{"report_id":"9b8da142-a730-42f3-819b-32094688d030","version":6,"status":"done","tags":[],"date":"2026-03-28T02:34:55Z","url":{"schema":"https","addr":"xa19p-fxempire.com/","fqdn":"xa19p-fxempire.com","domain":"xa19p-fxempire.com","tld":"com"},"ip":{"addr":"104.21.19.216","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xa19p-fxempire.com/cgi-sys/defaultwebpage.cgi","fqdn":"xa19p-fxempire.com","domain":"xa19p-fxempire.com","tld":"com"},"title":"Default Web Site Page","dom":{"size":344,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (344), with no line terminators","md5":"5e46d5cd304c60558fabdec36f65793e","sha1":"beae923d2261bc171b1892dfa60b33ef6bbee7fb","sha256":"61781b4088c39bba5e6d5c86cafd2367e96d5e225f36c9a96eaa8e3020c6cdad","sha512":"edc77354e0f05fbb7141dfcee0ba73a0281ef5ec6bfa867656993edb6de72b6c7a2bccbaae0ab23a4548588a78089bc1faf0b1af551ccec9bd2fc02ae3962043","ssdeep":"","tlshash":"5de026e96c79c83468f4028620f5e39c1a20b1a0bb11e70442d8dcbf9e20fe78c9295c","dom_hash":"domhashfa92bf49a0529f3ae8099507699ba65b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"xa19p-fxempire.com/","fqdn":"xa19p-fxempire.com","domain":"xa19p-fxempire.com","tld":"com"},"ip":{"addr":"104.21.19.216","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-02T02:34:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"xa19p-fxempire.com","ip":{"addr":"172.67.190.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-15","domain_rank":0,"first_seen":"2026-03-27T19:48:38.676723Z","last_seen":"2026-03-27T19:48:38.676723Z","alert_count":0,"request_count":13,"received_data":102293,"sent_data":6346,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xa19p-fxempire.com/","fqdn":"xa19p-fxempire.com","domain":"xa19p-fxempire.com","tld":"com"},"ip":{"addr":"172.67.190.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1028b88bfa554e5ab90c2bb5f829f0d1","sha1":"743a204518adda54b93a785427c4e9e0be570b01","sha256":"97246ab1047f340c4a6211c09699a1800f5d6ea98050765714d5a9fbedfadf09","sha512":"cf08ff05a0cd629c00af6786f456fb541107e56c2f3c10e31fddd4c7889591ab64321a0bc14d095b082647c6f867e9231fb1f036594fd64440f1ad7be6249978","ssdeep":"","tlshash":"1a1100793b2a1534c5d5418b317ee7a93d3260317a06a144c36ccc285d18ec314efcbe","size":902,"data":"","first_seen":"2026-03-28T02:34:56.753736Z","last_seen":"2026-03-28T02:34:56.753736Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"583876192ebfea1741e4394755c5eb65","sha1":"fb115e018c1d8ec52dbf19ddf1e4bd69748c3993","sha256":"e7066fbcca3dfbddb37f6aba83ecec4b8392ff7a6a99419ff323864c5f7fa5c8","sha512":"066a265fd1a46da05bd632b3e58a06a970098ec718c1cc35b3adbf4c58e5c53c49fcd3d985162549758024ac0e40e4ed2115dd27f9d74f75198ba963a820d95d","ssdeep":"","tlshash":"44d023691979893071a4024610b9e7956560716077556704c6ddcc6f7e21dd344f195c","size":217,"data":"","first_seen":"2026-03-28T02:34:56.754557Z","last_seen":"2026-03-28T02:34:56.754557Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa19p-fxempire.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"xa19p-fxempire.com","domain":"xa19p-fxempire.com","tld":"com"},"ip":{"addr":"172.67.190.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-09T10:28:26.294463Z","times_seen":297185,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa19p-fxempire.com/cgi-sys/defaultwebpage.cgi","fqdn":"xa19p-fxempire.com","domain":"xa19p-fxempire.com","tld":"com"},"ip":{"addr":"172.67.190.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"50ebc211cc9ca5c62e7206debbe4af9d","sha1":"7876bbd9817c89055f5890e8c154cf9262f59981","sha256":"66dd12abd53f61718a77dace9d016d921519030d63c4165661755ba28ec1fb5b","sha512":"eb731a234aaf16cc03a53907ce7eceb8eb340ee7d89e6b0b47d78784b39e28d6b2ba2b217430d76e1ac34f3efa635951523cbe35a856c5a54262c816000a1ebb","ssdeep":"","tlshash":"171100793a2a5534c9d5808b31bee7a83d3260217b02a144c36ccc695d18e9714efcbe","size":902,"data":"","first_seen":"2026-03-28T02:34:56.755595Z","last_seen":"2026-03-28T02:34:56.755595Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3c60f6c93e76c6250a2cdd66706131b","sha1":"b1beb7823f7193d3a9b77114a34da5e481809dd8","sha256":"720e76105d6ad71a2434b589c73451b01a97e7939526f121e403f558ef0421a5","sha512":"58c92df4601adf7564d54627f31f1b20677aef55a8c8a92ce28c5c5a9a133e853652629ec5ae34f5e4020921d8cfc3a095a394e99134c96ceb613492ead1f621","ssdeep":"","tlshash":"dcd023692879c53065f8014610f5e398257071507711a70082ccccaf7e21de354f155c","size":217,"data":"","first_seen":"2026-03-28T02:34:56.756779Z","last_seen":"2026-03-28T02:34:56.756779Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa19p-fxempire.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"xa19p-fxempire.com","domain":"xa19p-fxempire.com","tld":"com"},"ip":{"addr":"172.67.190.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba8d10ecbe494018308ed94d6c5d7e05","sha1":"200e4c8237473e40169a828c12ef3f1d6e669df9","sha256":"a316bfaf7cb6361360d5bb8e95458bcc86edff16cefbe9c1e66dd48370e272e7","sha512":"6fe4767ba357b49fe1df4c7d3ab94d0862b2698410d2be15fac5a22bd27557bf0e09ce65e692bd75d78b67537005dcfe7844015b1fafe13719c4cac6152a008a","ssdeep":"768:VsDg+d5qIxmjHgXMn1/iOqmnW2L9WqgZT:VsDgGxmjHN1/tqmndpY","tlshash":"f4b2c7db7ec7783bd3322074047f64cbd2edec84b044aa05c21199e8b9717d8969ae6c","size":25005,"data":"","first_seen":"2026-03-25T07:48:30.559632Z","last_seen":"2026-04-02T14:58:40.157417Z","times_seen":581,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"xa19p-fxempire.