{"report_id":"c46bb2b9-6ed4-40b2-ac9d-bc0fe630fa6a","version":6,"status":"done","tags":[],"date":"2025-09-22T09:42:39Z","url":{"schema":"http","addr":"xtradeflexair.com/","fqdn":"xtradeflexair.com","domain":"xtradeflexair.com","tld":"com"},"ip":{"addr":"172.67.210.133","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xtradeflexair.com/en/","fqdn":"xtradeflexair.com","domain":"xtradeflexair.com","tld":"com"},"title":"xTradeFlex 1.9 Air Trading Crypto [Official Website]"},"submit":{"url":{"schema":"http","addr":"xtradeflexair.com/","fqdn":"xtradeflexair.com","domain":"xtradeflexair.com","tld":"com"},"ip":{"addr":"172.67.210.133","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-27T09:42:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"images.unsplash.com","ip":{"addr":"151.101.130.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-05-29","domain_rank":86676,"first_seen":"2015-08-06T06:03:25Z","last_seen":"2025-09-16T04:11:24.112102Z","alert_count":0,"request_count":2,"received_data":235047,"sent_data":1364,"comment":"","tags":null,"fingerprints":null},{"fqdn":"xtradeflexair.com","ip":{"addr":"104.21.61.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-01-07","domain_rank":0,"first_seen":"2025-09-22T09:42:40.574055Z","last_seen":"2025-09-22T09:42:40.574055Z","alert_count":0,"request_count":18,"received_data":522963,"sent_data":8768,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"SiteGround","description":"SiteGround is a web hosting service.","website":"https://www.siteground.com","common_platform_enumeration":"","icon":"siteground.svg","categories":["PaaS","Hosting"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-21T22:11:31.014241Z","alert_count":0,"request_count":7,"received_data":264069,"sent_data":4133,"comment":"","tags":null,"fingerprints":null},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2025-09-21T22:11:36.895165Z","alert_count":0,"request_count":1,"received_data":88169,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-09-21T22:12:58.070161Z","alert_count":0,"request_count":1,"received_data":1005,"sent_data":503,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-21T22:11:31.798564Z","alert_count":0,"request_count":2,"received_data":19457,"sent_data":970,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2025-09-21T22:13:29.38864Z","alert_count":0,"request_count":1,"received_data":85231,"sent_data":477,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xtradeflexair.com/form/fform.js","fqdn":"xtradeflexair.com","domain":"xtradeflexair.com","tld":"com"},"ip":{"addr":"104.21.61.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c38d1a988fea409f4b690297b9d5bb3","sha1":"3d5e1879255adf2b53333c8076b1498e7ff3aeb8","sha256":"d717f5bc356c7b2717657418cb1b77d24eefc7bc6bb843bcc8718e833ac4a42e","sha512":"2c43e7d56f35c6c98955e73ee4fa25864c2520956767e0d04628e714ae5ea3ffad3895064104ff3a7f4bfc8c12e31a5c2e043d816afb9537d446697db1385c06","ssdeep":"192:C5RTyaEyEpOAQdp7CknyfDVUZjmu9HZkhDsEF2kU5g3k2XF0M6AYA:MRHvEpOAQdp7CknyfDVU5mYHehQQUUOS","tlshash":"5d3262f4deab007f09f732d570aa0719b7e8836b5349dc167e798e6d2be9c28114066c","size":10993,"data":"","first_seen":"2025-09-22T09:42:47.596309Z","last_seen":"2025-09-22T09:42:47.596309Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtradeflexair.com/form/scripts/intlTelInput.min.js","fqdn":"xtradeflexair.com","domain":"xtradeflexair.com","tld":"com"},"ip":{"addr":"104.21.61.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d54142fffed6c850edbfd5be723a3038","sha1":"e8cbeb8e0c88fa006c707850828ee910f85024e1","sha256":"91e5bbf15529de628e73cc318ebce847383d743ef521aabac85cf57f074c0ebe","sha512":"9919c98c3c50fcd08ac9d7f4d08b4c4e73fdff7a8282ecb6c6e39ea8de585b842c2a5f4e2c2b83bac39465adaa3d81b2999c0cb19fdc9b9bdda1d5f850bec787","ssdeep":"768:1sqD7GzOoS+D45YMJR3QWG6UdC8OxgtmKg3vTpzaDvCY4R:XfHQWodCjgtmKgNzazCh","tlshash":"aad20a9973551237a89aa0a1687f16472ebf34015a84cc8cb87ecdcc1feced9a1b5734","size":29483,"data":"","first_seen":"2023-04-06T17:18:59Z","last_seen":"2026-04-02T09:59:36.743886Z","times_seen":1215,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtradeflexair.com/en/","fqdn":"xtradeflexair.com","domain":"xtradeflexair.com","tld":"com"},"ip":{"addr":"104.21.61.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88313ff00b26666e97b3fdcdd0d33d48","sha1":"250959dd3dc9bb7595ebc642e0f65bd5bbe27aa2","sha256":"27e224fbe5f2bce1bc9bf68fa1256d46e89196fe3c3e5a90346f87894839bc51","sha512":"7821abe7cfc23cfcc792a684482e1214d08c8229f9d6e5cc93d9e252bff0c185edc85451f4cf612af76d8fa7afcc6190da56a729b5659a8353df049f7ef54b64","ssdeep":"48:awJu7yft8P7eP3Sv7hDDdYL7eD0jSG7NwJSX877ng+t47ejeQTP3SpDCeQTD0jSx:dJuP2SvYZSLJS2DN4qStSxn","tlshash":"0ae19a9b31d345b04dab39fa67abc784396080031c46c9117d3ca6824f71db6a97ebed","size":7421,"data":"","first_seen":"2025-09-22T09:42:47.617645Z","last_seen":"2025-09-22T09:42:47.617645Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e40ec2161fe7993196f23c8a07346306","sha1":"afb90752e0a90c24b7f724faca86c5f3d15d1178","sha256":"874706b2b1311a0719b5267f7d1cf803057e367e94ae1ff7bf78c5450d30f5d4","sha512":"5f57cc757fff0e9990a72e78f6373f0a24bce2edf3c4559f0b6fef3cf65edf932c0f3eca5a35511ea11eabc0a412f1c7563282ec76f6fa005cc59504417159eb","ssdeep":"1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa98:7NMnJiz6oAQKP5a98Hrh","tlshash":"db83d6d9b2c67062977730b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","size":84245,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-04T09:38:10.115117Z","times_seen":53972,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtradeflexair.com/en/","fqdn":"xtradeflexair.com","domain":"xtradeflexair.com","tld":"com"},"ip":{"addr":"104.21.61.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cdcfdcbe17fe9e2b4165816c6aeb2036","sha1":"b8f4b2610306f16e8c46ac905c7ed4080f49d98f","sha256":"71633a9f7db9c5a8c12682c6d09005014f52f042fface634439265ae66edf07b","sha512":"8e93a7bea968f802631df2f25ebf9775cc71e88aaf4e00bd31455acc13336e00e02506741a44e1b1083df46448ecc789c40f18e496279a3dab5202eb5cb3e2d1","ssdeep":"","tlshash":"1f012b61ebbfa1c94af10195593456a0cecd0032d337f4a1fe8d6f643c92e4cc919258","size":673,"data":"","first_seen":"2025-09-22T09:42:47.61927Z","last_seen":"2025-09-22T09:42:47.61927Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtradeflexair.com/form/scripts/intlTelInput_localf9e3.js?v=1.1","fqdn":"xtradeflexair.com","domain":"xtradeflexair.com","tld":"com"},"ip":{"addr":"104.21.61.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c842a597efef36b81e35c624f13e025d","sha1":"8ed9eadf4858fb1bb7c54c9814f30397d95a355c","sha256":"f50733bbdf74ed6d900d21d145764f3af20266f873a7fb4ce54a25123ebe5fd3","sha512":"cfa55f50dcabd2768161439fc925b3b1f9a3eaf129a71ea3cfc4950649870ce8219bdbfd44806cd9a6677c897e69eaa5674850a62e90180d903775cc0b8bb8d5","ssdeep":"384:k7M4O1ZZ97Qx3ijKCoAwwTzs5Q1Zoo1gXD0NC9zLHMucyqin:Zl1Z37yieCoAww/s5SZ+yCdLHq+","tlshash":"f592f70873655936bd6be0f10de72b2f0c3eb8441b04d96e749dcec98964be829b3635","size":20162,"data":"","first_seen":"2023-03-07T15:01:54Z","last_seen":"2026-01-29T09:57:59.059517Z","times_seen":179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtradeflexair.com/form/scripts/appeef3.js?v=0.3","fqdn":"xtradeflexair.com","domain":"xtradeflexair.com","tld":"com"},"ip":{"addr":"104.21.61.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"afca992cc27ea5a375095f3e8f3e09dd","sha1":"62eb63c407b751804d6a196014719221639a74d8","sha256":"9dc02a811ebd2629bdb836c1e5bc424864497a406a92594985738c0ffe675a6f","sha512":"7194f136d2018f754c8dc342f5e396e0dc15a5ff47f570094ecdbd16cf5b80287d93092cff6dde0ef3dd26efa34da92be52e947b3b4193ddde62fbea19488b1a","ssdeep":"","tlshash":"85e0265ed479438a9036d4f822cb3b368862288f1671d257890c0025055ce40c40070c","size":309,"data":"","first_seen":"2023-03-07T12:05:28Z","last_seen":"2026-02-19T13:39:33.472563Z","times_seen":182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtradeflexair.com/en/","fqdn":"xtradeflexair.com","domain":"xtradeflexair.com","tld":"com"},"ip":{"addr":"104.21.61.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2d30ec0962f7be96367ee198a9a88b26","sha1":"369525d0980c539e199ef8997a66fe080332b2eb","sha256":"6772356a1c58607b8f0b5155e44adfdd7049287cfdec65f97fe71437be6b07dc","sha512":"6262771359f3e218fc6540765ffd8f88f028ab7635110f18b7d1130f999a7410631af500d4d82f7f214b5ce50ec7f959419c2e7e30c0fc1f27865dce5c246f4d","ssdeep":"","tlshash":"a361373da96692c226fb106d2bf726b4a537463b6105fd013c4c1bc0afacf2e5615b09","size":3445,"data":"","first_seen":"2025-09-22T09:42:47.620896Z","last_seen":"2025-09-22T09:42:47.620896Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtradeflexair.com/index.js","fqdn":"xtradeflexair.com","domain":"xtradeflexair.com","tld":"com"},"ip":{"addr":"104.21.61.