bd","sha512":"d9996ba23333a2b4452837d7875cb6df0203d263d1d44c16afca1ea126d398cdd1b3d3c37ccc25e402bb3022359d0669ecd0adde0fcf379d4ed0d61acb260f3b","ssdeep":"768:TmNXFtG2SzAhaf7oHK1sNolxl6K7CMV55gRWDwyCe+dPLiHnGYRhCeN1:TU1tG2SzAWkKXHl6K7LV0jH0n3RB","tlshash":"2e13f10085136a734b169cf6a32bc469d44affd693b092ce9b30c0692484fc1db976f7","first_seen":"2024-08-19T16:43:15.382088Z","last_seen":"2026-05-19T13:29:31.904844Z","times_seen":356,"resource_available":false,"data":null}},"time_used":13619,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6658,"receive":6961,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.coingecko.com/coingecko-coin-price-marquee-widget.js","fqdn":"widgets.coingecko.com","domain":"coingecko.com","tld":"com"},"ip":{"addr":"104.18.4.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nadextla.live/","date":"2026-05-19T13:29:08.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"coingecko.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Apr 2026 14:58:03 GMT","end":"Sun, 26 Jul 2026 14:58:02 GMT"},"fingerprint":{"sha1":"28:01:15:B1:F6:14:ED:7E:5A:C4:36:40:D4:51:0A:F7:BD:16:E9:31","sha256":"4D:F0:56:5E:65:97:FB:02:03:94:69:9B:31:B0:A5:F4:1D:35:D8:8D:41:A5:6A:9B:C8:E7:5D:A3:87:81:E0:95"}}},"request":{"raw":"GET /coingecko-coin-price-marquee-widget.js HTTP/1.1\r\nHost: widgets.coingecko.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadextla.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 19 May 2026 13:29:08 GMT\r\ncontent-type: application/javascript\r\nx-amz-id-2: x78/JLvR0bZ8v385JLO+OmwFDvOLrbVxif7AM9NbenNsuLllxm0Di+XJXChU5Chj5hfjJVIy3sw=\r\nx-amz-request-id: TNSJJZSVD7XM5KVB\r\nx-amz-replication-status: FAILED\r\nlast-modified: Mon, 07 Apr 2025 09:46:41 GMT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nx-amz-storage-class: INTELLIGENT_TIERING\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 8IU8gJZQXRiGC6A_MmJu74Yaw9wjwSfp\r\nvary: accept-encoding\r\nserver: cloudflare\r\nage: 112424\r\nexpires: Wed, 20 May 2026 13:29:08 GMT\r\ncache-control: public, max-age=86400\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\netag: W/\"73cffa172df581e1417b3380bf189952\"\r\ncontent-encoding: br\r\ncf-ray: 9fe372e49d625697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":230964,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (36129)","md5":"73cffa172df581e1417b3380bf189952","sha1":"c14dc8dfcedda14dfb6202ae9e0141422ea39bd4","sha256":"789cebe4be3c4e1098f04b45f09e113fbb80d7dea01b9c8a5b1b9a0a1af14b44","sha512":"294775493517fff0e586d24ae8bd482c679ff15b8a40519285040ca4eef3f508b967d5b84b2c41021e731da5c08c83093bf171b0abd7d9b7de88a32ad9f5e97e","ssdeep":"3072:/uPfvYNJshGWDSBttCWINmVZrnPodP5rUzpI4Oz:XYBctCo254Oz","tlshash":"e234198eb6c0f19947b693e9605f394ba77d28fc68884380e972f4e5587e05c6132f6c","first_seen":"2025-04-07T11:07:41.7631Z","last_seen":"2026-05-20T07:03:25.213933Z","times_seen":699,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":52,"dns":0,"connect":33,"send":0,"wait":61,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nadextla.live/","date":"2026-05-19T13:29:13.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:36:34 GMT","end":"Mon, 13 Jul 2026 08:36:33 GMT"},"fingerprint":{"sha1":"99:99:69:B2:FC:B4:4F:EA:18:FB:04:4C:0F:8D:3E:40:61:B5:31:00","sha256":"55:6F:9F:9F:5C:FF:31:03:79:C7:88:2B:89:0C:1A:2F:DE:0B:7B:1A:91:6E:BD:C8:7D:60:EF:5A:D9:C7:51:26"}}},"request":{"raw":"GET /s/archivo/v25/k3kPo8UDI-1M0wlSV9XAw6lQkqWY8Q82sLydOxI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nadextla.live\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 34928\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 16 May 2026 15:04:03 GMT\r\nexpires: Sun, 16 May 2027 15:04:03 GMT\r\ncache-control: public, max-age=31536000\r\nage: 253511\r\nlast-modified: Mon, 08 Sep 2025 17:56:47 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":34928,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 34928, version 1.0","md5":"cd56e2ec63d7a63df092f824f981253c","sha1":"65449f1605378d8a5661bb33558d6bc69ca77a17","sha256":"8f704806dbedeaaeca334b11ec348bc3ac3a439d6431544b3afb54f534ee4967","sha512":"d40e3b18973049d9b38b5e9c83221163e103c57cc99392d7629a29349bdfa438a2e91977a91d82f1a4bd19710a36370e1810fe98fab33cfd527162e341fb53e2","ssdeep":"768:7JuqbWaxbCU2kKMWdbqzVg9xn0krInmHUZCUIRxfScXQw3gxwHpbz:VuaHbekKMY+VwRrInm0ALD3g4z","tlshash":"70f2f1394a4d0890e24ac6d61d92373c27159e3d2a12251616a4f6afc3c9ecc76e2f7b","first_seen":"2025-05-30T01:40:34.848528Z","last_seen":"2026-05-21T00:23:03.816424Z","times_seen":7003,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":165,"dns":3,"connect":41,"send":0,"wait":41,"receive":81,"ssl":117},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadextla.live/temp/custom/flaticon/flaticon.css","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"ip":{"addr":"104.219.248.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nadextla.live/","date":"2026-05-19T13:29:08.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadextla.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 24 Mar 2026 00:00:00 GMT","end":"Thu, 08 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:C5:3B:4E:1C:33:60:9A:6B:42:D5:3B:8D:DA:77:44:5C:78:12:FB","sha256":"2C:82:14:9D:AD:93:A9:5C:45:2F:58:2D:E4:FE:E1:5F:65:AD:7F:CC:F8:5B:B8:F0:73:FD:28:10:E6:24:27:56"}}},"request":{"raw":"GET /temp/custom/flaticon/flaticon.css HTTP/1.1\r\nHost: nadextla.