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"xa19p-fxempire.com","domain":"xa19p-fxempire.com","tld":"com"},"ip":{"addr":"172.67.190.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xa19p-fxempire.com/cgi-sys/defaultwebpage.cgi","date":"2026-03-28T02:34:34.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa19p-fxempire.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 03:15:12 GMT","end":"Wed, 17 Jun 2026 04:12:38 GMT"},"fingerprint":{"sha1":"C7:0E:26:82:EA:E6:23:73:D5:E7:4B:4E:06:55:BD:A4:14:AC:56:7A","sha256":"2C:80:29:0F:2E:7E:A8:F6:A7:94:98:44:E8:F9:80:14:D3:FA:8A:BC:6B:57:75:7C:C5:8D:B1:F2:28:A6:B2:65"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: xa19p-fxempire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa19p-fxempire.com/cgi-sys/defaultwebpage.cgi\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Sat, 28 Mar 2026 03:22:34 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zZ1Usvu0GgVmNwUFvcXFii3MCnTUiPvQJ4E1yMuGtIG7DisE606B4Fcm%2BKiAC7um1gB1x%2Brc6u4gCDzKCvBr5g%2BvHjNsa19eQfz2PdUDWpm7MFlSekSvGicqDiXKiQr1kkqQPAg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Sat, 28 Mar 2026 02:34:34 GMT\r\ncf-ray: 9e333c8ccfa37130-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-09T10:28:26.294463Z","times_seen":297185,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa19p-fxempire.com/img-sys/error-bg-left.png","fqdn":"xa19p-fxempire.com","domain":"xa19p-fxempire.com","tld":"com"},"ip":{"addr":"172.67.190.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xa19p-fxempire.com/cgi-sys/defaultwebpage.cgi","date":"2026-03-28T02:34:34.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa19p-fxempire.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 03:15:12 GMT","end":"Wed, 17 Jun 2026 04:12:38 GMT"},"fingerprint":{"sha1":"C7:0E:26:82:EA:E6:23:73:D5:E7:4B:4E:06:55:BD:A4:14:AC:56:7A","sha256":"2C:80:29:0F:2E:7E:A8:F6:A7:94:98:44:E8:F9:80:14:D3:FA:8A:BC:6B:57:75:7C:C5:8D:B1:F2:28:A6:B2:65"}}},"request":{"raw":"GET /img-sys/error-bg-left.png HTTP/1.1\r\nHost: xa19p-fxempire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa19p-fxempire.com/cgi-sys/defaultwebpage.cgi\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 02:34:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 8072\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Apr 2026 19:48:17 GMT\r\nlast-modified: Wed, 09 Aug 2023 19:34:12 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 24376\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PSRJO7svKA3JYJmyn1KcNdlEdIkDZo8GeyEMJSh7bE1VbrRGwo1epN9fJXQTgc7xb7c7xxmtY65jZfOsjC4%2BJvSfbqMNfkZ4QDYz%2BwYVb0v%2F2dNyZdx9Dr7LukaQr5UkWRonbAY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e333c8cdfa47130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8072,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 410 x 400, 8-bit/color RGBA, non-interlaced","md5":"cdbe46a0178886162bdedff35336154e","sha1":"f5acc131f7d3fdfbebfc4a55be73cf51c7638937","sha256":"862885b79bef22ad5716b2dbfa714d52f628a439f2921bb9520a4630bbea5d4e","sha512":"cd75baa25c17945a25381d08d30887ddcb4a42dda676f6189bd2e25c91e390197d2ebf68a86b74995a32483445aeeee3df7c0ff6bec9e8b69f1d84f3ee3423b4","ssdeep":"192:4FWzRDmuPuPjEAWYgZgwuJGaY8o84ntC6K0GrD7tSHzN:4FGRDmumPgAWLslY8o8yCjzr/tk","tlshash":"6bf1af71ca2b86519ebb4f95c1fa8397b851c92ecc03b3f68c2716376dd61b6452ac0c","first_seen":"2023-04-12T19:49:10Z","last_seen":"2026-04-09T05:27:38.502631Z","times_seen":26718,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa19p-fxempire.com/favicon.ico","fqdn":"xa19p-fxempire.com","domain":"xa19p-fxempire.com","tld":"com"},"ip":{"addr":"172.67.190.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xa19p-fxempire.com/cgi-sys/defaultwebpage.cgi","date":"2026-03-28T02:34:34.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa19p-fxempire.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 03:15:12 GMT","end":"Wed, 17 Jun 2026 04:12:38 GMT"},"fingerprint":{"sha1":"C7:0E:26:82:EA:E6:23:73:D5:E7:4B:4E:06:55:BD:A4:14:AC:56:7A","sha256":"2C:80:29:0F:2E:7E:A8:F6:A7:94:98:44:E8:F9:80:14:D3:FA:8A:BC:6B:57:75:7C:C5:8D:B1:F2:28:A6:B2:65"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xa19p-fxempire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa19p-fxempire.com/cgi-sys/defaultwebpage.cgi\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 28 Mar 2026 02:34:34 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sjLn4cCX61bECUeMW%2BJTGQPf%2BjlHqnq9LSAB0p8tLMnb4RP5aamkCn38KzdUzLxHJXVuov8g0LjaRm1KvhGvTVK5iNtPov7aaBOxopK7MDDpmHT%2Frr9aF3AWZsKr5WpY6VySyDk%3D\"}]}\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e333c8d0fa87130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":10693,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (4070)","md5":"b074edbdc2790d59bcaa7d2330e82322","sha1":"a1e9f66c5528a07bc573449fe0627e83e4a1b336","sha256":"afaae73d8f47b783192688eb7ee5292d849b98049c3985da1ec7e1f6b89e8751","sha512":"c4afe1f49650dbfcecb04672c7f4cf0e48e1f1bdc1c11ae335084522b13a9a46f024f16832bafb36494639ec3d627049d8df62d5a202cd50a7230a9e81ea19bd","ssdeep":"192:rlYHC0HNXGZkHQU7ydPJq5S2KqQVX/uTK3w3DK+tMy47R/Ga0kVhFuPwf8Pn93JX:FVGaRF8I80evxGi","tlshash":"2e22c66b2ae7005b3447a0ba6bba7201ab68f153d11fdd603f0db394df465918c93b4d","first_seen":"2026-03-28T02:34:56.745436Z","last_seen":"2026-03-28T02:34:56.745436Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa19p-fxempire.com/cgi-sys/defaultwebpage.cgi","fqdn":"xa19p-fxempire.com","domain":"xa19p-fxempire.com","tld":"com"},"ip":{"addr":"172.67.190.