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b91f26a496c666c375da3404dcb22d5c","sha1":"65914dcb64a159faa0432c60a93436a2ca5aa4c8","sha256":"324160562a1037584074b510ef812a1a4dcb22afa77222167e172ce48f4330d7","sha512":"e4ba371efeb962b12126b538ebdbaa2d2b68471b8c5740cdfc43dbcf754961d2b53f1c90afdcbd37dc18654c93aa8c46f5e189a0b41b4d6efbee0262314ed967","ssdeep":"","tlshash":"5f81376b7969043808ff776763a7db8cba328093684598153e6cce454f72e8044b7ed9","size":4040,"data":"","first_seen":"2025-09-22T09:42:47.610966Z","last_seen":"2025-09-22T09:42:47.610966Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-04-04T09:37:58.100412Z","times_seen":136232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtradeflexair.com/form//js/jquery.i18n.properties-1.0.9.js","fqdn":"xtradeflexair.com","domain":"xtradeflexair.com","tld":"com"},"ip":{"addr":"104.21.61.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6847950b0ebc508d631e9b8e12125a16","sha1":"51e30f94fbf2c490a99ae69cfa4e65b40ecd8c7d","sha256":"342b9c91134307ee8ac5b04b5f8f1cd2c71fdbfb45188c6c55e89cf374affedf","sha512":"74d74a16c87a30c8b90cafaa74d65d142bbba3d13b16ef4aaec61892beba6818ca5c4394875c5e739b8f4c4b44af5f6b544a9f49b141079e6d52b786a90aac04","ssdeep":"192:c+iDJtkMWXZu2PclZtfmx85x6XwaUXdNE+qkid3tM65BtgcRyz/iWQIGs16SUJQI:cJqMWY2PqZ1Qo+NswYXISphv5j2","tlshash":"1f82b7087a060d1e4ab233b02abd2884da79c4774911a1f5b8dc77543f7cda942e9ff9","size":18242,"data":"","first_seen":"2024-05-23T10:18:47Z","last_seen":"2026-03-18T03:40:01.067826Z","times_seen":164,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtradeflexair.com/en/","fqdn":"xtradeflexair.com","domain":"xtradeflexair.com","tld":"com"},"ip":{"addr":"104.21.61.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5497c10e7b054db5a9189e751049eeff","sha1":"7504882b04ace86ad9a918646a9494c793ff0747","sha256":"22887c57cd9dfdfd0f264f04d4086cb8c833a24dce07811610a6843cef706ec1","sha512":"bf03951451718f113ebad46ca7b4fc81e87a97629f90f1578ff4f8bf70d40da35191fe51a068e77b9af8dd0dc98a7587182ed3a0c97cab8cb02dfe1f0740c426","ssdeep":"","tlshash":"0b314c5a72e6c97008fb39e725c7c3c839214843694490053a6dfb528f27e9299377f8","size":1479,"data":"","first_seen":"2025-04-17T18:07:42.507401Z","last_seen":"2025-10-14T22:59:29.819539Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtradeflexair.com/en/","fqdn":"xtradeflexair.com","domain":"xtradeflexair.com","tld":"com"},"ip":{"addr":"104.21.61.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"41622b2b0a8226c719e9ddcd71dd68dc","sha1":"6be965e26884b741993fc3fc958fc8287b91eb2e","sha256":"c64081a231bd9708c82b8131f5af3ec0786a1ea09ea39913b5d4567be0c4d505","sha512":"ef839947de2aa979ffcc36067a9d4af76dbe520f5c62a57492611271e2ef0b475448942176963022b15ede3a3a36edebdae51305c696bb38470c3151a6b11ec2","ssdeep":"","tlshash":"0731900484594791ee3723a2f65f8610348d06738ac8fc607e5c03807f9479a5a685d9","size":1445,"data":"","first_seen":"2025-09-22T09:42:47.625303Z","last_seen":"2025-09-22T09:42:47.625303Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtradeflexair.com/en/","fqdn":"xtradeflexair.com","domain":"xtradeflexair.com","tld":"com"},"ip":{"addr":"104.21.61.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e6adabac5839572e492b5ce2b7eb60ae","sha1":"1cc5ba8b2279e8447221d8f5a62b84dc202cb62a","sha256":"0003c057001953badf5fc9575dfcee75ec8eba674a6c4e0cff40eab57b10a1a0","sha512":"105af7701661d5b174e2da490cab1ce6804563376cc237b2c3a3917d66df21c2bae11d0d4ad9461bd9220b00466708fa0b02f31d8525144a2e145850ff8c9ad0","ssdeep":"48:9zz0R/+P7w57euNDiDURpHrknOb1bF+TzUBuEl+CD0RL9eD0jSU:BY/+P7gxgyHLS4uMeDSU","tlshash":"b5b1f35d34e245b89dbb26daa3dbc3c57da0042f2902c005301cfa851f60df67979af9","size":5496,"data":"","first_seen":"2025-09-22T09:42:47.627057Z","last_seen":"2025-09-22T09:42:47.627057Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"images.unsplash.com/photo-1639821685087-74250b876743?crop=entropy\u0026cs=tinysrgb\u0026fit=max\u0026fm=jpg\u0026ixid=M3w0Mjc4ODF8MHwxfHNlYXJjaHw4fHxTdG9ja3MlMkMlMjBUcmFkaW5nJTJDJTIwQ3J5cHRvY3VycmVuY3l8ZW58MHwwfHx8MTczNjI2MzIzM3ww\u0026ixlib=rb-4.0.3\u0026q=80\u0026w=1080","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.130.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xtradeflexair.com/en/","date":"2025-09-22T09:42:18.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1639821685087-74250b876743?crop=entropy\u0026cs=tinysrgb\u0026fit=max\u0026fm=jpg\u0026ixid=M3w0Mjc4ODF8MHwxfHNlYXJjaHw4fHxTdG9ja3MlMkMlMjBUcmFkaW5nJTJDJTIwQ3J5cHRvY3VycmVuY3l8ZW58MHwwfHx8MTczNjI2MzIzM3ww\u0026ixlib=rb-4.0.3\u0026q=80\u0026w=1080 HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xtradeflexair.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-imgix-id: 96b14324ddf8a828274945375923a2743e40f589\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 16 Sep 2025 04:22:40 GMT\r\nserver: imgix\r\ndate: Mon, 22 Sep 2025 09:42:18 GMT\r\nage: 537578\r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220067-FRA, cache-hel1410025-HEL\r\nx-cache: HIT, MISS\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 52994\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":52994,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1080x608, components 3","md5":"3e5e0c20db1e300aa2e838a24f94f1e5","sha1":"f2df3d287a699f5455d415c3dcae3fb9041cd33a","sha256":"297a0dcf41dc459ac0c186883d9ef80be0e95d460101e874d10606c4283e5dff","sha512":"4e14d35392345d20a29ea91d5ca1aa0171efaf54bd310f149c760df1ec746f3048521e67e19480cf6ad64c9048f6d4faddc87be4d6257ba0f54017b719504abe","ssdeep":"1536:QgWca55Jplxl9bZEmLADuY7igsVXJY0D96sFLn:AcS5Jpl/Q4A72+Ip","tlshash":"4c33f1118ae6e357d2ced37a0811d330c3b6971d97b4af19b24a8b432f481e99d0f899","first_seen":"2025-09-22T09:42:47.592741Z","last_seen":"2025-09-22T09:42:47.592741Z","times_seen":1,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":55,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtradeflexair.com/form//img/flags.png","fqdn":"xtradeflexair.com","domain":"xtradeflexair.com","tld":"com"},"ip":{"addr":"104.21.61.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xtradeflexair.com/en/","date":"2025-09-22T09:42:19.699Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtradeflexair.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Sep 2025 11:22:16 GMT","end":"Sun, 30 Nov 2025 12:20:02 GMT"},"fingerprint":{"sha1":"DE:8B:D2:47:77:CD:71:D5:6E:D0:F3:57:91:5F:5C:94:14:2B:0D:B7","sha256":"56:90:D6:2D:A3:2C:CA:CE:1C:33:4C:5A:F5:21:8F:26:6E:7F:BB:9F:1B:BD:BD:19:10:53:FB:46:EE:98:55:0D"}}},"request":{"raw":"GET /form//img/flags.png HTTP/1.1\r\nHost: xtradeflexair.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xtradeflexair.com/form//css/intlTelInput.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Sep 2025 09:42:19 GMT\r\ncontent-type: image/png\r\ncontent-length: 70857\r\nlast-modified: Tue, 07 Jan 2025 15:28:42 GMT\r\netag: \"677d482a-114c9\"\r\nexpires: Tue, 22 Sep 2026 09:42:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sN6pZ6eSQcRTw820Xqv%2Bdhbz4eZvNt0xlOg3vQ9tPMPV9R8l4NnmHMuAICBbx75v5RO72xVHCRtUhJezu2b8oepnqixGmERLSoS336SffQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9830da0519f556be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70857,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 5652 x 15, 8-bit/color RGBA, non-interlaced","md5":"416250f60d785a2e02f17e054d2e4e44","sha1":"21572c9751e5a3dc20395befa0fcb349c32c4811","sha256":"0a012cf808a24573168308916092d2d4bd3f2b4af8e16b59167013cc77acee55","sha512":"cf1e7acf47464f00d206e9149475e22b8ea5a31727fa16344cd151384d850b83ece5e9abe4ac62861dba0dc3d3410955611d94665b60e2faa0c3d7a3d7c88404","ssdeep":"1536:cBBfgWxg7McnRdaRx9krb5LhxHG1gmvlpWUZA1eog3e7xr:Lg+3n3ax9kHV3Wgmdg2A1Y3elr","tlshash":"9763019797adf1d82a92274bef801109ae6c2b3d5d7c1da372cf1d532ae12c306c8586","first_seen":"2023-04-05T15:31:12Z","last_seen":"2026-04-04T03:43:53.954673Z","times_seen":22575,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":130,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtradeflexair.com/form/scripts/intlTelInput_localf9e3.js?v=1.1","fqdn":"xtradeflexair.com","domain":"xtradeflexair.com","tld":"com"},"ip":{"addr":"104.21.61.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xtradeflexair.com/en/","date":"2025-09-22T09:42:19.803Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtradeflexair.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Sep 2025 11:22:16 GMT","end":"Sun, 30 Nov 2025 12:20:02 GMT"},"fingerprint":{"sha1":"DE:8B:D2:47:77:CD:71:D5:6E:D0:F3:57:91:5F:5C:94:14:2B:0D:B7","sha256":"56:90:D6:2D:A3:2C:CA:CE:1C:33:4C:5A:F5:21:8F:26:6E:7F:BB:9F:1B:BD:BD:19:10:53:FB:46:EE:98:55:0D"}}},"request":{"raw":"GET /form/scripts/intlTelInput_localf9e3.js?v=1.1 HTTP/1.1\r\nHost: xtradeflexair.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xtradeflexair.com/en/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Sep 2025 09:42:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Jan 2025 15:28:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"677d482e-4ec2\"\r\nexpires: Tue, 22 Sep 2026 09:42:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JaWHjMsa6RKAot7MaIzgM7qyXYyPiw8fg7vDBWL8TiArd1EzcOoQIDmmEBmle3zIIUSQtGmtLdTVMGeDblkwO0Q%2B91rFtcwzmSaPCpsXlw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9830da05ba1456be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20162,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18823), with no line terminators","md5":"c842a597efef36b81e35c624f13e025d","sha1":"8ed9eadf4858fb1bb7c54c9814f30397d95a355c","sha256":"f50733bbdf74ed6d900d21d145764f3af20266f873a7fb4ce54a25123ebe5fd3","sha512":"cfa55f50dcabd2768161439fc925b3b1f9a3eaf129a71ea3cfc4950649870ce8219bdbfd44806cd9a6677c897e69eaa5674850a62e90180d903775cc0b8bb8d5","ssdeep":"384:k7M4O1ZZ97Qx3ijKCoAwwTzs5Q1Zoo1gXD0NC9zLHMucyqin:Zl1Z37yieCoAww/s5SZ+yCdLHq+","tlshash":"f592f70873655936bd6be0f10de72b2f0c3eb8441b04d96e749dcec98964be829b3635","first_seen":"2023-03-07T15:01:54Z","last_seen":"2026-01-29T09:57:59.059517Z","times_seen":179,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtradeflexair.com/form/fform.js","fqdn":"xtradeflexair.com","domain":"xtradeflexair.com","tld":"com"},"ip":{"addr":"104.21.61.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xtradeflexair.com/en/","date":"2025-09-22T09:42:18.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtradeflexair.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Sep 2025 11:22:16 GMT","end":"Sun, 30 Nov 2025 12:20:02 GMT"},"fingerprint":{"sha1":"DE:8B:D2:47:77:CD:71:D5:6E:D0:F3:57:91:5F:5C:94:14:2B:0D:B7","sha256":"56:90:D6:2D:A3:2C:CA:CE:1C:33:4C:5A:F5:21:8F:26:6E:7F:BB:9F:1B:BD:BD:19:10:53:FB:46:EE:98:55:0D"}}},"request":{"raw":"GET /form/fform.js HTTP/1.1\r\nHost: xtradeflexair.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xtradeflexair.com/en/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Sep 2025 09:42:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Jan 2025 15:28:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"677d4827-2af1\"\r\nexpires: Tue, 22 Sep 2026 09:42:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4CA3%2FWho2DF9Oe%2FGBL26eYB8z9z5Y17w52FRRAWTPirdFYPXTZl37nSr5o1IIorxd9nfZnE6FhvSc%2BCkLsi%2BrE1rfU%2BiF%2FdEj5DZR3e8sA%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9830d9ffe9c556be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10993,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"2c38d1a988fea409f4b690297b9d5bb3","sha1":"3d5e1879255adf2b53333c8076b1498e7ff3aeb8","sha256":"d717f5bc356c7b2717657418cb1b77d24eefc7bc6bb843bcc8718e833ac4a42e","sha512":"2c43e7d56f35c6c98955e73ee4fa25864c2520956767e0d04628e714ae5ea3ffad3895064104ff3a7f4bfc8c12e31a5c2e043d816afb9537d446697db1385c06","ssdeep":"192:C5RTyaEyEpOAQdp7CknyfDVUZjmu9HZkhDsEF2kU5g3k2XF0M6AYA:MRHvEpOAQdp7CknyfDVU5mYHehQQUUOS","tlshash":"5d3262f4deab007f09f732d570aa0719b7e8836b5349dc167e798e6d2be9c28114066c","first_seen":"2025-09-22T09:42:47.596309Z","last_seen":"2025-09-22T09:42:47.596309Z","times_seen":1,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtradeflexair.com/form/fform.js","fqdn":"xtradeflexair.com","domain":"xtradeflexair.com","tld":"com"},"ip":{"addr":"104.21.61.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xtradeflexair.com/en/","date":"2025-09-22T09:42:19.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtradeflexair.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Sep 2025 11:22:16 GMT","end":"Sun, 30 Nov 2025 12:20:02 GMT"},"fingerprint":{"sha1":"DE:8B:D2:47:77:CD:71:D5:6E:D0:F3:57:91:5F:5C:94:14:2B:0D:B7","sha256":"56:90:D6:2D:A3:2C:CA:CE:1C:33:4C:5A:F5:21:8F:26:6E:7F:BB:9F:1B:BD:BD:19:10:53:FB:46:EE:98:55:0D"}}},"request":{"raw":"GET /form/fform.js HTTP/1.1\r\nHost: xtradeflexair.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xtradeflexair.com/en/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Sep 2025 09:42:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Jan 2025 15:28:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"677d4827-2af1\"\r\nexpires: Tue, 22 Sep 2026 09:42:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nage: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y2usPUzGTB7eeD84740%2B6aYOyTBqeh6iBwZ5p3eo9nmVruTZitnVNsG2spVqXejCnWmcCzfPMc05pKEZan38XKRi4TGfHoLkp3Zu2XKIOg%3D%3D\"}]}\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9830da0159d556be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10993,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"2c38d1a988fea409f4b690297b9d5bb3","sha1":"3d5e1879255adf2b53333c8076b1498e7ff3aeb8","sha256":"d717f5bc356c7b2717657418cb1b77d24eefc7bc6bb843bcc8718e833ac4a42e","sha512":"2c43e7d56f35c6c98955e73ee4fa25864c2520956767e0d04628e714ae5ea3ffad3895064104ff3a7f4bfc8c12e31a5c2e043d816afb9537d446697db1385c06","ssdeep":"192:C5RTyaEyEpOAQdp7CknyfDVUZjmu9HZkhDsEF2kU5g3k2XF0M6AYA:MRHvEpOAQdp7CknyfDVU5mYHehQQUUOS","tlshash":"5d3262f4deab007f09f732d570aa0719b7e8836b5349dc167e798e6d2be9c28114066c","first_seen":"2025-09-22T09:42:47.596309Z","last_seen":"2025-09-22T09:42:47.596309Z","times_seen":1,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtradeflexair.com/form/images/loader-large.gif","fqdn":"xtradeflexair.com","domain":"xtradeflexair.com","tld":"com"},"ip":{"addr":"104.21.61.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xtradeflexair.com/en/","date":"2025-09-22T09:42:19.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtradeflexair.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Sep 2025 11:22:16 GMT","end":"Sun, 30 Nov 2025 12:20:02 GMT"},"fingerprint":{"sha1":"DE:8B:D2:47:77:CD:71:D5:6E:D0:F3:57:91:5F:5C:94:14:2B:0D:B7","sha256":"56:90:D6:2D:A3:2C:CA:CE:1C:33:4C:5A:F5:21:8F:26:6E:7F:BB:9F:1B:BD:BD:19:10:53:FB:46:EE:98:55:0D"}}},"request":{"raw":"GET /form/images/loader-large.gif HTTP/1.1\r\nHost: xtradeflexair.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xtradeflexair.com/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Sep 2025 09:42:19 GMT\r\ncontent-type: image/gif\r\ncontent-length: 8492\r\nlast-modified: Tue, 07 Jan 2025 15:28:42 GMT\r\netag: \"677d482a-212c\"\r\nexpires: Tue, 22 Sep 2026 09:42:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TuHULAd9PcG0jSQk1YM37nglHIrahXFuPMS5mMntw5409HHnC%2FeRgQL1o913P3%2BA%2BDVEcTYII0r7afMWBu0KXuj29pHMPGCM8kW%2FqzUuNw%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9830da03f9ec56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8492,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 64 x 64","md5":"9af25aaeb6ca6d08d213b04841813eb5","sha1":"bb9b0f2f1a67dbd00edf250517cbb0a0efac66d5","sha256":"aaa44f4f1b112d4d6734068832424958a99c79466c7de279b58c219f7bdb8561","sha512":"da6520c07e39bb4c15194897c459d30eda8460df54ef9ba5ba5afd0597284807a5ea7cae760f79f10575b6768bdb03ad6aa004afb7c67dadd7bf49e8db7b76c7","ssdeep":"96:VhMXf3prKPf34fjJKfP98giAhoiEfZE3S4WfPdZlD2IAT3wKg0KVx/pH2iUDu/50:V2BeQYP98AodiiRnli/wL0K/l5kjBDLP","tlshash":"0c026d2d91b4c1fcc9a90bb6c589e58e1737ba64598e282b7880ffa33c513a750d44e6","first_seen":"2023-05-09T16:37:14Z","last_seen":"2026-03-20T11:03:59.986348Z","times_seen":80,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtradeflexair.com/form/scripts/intlTelInput.min.js","fqdn":"xtradeflexair.com","domain":"xtradeflexair.com","tld":"com"},"ip":{"addr":"104.21.61.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xtradeflexair.com/en/","date":"2025-09-22T09:42:19.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtradeflexair.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Sep 2025 11:22:16 GMT","end":"Sun, 30 Nov 2025 12:20:02 GMT"},"fingerprint":{"sha1":"DE:8B:D2:47:77:CD:71:D5:6E:D0:F3:57:91:5F:5C:94:14:2B:0D:B7","sha256":"56:90:D6:2D:A3:2C:CA:CE:1C:33:4C:5A:F5:21:8F:26:6E:7F:BB:9F:1B:BD:BD:19:10:53:FB:46:EE:98:55:0D"}}},"request":{"raw":"GET /form/scripts/intlTelInput.min.js HTTP/1.1\r\nHost: xtradeflexair.