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadextla.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im04eE1LT1hYT3AyQXRHWEowOTRwN2c9PSIsInZhbHVlIjoiRmlRQ3lEdzhSV3hYaGNSMHBZbzRwYXFCSXVBYVFjTHZaZDhrNTJOQ2c1MVc4Y2VSSXdheVQ1Z00zQXFKRlk5aGZ2bjdleGFCRHh6NkhhYUNhV2k5bkdhMVNRdFFWSUc0ZGtid1FKeDQ1QlZtZmVkTXBSTWdOdlBMZGExaFRYVG8iLCJtYWMiOiJhMWRkZmQ2ZjMxMDRhY2FkZTA0OThkODc5YmMyNDk5OGE1MzFhNzdmNTg5ZThjMjBlMWVjNzAwYzhkNGJlNTIxIiwidGFnIjoiIn0%3D; nadextla_session=eyJpdiI6IlFzMkh4QzFGbVdpR1QyVEhBNDMxMUE9PSIsInZhbHVlIjoiNVQzVkdDcWw4NWthMGEyZm9NUlRuSjhKbXJXOXdDR0IxTzl6WDVsek5tYW5yQ2dXWXAxQzMwTnhLQTlCYlVkTFlsMUFLNGpUOEVJRWp0bHhRMXQ3VzJ5bmJTQ1lCaldHamI2VGgvSTZta2R2bWNuTFY5K3F3VUp6VnZyUjhCL2ciLCJtYWMiOiIzODQxYzc3MDRiYjk1NTQ5YTY5ODI3YTQzNWFlZmYwYzFlM2ZmMjEwYTYwNTljYmE0YjcwMTE4YmFkNmNkNDg5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 May 2026 13:29:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 08 Mar 2026 23:19:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 599\r\ndate: Tue, 19 May 2026 13:29:08 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3109,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ea599ea4d42d8857576411a32ca71ad1","sha1":"9a3f3981a4d5d504c8dd78eae45e57d047ba3ed5","sha256":"5392f32016b9330f52883b8c33216665f1d5704d7824690ffc905842391568c1","sha512":"5df631c177a112132ae79305062ccc47b0f80c1d9723d16962bab79a1c3578173a8204c1361068e95eeb3a9ffc9f30356f15858fc2957280a58504ba5c9cd90b","ssdeep":"","tlshash":"1b51f554867e4040e7559b881f9f7780a768b02fcdc49c09b2059f6cfee19ad83c1aec","first_seen":"2025-04-28T01:39:11.855739Z","last_seen":"2026-05-19T13:29:31.90732Z","times_seen":369,"resource_available":false,"data":null}},"time_used":970,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":970,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadextla.live/temp/custom/js/jquery.min.js","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"ip":{"addr":"104.219.248.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nadextla.live/","date":"2026-05-19T13:29:08.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadextla.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 24 Mar 2026 00:00:00 GMT","end":"Thu, 08 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:C5:3B:4E:1C:33:60:9A:6B:42:D5:3B:8D:DA:77:44:5C:78:12:FB","sha256":"2C:82:14:9D:AD:93:A9:5C:45:2F:58:2D:E4:FE:E1:5F:65:AD:7F:CC:F8:5B:B8:F0:73:FD:28:10:E6:24:27:56"}}},"request":{"raw":"GET /temp/custom/js/jquery.min.js HTTP/1.1\r\nHost: nadextla.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadextla.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im04eE1LT1hYT3AyQXRHWEowOTRwN2c9PSIsInZhbHVlIjoiRmlRQ3lEdzhSV3hYaGNSMHBZbzRwYXFCSXVBYVFjTHZaZDhrNTJOQ2c1MVc4Y2VSSXdheVQ1Z00zQXFKRlk5aGZ2bjdleGFCRHh6NkhhYUNhV2k5bkdhMVNRdFFWSUc0ZGtid1FKeDQ1QlZtZmVkTXBSTWdOdlBMZGExaFRYVG8iLCJtYWMiOiJhMWRkZmQ2ZjMxMDRhY2FkZTA0OThkODc5YmMyNDk5OGE1MzFhNzdmNTg5ZThjMjBlMWVjNzAwYzhkNGJlNTIxIiwidGFnIjoiIn0%3D; nadextla_session=eyJpdiI6IlFzMkh4QzFGbVdpR1QyVEhBNDMxMUE9PSIsInZhbHVlIjoiNVQzVkdDcWw4NWthMGEyZm9NUlRuSjhKbXJXOXdDR0IxTzl6WDVsek5tYW5yQ2dXWXAxQzMwTnhLQTlCYlVkTFlsMUFLNGpUOEVJRWp0bHhRMXQ3VzJ5bmJTQ1lCaldHamI2VGgvSTZta2R2bWNuTFY5K3F3VUp6VnZyUjhCL2ciLCJtYWMiOiIzODQxYzc3MDRiYjk1NTQ5YTY5ODI3YTQzNWFlZmYwYzFlM2ZmMjEwYTYwNTljYmE0YjcwMTE4YmFkNmNkNDg5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 08 Mar 2026 23:19:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29664\r\ndate: Tue, 19 May 2026 13:29:08 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":86927,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"a09e13ee94d51c524b7e2a728c7d4039","sha1":"0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae","sha256":"160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef","sha512":"f8da8f95b6ed33542a88af19028e18ae3d9ce25350a06bfc3fbf433ed2b38fefa5e639cddfdac703fc6caa7f3313d974b92a3168276b3a016ceb28f27db0714a","ssdeep":"1536:jLiBdiaWLOczCmZx6+VWuGzQNOzdn6x2RZd9SEnk9HB96c9Yo/NWLbVj3kC6t3:5kn6x2xe9NK6nC69","tlshash":"748319dd72c6b06247ab71ba00bf550bf2361999684d4410f129e4eabc74b4e823bf7d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-05-20T23:44:02.612082Z","times_seen":130053,"resource_available":true,"data":null}},"time_used":2418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1786,"receive":632,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadextla.live/temp/custom/js/bootstrap.min.js","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"ip":{"addr":"104.219.248.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nadextla.live/","date":"2026-05-19T13:29:08.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadextla.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 24 Mar 2026 00:00:00 GMT","end":"Thu, 08 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:C5:3B:4E:1C:33:60:9A:6B:42:D5:3B:8D:DA:77:44:5C:78:12:FB","sha256":"2C:82:14:9D:AD:93:A9:5C:45:2F:58:2D:E4:FE:E1:5F:65:AD:7F:CC:F8:5B:B8:F0:73:FD:28:10:E6:24:27:56"}}},"request":{"raw":"GET /temp/custom/js/bootstrap.min.js HTTP/1.1\r\nHost: nadextla.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadextla.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im04eE1LT1hYT3AyQXRHWEowOTRwN2c9PSIsInZhbHVlIjoiRmlRQ3lEdzhSV3hYaGNSMHBZbzRwYXFCSXVBYVFjTHZaZDhrNTJOQ2c1MVc4Y2VSSXdheVQ1Z00zQXFKRlk5aGZ2bjdleGFCRHh6NkhhYUNhV2k5bkdhMVNRdFFWSUc0ZGtid1FKeDQ1QlZtZmVkTXBSTWdOdlBMZGExaFRYVG8iLCJtYWMiOiJhMWRkZmQ2ZjMxMDRhY2FkZTA0OThkODc5YmMyNDk5OGE1MzFhNzdmNTg5ZThjMjBlMWVjNzAwYzhkNGJlNTIxIiwidGFnIjoiIn0%3D; nadextla_session=eyJpdiI6IlFzMkh4QzFGbVdpR1QyVEhBNDMxMUE9PSIsInZhbHVlIjoiNVQzVkdDcWw4NWthMGEyZm9NUlRuSjhKbXJXOXdDR0IxTzl6WDVsek5tYW5yQ2dXWXAxQzMwTnhLQTlCYlVkTFlsMUFLNGpUOEVJRWp0bHhRMXQ3VzJ5bmJTQ1lCaldHamI2VGgvSTZta2R2bWNuTFY5K3F3VUp6VnZyUjhCL2ciLCJtYWMiOiIzODQxYzc3MDRiYjk1NTQ5YTY5ODI3YTQzNWFlZmYwYzFlM2ZmMjEwYTYwNTljYmE0YjcwMTE4YmFkNmNkNDg5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 08 Mar 2026 23:19:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 13901\r\ndate: Tue, 19 May 2026 13:29:08 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":55775,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (55494)","md5":"6895e8cd60b62646ce12426015888f58","sha1":"de908c9ed184d74eb525fa7a30449b67fc3a1c14","sha256":"eb795deda8983fa5310627c9584cf3f3b95d272567113500059018b3941cb267","sha512":"f43dfd388488b509a66879608c35d7c1155f93dcec33ca875082f59f35552740d65e9a344a044d7ec534f0278a6bb6f0ed81047f73dcf615f7dcd76e0a482009","ssdeep":"768:tVYe0yK2vHVRS323ufp0NagHDFR82Qs+miD5W5MsgQZmJPliB6BBoBFeq:tVc+U2QK+GM4ZIwwoqq","tlshash":"f343b80a725478b2059f9176917f420bb736798ae50bc26cb91d98ed1e7cc893227f3c","first_seen":"2023-03-07T01:06:56Z","last_seen":"2026-05-20T14:31:13.336576Z","times_seen":4118,"resource_available":true,"data":null}},"time_used":3377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3377,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadextla.live/temp/custom/images/imager5555.jpg","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"ip":{"addr":"104.219.248.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nadextla.live/","date":"2026-05-19T13:29:08.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadextla.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 24 Mar 2026 00:00:00 GMT","end":"Thu, 08 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:C5:3B:4E:1C:33:60:9A:6B:42:D5:3B:8D:DA:77:44:5C:78:12:FB","sha256":"2C:82:14:9D:AD:93:A9:5C:45:2F:58:2D:E4:FE:E1:5F:65:AD:7F:CC:F8:5B:B8:F0:73:FD:28:10:E6:24:27:56"}}},"request":{"raw":"GET /temp/custom/images/imager5555.jpg HTTP/1.1\r\nHost: nadextla.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadextla.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im04eE1LT1hYT3AyQXRHWEowOTRwN2c9PSIsInZhbHVlIjoiRmlRQ3lEdzhSV3hYaGNSMHBZbzRwYXFCSXVBYVFjTHZaZDhrNTJOQ2c1MVc4Y2VSSXdheVQ1Z00zQXFKRlk5aGZ2bjdleGFCRHh6NkhhYUNhV2k5bkdhMVNRdFFWSUc0ZGtid1FKeDQ1QlZtZmVkTXBSTWdOdlBMZGExaFRYVG8iLCJtYWMiOiJhMWRkZmQ2ZjMxMDRhY2FkZTA0OThkODc5YmMyNDk5OGE1MzFhNzdmNTg5ZThjMjBlMWVjNzAwYzhkNGJlNTIxIiwidGFnIjoiIn0%3D; nadextla_session=eyJpdiI6IlFzMkh4QzFGbVdpR1QyVEhBNDMxMUE9PSIsInZhbHVlIjoiNVQzVkdDcWw4NWthMGEyZm9NUlRuSjhKbXJXOXdDR0IxTzl6WDVsek5tYW5yQ2dXWXAxQzMwTnhLQTlCYlVkTFlsMUFLNGpUOEVJRWp0bHhRMXQ3VzJ5bmJTQ1lCaldHamI2VGgvSTZta2R2bWNuTFY5K3F3VUp6VnZyUjhCL2ciLCJtYWMiOiIzODQxYzc3MDRiYjk1NTQ5YTY5ODI3YTQzNWFlZmYwYzFlM2ZmMjEwYTYwNTljYmE0YjcwMTE4YmFkNmNkNDg5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 May 2026 13:29:08 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 08 Mar 2026 23:19:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12520\r\ndate: Tue, 19 May 2026 13:29:08 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":12520,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 164x164, components 3","md5":"a09f123688ddee8c4e9c7547561a758d","sha1":"640721b8ac50bb159d54fd37835b1dd88ba8485f","sha256":"2d6a74d0be29e0833594ca7f35a38ff9ca8b80bbee0da06d9e4fad985e806d4a","sha512":"0e10a9fbfa0c43b9891c320ab25da23c1337924b8a1c4ee40a0bc02d0ddb0f2429f1e6b3372f89bb30d1693e8608e2e698d3d521734f6fe0240f7aee89a6c2bc","ssdeep":"384:rrgXSGGdXjidmAVwVg//CJ4MB9NQ9Q0oT:rUXMdmdmuwVgLO4U","tlshash":"4042c041e65faf0d66da2ba24dcbd61b70ad3d1684db09c3ad3b711334528c44eb553c","first_seen":"2025-03-18T04:27:57.422693Z","last_seen":"2026-05-19T13:29:31.909629Z","times_seen":327,"resource_available":false,"data":null}},"time_used":9666,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8395,"receive":1271,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadextla.live/temp/custom/css/bootstrap.min.css","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"ip":{"addr":"104.219.248.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nadextla.live/","date":"2026-05-19T13:29:08.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadextla.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 24 Mar 2026 00:00:00 GMT","end":"Thu, 08 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:C5:3B:4E:1C:33:60:9A:6B:42:D5:3B:8D:DA:77:44:5C:78:12:FB","sha256":"2C:82:14:9D:AD:93:A9:5C:45:2F:58:2D:E4:FE:E1:5F:65:AD:7F:CC:F8:5B:B8:F0:73:FD:28:10:E6:24:27:56"}}},"request":{"raw":"GET /temp/custom/css/bootstrap.min.css HTTP/1.1\r\nHost: nadextla.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadextla.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im04eE1LT1hYT3AyQXRHWEowOTRwN2c9PSIsInZhbHVlIjoiRmlRQ3lEdzhSV3hYaGNSMHBZbzRwYXFCSXVBYVFjTHZaZDhrNTJOQ2c1MVc4Y2VSSXdheVQ1Z00zQXFKRlk5aGZ2bjdleGFCRHh6NkhhYUNhV2k5bkdhMVNRdFFWSUc0ZGtid1FKeDQ1QlZtZmVkTXBSTWdOdlBMZGExaFRYVG8iLCJtYWMiOiJhMWRkZmQ2ZjMxMDRhY2FkZTA0OThkODc5YmMyNDk5OGE1MzFhNzdmNTg5ZThjMjBlMWVjNzAwYzhkNGJlNTIxIiwidGFnIjoiIn0%3D; nadextla_session=eyJpdiI6IlFzMkh4QzFGbVdpR1QyVEhBNDMxMUE9PSIsInZhbHVlIjoiNVQzVkdDcWw4NWthMGEyZm9NUlRuSjhKbXJXOXdDR0IxTzl6WDVsek5tYW5yQ2dXWXAxQzMwTnhLQTlCYlVkTFlsMUFLNGpUOEVJRWp0bHhRMXQ3VzJ5bmJTQ1lCaldHamI2VGgvSTZta2R2bWNuTFY5K3F3VUp6VnZyUjhCL2ciLCJtYWMiOiIzODQxYzc3MDRiYjk1NTQ5YTY5ODI3YTQzNWFlZmYwYzFlM2ZmMjEwYTYwNTljYmE0YjcwMTE4YmFkNmNkNDg5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 May 2026 13:29:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 08 Mar 2026 23:19:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 20694\r\ndate: Tue, 19 May 2026 13:29:08 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":153182,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65324)","md5":"f411c136e2bb302ada2120b3eb1d5bc3","sha1":"3ae9bb0e7929489abd23736ae892939c8fe98645","sha256":"6b3bef53dc4a96ec07149d02a60b5fd026332bbce0b4ece79f3c55e3ddb85f5c","sha512":"73c0081669f87b45999da4ce0974ce2f347eb88ad310b63d01e22e52ae8e0c668eeb5f418ea1b6ae18afff2e9d21d98cedb6be0a9ccc464933b4c3d77d5066f6","ssdeep":"1536:K/NImGVh5+QYYDnDEBi83NcuSE9/7ht//1K0q3SYiLENM6HN26x:K/Fs4D9Dq3SYiLENM6HN26x","tlshash":"0be375a6f5a0312de467c61960d0bafe156f8245d7221ffbf82737644b896cb0a63d0c","first_seen":"2023-04-06T09:07:33Z","last_seen":"2026-05-20T14:31:13.27723Z","times_seen":4065,"resource_available":false,"data":null}},"time_used":971,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":583,"receive":388,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadextla.live/temp/custom/js/popper.min.js","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"ip":{"addr":"104.219.248.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nadextla.live/","date":"2026-05-19T13:29:08.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadextla.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 24 Mar 2026 00:00:00 GMT","end":"Thu, 08 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:C5:3B:4E:1C:33:60:9A:6B:42:D5:3B:8D:DA:77:44:5C:78:12:FB","sha256":"2C:82:14:9D:AD:93:A9:5C:45:2F:58:2D:E4:FE:E1:5F:65:AD:7F:CC:F8:5B:B8:F0:73:FD:28:10:E6:24:27:56"}}},"request":{"raw":"GET /temp/custom/js/popper.min.js HTTP/1.1\r\nHost: nadextla.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadextla.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im04eE1LT1hYT3AyQXRHWEowOTRwN2c9PSIsInZhbHVlIjoiRmlRQ3lEdzhSV3hYaGNSMHBZbzRwYXFCSXVBYVFjTHZaZDhrNTJOQ2c1MVc4Y2VSSXdheVQ1Z00zQXFKRlk5aGZ2bjdleGFCRHh6NkhhYUNhV2k5bkdhMVNRdFFWSUc0ZGtid1FKeDQ1QlZtZmVkTXBSTWdOdlBMZGExaFRYVG8iLCJtYWMiOiJhMWRkZmQ2ZjMxMDRhY2FkZTA0OThkODc5YmMyNDk5OGE1MzFhNzdmNTg5ZThjMjBlMWVjNzAwYzhkNGJlNTIxIiwidGFnIjoiIn0%3D; nadextla_session=eyJpdiI6IlFzMkh4QzFGbVdpR1QyVEhBNDMxMUE9PSIsInZhbHVlIjoiNVQzVkdDcWw4NWthMGEyZm9NUlRuSjhKbXJXOXdDR0IxTzl6WDVsek5tYW5yQ2dXWXAxQzMwTnhLQTlCYlVkTFlsMUFLNGpUOEVJRWp0bHhRMXQ3VzJ5bmJTQ1lCaldHamI2VGgvSTZta2R2bWNuTFY5K3F3VUp6VnZyUjhCL2ciLCJtYWMiOiIzODQxYzc3MDRiYjk1NTQ5YTY5ODI3YTQzNWFlZmYwYzFlM2ZmMjEwYTYwNTljYmE0YjcwMTE4YmFkNmNkNDg5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 08 Mar 2026 23:19:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7158\r\ndate: Tue, 19 May 2026 13:29:08 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":20973,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20800)","md5":"7e58cd01528ac4394af369c152c17bc2","sha1":"9496922c892ea80e86d868c4509610d61a1f2847","sha256":"587c080125b135d29a931ed371e50ffc1a9641831c1087de2cd74532815f4560","sha512":"0e7b227e2dc4a8d7410da7fbcccd531bb3f4d151a29af485d50094888ff172859d2336c8b0fa3959fda4e7223c3d630a0589debaa204c1450299b4132c02b5aa","ssdeep":"384:fmQkLrwVOQzirVyKnxRs8gB9Db5HjiWn8xHOxvRVgD75zBY5vImg3FzGpL9ARdO/:WLsgQziJp3MDb5OxHOxvYD73Y5vQzyL3","tlshash":"2292b3cc3294b06643ab91a7a0af960eb2339875610e9410f19df2d97c30ef9917fd79","first_seen":"2023-03-07T01:06:56Z","last_seen":"2026-05-20T13:27:44.939257Z","times_seen":7359,"resource_available":true,"data":null}},"time_used":2901,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2901,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadextla.live/","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"ip":{"addr":"104.219.248.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-19T13:29:06.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadextla.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 24 Mar 2026 00:00:00 GMT","end":"Thu, 08 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:C5:3B:4E:1C:33:60:9A:6B:42:D5:3B:8D:DA:77:44:5C:78:12:FB","sha256":"2C:82:14:9D:AD:93:A9:5C:45:2F:58:2D:E4:FE:E1:5F:65:AD:7F:CC:F8:5B:B8:F0:73:FD:28:10:E6:24:27:56"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nadextla.