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-28T02:34:34.225Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa19p-fxempire.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 03:15:12 GMT","end":"Wed, 17 Jun 2026 04:12:38 GMT"},"fingerprint":{"sha1":"C7:0E:26:82:EA:E6:23:73:D5:E7:4B:4E:06:55:BD:A4:14:AC:56:7A","sha256":"2C:80:29:0F:2E:7E:A8:F6:A7:94:98:44:E8:F9:80:14:D3:FA:8A:BC:6B:57:75:7C:C5:8D:B1:F2:28:A6:B2:65"}}},"request":{"raw":"GET /cgi-sys/defaultwebpage.cgi HTTP/1.1\r\nHost: xa19p-fxempire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 02:34:34 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VkKNTqinAO9xaPAqaKNLb6FGXF6XC8oT26O%2F3c6trKK%2BZNY2oX7ekROWDvuG0Kb02RYXuw5k%2B1J%2BkPPEZ2hycNmv0ueNNjuFouY6hesnNBjiTAGyT0eHfLBZZchvL14rGop71O4%3D\"}]}\r\npriority: u=1,i=?0\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e333c8bef9c7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8134,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1038)","md5":"61a6e87857c5724866750efc55a56ac8","sha1":"df6558e36074abbbb2b7ced377ac7df45c7c7b40","sha256":"9df989c4e5b035080234c8aaa92d69daa2498f20e1ccc824aa6cd629d4212603","sha512":"bb107dc82ca7662d5f50110313bb8e5cb5dd2cf615c662e828ba2e08226d67f29bb1f59265ebc547ecb512802c33bacce3d7813b4656aae311deae0541316718","ssdeep":"192:LlYHC+H1U7ydPJq5AtyhhuT9w3y4E9SyJ0yv296aS1Rnx/k:/9LI2rS1Rnx/k","tlshash":"adf151172af20126604390b52bbba3157f34e053c61ecd447a5c96a8df46d92dce3f9d","first_seen":"2026-03-28T02:34:56.748469Z","last_seen":"2026-03-28T02:34:56.748469Z","times_seen":1,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa19p-fxempire.com/img-sys/IP_changed.png","fqdn":"xa19p-fxempire.com","domain":"xa19p-fxempire.com","tld":"com"},"ip":{"addr":"172.67.190.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xa19p-fxempire.com/cgi-sys/defaultwebpage.cgi","date":"2026-03-28T02:34:34.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa19p-fxempire.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 03:15:12 GMT","end":"Wed, 17 Jun 2026 04:12:38 GMT"},"fingerprint":{"sha1":"C7:0E:26:82:EA:E6:23:73:D5:E7:4B:4E:06:55:BD:A4:14:AC:56:7A","sha256":"2C:80:29:0F:2E:7E:A8:F6:A7:94:98:44:E8:F9:80:14:D3:FA:8A:BC:6B:57:75:7C:C5:8D:B1:F2:28:A6:B2:65"}}},"request":{"raw":"GET /img-sys/IP_changed.png HTTP/1.1\r\nHost: xa19p-fxempire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa19p-fxempire.com/cgi-sys/defaultwebpage.cgi\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 02:34:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 2939\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Apr 2026 19:48:17 GMT\r\nlast-modified: Wed, 09 Aug 2023 19:34:12 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 24376\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xv15aVoub4PXRxTXKY92sxlOs0F7LcowH9DB%2B5hWsXFbBsiB%2FRfQIC1RjTGGb%2BbaS9I5Gf%2FAhEVb4lsw%2Blnw5VOqw3pmJGhJ4U4XJXgPVD8qfNqp9C0NuJGrypn11%2FXhny4TKZs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e333c8cbf9f7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2939,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"ec081653bd4c836483e6d612588d18ec","sha1":"91c7e4cfa061808881575a875741773a949a9e0a","sha256":"b19da51b5e9c9b29cd8523d85d92e99e4812c891c394929c9bf67557f560672c","sha512":"b1cc98149afc9d9041bfc4e91a0990728f3f1a2c944e8819d4b131b60f8a2a03f831e855ce6efd478a651c2dce8fe715645bfe3d59699a442a4a6dc898bb406c","ssdeep":"","tlshash":"33513aaaf91e6c50834215dfa1e6402a2ed1e84e751430b326287afe53df8036a32f80","first_seen":"2023-04-13T09:27:24Z","last_seen":"2026-04-09T05:27:38.497752Z","times_seen":26711,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa19p-fxempire.com/img-sys/powered_by_cpanel.svg","fqdn":"xa19p-fxempire.com","domain":"xa19p-fxempire.com","tld":"com"},"ip":{"addr":"172.67.190.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xa19p-fxempire.com/cgi-sys/defaultwebpage.cgi","date":"2026-03-28T02:34:34.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa19p-fxempire.