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xtradeflexair.com/en/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Sep 2025 09:42:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Jan 2025 15:28:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"677d482e-7351\"\r\nexpires: Tue, 22 Sep 2026 09:42:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3KLdV9dwwSivzDCLDCOdOKXi9l3zStoKp4jWUQDb145WxOpBCy7ezdZv9rM4A3LWSxIxjbohTFsUx7PGbgYLOUMbowW%2FTfYMawpuXaCNuQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9830da04d9f256be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29521,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26958)","md5":"d54142fffed6c850edbfd5be723a3038","sha1":"e8cbeb8e0c88fa006c707850828ee910f85024e1","sha256":"91e5bbf15529de628e73cc318ebce847383d743ef521aabac85cf57f074c0ebe","sha512":"9919c98c3c50fcd08ac9d7f4d08b4c4e73fdff7a8282ecb6c6e39ea8de585b842c2a5f4e2c2b83bac39465adaa3d81b2999c0cb19fdc9b9bdda1d5f850bec787","ssdeep":"768:1sqD7GzOoS+D45YMJR3QWG6UdC8OxgtmKg3vTpzaDvCY4R:XfHQWodCjgtmKgNzazCh","tlshash":"aad20a9973551237a89aa0a1687f16472ebf34015a84cc8cb87ecdcc1feced9a1b5734","first_seen":"2023-04-06T17:18:59Z","last_seen":"2026-04-02T09:59:36.743886Z","times_seen":1215,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtradeflexair.com/form/ipgeo/index.php?t=Mon%20Sep%2022%202025%2009:42:20%20GMT+0000%20(GMT)","fqdn":"xtradeflexair.com","domain":"xtradeflexair.com","tld":"com"},"ip":{"addr":"104.21.61.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xtradeflexair.com/en/","date":"2025-09-22T09:42:20.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtradeflexair.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Sep 2025 11:22:16 GMT","end":"Sun, 30 Nov 2025 12:20:02 GMT"},"fingerprint":{"sha1":"DE:8B:D2:47:77:CD:71:D5:6E:D0:F3:57:91:5F:5C:94:14:2B:0D:B7","sha256":"56:90:D6:2D:A3:2C:CA:CE:1C:33:4C:5A:F5:21:8F:26:6E:7F:BB:9F:1B:BD:BD:19:10:53:FB:46:EE:98:55:0D"}}},"request":{"raw":"GET /form/ipgeo/index.php?t=Mon%20Sep%2022%202025%2009:42:20%20GMT+0000%20(GMT) HTTP/1.1\r\nHost: xtradeflexair.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xtradeflexair.com/en/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Sep 2025 09:42:20 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nexpires: Thu, 01-Jan-70 00:00:01 GMT\r\nlast-modified: Mon, 22 Sep 2025 09:42:20 GMT\r\ncache-control: private\r\npragma: no-cache\r\nx-httpd-modphp: 1\r\naccess-control-allow-origin: *\r\nhost-header: 6b7412fb82ca5edfd0917e3957f05d89\r\nx-proxy-cache: MISS\r\nx-proxy-cache-info: 0 NC:000000 UP:\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nau2ljeupduHxU2mvILpLjdS23EuXxxxLJ5WFgT4AJPeA5vQfDacAS0tbvX%2BzyB86MzACfkzACaMbh2WDEAZATtclOeZrulcGC%2BrpqMfWQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9830da07fa1c56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"SiteGround","description":"SiteGround is a web hosting service.","website":"https://www.siteground.com","common_platform_enumeration":"","icon":"siteground.svg","categories":["PaaS","Hosting"]}],"data":{"size":105,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"9e2579d45d84ac62fa20a90cac6c3031","sha1":"e09ac5ff262f598ee7e7c004587da2566021be9e","sha256":"19271c4f48e4da26b3c2d9ad78f43684763124fa4f07fedf7b1e82761607ca58","sha512":"515001b9291446bf15f43b716f530ddacea207003adfeca999801a291b242de90ab773f16e3f107b0af7aa85f0f1c716a23e7150c4c6abb6d637880aaf4f8baa","ssdeep":"","tlshash":"2db0122f40220d568461c189e4423c03418d0543efd41f2b90c82fc690fd0bc0300540","first_seen":"2024-05-23T10:18:48Z","last_seen":"2025-11-04T08:18:46.140317Z","times_seen":35,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtradeflexair.com/style.css","fqdn":"xtradeflexair.com","domain":"xtradeflexair.com","tld":"com"},"ip":{"addr":"104.21.61.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xtradeflexair.com/en/","date":"2025-09-22T09:42:18.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtradeflexair.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Sep 2025 11:22:16 GMT","end":"Sun, 30 Nov 2025 12:20:02 GMT"},"fingerprint":{"sha1":"DE:8B:D2:47:77:CD:71:D5:6E:D0:F3:57:91:5F:5C:94:14:2B:0D:B7","sha256":"56:90:D6:2D:A3:2C:CA:CE:1C:33:4C:5A:F5:21:8F:26:6E:7F:BB:9F:1B:BD:BD:19:10:53:FB:46:EE:98:55:0D"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: xtradeflexair.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xtradeflexair.com/en/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Sep 2025 09:42:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 Jan 2025 15:28:57 GMT\r\nvary: Accept-Encoding\r\netag: W/\"677d4839-589\"\r\nexpires: Tue, 22 Sep 2026 09:42:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xOVMX8nJ2y32u%2BXiZwszZ9JUncJoTQVfvwao8bUgi%2FuyTTwU1W87OmH%2FeFOM%2Bwi08L5TWsW9nro03S9J6Gf0gC9eREtnjA7uMhzlhj%2F2%2FQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9830d9ffd9c256be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1417,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"b6aa732abf636836fd1c6e6b5fecd695","sha1":"477d969cd699205be8e421477bc2b5ce2dba116d","sha256":"9b71e413cd207c3400d12dad6da3ec463c37f6b96e94c8f891f2df35d3bf86b2","sha512":"f0f3cd7a07be25ea154fcbe7d5fa220d79521eb810415ea16a0f9e72b3d096ed1d00cd6ff2ca6b8889ead2fdd877e7ee6e7e741d3ee33affa724e7b136a0a594","ssdeep":"","tlshash":"e1219caefe84124a5177c66daf63177effba0013130414b97e6c77640f791a588a0e8d","first_seen":"2025-07-16T12:56:32.402547Z","last_seen":"2026-02-26T03:52:13.689553Z","times_seen":15,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtradeflexair.com/form//css/libra-method.css","fqdn":"xtradeflexair.com","domain":"xtradeflexair.com","tld":"com"},"ip":{"addr":"104.21.61.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xtradeflexair.com/en/","date":"2025-09-22T09:42:19.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtradeflexair.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Sep 2025 11:22:16 GMT","end":"Sun, 30 Nov 2025 12:20:02 GMT"},"fingerprint":{"sha1":"DE:8B:D2:47:77:CD:71:D5:6E:D0:F3:57:91:5F:5C:94:14:2B:0D:B7","sha256":"56:90:D6:2D:A3:2C:CA:CE:1C:33:4C:5A:F5:21:8F:26:6E:7F:BB:9F:1B:BD:BD:19:10:53:FB:46:EE:98:55:0D"}}},"request":{"raw":"GET /form//css/libra-method.css HTTP/1.1\r\nHost: xtradeflexair.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xtradeflexair.com/en/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Sep 2025 09:42:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 Jan 2025 15:28:39 GMT\r\nvary: Accept-Encoding\r\netag: W/\"677d4827-2017\"\r\nexpires: Tue, 22 Sep 2026 09:42:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B9y49sVux19t5iSucZNx44XNmzzb290DKJ8t0C%2FElnNIs8pLNWVZ3uZra40VICy5uS4%2B%2FMsVn9kmtZi78%2BeD2EEcwEUa90RARzRuBzeO%2Fw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9830da03e9ea56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8215,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2096), with CRLF line terminators","md5":"f19c2b0e680ea67dbf4aadb5d1e6256f","sha1":"6291c55d8019cf9783f420c7e2e5ab62b986dd0c","sha256":"a9a2a2455ea0debcdbbf8a2e8bc53abf6783b8fafbaaf9ba6057c7e6e5cceb63","sha512":"086ce6138fd1e1b7b72a61920ad93e19813f98611848bacdf3714f741abebe5d1fbb56b87c1029e2bf217b01cc9dbdc86b9c18f914f3a3ebb72a6c7d5b160791","ssdeep":"96:C7TJO7/My9bCwiIwVaaKzZMnpNjxJgKjxJJ0j0lm3SVYFURtLfJq455tF65NTK32:C5OzMylCcoJKtMns260j5zt/65NTK1M","tlshash":"b502b63d868012467133cf65b7f5df60ea690163a90305ee3a653148cbd75d86673f8b","first_seen":"2024-12-19T09:05:43.460635Z","last_seen":"2025-11-04T08:18:46.134781Z","times_seen":62,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtradeflexair.com/form//css/intlTelInput.css","fqdn":"xtradeflexair.com","domain":"xtradeflexair.com","tld":"com"},"ip":{"addr":"104.21.61.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xtradeflexair.com/en/","date":"2025-09-22T09:42:19.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtradeflexair.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Sep 2025 11:22:16 GMT","end":"Sun, 30 Nov 2025 12:20:02 GMT"},"fingerprint":{"sha1":"DE:8B:D2:47:77:CD:71:D5:6E:D0:F3:57:91:5F:5C:94:14:2B:0D:B7","sha256":"56:90:D6:2D:A3:2C:CA:CE:1C:33:4C:5A:F5:21:8F:26:6E:7F:BB:9F:1B:BD:BD:19:10:53:FB:46:EE:98:55:0D"}}},"request":{"raw":"GET /form//css/intlTelInput.css HTTP/1.1\r\nHost: xtradeflexair.