{"report_id":"01ccc02c-01cd-49a9-8da4-4f3bea34747a","version":6,"status":"done","tags":[],"date":"2026-02-14T08:17:09Z","url":{"schema":"https","addr":"neftrix.com/","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"172.67.181.45","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"neftrix.com/","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"title":"Buy/Sell Bitcoin, Ether and Altcoins | Cryptocurrency Exchange | Neftrix","dom":{"size":109707,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65508), with no line terminators","md5":"a4ff2ec9c9c8f7a78de23e0eacf7155d","sha1":"d49a003fc6a6a59f7989dd07fecf2803a6bbd9f7","sha256":"dac2897c8bc5cbe48603a507a06a5d0d39d821b85fc7ee7396e402277b30eeab","sha512":"5048137191d86eb8f0aac72ef0707aced3c6e4baf1f01c35cd7d950592b07f9687d126760ed27597bf095b66edf3f9b6c56ecf61aea6a7e9cd51bef068db2d37","ssdeep":"3072:guJOe10L4uJOe10L0IIWE2nG3ZtyK5dbM6d1I:q6KZtyK5dA6rI","tlshash":"7eb394304155783ba1138ae0e231776e72a7c74ede838958c6fc53e49bc3cd9dd6a868","dom_hash":"domhash5eccf0985b1e33882f9e49b84e440280","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"neftrix.com/","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"172.67.181.45","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T08:17:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-14","alert":"Hunting_JS_WebAssembly","trigger":"neftrix.com/web/743.3bd8b706661122578b4c.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-02-08T22:32:21.331091Z","alert_count":0,"request_count":1,"received_data":1128404,"sent_data":490,"comment":"","tags":null,"fingerprints":[{"name":"WebAssembly","description":"WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.","website":"https://webassembly.org/","common_platform_enumeration":"","icon":"WebAssembly.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"neftrix.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-17","domain_rank":0,"first_seen":"2026-02-12T20:32:44.996258Z","last_seen":"2026-02-12T20:32:44.996258Z","alert_count":77,"request_count":76,"received_data":2129623,"sent_data":36531,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}]},{"fqdn":"lottie.host","ip":{"addr":"3.164.230.30","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-10-18","domain_rank":46478,"first_seen":"2022-08-22T00:10:05Z","last_seen":"2026-02-12T00:10:36.736409Z","alert_count":0,"request_count":1,"received_data":8338,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":1,"received_data":2415,"sent_data":502,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"neftrix.com/web/743.3bd8b706661122578b4c.js","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d929b4aa77bbbf23ad67b41c871c3fc","sha1":"bc32968717a664126bc7624c6d79476d03841e6b","sha256":"8a28fec90aea7e59d543559ec86ddeb0bb24273f2184ab5b2703c1931bb1827e","sha512":"29b68b74609c34c5ca8bddbf93e0ba55c77323f3898435c612d3fd610d2ff4c6b5d2cfb150d3484d79efa79aa630772786766092800ccb265f95213ba85aba90","ssdeep":"6144:7ZJOTEVtPbwhuFE61CtcMtT62YjXouFmhDE+ByXFyWPrqA0:7htPbw8Gvm0uFkF9","tlshash":"c7e430a2738427a6a64909e94029a107d0f6d42d302525ccfbf6f7d7f83d9a2f82d774","size":691784,"data":"","first_seen":"2025-02-23T17:36:35.640209Z","last_seen":"2026-04-27T20:47:20.937857Z","times_seen":57,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-14","alert":"Hunting_JS_WebAssembly","trigger":"neftrix.com/web/743.3bd8b706661122578b4c.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/main.d8b628f5575a40c573f0.js","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f9cf6fd07abb9240c5228af345ede41","sha1":"1f0f1268792a0420b4ed36984c32eb6443d57010","sha256":"7f9c6e5d07861efa11c4dcf48fad32a3dd6db6e03e846274d73645de6571bcf9","sha512":"53bf508ff4a9c49face3b4266f6966672d19c8da53a932b0ac3192cd3703489737335d25e7c99cd88352c77748ffc0b1cead95952d9a96a451510ff8d5c006a3","ssdeep":"3072:dDDwIuJOe10L9CZZrIx5IfUoDUO0w2D0EeH/2GwK+OQ8J0IW73AYQGusuTTEGQVW:dY1Zi4N2GwK+OQ8JxW73AYQGFsmt18lZ","tlshash":"65941a88f6d5b0dc93735134612f340af33f3a65650884f0f2b8a8a5595fa9de227f68","size":416873,"data":"","first_seen":"2025-02-23T17:36:35.638834Z","last_seen":"2026-02-14T08:17:13.727556Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"neftrix.com/web/assets/stat-bg.0af1b1b8a5df01ba4868.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.717Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/stat-bg.0af1b1b8a5df01ba4868.