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 03:15:12 GMT","end":"Wed, 17 Jun 2026 04:12:38 GMT"},"fingerprint":{"sha1":"C7:0E:26:82:EA:E6:23:73:D5:E7:4B:4E:06:55:BD:A4:14:AC:56:7A","sha256":"2C:80:29:0F:2E:7E:A8:F6:A7:94:98:44:E8:F9:80:14:D3:FA:8A:BC:6B:57:75:7C:C5:8D:B1:F2:28:A6:B2:65"}}},"request":{"raw":"GET /img-sys/powered_by_cpanel.svg HTTP/1.1\r\nHost: xa19p-fxempire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa19p-fxempire.com/cgi-sys/defaultwebpage.cgi\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 02:34:34 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 2506\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Apr 2026 19:48:17 GMT\r\nlast-modified: Wed, 09 Aug 2023 19:34:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 24376\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fi1J3HH%2BMscAF70bQcedB6o3HgKE4N1VPk9LNe5LWU6kZBHJEn2gTZtKGYGR7Ww8pIkyP9oKd1yIUpqdCtkdMVQkR4Gd0D0Z39zgllfE619CjqMAVm687KKdl2%2F2OVhDbHG6yy0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e333c8cbfa27130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5617,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c47b4b5200566a2a496a11ba472ec5da","sha1":"3bd0da9a6ffd62217d3e781fa1356f40d9f91d4c","sha256":"179a9aa9fff4c52850d9ce34a4c435404ddfd4fefa8aab9a6eb4f47b83f922d9","sha512":"b67659bfb2f94cc1124eb88f7582ae2ee1c983210577edc9aaf6fdb65f6b0e2b9fd786169a91fc72a1ac0e8556bc09c7cf35395c7a038a6f6419660b7b64545f","ssdeep":"96:BDol4IVL19t2mY5Ib0Va4FALs/k2eerILEKQhnEIsFGFB/aStUY0NuhHkzTUgCgM:BGjR19tU5Ib0tCY8jeSEptRPFESt70NW","tlshash":"77c174f9c7a053f47ac38f5deb2966d0b0ebf8bd1ea082c451759368c4c0ad9e948874","first_seen":"2023-04-05T04:59:52Z","last_seen":"2026-04-09T07:36:31.086961Z","times_seen":40679,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa19p-fxempire.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"xa19p-fxempire.com","domain":"xa19p-fxempire.com","tld":"com"},"ip":{"addr":"172.67.190.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xa19p-fxempire.com/cgi-sys/defaultwebpage.cgi","date":"2026-03-28T02:34:34.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa19p-fxempire.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 03:15:12 GMT","end":"Wed, 17 Jun 2026 04:12:38 GMT"},"fingerprint":{"sha1":"C7:0E:26:82:EA:E6:23:73:D5:E7:4B:4E:06:55:BD:A4:14:AC:56:7A","sha256":"2C:80:29:0F:2E:7E:A8:F6:A7:94:98:44:E8:F9:80:14:D3:FA:8A:BC:6B:57:75:7C:C5:8D:B1:F2:28:A6:B2:65"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: xa19p-fxempire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 Found\r\nlocation: /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?\r\ncache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public\r\naccess-control-allow-origin: *\r\ncontent-length: 0\r\ndate: Sat, 28 Mar 2026 02:34:34 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9e333c8d1fa97130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25005,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T10:28:35.645765Z","times_seen":13536239,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa19p-fxempire.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js?","fqdn":"xa19p-fxempire.com","domain":"xa19p-fxempire.com","tld":"com"},"ip":{"addr":"172.67.190.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xa19p-fxempire.com/cgi-sys/defaultwebpage.cgi","date":"2026-03-28T02:34:34.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa19p-fxempire.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 03:15:12 GMT","end":"Wed, 17 Jun 2026 04:12:38 GMT"},"fingerprint":{"sha1":"C7:0E:26:82:EA:E6:23:73:D5:E7:4B:4E:06:55:BD:A4:14:AC:56:7A","sha256":"2C:80:29:0F:2E:7E:A8:F6:A7:94:98:44:E8:F9:80:14:D3:FA:8A:BC:6B:57:75:7C:C5:8D:B1:F2:28:A6:B2:65"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js? HTTP/1.1\r\nHost: xa19p-fxempire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ndate: Sat, 28 Mar 2026 02:34:34 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9e333c8d2faa7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25005,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (25005), with no line terminators","md5":"ba8d10ecbe494018308ed94d6c5d7e05","sha1":"200e4c8237473e40169a828c12ef3f1d6e669df9","sha256":"a316bfaf7cb6361360d5bb8e95458bcc86edff16cefbe9c1e66dd48370e272e7","sha512":"6fe4767ba357b49fe1df4c7d3ab94d0862b2698410d2be15fac5a22bd27557bf0e09ce65e692bd75d78b67537005dcfe7844015b1fafe13719c4cac6152a008a","ssdeep":"768:VsDg+d5qIxmjHgXMn1/iOqmnW2L9WqgZT:VsDgGxmjHN1/tqmndpY","tlshash":"f4b2c7db7ec7783bd3322074047f64cbd2edec84b044aa05c21199e8b9717d8969ae6c","first_seen":"2026-03-25T07:48:30.559632Z","last_seen":"2026-04-02T14:58:40.157417Z","times_seen":581,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa19p-fxempire.com/cdn-cgi/challenge-platform/h/g/jsd/oneshot/ea2d291c0fdc/0.36707159097325237:1774424211:9_pSV23kWGmNtldQToc5YDBzJFUfKD8QS_h75YB-Zx0/9e333c8bef9c7130","fqdn":"xa19p-fxempire.com","domain":"xa19p-fxempire.com","tld":"com"},"ip":{"addr":"172.67.190.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xa19p-fxempire.com/cgi-sys/defaultwebpage.cgi","date":"2026-03-28T02:34:34.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa19p-fxempire.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 03:15:12 GMT","end":"Wed, 17 Jun 2026 04:12:38 GMT"},"fingerprint":{"sha1":"C7:0E:26:82:EA:E6:23:73:D5:E7:4B:4E:06:55:BD:A4:14:AC:56:7A","sha256":"2C:80:29:0F:2E:7E:A8:F6:A7:94:98:44:E8:F9:80:14:D3:FA:8A:BC:6B:57:75:7C:C5:8D:B1:F2:28:A6:B2:65"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/g/jsd/oneshot/ea2d291c0fdc/0.36707159097325237:1774424211:9_pSV23kWGmNtldQToc5YDBzJFUfKD8QS_h75YB-Zx0/9e333c8bef9c7130 HTTP/1.1\r\nHost: xa19p-fxempire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 12191\r\nOrigin: https://xa19p-fxempire.