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xtradeflexair.com/en/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Sep 2025 09:42:19 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 07 Jan 2025 15:28:38 GMT\r\nvary: Accept-Encoding\r\netag: W/\"677d4826-62a6\"\r\nexpires: Tue, 22 Sep 2026 09:42:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kom1XNE6rInZDO3QXQ1RPowJk9WpspzRCiPD%2F%2FDAK8TaqrCf40BTllW6PA0y6Wx0hadCSGd1YpQFRNEF7l8wlZHOVPXK3D5nLMRXUP%2F%2Fpw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9830da03e9eb56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25254,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a69aa970266649e0b08c2cb4bc166568","sha1":"d9314a52085a2bb6d284421bb18a4c546ecb73d4","sha256":"ad32b1248207ba91fb945a37d38e7c9deafcba849245872203482db42930d491","sha512":"8315a8c3c328eaaea92dad571ff09c1fc2728920c4b62c0957bf04f83f903f41156ac16cf30297ab5e86f022c3e022764a7a271ebe0b9bfc98d9f488dbe71b9b","ssdeep":"384:HzITF7FWhTmwAmDQTeIcQeIWi7mZlsaAaniXlvhdB:HqF7FWh/Hib","tlshash":"a4b236678bb32945b92bf2a1196406a237375c0bf81a4f2d63d639bddf490e014f37a1","first_seen":"2023-04-05T15:31:11Z","last_seen":"2026-04-04T09:42:51.212081Z","times_seen":27380,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtradeflexair.com/en/","fqdn":"xtradeflexair.com","domain":"xtradeflexair.com","tld":"com"},"ip":{"addr":"104.21.61.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-22T09:42:18.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtradeflexair.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Sep 2025 11:22:16 GMT","end":"Sun, 30 Nov 2025 12:20:02 GMT"},"fingerprint":{"sha1":"DE:8B:D2:47:77:CD:71:D5:6E:D0:F3:57:91:5F:5C:94:14:2B:0D:B7","sha256":"56:90:D6:2D:A3:2C:CA:CE:1C:33:4C:5A:F5:21:8F:26:6E:7F:BB:9F:1B:BD:BD:19:10:53:FB:46:EE:98:55:0D"}}},"request":{"raw":"GET /en/ HTTP/1.1\r\nHost: xtradeflexair.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 22 Sep 2025 09:42:18 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\ncache-control: private\r\nexpires: Wed, 24 Sep 2025 09:42:18 GMT\r\nx-httpd-modphp: 1\r\nhost-header: 6b7412fb82ca5edfd0917e3957f05d89\r\nx-proxy-cache: MISS\r\nx-proxy-cache-info: 0 NC:000000 UP:\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BNQnB9sdOZaW%2FAxf53NgOheT0CSjupG8Qg6mmAWzUDA5S8V0gPMpQqVRouLF33Zz3ITE5Lw3i3hzPnlURhWUwDAN86gaXdkcoGxCaCWvqo7w\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9830d9fced7076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"SiteGround","description":"SiteGround is a web hosting service.","website":"https://www.siteground.com","common_platform_enumeration":"","icon":"siteground.svg","categories":["PaaS","Hosting"]}],"data":{"size":25832,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1005)","md5":"f859fa6b7d30a6091599c6d6c669c3f8","sha1":"1c4bb14ebf7c98bfc9df93f86d2a2d3b43e0eef0","sha256":"c1d562ad42caf20fe6668b3cc39893219de534d55802e80891179c4caed7a45c","sha512":"fb160520b13d489fba818a88a78ff1c4050fd705078fe9afd2684562cf2f4daa3b7b9c322ac9f3d0ea8c0929f6945841b178d384f3da14efc8d581222c0dbd77","ssdeep":"192:zF3S0JOB/ftp4IDghjc0d4RYBKejBc5pA2ob1z6thIbkItU52fVL+U/umTFnc/zY:RCtpbZ0d4RciQfdgf4Q2uAncrk7t","tlshash":"2ac2e63231f9275b03d380f8e8727a688ea9c41fc747cda4b27d059a6fd1d528c971a9","first_seen":"2025-09-22T09:42:47.601065Z","last_seen":"2025-09-22T09:42:47.601065Z","times_seen":1,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtradeflexair.com/favicon.ico","fqdn":"xtradeflexair.com","domain":"xtradeflexair.com","tld":"com"},"ip":{"addr":"104.21.61.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xtradeflexair.com/en/","date":"2025-09-22T09:42:19.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtradeflexair.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Sep 2025 11:22:16 GMT","end":"Sun, 30 Nov 2025 12:20:02 GMT"},"fingerprint":{"sha1":"DE:8B:D2:47:77:CD:71:D5:6E:D0:F3:57:91:5F:5C:94:14:2B:0D:B7","sha256":"56:90:D6:2D:A3:2C:CA:CE:1C:33:4C:5A:F5:21:8F:26:6E:7F:BB:9F:1B:BD:BD:19:10:53:FB:46:EE:98:55:0D"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xtradeflexair.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xtradeflexair.com/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Sep 2025 09:42:19 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\nlast-modified: Tue, 07 Jan 2025 15:28:38 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KuYI5FFJv9cY%2FXu23TtKDY2USDF%2B0ftNXLDuSI4Qj79prY%2BrKH17qDpaKrgditrAxWG8GdlqLVf3MWq6wmIEMEpFQyujLjmK4eJG2Z5Y3A%3D%3D\"}]}\r\nexpires: Tue, 22 Sep 2026 09:42:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\netag: W/\"677d4826-3c2e\"\r\ncf-ray: 9830da0279da56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"2c6f56b894563dc8d3150d89cf83a4a1","sha1":"a01166d76ba202a2f5f6c971d40ab3d4f289f203","sha256":"0381f7490a29314d04b19adca68ddd525c50b0055ddcc42ae4cf6aaf49c8b245","sha512":"d250f8d5d7897a28866a008ac3923c494fa8794c2f11182d4304f393a60dfeec32b26d2799a4203217113997683fd419368e0be0a30b121cfeec0e1d86a3cc65","ssdeep":"48:uv1S8iYIf4C+VAalj1YxavWtNaoH3aff+van1o6XMRkmMZmz13QCcsr:y1AYIfUAWj1YxbV3K8wzQdQCR","tlshash":"b86247473f11ad68f17d0d388423cfdabb627db1c2c631d97860b2ad18068c7aa1a334","first_seen":"2025-07-16T12:56:32.391785Z","last_seen":"2026-02-26T03:52:13.695255Z","times_seen":16,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":130,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtradeflexair.com/form//js/jquery.i18n.properties-1.0.9.js","fqdn":"xtradeflexair.com","domain":"xtradeflexair.com","tld":"com"},"ip":{"addr":"104.21.61.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xtradeflexair.com/en/","date":"2025-09-22T09:42:19.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtradeflexair.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Sep 2025 11:22:16 GMT","end":"Sun, 30 Nov 2025 12:20:02 GMT"},"fingerprint":{"sha1":"DE:8B:D2:47:77:CD:71:D5:6E:D0:F3:57:91:5F:5C:94:14:2B:0D:B7","sha256":"56:90:D6:2D:A3:2C:CA:CE:1C:33:4C:5A:F5:21:8F:26:6E:7F:BB:9F:1B:BD:BD:19:10:53:FB:46:EE:98:55:0D"}}},"request":{"raw":"GET /form//js/jquery.i18n.properties-1.0.9.js HTTP/1.1\r\nHost: xtradeflexair.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xtradeflexair.com/en/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Sep 2025 09:42:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Jan 2025 15:28:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"677d482c-4742\"\r\nexpires: Tue, 22 Sep 2026 09:42:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dVwtLxbldDTDPdacHB%2BvJ%2FX8YEDqhMCz7No2P7hNo4aQcD%2F2hDdo1HJ6dMeLUpMI6qu7oNCOZMqcEdjo%2FxsXP%2BdPzI1zpzUlP7HjgGs%2Fiw%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9830da0479f056be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18242,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"6847950b0ebc508d631e9b8e12125a16","sha1":"51e30f94fbf2c490a99ae69cfa4e65b40ecd8c7d","sha256":"342b9c91134307ee8ac5b04b5f8f1cd2c71fdbfb45188c6c55e89cf374affedf","sha512":"74d74a16c87a30c8b90cafaa74d65d142bbba3d13b16ef4aaec61892beba6818ca5c4394875c5e739b8f4c4b44af5f6b544a9f49b141079e6d52b786a90aac04","ssdeep":"192:c+iDJtkMWXZu2PclZtfmx85x6XwaUXdNE+qkid3tM65BtgcRyz/iWQIGs16SUJQI:cJqMWY2PqZ1Qo+NswYXISphv5j2","tlshash":"1f82b7087a060d1e4ab233b02abd2884da79c4774911a1f5b8dc77543f7cda942e9ff9","first_seen":"2024-05-23T10:18:47Z","last_seen":"2026-03-18T03:40:01.067826Z","times_seen":164,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":134,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xtradeflexair.com/en/","date":"2025-09-22T09:42:19.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xtradeflexair.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 17 Sep 2025 00:02:03 GMT\r\nexpires: Thu, 17 Sep 2026 00:02:03 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:52 GMT\r\ncontent-type: font/woff2\r\nage: 466816\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26588,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26588, version 1.0","md5":"0b3ff9e42ed8f3d4aa72ecaf5f58712c","sha1":"5d5fa3b85a1745e867e44a8c6dd3877e651491fd","sha256":"2809606237a64bd9c1461e727f369ddfd77a350e4900fffe64e8bfe16a2b3454","sha512":"d52db55e34a037109cbce299aa0bf2771075c5c6374d4f07c694eba8baa3f754ba44c61bc606843b35ce5185b868639bea806a58b7c03eb334a3e3c9ce0de746","ssdeep":"768:BCn6FX/v/3NEpCoX1GmFP2LbalbkV0Fu3m6JQ:B1H/NEtX1GA3G0I3FJQ","tlshash":"9bc2e171e3572970f96da8b119f6600146c07204f71e8376e4466b29b7b3dbc7dae820","first_seen":"2025-05-29T18:22:03.145431Z","last_seen":"2026-04-04T09:38:10.221369Z","times_seen":7645,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":94,"dns":1,"connect":14,"send":0,"wait":82,"receive":8,"ssl":79},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xtradeflexair.com/en/","date":"2025-09-22T09:42:19.