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/8.2.30\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\nset-cookie: XSRF-TOKEN=eyJpdiI6Im04eE1LT1hYT3AyQXRHWEowOTRwN2c9PSIsInZhbHVlIjoiRmlRQ3lEdzhSV3hYaGNSMHBZbzRwYXFCSXVBYVFjTHZaZDhrNTJOQ2c1MVc4Y2VSSXdheVQ1Z00zQXFKRlk5aGZ2bjdleGFCRHh6NkhhYUNhV2k5bkdhMVNRdFFWSUc0ZGtid1FKeDQ1QlZtZmVkTXBSTWdOdlBMZGExaFRYVG8iLCJtYWMiOiJhMWRkZmQ2ZjMxMDRhY2FkZTA0OThkODc5YmMyNDk5OGE1MzFhNzdmNTg5ZThjMjBlMWVjNzAwYzhkNGJlNTIxIiwidGFnIjoiIn0%3D; expires=Tue, 19-May-2026 15:29:08 GMT; Max-Age=7200; path=/; samesite=lax; secure\nnadextla_session=eyJpdiI6IlFzMkh4QzFGbVdpR1QyVEhBNDMxMUE9PSIsInZhbHVlIjoiNVQzVkdDcWw4NWthMGEyZm9NUlRuSjhKbXJXOXdDR0IxTzl6WDVsek5tYW5yQ2dXWXAxQzMwTnhLQTlCYlVkTFlsMUFLNGpUOEVJRWp0bHhRMXQ3VzJ5bmJTQ1lCaldHamI2VGgvSTZta2R2bWNuTFY5K3F3VUp6VnZyUjhCL2ciLCJtYWMiOiIzODQxYzc3MDRiYjk1NTQ5YTY5ODI3YTQzNWFlZmYwYzFlM2ZmMjEwYTYwNTljYmE0YjcwMTE4YmFkNmNkNDg5IiwidGFnIjoiIn0%3D; expires=Tue, 19-May-2026 15:29:08 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure\r\ncontent-length: 10270\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Tue, 19 May 2026 13:29:08 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"Tidio","description":"Tidio is a customer communication product. It provides multi-channel support so users can communicate with customers on the go. Live chat, messenger, or email are all supported.","website":"https://www.tidio.com","common_platform_enumeration":"","icon":"Tidio.svg","categories":["Live chat"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:8.2.30","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":40652,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (626), with CRLF, LF line terminators","md5":"6615cc88330d750a504e2117987fdb9a","sha1":"b12aecd08361e3b4d40e59cd4f7c2f73b5dbabc8","sha256":"6a70dfebfe6c99aad0e45b601bcccf272d8ab2ffd6e5b1603921bdd4abeba10f","sha512":"e9275e3cae67d7364e6cbf0f25b3220341883e3a792937792f32cff6e3f2c51c1d140d9096ade24e8f24d2f17fc41e1bc93fb51ed35a31932e58d7760aadf400","ssdeep":"768:W2xi8AXPZZXFx7u4BIV8JO05jC7esR2r/Vx/9iU4:hxGXRZXFhu4yRAb9iU4","tlshash":"9c03c421749aa17b400341979235735afadfdeb7c62b8891b2fc23b70fc2d45991b079","first_seen":"2026-05-19T13:28:34.950234Z","last_seen":"2026-05-19T13:29:31.91168Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2941,"timings":{"blocked":1259,"dns":1,"connect":193,"send":0,"wait":422,"receive":1,"ssl":1061},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadextla.live/temp/custom/js/moment.js","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"ip":{"addr":"104.219.248.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nadextla.live/","date":"2026-05-19T13:29:08.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadextla.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 24 Mar 2026 00:00:00 GMT","end":"Thu, 08 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:C5:3B:4E:1C:33:60:9A:6B:42:D5:3B:8D:DA:77:44:5C:78:12:FB","sha256":"2C:82:14:9D:AD:93:A9:5C:45:2F:58:2D:E4:FE:E1:5F:65:AD:7F:CC:F8:5B:B8:F0:73:FD:28:10:E6:24:27:56"}}},"request":{"raw":"GET /temp/custom/js/moment.js HTTP/1.1\r\nHost: nadextla.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadextla.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im04eE1LT1hYT3AyQXRHWEowOTRwN2c9PSIsInZhbHVlIjoiRmlRQ3lEdzhSV3hYaGNSMHBZbzRwYXFCSXVBYVFjTHZaZDhrNTJOQ2c1MVc4Y2VSSXdheVQ1Z00zQXFKRlk5aGZ2bjdleGFCRHh6NkhhYUNhV2k5bkdhMVNRdFFWSUc0ZGtid1FKeDQ1QlZtZmVkTXBSTWdOdlBMZGExaFRYVG8iLCJtYWMiOiJhMWRkZmQ2ZjMxMDRhY2FkZTA0OThkODc5YmMyNDk5OGE1MzFhNzdmNTg5ZThjMjBlMWVjNzAwYzhkNGJlNTIxIiwidGFnIjoiIn0%3D; nadextla_session=eyJpdiI6IlFzMkh4QzFGbVdpR1QyVEhBNDMxMUE9PSIsInZhbHVlIjoiNVQzVkdDcWw4NWthMGEyZm9NUlRuSjhKbXJXOXdDR0IxTzl6WDVsek5tYW5yQ2dXWXAxQzMwTnhLQTlCYlVkTFlsMUFLNGpUOEVJRWp0bHhRMXQ3VzJ5bmJTQ1lCaldHamI2VGgvSTZta2R2bWNuTFY5K3F3VUp6VnZyUjhCL2ciLCJtYWMiOiIzODQxYzc3MDRiYjk1NTQ5YTY5ODI3YTQzNWFlZmYwYzFlM2ZmMjEwYTYwNTljYmE0YjcwMTE4YmFkNmNkNDg5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 08 Mar 2026 23:19:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 32196\r\ndate: Tue, 19 May 2026 13:29:08 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":150941,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"0941fc7ec3988352c959e5b3da86f666","sha1":"f5ff9e6fdcddb2951851412bc021015b6b59054c","sha256":"1fd8c0cfffd02e40cecbf9f313d1b86988a342d90bb7d16f1a67544f0064ea0b","sha512":"5afde44d2c0b90bfbf3292b794e80ab6c4e7e653b59e675eb2fee4f6459c22ed23a00268e0ac48b01e3fad03d45ffd4cfcc35e3026d16fbff64bf7f61488412d","ssdeep":"1536:4OpyD1Cb6yVBXfW1vCUUtQQTj06HPU3KQFSNF1T7cbF/nlzUIKHCIioTo3v2BcC:4OpyDJu8XUtQQSO1T7cbF/nlz3wq2BB","tlshash":"42e31b4a69e760224623b2794fef5405aa38c517150ede097c8da3d4af81c7847fafec","first_seen":"2023-03-07T16:46:41Z","last_seen":"2026-05-20T14:09:07.378533Z","times_seen":1225,"resource_available":true,"data":null}},"time_used":4536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4148,"receive":388,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadextla.live/temp/custom/js/livestamp.min.js","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"ip":{"addr":"104.219.248.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nadextla.live/","date":"2026-05-19T13:29:08.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadextla.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 24 Mar 2026 00:00:00 GMT","end":"Thu, 08 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:C5:3B:4E:1C:33:60:9A:6B:42:D5:3B:8D:DA:77:44:5C:78:12:FB","sha256":"2C:82:14:9D:AD:93:A9:5C:45:2F:58:2D:E4:FE:E1:5F:65:AD:7F:CC:F8:5B:B8:F0:73:FD:28:10:E6:24:27:56"}}},"request":{"raw":"GET /temp/custom/js/livestamp.min.js HTTP/1.1\r\nHost: nadextla.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadextla.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im04eE1LT1hYT3AyQXRHWEowOTRwN2c9PSIsInZhbHVlIjoiRmlRQ3lEdzhSV3hYaGNSMHBZbzRwYXFCSXVBYVFjTHZaZDhrNTJOQ2c1MVc4Y2VSSXdheVQ1Z00zQXFKRlk5aGZ2bjdleGFCRHh6NkhhYUNhV2k5bkdhMVNRdFFWSUc0ZGtid1FKeDQ1QlZtZmVkTXBSTWdOdlBMZGExaFRYVG8iLCJtYWMiOiJhMWRkZmQ2ZjMxMDRhY2FkZTA0OThkODc5YmMyNDk5OGE1MzFhNzdmNTg5ZThjMjBlMWVjNzAwYzhkNGJlNTIxIiwidGFnIjoiIn0%3D; nadextla_session=eyJpdiI6IlFzMkh4QzFGbVdpR1QyVEhBNDMxMUE9PSIsInZhbHVlIjoiNVQzVkdDcWw4NWthMGEyZm9NUlRuSjhKbXJXOXdDR0IxTzl6WDVsek5tYW5yQ2dXWXAxQzMwTnhLQTlCYlVkTFlsMUFLNGpUOEVJRWp0bHhRMXQ3VzJ5bmJTQ1lCaldHamI2VGgvSTZta2R2bWNuTFY5K3F3VUp6VnZyUjhCL2ciLCJtYWMiOiIzODQxYzc3MDRiYjk1NTQ5YTY5ODI3YTQzNWFlZmYwYzFlM2ZmMjEwYTYwNTljYmE0YjcwMTE4YmFkNmNkNDg5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Sun, 08 Mar 2026 23:19:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 590\r\ndate: Tue, 19 May 2026 13:29:08 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1414,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (520)","md5":"e1d6370e267b3aaf2045e69eef7ed17a","sha1":"34a700591d34f795a479516b7f72fb2ead5fec5b","sha256":"f2beb92898142c10e2661c03c9d7d6ac4931df2c95fe0ac6b06cda7a4a1b9e02","sha512":"0b744879a24259e2b930b3d24ab56cb0306f4b06a6656ed483281ce2bdb582e56a91eae8cbdc110436ae810b2c010fa6dc766c31656f12281c34cafb8ee19728","ssdeep":"","tlshash":"7621aaacf284b58519c3a460513f66197791b3bd9d4c8490aa6293d0cf7aa4b713be38","first_seen":"2023-03-07T01:18:22Z","last_seen":"2026-05-19T13:29:31.913648Z","times_seen":413,"resource_available":true,"data":null}},"time_used":4919,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4536,"receive":383,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadextla.live/temp/custom/css/animate.css","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"ip":{"addr":"104.219.248.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nadextla.live/","date":"2026-05-19T13:29:08.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadextla.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 24 Mar 2026 00:00:00 GMT","end":"Thu, 08 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:C5:3B:4E:1C:33:60:9A:6B:42:D5:3B:8D:DA:77:44:5C:78:12:FB","sha256":"2C:82:14:9D:AD:93:A9:5C:45:2F:58:2D:E4:FE:E1:5F:65:AD:7F:CC:F8:5B:B8:F0:73:FD:28:10:E6:24:27:56"}}},"request":{"raw":"GET /temp/custom/css/animate.css HTTP/1.1\r\nHost: nadextla.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadextla.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im04eE1LT1hYT3AyQXRHWEowOTRwN2c9PSIsInZhbHVlIjoiRmlRQ3lEdzhSV3hYaGNSMHBZbzRwYXFCSXVBYVFjTHZaZDhrNTJOQ2c1MVc4Y2VSSXdheVQ1Z00zQXFKRlk5aGZ2bjdleGFCRHh6NkhhYUNhV2k5bkdhMVNRdFFWSUc0ZGtid1FKeDQ1QlZtZmVkTXBSTWdOdlBMZGExaFRYVG8iLCJtYWMiOiJhMWRkZmQ2ZjMxMDRhY2FkZTA0OThkODc5YmMyNDk5OGE1MzFhNzdmNTg5ZThjMjBlMWVjNzAwYzhkNGJlNTIxIiwidGFnIjoiIn0%3D; nadextla_session=eyJpdiI6IlFzMkh4QzFGbVdpR1QyVEhBNDMxMUE9PSIsInZhbHVlIjoiNVQzVkdDcWw4NWthMGEyZm9NUlRuSjhKbXJXOXdDR0IxTzl6WDVsek5tYW5yQ2dXWXAxQzMwTnhLQTlCYlVkTFlsMUFLNGpUOEVJRWp0bHhRMXQ3VzJ5bmJTQ1lCaldHamI2VGgvSTZta2R2bWNuTFY5K3F3VUp6VnZyUjhCL2ciLCJtYWMiOiIzODQxYzc3MDRiYjk1NTQ5YTY5ODI3YTQzNWFlZmYwYzFlM2ZmMjEwYTYwNTljYmE0YjcwMTE4YmFkNmNkNDg5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 May 2026 13:29:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 08 Mar 2026 23:19:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4459\r\ndate: Tue, 19 May 2026 13:29:08 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":77907,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"91cc40989e5e96e8d6bddc0f19598441","sha1":"77b5378a2b4bfc120e52782dd869aeab7efe2fd4","sha256":"6b6b686ecaa56e02ec5aced95541a03f922f599b31f1b4cd429ceca824a6e669","sha512":"90750a22634147d99cc10d6ee1120bb6c889982eaee77f5b82445aa5f1ab6f05db90fc5f6a9933017bdd1a7ad3bb76e518d5c73c25f4925ae513bcc0661afe8c","ssdeep":"384:oNuKu1Lsg9unuFl3lH/4/0uJuDqDxbe3NxdV2PVriTKIZQMcLcec:oNuKuWg9unuLuJu9KIZQMcLcec","tlshash":"80732fad2991108456638a1d83df5e68673ce573181aacef73c2488fcf8bf6857c9147","first_seen":"2023-04-05T10:43:58Z","last_seen":"2026-05-20T19:36:30.659192Z","times_seen":2915,"resource_available":false,"data":null}},"time_used":4918,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4918,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadextla.live/temp/custom/images/v3_0473660.jpg","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"ip":{"addr":"104.219.248.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nadextla.live/","date":"2026-05-19T13:29:08.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadextla.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 24 Mar 2026 00:00:00 GMT","end":"Thu, 08 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:C5:3B:4E:1C:33:60:9A:6B:42:D5:3B:8D:DA:77:44:5C:78:12:FB","sha256":"2C:82:14:9D:AD:93:A9:5C:45:2F:58:2D:E4:FE:E1:5F:65:AD:7F:CC:F8:5B:B8:F0:73:FD:28:10:E6:24:27:56"}}},"request":{"raw":"GET /temp/custom/images/v3_0473660.jpg HTTP/1.1\r\nHost: nadextla.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadextla.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im04eE1LT1hYT3AyQXRHWEowOTRwN2c9PSIsInZhbHVlIjoiRmlRQ3lEdzhSV3hYaGNSMHBZbzRwYXFCSXVBYVFjTHZaZDhrNTJOQ2c1MVc4Y2VSSXdheVQ1Z00zQXFKRlk5aGZ2bjdleGFCRHh6NkhhYUNhV2k5bkdhMVNRdFFWSUc0ZGtid1FKeDQ1QlZtZmVkTXBSTWdOdlBMZGExaFRYVG8iLCJtYWMiOiJhMWRkZmQ2ZjMxMDRhY2FkZTA0OThkODc5YmMyNDk5OGE1MzFhNzdmNTg5ZThjMjBlMWVjNzAwYzhkNGJlNTIxIiwidGFnIjoiIn0%3D; nadextla_session=eyJpdiI6IlFzMkh4QzFGbVdpR1QyVEhBNDMxMUE9PSIsInZhbHVlIjoiNVQzVkdDcWw4NWthMGEyZm9NUlRuSjhKbXJXOXdDR0IxTzl6WDVsek5tYW5yQ2dXWXAxQzMwTnhLQTlCYlVkTFlsMUFLNGpUOEVJRWp0bHhRMXQ3VzJ5bmJTQ1lCaldHamI2VGgvSTZta2R2bWNuTFY5K3F3VUp6VnZyUjhCL2ciLCJtYWMiOiIzODQxYzc3MDRiYjk1NTQ5YTY5ODI3YTQzNWFlZmYwYzFlM2ZmMjEwYTYwNTljYmE0YjcwMTE4YmFkNmNkNDg5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 May 2026 13:29:08 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 08 Mar 2026 23:19:43 GMT\r\naccept-ranges: bytes\r\ncontent-length: 6493\r\ndate: Tue, 19 May 2026 13:29:08 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6493,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 128x128, components 3","md5":"79516e0e08ecd4f26f179e82549f2f89","sha1":"f6038347935fb667021cb58791368b43fffcc8f3","sha256":"97a3df4c61f939660a54cfbfb1ac77cc7939b88ea38d2574c324ec85e422ade7","sha512":"d439d49ee43be35e9a52984b8c20f3ca9dd2c85689db9d0ceb9208682409db3b80abd489030deb42664f4561a5ca98c665b86ed1508848d868ff667435f97821","ssdeep":"96:XmZEsqS7Wn26kKX9aufHJe9+0BzgrZqk+a2aenqhddfmHTD/mZU:XKUS95DufH89IrZpfdKua","tlshash":"2bd16d636f329f81d9faf8f8420ad817422cc8d7a927bf4b5b390955bd738b14b42065","first_seen":"2025-03-18T04:27:57.420628Z","last_seen":"2026-05-19T13:29:31.914943Z","times_seen":322,"resource_available":false,"data":null}},"time_used":8395,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8394,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"translate.google.com/translate_a/elementa0d8.js?cb=googleTranslateElementInit","fqdn":"translate.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.217.20.174","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nadextla.live/","date":"2026-05-19T13:29:08.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Apr 2026 08:35:05 GMT","end":"Mon, 13 Jul 2026 08:35:04 GMT"},"fingerprint":{"sha1":"30:DD:C1:AE:17:67:59:0A:2A:9C:1D:E3:B9:38:B2:60:4A:10:C7:AE","sha256":"BD:51:17:8F:71:1E:94:3E:35:23:87:1C:DF:5B:1F:F0:37:5C:FD:D7:2D:BD:B0:43:B4:F3:3D:65:5F:10:7C:3D"}}},"request":{"raw":"GET /translate_a/elementa0d8.js?cb=googleTranslateElementInit HTTP/1.1\r\nHost: translate.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadextla.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncontent-type: text/html; charset=UTF-8\r\nreferrer-policy: no-referrer\r\ncontent-length: 1587\r\ndate: Tue, 19 May 2026 13:29:08 GMT\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-20T23:50:58.05423Z","times_seen":15504075,"resource_available":true,"data":null}},"time_used":841,"timings":{"blocked":182,"dns":0,"connect":40,"send":0,"wait":141,"receive":304,"ssl":172},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadextla.live/temp/custom/themify/themify-icons.css","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"ip":{"addr":"104.219.248.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nadextla.live/","date":"2026-05-19T13:29:08.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadextla.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 24 Mar 2026 00:00:00 GMT","end":"Thu, 08 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:C5:3B:4E:1C:33:60:9A:6B:42:D5:3B:8D:DA:77:44:5C:78:12:FB","sha256":"2C:82:14:9D:AD:93:A9:5C:45:2F:58:2D:E4:FE:E1:5F:65:AD:7F:CC:F8:5B:B8:F0:73:FD:28:10:E6:24:27:56"}}},"request":{"raw":"GET /temp/custom/themify/themify-icons.css HTTP/1.1\r\nHost: nadextla.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadextla.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im04eE1LT1hYT3AyQXRHWEowOTRwN2c9PSIsInZhbHVlIjoiRmlRQ3lEdzhSV3hYaGNSMHBZbzRwYXFCSXVBYVFjTHZaZDhrNTJOQ2c1MVc4Y2VSSXdheVQ1Z00zQXFKRlk5aGZ2bjdleGFCRHh6NkhhYUNhV2k5bkdhMVNRdFFWSUc0ZGtid1FKeDQ1QlZtZmVkTXBSTWdOdlBMZGExaFRYVG8iLCJtYWMiOiJhMWRkZmQ2ZjMxMDRhY2FkZTA0OThkODc5YmMyNDk5OGE1MzFhNzdmNTg5ZThjMjBlMWVjNzAwYzhkNGJlNTIxIiwidGFnIjoiIn0%3D; nadextla_session=eyJpdiI6IlFzMkh4QzFGbVdpR1QyVEhBNDMxMUE9PSIsInZhbHVlIjoiNVQzVkdDcWw4NWthMGEyZm9NUlRuSjhKbXJXOXdDR0IxTzl6WDVsek5tYW5yQ2dXWXAxQzMwTnhLQTlCYlVkTFlsMUFLNGpUOEVJRWp0bHhRMXQ3VzJ5bmJTQ1lCaldHamI2VGgvSTZta2R2bWNuTFY5K3F3VUp6VnZyUjhCL2ciLCJtYWMiOiIzODQxYzc3MDRiYjk1NTQ5YTY5ODI3YTQzNWFlZmYwYzFlM2ZmMjEwYTYwNTljYmE0YjcwMTE4YmFkNmNkNDg5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 May 2026 13:29:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 08 Mar 2026 23:19:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2706\r\ndate: Tue, 19 May 2026 13:29:08 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":17817,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"8550d4f5955437a51f49a5abff88a7a4","sha1":"e360e1412a31c69ed2188a9816d394478895c106","sha256":"9c66fe2fab3a1d65b14b92a20d4c817ed481d74846a8a5f33d3616200b973602","sha512":"c1eb60c4cf0c1a51bc2172d549b7d735304572c6d82e61675d6e3feb9ee74fe354eaa83da5d8cea4ab16b471879314e54cc21e4ad1ddcfc990852fe28677752d","ssdeep":"192:TjlG8SWxB5iQYxil3EguJ+JvZ247F52WM:s8NbAlMJdFg","tlshash":"f182d39495bf1ca41319e0c1734bf215bb0db6aa9a450c5ce293ff4cafd3a1199c2adc","first_seen":"2025-03-18T04:27:57.388175Z","last_seen":"2026-05-19T13:29:31.916354Z","times_seen":373,"resource_available":false,"data":null}},"time_used":970,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":970,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadextla.live/temp/custom/css/intlTelInput.css","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"ip":{"addr":"104.219.248.