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa19p-fxempire.com/cgi-sys/defaultwebpage.cgi\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":12191,"data":"y6B0QdM7VrkNNMYMNKVNuPnu2fuxuU0fh30Vmun0eYV8Ysh8Xu-0yY0Rsutu55um257uSoVPturxzMHilLBMe9lTBu4++uurauyX6n4utS$EbfyJSrn$utv7TCjw78fufdt6AEfAfemU+8Q0umgSJMdlMuelEq+QWBQbw03V2H24$J-mCBZmlBZHurdlE89bh4uug5lJPWqH$eP9Rg40uOX3u90VKU5YuJsLrkKkOpxGfu645Q35wux0uNg3uANtlEjZQrjou-+jvT-4dwuu+5tS03duu8113tdugB0M8ptBdlzcQBv0uKgn0xdaaogAxAxd6U3uaToB52w1uumf2fC6gVH3aH3NH3uhVHuqnCs3uB5V34OdSUf3MTxU6FfiKlzQHTQgnAA665-egBzs6gmBdX36spAkHMR00VVU3gZJRuVUgaQVKKJ4$3SK29KVYcP2cG3cq0Q$Tj73MCaa0ukrfXG3gVM+lXrOVUOdtljN5wQRuZLA+-2NWU+XOyCtgSQQSABuYXfV0TBOS4nxxdMaQ2oJcsZd1-mHa27YdHKvi2PsMPETPKG4abMxK-q5KH9LPWxE22wvQgY+Hz9Q3utyGnMx2ZZg6y2NrrdywFmEZmK18D0V7OgY5VWU9siMfhrLHqXu7OjVjsUjmXkH6gJntC2egW0zce3qpHw1Zj5SOAzb868qH+lVXXTbAE3m07OFoiuzocL9OhJujL$9CWTa54+jFpe+knLLKrkKRMY4sCxT0ByeXxjnQXHJRnf9aASz-ioa$VMauMpldnmnl$CmH30Xd6wn1oj-M9Dqm0oVNyoeVEYzjAbaz-kfgCxANfCaCCMhCVaan21u2X4k6K$8+8AumM6jCgijaCMVNWlCfHl0wm63$D5VqCDs6WltfBVh3sHB3ouDf3$Vf-l-osQ0oM6s3HDWMU1lu+SYTBa3YvdjCo1ueHq$f7nu9Nz+7Pn-c2MfU3w1un3oXmuU1sV5n8UBaCG5dgHPNHDQh3fiuXdfx0t$fTv8gVZgnfRGHhsV72s5o3xSPPN27uJ65d5B2$7VnK$dZfNg+O$+xhsR0XcVVFxusRsh3Zdpvwgg41CynaCgf6U3u36cxzdYUn6N7cR3DH-c2$J9h$HRV0zgm0MA200vuQHTU$nUMUo7$KAfy$og6i66YnXmaxnjoXd$PAlKYx$z1JX$HjBa$6Tr7nPAW9uKxl0f0aXRi22mc$+fBruHT6ii4AB94mH694JfMNu+1ls3CQXXQVm5wfhSEABWifo$isfWDnVYzDvVLpM4VlRmU1WqoomKzm3k+TR8iG7lhD6rMz$gAoofBBhBgPUnfKaKCzlJY6vla2UYOnBbFej+oVx$-vHZkNMBF8PeLD6B3hkuYhaHWiMhaHul-2YaCdTWjo79wE$ahu7vZrraC0Yr+U51-sMwqEY07ALo0Pff-ZMSoKakur+YkUWFZtbxoGl6xh$o$iiM0x6+CzAWMW2FsTfTi9v7-p9Rsh99JTWBaWTgMd2ZLqbYFg2RsMg382w4bZz9olZ$n4uqLfpwqjCLq3zw-EZh0uuxFAujY5uu5uxqaofk5M0V3u03MizAhwCX18U3JVE6WATH0vMBuiYmmu90NMMV7mhCuV7qoJobbDULdolYv7NvCUQXxuu2Oof3QU4MzAs+j+0nN7MjyBVoS$X0gmx945T2rh$MMzTSZSn8R7e2jeHaZno307KsAa10-tr1Kxd4KB3a37Vunmyftvao3TRYbsWXY9o9ugXekNsEuw93vU73pVByCBB7XWQ7aTxP50+mvpE9+3lzsfKPM7MaMYM39u8LokVtfaK7uCQd7KStJ463aQg0L-WRKV$zksfoxlgK3VUQJ23rXUVw$NQyAjUdcONRo$Jqf3XU3nkQkurq9Dy46$SUor-KaLMRgafVxVVPt-6$Mkd3sNuiM0SfpEOfGlMndntnJvX30E$wPPugy4l030kQtTvvvUJtu4$DU2ti9gz56v5agijquw3sb+yDnsb0coz5XQD-mAPv3qs0fnVGSfLMa4zUGdB962jgXTBuyBdAseU3XEXsvnT2WaHBUL1kyJEsUthC-Q5DMtnz-6snJVdfLO93XQ01KYHH93E0SHV$pKR9cntX$PxscSOrjodBqYB02NBtRXM1g4cg3jiB3+81fi5MK0uT5NEgerggc++TYYTBLl60XxUVhhvJmhMKV-X9h7KQH7JM3qkT4U10DXXZUKsMfPlaZhq7JGgBw0jfBtEAf9dWALth2zA2-7kuMH2nb7oM$s6qeD7+J047m9Cf57k9+3+5x3vid-3WHJ0nwgWtmdloKX2AttTY2r6Q7gEg4TJNuAOCUdOnfNRm+J7MP$XdBt3+0chLZJ10UTLyo1$vtM7mySvLshkU7BBU4+DDKdvxUAHMs8DhNHyYAPQMlihggvgFhgBQg4efPoo3Q2Y90CuQEVHbHokVut7okteyspLliKBS5M3GfGKRYuCTDcoLP55ZVUn3QQGBd8TY4d50gLzXvO3YDVr-sWDMl7RHhTCR7ZbYmjPhrnuQfHUrPOtM-pG4uym9DpNnkAOo+WGUX$vVsUdNECC$MOpEZYPur6Za+x$O6qo0B3+zjs-n5TKTi48s7W-Pc+y3+gsufTHYbQAKumnNlWUnjM2dASqbgxL3nfV0YQJTVoNidtdU$uwaYxyAPYXWm1gWkh0nsYi33ySDVPcS2dn8uW4SZNgGq3eVzjf49WXWSugfAVy8HURvdKm9w8azOEB8j72gZw0B$sUUrAfLCiuV+sDH7dsBn$h-RrWuMueYUQYQv$keTTUoJdWSpoDQ+vHSCW2CgX$Gh$sD796mMsBy2JxM0EtG2U7cBuiTTMYBa-hG9KHyKz4C-6OA9jNve$qVTzK+1UtYAXi+eUixJktfrE3E0tfMAKRyoXWirrNGGZi38cuKbkPx4k7yKo$uNkjhx3f6$FdmMgGNOog0XrtW+qsY6Zka3ZyRddOSeRjjt-5q+nfef$uELNrYK1jyANQU4DuYmg$B$rUoAq+hc5x5NcJz3Mho9T9wx$FS5lO4RP6wCplL3qz6YdmDgHBSu7Qyh0dSC1U1e6daxNeOZQtbm+zUoraHS-2vuN7Bwz7XsgEcJ5$lzmTkO$rxqSaVsSYJG9-lQXZmPxo$VMlRg1h1Fg7L1eOn7J$l+uarCfU525dNJSnZfDh+nor5T3-+W$dX2cti8aYtl+b96P+4xrohJXw$guZvq2lE1X0aO+AX$44QZ+M24Jgqjop3lhNwXffvsut9hVgqfgjW-bC0vd+HoY7owVgPXXhsErcwqnZxNaEXzpJQ2FDmEXxM0B0MzilX8mHyGjbLAylqpdfoiYrpBhWaZGiPgMr4ak0lLO7HG+-lRKOpUjQ$+Czc0ye-RjxBhfBXCm4uOSVmMXz4T$$1-0A3V+7-s3ZeptnfVVGDEcpCdc2TpPsD9Cvc$VDcq4sJNkZ0R4MP$aHMYP1G5$ZDUc2TrMY5qnYm-PO9hnxmgjapij6Lhnkjg3pmsLPLBfn1sABu$usJVd9K3p+cRmgCQ$WkWMocooHe+a2Jhu0GueN5mLRCm0XKXTd0PMmiQdEKRuL5+ji$uJRAWfqpg$Wsr9uK0+Ac$M7mYfhpk44cSTnM545TY3HAn9fn-G71-JDfBmOsdUEu$f1Ch0vLLan9sk6uhdVs6eA4scoJoBfl500QxLHe0BaGaTmjiLjy2uGKPUJigpjrwieaccKoXPnfbLs9f$$cdaVsOP1ccuvK61ym1C$Vma6MK07GZGX5ZJCpAnbTj5+3nc53FDr4Ssnm5pi$kJgKiJ-jEB8ckG3+M3NQBt9sBuaQ$faj+41VdB4ckLgBwpPeyKYiKmXs6AoMmrGaKrjjBCxfEtEBb4ElukYn5VaD0j5DXVglUGNtE0pkWkHLd$6Dz9WUDpmQF$LJ-$-d6UqJbJ1aFpG9SDD$7a$KPmioNLiL+d$VYUdGXdJLkcd95AXn8eA4RVauSGotJLHAKobGY$93-LDy2f+o$+oGk3vi6KNuqJj045TGVJ$AO$mo7JDmrkdKMK3eAJJdkcSQwa6a$fRo7Li3+A3UweqoruMlPpg5BfErVPV$mCkLicS$tfYAskC0wCkLLa6ig0XPtyLaWT$mtr+TQc90UtDJ+apssUut6iul55hJgsUlUrBABAeiWehJ$m+eff5VM364Rjfu6K6Dh52o5B2iJyauMUUdVjNGUA4s6fYAWk2aYKM3UDpUjdBrbUQ3sG0jpj6mpGY5mj5a$thQda5fVfuy$VkC6npMJiou$GrmmdfkY9tfDJkyBkRtQjHA7jMUb0X0vj+36KWfHkjCWymP-rXtPo1QmBMT4BTt0CRf6UHkct8ChTfBUBpDv5BoMVdstcWMtJMf1cSPM0kQuAc$akZ1xe937rPniLlef0it7P1CTa6M4CS4RA3T$ADj1BGndVXpZJssbr4nnBnB+fwUJddiZ+$96CjQapd+G9gpCJbL4exCHJfnWnwUmcnTfkxeUruHoy$MmQuBnA2orfCrH3MAomFL13gm3eHeoouvKtcCuru8XUYA9MYP2BuNqGqGHgd5RBzit3vQMGvrp5vt$o9QyMl0rAea5KtsNVY1ymjj6Trtg+O18PP19r0OvG0XGyG3jcZd-nScGQRksXHM6fruyQD3Sei$MoPdS1MQfyL$WiAjRif1RlaZPmvifeRssByPvPi+lnuf5VHUh57gulLDYmqcsgMp+nPyHkiBCe+DeL-jCPP3Zpvs9iN83QRy4+j9$ucdfGtrgomi4+PaHQD34B7CujnMNP6f7PcJgsnCRVWmDUrVvC7jl4-KqoVmslby$oEdrgWdM9djb9Sj9dZT2v7GNDEiFcEHt9JkHLok1L09av$uAG$laTrutlE+$uZ5J513N+J37LEHcTOek4cmlAEf6fYCaU3e4n55mjmgba5mDA45oLdsmQd3+uHU3XMj9tk9LiVfid-9O$1lUpKjMlyComJO+PpDleZ5wu+mdDKiofR+cTmJJkgVYu68KP2HlTV$2pdM6vMy2MZcT+dvDDsgDBuN+4xtupKHhy6XX$3sdVneN8v$AG-0JZXvdlDiRcSHLiGTQTl4RtD0fARGVvqltH$uL$mtAuejrM$N5aPfEcdOJK2C5lVPRe+95m+UTKYN04ki+DlOf8StEd2NBLn$W3ATV1MHV$JmEifAdPWLxD-jBMejCdENzLDNd+-NElceLHH9wkm4bcArUr88vs5nC3L1Y8BN53dHGBOG1jtpsurm9rXgmeAjutsCHUffPAPkWH+fHsG8wvyMrJq4yAl+vsisyeuH7o+AKBYXgyn$YmPQDDeyG37LmMucujBmfeQQpckQm+NfP+-J-DxiWVPX6aY$zieBDHNG-TCKSyHQRympRDb0VLJB+ucDuJZ3NtnX5GCN5yCe08JJ2jdMdOHUYGtULj1t55oXyQq3snAiMt-O-ZWMKvkKb154Fpjk5a-Z2T+gYdldVBHDDPTBvJvp9sUoctkpd8gVW0LjrsPczZdA-fzfhe$QMTnA0tHV1Tv5W0rkZ$dQaoAGKrry-rulhPygwf+Q-rvDntBNUe2p$V-QDL13q8OGsJ2pvolTGvk+MTvvndDUbiwXtXH26i5u4OB81j$laVHKVPEN5ucdG9wkJ0xdZTwuDKJ1qji5t+Z9gQx$bCRtCBXi-8syrmCas7yPHVat2g2LiyHM$HUT+dUDL5ntJi$ouv4G$lMridRVRUwmaoL0voxZCPoK$5auV7TcOjug$uXt$u7LL3wZsf$TW12DtluGlUdD1fj2eXuMkNYdbLsqfA41SiwTNedMtU0JtjEr72WUnmUDO8M+Eai1xQWeRVAQuSCHLHHa+9cXXOkQXNlNS8S8DTQg+frmrfaoNghcklfx0DHe+OmgwCqjbaq3cobKb4crveMJfg$p40i5mjnGnGr4+LLKMNqDtectZy+1m2rMrurvL+hCJsYk$BYN+DXAGHuZ+$9sHu8imA7riOn0L0Ny03M3NQcOs7QB+ufoyL93btJQS0vobgZTaB60rQNkQPxeHBHVYrMmc3BKau5sAsVNJiEC7Y1rz+QgNCpm6PW-NJEmMouNfQSkeHVd6VrBUHMDxvd4FCH8BHKONrCsVPKdd5a7UfDyfXVCh0GyKpo2s28SaM8YPxArCgfu1gNkEv0HhNl8UODiD10Z7gZKbXbHX$n-mLRBl3YNnG1fMqgLrA0qBm9N4dyQOyy+Y8gNhxv80ChYYg-aH-yZEO9D4P1P2-93s3xLRsrUmJ-nQOHLAJLqtnL-U8BLaNvHMpNgOKRUmpT9PaDnfMmWKgY0J$9TvQgWcCh5RCya0eLlSHQLHtD5WAWUYlfYgM6d-rLGyy4vdT+-2mVNOc7ObH1y++Q8sqQOSOyyZy2UBL+5Tt6Gqn2tmSxD4KG7fN$cvtXuTjtKxB1tsguqCvvW6BxL8lqZQG+cA0X1qgyD8$fMr2NfzN3QlXfAVVLo7JTtHMxcEvTJ$AxKXLRPYuLC6PH76PWfRXooMMygpNnAa-cqWVw4kvXlQvXWTZ+WYm7MblvYWamfdmE0nUMZb4EVTvkYl47+d27ZZpjU82oSoYz1oxZ$fpSDRj4t5jNfDVNAwHvcYYl4cNY-p2y9RSajhN4qD1Uv0bQNv5A+-N5DUgff4+XLjsMK4Ka9E5GQmpbHUXEOHMWTQ2ar5uTpE$Cty98KZNTx87uOQlfQEveJx4c797apx9ruvcnaBusTx0DVrq6rSTyB-ewtBpSnfYG4j615Fr4lxUooRmdJOBnmt+SxNSY3eWZWoRpP+Z+KP2wy-POgE227JHrOU9U4KxaYD4Bl0zrYNj4OOt5XCJGaaLhZ12qNHZWJHKMUApsUpgRqdVSKz4n$JVZl8L+ijgaLMSPSmZ-fJ2gfNM2hXBHTL+WselqJ3vmGAkzx0NlGlLUSpgYz3Z5tZyhDGXP4P4vTcSmWXM1taUpLrbV8KP1JP2M9hxlDd$jO1nlPtMhs$7HZ4XwVKKQHk8U3dXjjaHuHVgaEM-wJA9b9J-3ywuQidAwKr5f8sqfZe4xyrA6WOPnpEsG1ySVtpkgv54BrMYYNOZVff-V$E-rLfVkCZ-4xJlJUZxZZ$D-5L4z2mJWn3Z+SNy8RjTWkeqCFgnkrjtgKQZ7pfmHxn85aX2CUYh6Rb5lFr6XbZSM-nmOqWmYTvOaUfNnV7sjs5EvJcHPFdA8OaAj+Eozlu8NxpGAMQgDRlLeBVGnadYQDjy$fajQJ603GG05YUfGdV3nuAZ1pYXxA3m7RgvCxtZKUmcby5dTBaUTQSp5cZi5AEUaAXiE5p8YwQ7jwwGjwVdgNa3rRtnpT-EHfEtAnRis7a-JPa2MVe7KZWURJABZ2f3paZtxyxy9D-YvcxejL+5$4+i22dWp3dSkxmT27ismDmT9Ko8MRg$Hr5QRtlHbzbFOhuknNmMT2E6FCEwR9BZAndbre5fEriFk4zQ3tDB+UR9hES79Nh8lO4BfjTw$4PRgTNFD-af2yfl+vdaTHE$Hy5eVM4hwfQ3gBr7ArOFB4mB0rglrvuEkymr7KVMzuyR$AY+mTs8BmBBVEaMunmoruzu5t9NqAP6p$Q856Kzt+CBxUruUNoN99BntYV8v7BB2a47QvUPRSvlRMCU2SM0j8kyaGDC+UGO9Ji6$h-0vo70AVKgdbuUazm2XQpAAJi--0maq95zUrVbMVYdbl55ojxo6M-0HoqzmuV8lDugsE0iY+Bfw$2LaYjmM3-SC$0OTYd+0w+yBlJu1l-BrSM3U8DtCRkn6Jd+oMB5j$Gn7ulk7DPHlGVDoQ0jlSug-LMuSnws304gln3rV3LJ3Y3XyMfesMnkB2tBeHQfyU6d6f$2VY+kfeAMCVn7iatmtKUO$n6ArHBYHx8CKUUVoK6sS03naA4faJ$L302tJ0vJyVJrxjTHujQMMykjMa2QunbMoA3S33Sr3EgjlGVgMg0YurYWaymCOk9HMF77tatpK4f6KSDtY4WKPuduhgrzBrtal3Su3jmkU-YKBMjRnHiKD$9YajytAWnc$hWTBxseKUOBf$t3HrMSkEX5kgKhBUd+ed73bMZ$cNA6tElGVr3$uje+itKVR3h3dHAjfB4NVl0blHnM$BBSBelko1P8bjuo0LDXbtnanEP-fSjBr+Kh7nVMnfSzkRk4-AjXaYs3dBCmqnr7ZoC+QvUfM7aX0hBaYrod8R5Vo3VNBHnUUuglC6HHBnsWdPPKVd-09KSGMDsVkHjGni3nFBcV5mJhMN66VaWCitVPSsWfBd3qCGSRZl3nerruxNQYJhhbBTr42kmpAMHdNHSSxSyKtvC6VWYCS3Q+flJkD1cthBff34CtAdMoGhBn34kVzUDVBnK2rj2juOUM$NH4ojrWml-fzBO8zJyBaWaHkQuG770CYqSmsl0MaCHYRYnPlNd667Ca4rH9Pyh05LVCdFafed$pVFnCo9u2NxV+PutVLVwuVfVHk6$TkG$W+2pf7tRAOVa$Oq9urTo1mDrrD3Yk+MkcoC1V3ninTN-81UAPuganhxDgJyvm7MRCr6JfARrbKCstBQYc7WtVPkyn-CvYEst8UNlklwHn3FGt9dQfbMj6QhWfmrQGS$y7u8YzJtCUgAbHFBakBH7nsxndd5u5uU0fzUs2tnFDHB3V7Mr6V3L7gboACttA4dV7X$A2DVxEyaMBr0Gc0Q7aWtPKY4g6HBWgQ5KcdxUtagYYfrwUfV6uwuX0UND1Gahm3ht63joUiiKoHCl6tKDkfCUVMDMa7uDyd2-mn08H-BmhB3eCloVR3u0YssuB7nJXmlJsrsv9vpfhRPExY3JMf+o4+YrTGaRvr51+ysMNEp7X0T6kRToMAzkJ-ruZvam9YL5-PEaUdxQPmo0Ecuxwx6VHk5njCc2WQ9ouSdrJuC9rzsQj40KHmHf33wUV$VCe$QGkjHMQ33MaUHPPuuuaijASu7VAuaZmzf216uG12jsdWGvu3a2dMwf+puJi4A8KUChMt3MCQY1Efb0J7FsHhAHl84o$aMW0PrPwo9my42VDQn0ZQs64DVz0wbMOidLGM5M2P0B23AHrj$xh5uWleoqVMi6DN4MtoQeVoAR5jKv266V+4GlmUlX7t3Y+R$Ucwh-VgulhkjqS9luNCo0YH8fU9k4UM0GXbbuVWYUDis$KaYH1cMhkUUeun2RjBF8KuS16uWYYH8NSriWiRHDWcV-R-S3SS-ku3EBYRvDB9n2z33Fs9aSTyWifYCn6BKftGeAVtn1fKAk7xVrYkwnwsnrHH98laMc19X4sSeX4elusJs3zrLrymuj1a5487oY+U$oEkPu80gtKeUKQEm6UJuxYGkXeUMMEuLHo0SaamUmV+1l0h3kj9YUg2D$gukoU6taiM4q41H20TrfLTf1T1g6zsl6fye2ko51S79APuXKworaQS3jgG4$oX0aMwSla7JMByDY6MbBXsKWeSur$m3pSgjSYUylVY0uZSJ6zofoUdX8cRYs7haOAtYutkhuC0qomwCrbGn10D22ta-PO1Xce$iNcCMVPR374HhL3twtit$0SJFNj7EwZilaurM0ht7cRBt1-5O13HyYjtapQx5EL2h0Rl+fEnbiXM66eNc83YkjRMsthxYZKQ9l61XS+h4sJlthUC2i-BsxwSW3huMnEEpSh0+tqierVmobuxNJxeBmHUwTbBnEFU+HBb5AJiHxNZDvqltR5nyhw7ZDgTfuJ$5QYzEL3meedkGnG0phfwDbQFPduf3nNX0fu8J1jYgHZEi9sWruaRETYA7EMaeQ09qsxhw75dV$aVcG3hua7yG9BmFl6+6hw7CtSq0b5W3fjL8yGaBQi53+PulqAw93XMdjQL0sjqtKoNLCvJJWWGVgycVtcJM90SG7G9iCfVBrpSoVFug53bPa4qjxVzf13vfDDo0ViVLqrbkfTahRCxN8mKBVWd2U2UoA+1eVAs9H+Caqhrn90tF5P+xnxrBCnpyj1kCcjGVzanvM1ProEU4dgouu8B98QeYv7nCn7m84CopUFd5t3o8h1MQsU9d6lKu8A5$Q4rq7G$7i3D4W+xfRWSw9hVK9M+a5Bvqt2rf5iK1M0ydRMnjkJ9Kcy$c0k8uAe1U73p7DVp8UaZjMvcPuyGK4BHKfTy+5JnJKGtet4xpHHmQdFFZitHhABHmkKcnaT4SdWC4hmP9Xn4uN9H+EVbyWXWpeN1VcEVAgSXqSuMfZyHr+J$SWNHRTc+thgJhGfrZBBvJLhT0VXqiyBu5uvu9sAJei+v0iltj-7M$aEOT40Hbhw7sfq0f+Tf6h6T17BAEXJvgL2UB+j+l7v+cGn+ur3MmnpeN$ovNUHaUNYZJnT94uSyuN$-akj69kbBao3eM4m5J7htU1sG$WVdlDo0GCB0u5xxl$lf648xNNWu5s4bGnBrGjn57FLk1XobBZ39+BQeGPm3WUZoZUqSKAJZ3xUHBrt7EHwidnZ0pfV6S+ObdpQ1fwAkJlVe5DFk8BZfMflFcnk1kDUvo$JUQenHKg-0ZN6LYrf$9dJcTs7bCKOyyTw+65Vk+LWKucAUrWXwGaLYcBWYmX9nUuHre6koCuX+CpdhANmXGu5Qj2628DTQBTiRMoLzsV0Mbry9Wc9TREFGWtf49au0hG7OyWEgPkxJ2h$gPtYiQ4a5v5KJ7P0l6kQT-U$T9f9ySPZvTw3RLe+GTKbV4C5vKhS2d8xD8bTRv1Sz7$OY2OxiZL$L0RaSYGXA9n+jLBRwl4tNA3n+CLR33hYgNiPOCTLrEdPuRNNVQctfNBEhqJNTDsHih$goOqGOl$e6hfwRL0fdsEDmvch5VCO-qe9aGgZ5$g5w2AfmbZgAh+0ywKWNTTRjTLygEM9WNT90QXL12EM9tN0joQu5rmbE00vupo+$CKmLMKwXDDY+jLtV$T42ZoDPXkTX2COK3NsD+vJUBEx$HG8HDzv+y717z4LUs+yvGU22z$ntNyT7+P8ZVb70BvplkVxT6doz9CZJuKQnLdgRn4OaYLJQgyxmCnSK8YjgQcLqDnn8prTT2+-UH6CTqHOdcxgGBfPf1YlXOUuxktTdztTlXajlHl+-2Gl76XgTYxZUHmpk-6v3afxZUNVH1-6N3jtxo5+mcc2S00ptx05jmoLYsgNLDuN5+6bzqhMVjwHwn6DXk7aHOT5QOL8K$QWaM-DyvG5NEPcW5gD99grOUrQS9OrTTh2GY$PRS7rgpTSxkTXJsS7XXO9T2+YsJOyqTX+L-QcLCJFSW55YG+vGOCDcS2jXbmbQJu2JpvSjgY$O2z5cDEhDPvKGZkD+T04E9gvsME3X$O6XxxXdhA6HMUTtecuoUBD0$QupKAxxc$fjbMLo4oWsWKkxaPfBugYVHuEM+TCgF+z6pxUrVogbMiHquBFvWGLAEgnXM7qui-GVURkbBtbTRK5Z1aFxYnr2oBBz8nmJ2flqx95WJO4MWuUs30KuuuAHr-Joa0yum9V7uuuOAomwk8nysYB42uEVOiZOQ3SBSEr01a12BA0Dd-K+PV94PMzNkoyi3Y0fdX$X+G20uu4QMwoKuqfB00WVbuFB60t7X2UV68UmHzf7YD8tnMeuY$2sKg4Y5pu+RRCg8iu+0MGu2Mw-uuVdVVe0uu5tQNTG7uGdxTTrQYVYkH3Q-k0Nu+K$5G-uh-mtZ93xNyLGbgM30qi9dAhji$z-uuxihLGbffHWhYMAZhG2oYuTHMuevOypEbFj2rK0M1Z3u2u4oPWceqcXsn4ukBJokA-uA1pRRQ-ph30feVdKX0azQu7dxHAWpwMkrtLTreHulpa$a$V8C0BYfMDb0Dz4uyZ9jVoVDntzu+JRl2V4DjMRu9WO0lMfBQ10kXkuv39+fOMHXxEiZrClMkN1ZduHFgTrfgm1ufRRBPfktxa3LdmdJ$sztBM-r1ic5efzaW8+PkxaYRZuv3BGlZXERH0BV5HAA91NlpfR63eu+Yt4X7d33vgwo7ol2V8kZR0liVKjMHVOkXbwoRWHKf0AhLVnBuEW1uJlfodrc7rzanJUKy4k0XG-6jdETKr0$0s4JnBNd4fUOMeMWHM0l0A0-bj6M1lpu7qQ2kYrWg+HLMiuQ2uPUgg-H2rz02PuukfVwbuXMktjiO2Y+tFx81gCjFbE-ntsiYuSfkumr-60UZu4gfkBHr-pjpTPumU5$MLkD$p0lMMndduqfLouuQ6Gm0uu"}},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/plain; charset=UTF-8\r\ncf-chl-out-s: l+KN2jIKQhtHW9+h0GJ9iw==$crkal2xUB9gb78yaI1JZGg==\r\nset-cookie: cf_clearance=8VBOBtF8iTzyxtIZANJBCQDbahJVVTHUyhaP3n0SqM0-1774665274-1.2.1.1-dFlnr38KuBBiLkmlHuz1Lv0YSBD867RhTmPlnEkkqFEQ6_hEY4ymmL17JsofLjh53V6_nvhsKZ3SgBAeRIOxhtC8DvAgaJdAFCQ1_IFLyAmIlEuZjWUzaCKMxKIH5.Kd9.JSUEIcvbMNtdOrDtH5Y2ZiDPsKW2b_jkuo.4E0TNQjXRbFaANfkxdo5TPpiZv.zpEKDVUttF5Oh_22sLZa0zIBWvCar4_UfQGjGtZPg_Q; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=xa19p-fxempire.com; Expires=Sun, 28 Mar 2027 02:34:34 GMT\r\ntiming-allow-origin: https://xa19p-fxempire.com\r\ndate: Sat, 28 Mar 2026 02:34:34 GMT\r\ncontent-length: 0\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9e333c8ddfac7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T10:28:35.645765Z","times_seen":13536239,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa19p-fxempire.com/","fqdn":"xa19p-fxempire.com","domain":"xa19p-fxempire.com","tld":"com"},"ip":{"addr":"172.67.190.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-28T02:34:33.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa19p-fxempire.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 03:15:12 GMT","end":"Wed, 17 Jun 2026 04:12:38 GMT"},"fingerprint":{"sha1":"C7:0E:26:82:EA:E6:23:73:D5:E7:4B:4E:06:55:BD:A4:14:AC:56:7A","sha256":"2C:80:29:0F:2E:7E:A8:F6:A7:94:98:44:E8:F9:80:14:D3:FA:8A:BC:6B:57:75:7C:C5:8D:B1:F2:28:A6:B2:65"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xa19p-fxempire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 28 Mar 2026 02:34:34 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 13 Jan 2026 17:15:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vk1cailHYKCvTt6MMpO7JHnyW3OxNqyPjKdvZT%2FN0rdhECNVfVe1kseG%2Fecb1frUwuiUaLY9M8BVJtdW6RqNO%2FW0OZBNmStP%2BdSqFlWvlyjKQiCY5sRZ3YjTk7gFXUaJkCulPEM%3D\"}]}\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9e333c8a6bf78be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1082,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1081)","md5":"676611015efd6709b8a88e250ada6725","sha1":"fa94bf600be5ad12cd4fe1848443d21078cfbdd3","sha256":"0723f906997300e124d049c83072375af565be861f8afb903a1049aa308bed00","sha512":"2a1704f21f97599fa5ec11ab52d5c8d43db4b5f1b436e81fe5621b373322ca4f8b7d60c7391345956fc35a2c57a9fa566649e48784a99b473d7ca229e864ff01","ssdeep":"","tlshash":"d01142b82a196534e5d5908a31bde7a93d3260207a01a184c2addc2c8928ed304dfdfd","first_seen":"2026-03-28T02:34:56.751816Z","last_seen":"2026-03-28T02:34:56.751816Z","times_seen":1,"resource_available":true,"data":null}},"time_used":137,"timings":{"blocked":37,"dns":28,"connect":1,"send":0,"wait":57,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa19p-fxempire.com/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"xa19p-fxempire.com","domain":"xa19p-fxempire.com","tld":"com"},"ip":{"addr":"172.67.190.