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xtradeflexair.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 51912\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 17 Sep 2025 00:06:00 GMT\r\nexpires: Thu, 17 Sep 2026 00:06:00 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:38 GMT\r\ncontent-type: font/woff2\r\nage: 466580\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":51912,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51912, version 1.0","md5":"fe5ed0fcd60f2d8214c86cbdd0c88b8b","sha1":"c9c1cbb6cead905fdf1e19faca071d09ca2b65f8","sha256":"a093b888254afd7deb8e37cccfd434e7d06ed47d22cfed9621631d80e1e81554","sha512":"854fc977679e9f512f776a16748f8b756f11c28ded7f1c32a4d57b8ef8728c536f6cceb948a491cb555e22110acda52f619d072dd02351eb7ce514cc8e63d0f1","ssdeep":"1536:iCrpjxLjTpmNyGGqE6TYPvW7PNhLzMEz0HiH:fpHmNhE/5E6a","tlshash":"e533f13905ae37e2c1a48334ddb82db45bb775277a39af9812e5005e82339762f7a305","first_seen":"2025-09-17T03:21:31.197712Z","last_seen":"2026-04-04T09:58:29.75066Z","times_seen":6629,"resource_available":false,"data":null}},"time_used":425,"timings":{"blocked":191,"dns":2,"connect":30,"send":0,"wait":28,"receive":6,"ssl":164},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xtradeflexair.com/en/","date":"2025-09-22T09:42:19.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.7.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xtradeflexair.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-155ed\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Mon, 22 Sep 2025 09:42:19 GMT\r\nage: 5859582\r\nx-served-by: cache-lga21978-LGA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 27, 754682\r\nx-timer: S1758534139.240582,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30336\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87533,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-04-04T09:37:58.100412Z","times_seen":136232,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":73,"dns":4,"connect":26,"send":0,"wait":27,"receive":8,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xtradeflexair.com/en/","date":"2025-09-22T09:42:19.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xtradeflexair.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26596\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 17 Sep 2025 00:01:27 GMT\r\nexpires: Thu, 17 Sep 2026 00:01:27 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:32 GMT\r\ncontent-type: font/woff2\r\nage: 466852\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26596,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26596, version 1.0","md5":"dae1850484b86d299c31bc08aaa563cf","sha1":"dca808d6d16965c40bfba4e4b3c8a819f843890d","sha256":"8f80f993e523f2e6c2d097552740fd26331658da23ffad31d26edcdd3aeec370","sha512":"69b34f2652aa731ad29fe49a8cea85ebe4ef402573a10048598667f94b7a7855e534121f22d7749b81762b3176f437de607745df82b71484c4ab7c9f8bfd40e9","ssdeep":"384:nYOl9Z/81DjYTaXQMfCMNASNEVM9mYQdpx1sLt/zEkNKxgmS8AXACAU:pJ8NY2XQk0omjdKvKxgCAXACAU","tlshash":"9ac2e13f487a2046c71227f8ee5fc9b571c360a35ab32345c26748650db0ea93f86776","first_seen":"2025-05-29T21:46:50.299968Z","last_seen":"2026-04-04T09:50:44.185328Z","times_seen":29284,"resource_available":false,"data":null}},"time_used":342,"timings":{"blocked":140,"dns":3,"connect":15,"send":0,"wait":73,"receive":9,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xtradeflexair.com/en/","date":"2025-09-22T09:42:19.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xtradeflexair.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 17 Sep 2025 00:00:57 GMT\r\nexpires: Thu, 17 Sep 2026 00:00:57 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 466883\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-04-04T09:44:11.946405Z","times_seen":198896,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":156,"dns":0,"connect":0,"send":0,"wait":38,"receive":9,"ssl":159},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xtradeflexair.com/en/","date":"2025-09-22T09:42:19.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xtradeflexair.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 17 Sep 2025 00:02:49 GMT\r\nexpires: Thu, 17 Sep 2026 00:02:49 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:01 GMT\r\ncontent-type: font/woff2\r\nage: 466770\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35156,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35156, version 1.0","md5":"062c1f2aaf2d4de07ad2a2f21c17ffc0","sha1":"3fd1f07343bd33a53cd374f7f107dbdf9effae03","sha256":"d5bab8e28732fe3d10dcef4f77b9c248605bbb2a87d289a2539251ceafab536a","sha512":"7ab522d8bc41128be5a15f2cb91f851f6dc5e437afbb90e6191bbe63d9b94a35911f04701fb2b291362b2ae0f0cc639dec2d15e53928afc5769590a2937e81cf","ssdeep":"768:is48okTArkNSgZJAf5jkRcaUNt8wrNPCbJktQV+n+NUB/wo8IEH:5hNTtNSgZJMjkRBUMwrNPC9NV+n+o81H","tlshash":"22f2e172c3787192ae0985760d60cec8986bb2098f7658b0143fdd38ee45345a3f6e6c","first_seen":"2025-05-29T19:30:52.507782Z","last_seen":"2026-04-04T09:42:27.58574Z","times_seen":14742,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":64,"dns":0,"connect":0,"send":0,"wait":69,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtradeflexair.com/form/scripts/appeef3.js?v=0.3","fqdn":"xtradeflexair.com","domain":"xtradeflexair.com","tld":"com"},"ip":{"addr":"104.21.61.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xtradeflexair.com/en/","date":"2025-09-22T09:42:19.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtradeflexair.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Sep 2025 11:22:16 GMT","end":"Sun, 30 Nov 2025 12:20:02 GMT"},"fingerprint":{"sha1":"DE:8B:D2:47:77:CD:71:D5:6E:D0:F3:57:91:5F:5C:94:14:2B:0D:B7","sha256":"56:90:D6:2D:A3:2C:CA:CE:1C:33:4C:5A:F5:21:8F:26:6E:7F:BB:9F:1B:BD:BD:19:10:53:FB:46:EE:98:55:0D"}}},"request":{"raw":"GET /form/scripts/appeef3.js?v=0.3 HTTP/1.1\r\nHost: xtradeflexair.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xtradeflexair.com/en/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Sep 2025 09:42:19 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Jan 2025 15:28:46 GMT\r\nvary: Accept-Encoding\r\netag: W/\"677d482e-135\"\r\nexpires: Tue, 22 Sep 2026 09:42:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3LrznFoD03GCxENtTAJhsBP%2BZyGUYIcsDVwrCg93tWgwv6anfkvLa7NQ0uejPWzx%2F6%2F3skKAoNzDhn8%2BItA4sioheaxhu0gdMNqz9XAd%2BQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9830da062a1556be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":309,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (309), with no line terminators","md5":"afca992cc27ea5a375095f3e8f3e09dd","sha1":"62eb63c407b751804d6a196014719221639a74d8","sha256":"9dc02a811ebd2629bdb836c1e5bc424864497a406a92594985738c0ffe675a6f","sha512":"7194f136d2018f754c8dc342f5e396e0dc15a5ff47f570094ecdbd16cf5b80287d93092cff6dde0ef3dd26efa34da92be52e947b3b4193ddde62fbea19488b1a","ssdeep":"","tlshash":"85e0265ed479438a9036d4f822cb3b368862288f1671d257890c0025055ce40c40070c","first_seen":"2023-03-07T12:05:28Z","last_seen":"2026-02-19T13:39:33.472563Z","times_seen":182,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtradeflexair.com/","fqdn":"xtradeflexair.com","domain":"xtradeflexair.com","tld":"com"},"ip":{"addr":"104.21.61.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-09-22T09:42:18.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtradeflexair.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Sep 2025 11:22:16 GMT","end":"Sun, 30 Nov 2025 12:20:02 GMT"},"fingerprint":{"sha1":"DE:8B:D2:47:77:CD:71:D5:6E:D0:F3:57:91:5F:5C:94:14:2B:0D:B7","sha256":"56:90:D6:2D:A3:2C:CA:CE:1C:33:4C:5A:F5:21:8F:26:6E:7F:BB:9F:1B:BD:BD:19:10:53:FB:46:EE:98:55:0D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: xtradeflexair.