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nadextla.live/","date":"2026-05-19T13:29:08.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadextla.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 24 Mar 2026 00:00:00 GMT","end":"Thu, 08 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:C5:3B:4E:1C:33:60:9A:6B:42:D5:3B:8D:DA:77:44:5C:78:12:FB","sha256":"2C:82:14:9D:AD:93:A9:5C:45:2F:58:2D:E4:FE:E1:5F:65:AD:7F:CC:F8:5B:B8:F0:73:FD:28:10:E6:24:27:56"}}},"request":{"raw":"GET /temp/custom/css/intlTelInput.css HTTP/1.1\r\nHost: nadextla.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadextla.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im04eE1LT1hYT3AyQXRHWEowOTRwN2c9PSIsInZhbHVlIjoiRmlRQ3lEdzhSV3hYaGNSMHBZbzRwYXFCSXVBYVFjTHZaZDhrNTJOQ2c1MVc4Y2VSSXdheVQ1Z00zQXFKRlk5aGZ2bjdleGFCRHh6NkhhYUNhV2k5bkdhMVNRdFFWSUc0ZGtid1FKeDQ1QlZtZmVkTXBSTWdOdlBMZGExaFRYVG8iLCJtYWMiOiJhMWRkZmQ2ZjMxMDRhY2FkZTA0OThkODc5YmMyNDk5OGE1MzFhNzdmNTg5ZThjMjBlMWVjNzAwYzhkNGJlNTIxIiwidGFnIjoiIn0%3D; nadextla_session=eyJpdiI6IlFzMkh4QzFGbVdpR1QyVEhBNDMxMUE9PSIsInZhbHVlIjoiNVQzVkdDcWw4NWthMGEyZm9NUlRuSjhKbXJXOXdDR0IxTzl6WDVsek5tYW5yQ2dXWXAxQzMwTnhLQTlCYlVkTFlsMUFLNGpUOEVJRWp0bHhRMXQ3VzJ5bmJTQ1lCaldHamI2VGgvSTZta2R2bWNuTFY5K3F3VUp6VnZyUjhCL2ciLCJtYWMiOiIzODQxYzc3MDRiYjk1NTQ5YTY5ODI3YTQzNWFlZmYwYzFlM2ZmMjEwYTYwNTljYmE0YjcwMTE4YmFkNmNkNDg5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 May 2026 13:29:08 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 08 Mar 2026 23:19:43 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2916\r\ndate: Tue, 19 May 2026 13:29:08 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":28872,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"36ad59bd54fb93f8e30e3273470b91f1","sha1":"687880cd4146a6841f427ccf8f7dc38084996db7","sha256":"67215ee6059ca860b0c9947f70b739ab8cf2c53ba74d7ab1aa950cbf84fa7c2b","sha512":"d9a968bca0889c579b40efbaf1fc6d6f9fddcd48f80116f33693da9de3bee54ec1a56fa59b4e50a6980371be72e6de645d85cd0f162392c5e4a13daf4be19ed3","ssdeep":"384:9QVEnIft6NOMiac6LHvybiRF6y+CV5mxX5Yl:9jIft6T","tlshash":"d3d24c25cb603409b13bf372e6a04782eb37102be90246acb3da7d55dfa50e455e2fe1","first_seen":"2025-03-18T04:27:46.827076Z","last_seen":"2026-05-19T13:29:31.917375Z","times_seen":373,"resource_available":false,"data":null}},"time_used":5499,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4918,"receive":581,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nadextla.live/storage/app/public/photos/1rblvFIWS55JR94OOo9GYLwaI1AVEiUEMycurICO.png","fqdn":"nadextla.live","domain":"nadextla.live","tld":"live"},"ip":{"addr":"104.219.248.240","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nadextla.live/","date":"2026-05-19T13:29:08.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nadextla.live","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 24 Mar 2026 00:00:00 GMT","end":"Thu, 08 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"AD:C5:3B:4E:1C:33:60:9A:6B:42:D5:3B:8D:DA:77:44:5C:78:12:FB","sha256":"2C:82:14:9D:AD:93:A9:5C:45:2F:58:2D:E4:FE:E1:5F:65:AD:7F:CC:F8:5B:B8:F0:73:FD:28:10:E6:24:27:56"}}},"request":{"raw":"GET /storage/app/public/photos/1rblvFIWS55JR94OOo9GYLwaI1AVEiUEMycurICO.png HTTP/1.1\r\nHost: nadextla.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nadextla.live/\r\nCookie: XSRF-TOKEN=eyJpdiI6Im04eE1LT1hYT3AyQXRHWEowOTRwN2c9PSIsInZhbHVlIjoiRmlRQ3lEdzhSV3hYaGNSMHBZbzRwYXFCSXVBYVFjTHZaZDhrNTJOQ2c1MVc4Y2VSSXdheVQ1Z00zQXFKRlk5aGZ2bjdleGFCRHh6NkhhYUNhV2k5bkdhMVNRdFFWSUc0ZGtid1FKeDQ1QlZtZmVkTXBSTWdOdlBMZGExaFRYVG8iLCJtYWMiOiJhMWRkZmQ2ZjMxMDRhY2FkZTA0OThkODc5YmMyNDk5OGE1MzFhNzdmNTg5ZThjMjBlMWVjNzAwYzhkNGJlNTIxIiwidGFnIjoiIn0%3D; nadextla_session=eyJpdiI6IlFzMkh4QzFGbVdpR1QyVEhBNDMxMUE9PSIsInZhbHVlIjoiNVQzVkdDcWw4NWthMGEyZm9NUlRuSjhKbXJXOXdDR0IxTzl6WDVsek5tYW5yQ2dXWXAxQzMwTnhLQTlCYlVkTFlsMUFLNGpUOEVJRWp0bHhRMXQ3VzJ5bmJTQ1lCaldHamI2VGgvSTZta2R2bWNuTFY5K3F3VUp6VnZyUjhCL2ciLCJtYWMiOiIzODQxYzc3MDRiYjk1NTQ5YTY5ODI3YTQzNWFlZmYwYzFlM2ZmMjEwYTYwNTljYmE0YjcwMTE4YmFkNmNkNDg5IiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Tue, 26 May 2026 13:29:08 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 31 Mar 2026 02:18:11 GMT\r\naccept-ranges: bytes\r\ncontent-length: 27894\r\ndate: Tue, 19 May 2026 13:29:08 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":27894,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 450 x 450, 8-bit/color RGBA, non-interlaced","md5":"74f3daf1fb68843153cb0c2533e79ef0","sha1":"c3bd1b054fb8a769f458510c7961a82c7ecb1468","sha256":"6962b9ccd95bc8a0344840c82695e4dbda47ca449649b90b3f2f48079c2e840c","sha512":"27f4c35130562c7fed6a90934a91b83a153480a0ab0b79140a03bf23e7996061e068e7dc1018ecd8ac34a8d06069c67b0f010d4942b2e4d44f639a1d06278adc","ssdeep":"768:E/L8ivXGsRpLMdl+4EcaGp/j5Uv+RNyUvWGTS:ED8ivXVZMabcaGj7RNyUv7+","tlshash":"41c2e0c19ca83756e5fc0c3a80b627b4d5a1d449c4a444b55180a2bbb3ae7b1d6cfdf2","first_seen":"2024-11-22T22:02:24.537149Z","last_seen":"2026-05-19T13:29:31.918405Z","times_seen":13,"resource_available":false,"data":null}},"time_used":6659,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5691,"receive":968,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}