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xa19p-fxempire.com/","date":"2026-03-28T02:34:34.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa19p-fxempire.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 03:15:12 GMT","end":"Wed, 17 Jun 2026 04:12:38 GMT"},"fingerprint":{"sha1":"C7:0E:26:82:EA:E6:23:73:D5:E7:4B:4E:06:55:BD:A4:14:AC:56:7A","sha256":"2C:80:29:0F:2E:7E:A8:F6:A7:94:98:44:E8:F9:80:14:D3:FA:8A:BC:6B:57:75:7C:C5:8D:B1:F2:28:A6:B2:65"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: xa19p-fxempire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-09T10:28:35.645765Z","times_seen":13536239,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa19p-fxempire.com/img-sys/server_misconfigured.png","fqdn":"xa19p-fxempire.com","domain":"xa19p-fxempire.com","tld":"com"},"ip":{"addr":"172.67.190.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xa19p-fxempire.com/cgi-sys/defaultwebpage.cgi","date":"2026-03-28T02:34:34.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa19p-fxempire.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 03:15:12 GMT","end":"Wed, 17 Jun 2026 04:12:38 GMT"},"fingerprint":{"sha1":"C7:0E:26:82:EA:E6:23:73:D5:E7:4B:4E:06:55:BD:A4:14:AC:56:7A","sha256":"2C:80:29:0F:2E:7E:A8:F6:A7:94:98:44:E8:F9:80:14:D3:FA:8A:BC:6B:57:75:7C:C5:8D:B1:F2:28:A6:B2:65"}}},"request":{"raw":"GET /img-sys/server_misconfigured.png HTTP/1.1\r\nHost: xa19p-fxempire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa19p-fxempire.com/cgi-sys/defaultwebpage.cgi\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 02:34:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 3164\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Apr 2026 19:48:17 GMT\r\nlast-modified: Wed, 09 Aug 2023 19:34:12 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 24376\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2GLyGhsKdLUJ8qY6B79TT7IwJK8unpybBsRVHQA%2FnCI8xFN3WPXFNf7SBT2FV1U2NDIQ8H1WoAHIDWHXkNXh0LK3Rst1gsiRaxgSUkD4ZAgLh69zoGehLw0mHsmKozWpSkUEzow%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e333c8cbfa07130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3164,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"f79adaf00f83dc9757086cdbe8645ff0","sha1":"82f37b8be7668eab8e1a06de828cb336799c8134","sha256":"944120fb6962c7484d769d645e6d830850eead9394f6a84090aed489cfc0c41f","sha512":"eb7db97a73d4fd8ff7acc027582a2564636ee9d92f19365da11ec4c80be62418450fd0b37ed1462d56489c52fa1ab69008b040fad7795151dc1d26ac59293f6a","ssdeep":"","tlshash":"54513b80a9156c08aed83aacb51d109b84003ce5a8372cc480728fffb61e8b36aa55dd","first_seen":"2023-04-05T04:59:52Z","last_seen":"2026-04-09T07:05:19.5365Z","times_seen":40672,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xa19p-fxempire.com/img-sys/server_moved.png","fqdn":"xa19p-fxempire.com","domain":"xa19p-fxempire.com","tld":"com"},"ip":{"addr":"172.67.190.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xa19p-fxempire.com/cgi-sys/defaultwebpage.cgi","date":"2026-03-28T02:34:34.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xa19p-fxempire.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 19 Mar 2026 03:15:12 GMT","end":"Wed, 17 Jun 2026 04:12:38 GMT"},"fingerprint":{"sha1":"C7:0E:26:82:EA:E6:23:73:D5:E7:4B:4E:06:55:BD:A4:14:AC:56:7A","sha256":"2C:80:29:0F:2E:7E:A8:F6:A7:94:98:44:E8:F9:80:14:D3:FA:8A:BC:6B:57:75:7C:C5:8D:B1:F2:28:A6:B2:65"}}},"request":{"raw":"GET /img-sys/server_moved.png HTTP/1.1\r\nHost: xa19p-fxempire.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xa19p-fxempire.com/cgi-sys/defaultwebpage.cgi\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 28 Mar 2026 02:34:34 GMT\r\ncontent-type: image/png\r\ncontent-length: 3327\r\npriority: u=4,i=?0\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 03 Apr 2026 19:48:17 GMT\r\nlast-modified: Wed, 09 Aug 2023 19:34:12 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-turbo-charged-by: LiteSpeed\r\nage: 24376\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9og3Q7Sdk97zU915n5XMlGQNVz1ycSW5IzdeRs1ChvGM6MZRAiZnv2tKKN44Bw5u2XfDGcRIxBsnAcUXIoFFXqJQSOHtXcAe10G1b43pphrCpgBfYMAaFf0IP5F6BN7nqjHoQ4s%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e333c8cbfa17130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3327,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"f6590a396da81a8e4cce7ca046874ffd","sha1":"7e68db322c32ca079b2c836812d3a25204ab93cc","sha256":"3a22057583d3e17bc94990d92a3425d5510dc5bdb60fe40fafeb405a38f8ed28","sha512":"cf4ae5e172feb6923bfd5ad4f302bf63250f4072774fb29efb0846167ea95d708299047cb18e4c72deffc5d24040a35049d778685f7cf96801ee8d4769a25fa1","ssdeep":"","tlshash":"486139d62986504a264a0c61eaf5ec963065301b28789a3e8527cbcc96c8a9e698c317","first_seen":"2023-04-07T07:55:56Z","last_seen":"2026-04-09T05:27:38.500336Z","times_seen":26705,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}