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\ndate: Mon, 22 Sep 2025 09:42:18 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: en/\r\nserver: cloudflare\r\ncache-control: private\r\nexpires: Wed, 24 Sep 2025 09:42:18 GMT\r\nx-httpd-modphp: 1\r\nhost-header: 6b7412fb82ca5edfd0917e3957f05d89\r\nx-proxy-cache: MISS\r\nx-proxy-cache-info: 0301 NC:000000 UP:\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P1ygay3S%2BjGG5a7g44lGHoJhrlCuSPw4oDTI4Nc%2FWURW1UC6ohAsXXn3Ih1fJDQ%2BYR%2Bna8USa3HN9UGZR3wqBr1Obl5YJNxRloqQlEDeD6Y%2B\"}]}\r\ncf-ray: 9830d9fb6a5076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"SiteGround","description":"SiteGround is a web hosting service.","website":"https://www.siteground.com","common_platform_enumeration":"","icon":"siteground.svg","categories":["PaaS","Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25832,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T09:46:13.591387Z","times_seen":13326202,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":19,"dns":0,"connect":1,"send":0,"wait":229,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"images.unsplash.com/photo-1640143405373-bbb919afa0da?crop=entropy\u0026cs=tinysrgb\u0026fit=max\u0026fm=jpg\u0026ixid=M3w0Mjc4ODF8MHwxfHNlYXJjaHw5fHxDcnlwdG9jdXJyZW5jeSUyQyUyMFRyYWRpbmclMkMlMjBCbG9ja2NoYWlufGVufDB8MHx8fDE3MzYyNjMyMzN8MA\u0026ixlib=rb-4.0.3\u0026q=80\u0026w=1080","fqdn":"images.unsplash.com","domain":"unsplash.com","tld":"com"},"ip":{"addr":"151.101.130.208","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xtradeflexair.com/en/","date":"2025-09-22T09:42:18.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"images.unsplash.com","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q3","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 12 Aug 2025 01:21:13 GMT","end":"Sun, 13 Sep 2026 01:21:12 GMT"},"fingerprint":{"sha1":"46:28:F0:69:6F:53:FC:9F:BA:6A:73:37:D0:D7:C8:87:AE:06:47:7A","sha256":"80:93:A2:9A:83:84:21:A8:A0:ED:D9:72:A8:E3:4D:EC:8E:A5:E4:4B:42:68:17:09:AA:D6:6C:7C:1B:9D:2A:48"}}},"request":{"raw":"GET /photo-1640143405373-bbb919afa0da?crop=entropy\u0026cs=tinysrgb\u0026fit=max\u0026fm=jpg\u0026ixid=M3w0Mjc4ODF8MHwxfHNlYXJjaHw5fHxDcnlwdG9jdXJyZW5jeSUyQyUyMFRyYWRpbmclMkMlMjBCbG9ja2NoYWlufGVufDB8MHx8fDE3MzYyNjMyMzN8MA\u0026ixlib=rb-4.0.3\u0026q=80\u0026w=1080 HTTP/1.1\r\nHost: images.unsplash.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xtradeflexair.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-imgix-id: 4ef6758ab4e17118575f28a456ed620bd4682e04\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 17 Sep 2025 06:16:38 GMT\r\nserver: imgix\r\ndate: Mon, 22 Sep 2025 09:42:18 GMT\r\nage: 444341\r\naccept-ranges: bytes\r\ncontent-type: image/jpeg\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-served-by: cache-fra-etou8220119-FRA, cache-hel1410025-HEL\r\nx-cache: HIT, MISS\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 180848\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":180848,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1080x719, components 3","md5":"49c7067c1ba474bcc40ff83338baf5a4","sha1":"81c1dc49958a491210014615f47c7ce06d9acf35","sha256":"c7199d91c20313342142e3bdcad62808f4737eb0dc9575992317d5c8d61b3f87","sha512":"c9ab935e1fe4b6c9ab2150795e474b3ee217245130752b8fde508c6161b107d237f7334761d874c1e1bd145bb2f3987c88b46f0cf4cd283a3f6615acb5790271","ssdeep":"3072:YB2YOpV5bU9puHT06X+zSckLfKTzDtB4ugV3iW6I7UgURVUHI9+eMz0rb17HL4F3:FYOv5w9GTtySLrWBS6IQg+CHI9+eMz06","tlshash":"e7041327925d593dc179c630dbf5a1879b0c289fb9eb764fa58fa32130caec5f448488","first_seen":"2025-09-22T09:42:47.608502Z","last_seen":"2025-09-22T09:42:47.608502Z","times_seen":1,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":57,"dns":1,"connect":26,"send":0,"wait":89,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xtradeflexair.com/en/","date":"2025-09-22T09:42:19.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xtradeflexair.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 21332\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 17 Sep 2025 00:06:46 GMT\r\nexpires: Thu, 17 Sep 2026 00:06:46 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:34 GMT\r\ncontent-type: font/woff2\r\nage: 466533\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":21332,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21332, version 1.0","md5":"ef6274ed82edb1f7c180b7f219366479","sha1":"35c1b3b3513e89dd0d49a311152d09d9fc9c438f","sha256":"08ea4cf0a7c61077656395aa7dc728a6d184ee4bdae03a1bc34c17ee97e8f31c","sha512":"ec7b302393226c708148c46dc4673b7ea72ede5cf9f57e91adfbccc50e568dca28228246cf18392786cf64480bef88e9b6ee24249bb122a1cd9c3240f6829e56","ssdeep":"384:4rIYG1K5roJgfH2ChCQV1YZajUFkRjnD8edleokw+wt71t:4M85yoh7YZa4FQjnIo9rft71t","tlshash":"68a2e1a7c275c508e4b96a2ff1616475029a175c84d80408257806edff87ef8ffeb46b","first_seen":"2025-05-31T00:32:41.324056Z","last_seen":"2026-04-04T06:22:16.105202Z","times_seen":1121,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":73,"dns":1,"connect":32,"send":0,"wait":77,"receive":8,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/tailwindcss@3.0.0-alpha.1/dist/tailwind.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xtradeflexair.com/en/","date":"2025-09-22T09:42:18.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/tailwindcss@3.0.0-alpha.1/dist/tailwind.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xtradeflexair.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Mon, 22 Sep 2025 09:42:18 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncontent-length: 68\r\ncf-ray: 9830d9ffed823181-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=86400, s-maxage=86400\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\netag: W/\"47-7Fdi+1O4JOHkSwnWMYQhV1zLDHc\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230111-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=evPFt8RXQ4hSc3WBS7RvuXgNPVRxnONkDBmTErh2eIuE6LtJO9A%2B%2FdPfG9OBQ2SbjJqflN3nBDSVs3vUHSN3M7tZ1R2xD5Hx9kklmyuXpOpa3EVS68IU9SJNJG8PNKpvKtI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T09:46:13.591387Z","times_seen":13326202,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":63,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/icon?family=Material+Icons","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xtradeflexair.com/en/","date":"2025-09-22T09:42:18.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /icon?family=Material+Icons HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xtradeflexair.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 22 Sep 2025 09:42:18 GMT\r\ndate: Mon, 22 Sep 2025 09:42:18 GMT\r\ncache-control: private, max-age=86400, stale-while-revalidate=604800\r\nlast-modified: Mon, 22 Sep 2025 09:42:18 GMT\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":569,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"60203ad82b90bc1e1b4b140e18925279","sha1":"1c5c7c2a115b117a82e06fe63d7629afa41c9d05","sha256":"e8c6cdaa1c533d3f67707d78451c5ed9541f77c70a8fc79b0ca6f235263bef7c","sha512":"a85805cdad29ddb17d5c1c459ba3335d95b10c303d899c567286e1f0b480fea8f20f6770dad913acdd10873e7e405837fc821b095c21078fcb8f4414791390a1","ssdeep":"","tlshash":"acf0c069be55998656120c42330f3f251e1c401f680ac8fe8b921d5cccfb97b439670f","first_seen":"2025-09-21T13:04:43.869244Z","last_seen":"2026-04-04T05:07:47.844139Z","times_seen":904,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":92,"dns":1,"connect":15,"send":0,"wait":36,"receive":0,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtradeflexair.com/index.js","fqdn":"xtradeflexair.com","domain":"xtradeflexair.com","tld":"com"},"ip":{"addr":"104.21.61.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xtradeflexair.com/en/","date":"2025-09-22T09:42:18.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtradeflexair.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Sep 2025 11:22:16 GMT","end":"Sun, 30 Nov 2025 12:20:02 GMT"},"fingerprint":{"sha1":"DE:8B:D2:47:77:CD:71:D5:6E:D0:F3:57:91:5F:5C:94:14:2B:0D:B7","sha256":"56:90:D6:2D:A3:2C:CA:CE:1C:33:4C:5A:F5:21:8F:26:6E:7F:BB:9F:1B:BD:BD:19:10:53:FB:46:EE:98:55:0D"}}},"request":{"raw":"GET /index.js HTTP/1.1\r\nHost: xtradeflexair.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xtradeflexair.com/en/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Sep 2025 09:42:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 07 Jan 2025 15:28:56 GMT\r\nvary: Accept-Encoding\r\netag: W/\"677d4838-fc8\"\r\nexpires: Tue, 22 Sep 2026 09:42:18 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ONb1qp6ui%2FAYGw1MYZNRya8w%2FxPHkkOAwV7NfwUW8%2B4Fpr%2FLtDmL5VNsUy%2BxbB8ceyh9D05A5tKtsrDvtA4M720d%2FdMxydDSxKLlC020wg%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9830d9ffd9c356be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4040,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF, LF line terminators","md5":"b91f26a496c666c375da3404dcb22d5c","sha1":"65914dcb64a159faa0432c60a93436a2ca5aa4c8","sha256":"324160562a1037584074b510ef812a1a4dcb22afa77222167e172ce48f4330d7","sha512":"e4ba371efeb962b12126b538ebdbaa2d2b68471b8c5740cdfc43dbcf754961d2b53f1c90afdcbd37dc18654c93aa8c46f5e189a0b41b4d6efbee0262314ed967","ssdeep":"","tlshash":"5f81376b7969043808ff776763a7db8cba328093684598153e6cce454f72e8044b7ed9","first_seen":"2025-09-22T09:42:47.610966Z","last_seen":"2025-09-22T09:42:47.610966Z","times_seen":1,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtradeflexair.com/form/fform.php?lang=en\u0026t=Mon%20Sep%2022%202025%2009:42:19%20GMT+0000%20(GMT)","fqdn":"xtradeflexair.com","domain":"xtradeflexair.com","tld":"com"},"ip":{"addr":"104.21.61.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://xtradeflexair.com/en/","date":"2025-09-22T09:42:19.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtradeflexair.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Sep 2025 11:22:16 GMT","end":"Sun, 30 Nov 2025 12:20:02 GMT"},"fingerprint":{"sha1":"DE:8B:D2:47:77:CD:71:D5:6E:D0:F3:57:91:5F:5C:94:14:2B:0D:B7","sha256":"56:90:D6:2D:A3:2C:CA:CE:1C:33:4C:5A:F5:21:8F:26:6E:7F:BB:9F:1B:BD:BD:19:10:53:FB:46:EE:98:55:0D"}}},"request":{"raw":"GET /form/fform.php?lang=en\u0026t=Mon%20Sep%2022%202025%2009:42:19%20GMT+0000%20(GMT) HTTP/1.1\r\nHost: xtradeflexair.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xtradeflexair.com/en/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Sep 2025 09:42:19 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\ncache-control: private\r\nexpires: Wed, 24 Sep 2025 09:42:19 GMT\r\nx-httpd-modphp: 1\r\naccess-control-allow-origin: *\r\nhost-header: 6b7412fb82ca5edfd0917e3957f05d89\r\nx-proxy-cache: MISS\r\nx-proxy-cache-info: 0 NC:000000 UP:\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o%2BdWUHWYYpPEgxH1aogXG9jq6Q6b8kSKc58Yj5tRY8NdX27%2BFkn8SMHOuFfiRYM%2FW8w%2ByYO0351aozMEtvW8lAQiicK9g%2BjUCDKoOXD4Ng%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9830da02c9dc56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"SiteGround","description":"SiteGround is a web hosting service.","website":"https://www.siteground.com","common_platform_enumeration":"","icon":"siteground.svg","categories":["PaaS","Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":231190,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"882e2f2b12b038b72d27f29cd31f10fb","sha1":"8ca8fab88d4110f00c1ed0f8d772665bf2eea684","sha256":"a293e8b629cf125ef3615e525ef7d20a74f317659c1c412b39439e9ca5d5ca52","sha512":"1e81078485687fe0e849dad81007767d1c2a554c217abe38a1d2723d60982cb06996f73f49b9c7a1459f3b5ff64bea9272836d0dfaa14a68cc29cd7076ca594b","ssdeep":"768:0YZ52T/RhQIH+MitvK7VCt2eWiuRPJ671yu:0YZ52T/RzHnqK7VCt2e7Z71yu","tlshash":"5d34ab34a2d18926887bc2d065791b2dfce98267d5960a463afc57f70ffcd9ab80344c","first_seen":"2025-09-22T09:42:47.612941Z","last_seen":"2025-09-22T09:42:47.612941Z","times_seen":1,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":162,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xtradeflexair.com/form/images/lock.svg","fqdn":"xtradeflexair.com","domain":"xtradeflexair.com","tld":"com"},"ip":{"addr":"104.21.61.127","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xtradeflexair.com/en/","date":"2025-09-22T09:42:19.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xtradeflexair.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 01 Sep 2025 11:22:16 GMT","end":"Sun, 30 Nov 2025 12:20:02 GMT"},"fingerprint":{"sha1":"DE:8B:D2:47:77:CD:71:D5:6E:D0:F3:57:91:5F:5C:94:14:2B:0D:B7","sha256":"56:90:D6:2D:A3:2C:CA:CE:1C:33:4C:5A:F5:21:8F:26:6E:7F:BB:9F:1B:BD:BD:19:10:53:FB:46:EE:98:55:0D"}}},"request":{"raw":"GET /form/images/lock.svg HTTP/1.1\r\nHost: xtradeflexair.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xtradeflexair.com/en/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 22 Sep 2025 09:42:19 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 07 Jan 2025 15:28:42 GMT\r\nvary: Accept-Encoding\r\netag: W/\"677d482a-973\"\r\nexpires: Tue, 22 Sep 2026 09:42:19 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RPwNxLcd%2FriPClSVsK3CLQiSI%2F2%2B296oT2vZkp9n1ZKrZVAmw3D%2BV6yjxHF2KYarv0ulyDOonDRf%2BD3SLCb7K%2BX%2BOA3OqUuYvy8dh2o%2FqQ%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9830da03f9ed56be-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2419,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fa9dee2c433185eba1e6c5323e2d5b4a","sha1":"7a23c94ab965fc8fabe6c9933b6fc59f0a8b8928","sha256":"d5291eb8b95bcf15f036dd9775a641e69c7810ee7f4450557215df1af7c8d43e","sha512":"a5de9c78544547ffcb933eaac7afe16db607e8702861152a5085df6772fc717a5e01d76b93b541a30601f868076664112a816b392553950e543c22fce58aabcf","ssdeep":"","tlshash":"e541d3f6839c9190be1ac5688dba1896710df1eb5580555c7339f405d132ec9772eb48","first_seen":"2024-06-07T00:24:00Z","last_seen":"2026-01-29T09:57:59.070604Z","times_seen":90,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:300,400,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.74","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xtradeflexair.com/en/","date":"2025-09-22T09:42:19.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /css?family=Open+Sans:300,400,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xtradeflexair.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 22 Sep 2025 09:42:19 GMT\r\ndate: Mon, 22 Sep 2025 09:42:19 GMT\r\ncache-control: private, max-age=86400, stale-while-revalidate=604800\r\nlast-modified: Mon, 22 Sep 2025 08:34:06 GMT\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17382,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"42c228f94cec7e1a389b04f71e4fb9ee","sha1":"ec4d0fb8892c56c5f74bc61dd3c07c60d2d974f3","sha256":"54f16460a486a74963fed97fb228a867ce32f399882d29ef02162bc8cd08c535","sha512":"8e9dc4a45b21124914720b4fdd052def25c981ef16d852aafdbcd86726db20f22da6c24618c30b4f153d9deee3cbe1cff91b28755e1e92f5a79aafb48239b304","ssdeep":"192:NCddw24WrqKnbqGIwV4Mrz7xCAAN21/rqbnbqGIwV4Razq4CZZE2s6rqmnbqGIwc:0AYqY4tjXqY4nU8qY4Z","tlshash":"c0722aa00027185063431de623de7e34ee0fa2657048d0766bfd8b9beedad6963b435d","first_seen":"2025-09-17T05:02:54.847856Z","last_seen":"2026-04-04T04:05:27.934322Z","times_seen":6587,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://xtradeflexair.com/en/","date":"2025-09-22T09:42:19.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:48 GMT","end":"Mon, 01 Dec 2025 08:36:47 GMT"},"fingerprint":{"sha1":"4A:11:37:B2:B5:3D:85:04:18:76:94:C3:99:EA:8B:77:66:51:DF:D6","sha256":"6C:B3:8A:F8:58:9F:72:87:6E:B0:CF:E0:3F:D9:AB:6D:AE:6E:E0:73:B1:A3:95:3C:30:98:D3:C4:23:73:D4:33"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://xtradeflexair.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 17 Sep 2025 00:00:57 GMT\r\nexpires: Thu, 17 Sep 2026 00:00:57 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 466882\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-04-04T09:44:11.946405Z","times_seen":198896,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":125,"dns":1,"connect":28,"send":0,"wait":28,"receive":40,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/jquery/2.1.1/jquery.min.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xtradeflexair.com/en/","date":"2025-09-22T09:42:20.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Sep 2025 08:36:49 GMT","end":"Mon, 01 Dec 2025 08:36:48 GMT"},"fingerprint":{"sha1":"9E:38:51:02:B6:22:9C:08:6B:24:B8:A0:EB:DB:60:D9:27:B2:68:90","sha256":"67:AF:7E:56:AB:8D:96:FB:D0:75:CA:28:6D:16:B6:67:FD:7F:58:6F:CC:AA:78:B5:01:13:76:2C:AB:BE:80:4E"}}},"request":{"raw":"GET /ajax/libs/jquery/2.1.1/jquery.min.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://xtradeflexair.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29671\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 19 Sep 2025 19:08:12 GMT\r\nexpires: Sat, 19 Sep 2026 19:08:12 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 225248\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":84245,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (32061)","md5":"e40ec2161fe7993196f23c8a07346306","sha1":"afb90752e0a90c24b7f724faca86c5f3d15d1178","sha256":"874706b2b1311a0719b5267f7d1cf803057e367e94ae1ff7bf78c5450d30f5d4","sha512":"5f57cc757fff0e9990a72e78f6373f0a24bce2edf3c4559f0b6fef3cf65edf932c0f3eca5a35511ea11eabc0a412f1c7563282ec76f6fa005cc59504417159eb","ssdeep":"1536:kPEkjP+iADIOr/NEe876nmBu3HvF38Nd+uJO1z6/A4TqAub0i4ULvguEhjzXpa98:7NMnJiz6oAQKP5a98Hrh","tlshash":"db83d6d9b2c67062977730b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-04T09:38:10.115117Z","times_seen":53972,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":61,"dns":1,"connect":21,"send":0,"wait":22,"receive":24,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}