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 104367\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:26 GMT\r\netag: \"673854da-197af\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qXNXI3DXCPMnztyp8bwespiHyaJk6oP7629IvI0NHU4RW0CEOF7SJ2Et2mnuvWN7YRmHQ51PIUoGo9CJHqFWPgInRcSxOzWoZ21d\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb20206bfc5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104367,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1360 x 600, 8-bit colormap, non-interlaced","md5":"c0a93f6677a8d19fd642a3187f0a998f","sha1":"6851c630bbbcdbd35e201ea1cb4de8ee9cd34b63","sha256":"616780b1429dc138b210de36b5ac4bd1e8cdc17d966bb13bd93c6a1dd50f0698","sha512":"b90c50efcf8f8e99d51275cc550ad987751234dbbb1d0c5ecbb7a6c36b64d6b04fb4a628b78463117162727f867653636d4340104a3a49b671084498779cfb6c","ssdeep":"1536:3irfFa9CzMqWSCMFmQ5IQDdrKlgrFA6SKT0M4j3YQDbmqaw8aFMubUXcejVMsPaz:SrNQq1C1QYur6fKT0bYQDWBofbUBjPzo","tlshash":"c7a3123d33d28ac92c8de735c8376b6e8d2a24268d4d1f4d5187ade3be5011b817a778","first_seen":"2025-02-23T17:36:35.613136Z","last_seen":"2026-02-14T08:17:13.69654Z","times_seen":20,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":152,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/IBMPlexSans-Light.f1a87b33e4188494f66f.woff2","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/IBMPlexSans-Light.f1a87b33e4188494f66f.woff2 HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:49 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\nlast-modified: Sat, 14 Feb 2026 01:51:21 GMT\r\nx-fastcgi-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yETsG1P2Ip8osYd8czMtk607ZcNlLmiOUgwORATSlxv5pCDzvBqKEF%2BHvjFpoACCPqIWBfLdkNfbHuxPXLAlVUOhuwn3zDTYiWOd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb20208cd55ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":521,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (521), with no line terminators","md5":"5a096a3b4e3607c3d640fc0d9b5bb45a","sha1":"91aac9fd6162ea1e3caa0bfe2a4d612897880a27","sha256":"b8f78be33520c8643d7186f2980b8fd1ee021c1ea29ef30e316cb924f94bdf9b","sha512":"a35940699283c572879507d0db1a81195e94042f32f0e98d7b8cbe8ff624046f48a22cfc8a7aae1b5ac8d0a83e8c4d210c4909b30fc1becaad67ee374c31dc51","ssdeep":"","tlshash":"5af0c0472d13800904001a957478f70dd5cfdd647b53ac2078c856be88acfdd1867048","first_seen":"2025-02-23T17:36:35.625931Z","last_seen":"2026-02-14T08:17:13.70275Z","times_seen":16,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/images/currencies/s/94dcb270.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:49.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /images/currencies/s/94dcb270.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 4398\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 25 Apr 2023 19:05:31 GMT\r\netag: \"6448247b-112e\"\r\nexpires: Sat, 21 Feb 2026 08:16:49 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=60fBw3ng7ku8OGLm9G4Bly6FKkGS9HFFqFGfY%2FFCFtLFYrS1SfbRd%2B5FIYE%2B5ZswkVDUzA4IiZbpUxfGmwig7Dxe3zyp%2FdaVmtme\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb20265c2b5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4398,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"3fa42faa6f5304aa7cb5be62ca7d68b5","sha1":"fcb67dc6e7e1ee0518a6e766ed31fa4369a04bad","sha256":"c541d9dd2998526fc42f9945cadc321b07d7f0351bc68d54811afd106f615d64","sha512":"25724de911eb4ffee15012bee6e5995f3a601283487a3c24434b651b640d9c10b317af9e673a8a1d39b9b41965294eb5655be6a349f0da98fec6ea1cfb4843ea","ssdeep":"96:DSUXI1S4OzBXLn2y+p/5S7kL+ZMiFjit7+5AesRNtxhqSiU0:DSUYQz1CDp/H+ZMi8lgAesRzU1","tlshash":"21914aed2eab675fe4613403250e99e39ba7aa3b534b904c15ce08935060bc50a7d374","first_seen":"2024-08-19T22:55:39.12438Z","last_seen":"2026-04-27T20:47:21.19987Z","times_seen":69,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/IBMPlexSans-Light.6df767030da44b67fb7e.ttf","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:49.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/IBMPlexSans-Light.6df767030da44b67fb7e.ttf HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:50 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\nlast-modified: Sat, 14 Feb 2026 01:51:21 GMT\r\nx-fastcgi-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NuTv6BBN5bZ4W6a19BXPdQ5RplxZe3RYKfmglZEPu1xA8XgCYlQWytycyDgFSYafJQyz6cGgjnrtMfPHKsS7ifJUu%2F2y9G7mT%2BUX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cdb2026ff2a5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":521,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (521), with no line terminators","md5":"5a096a3b4e3607c3d640fc0d9b5bb45a","sha1":"91aac9fd6162ea1e3caa0bfe2a4d612897880a27","sha256":"b8f78be33520c8643d7186f2980b8fd1ee021c1ea29ef30e316cb924f94bdf9b","sha512":"a35940699283c572879507d0db1a81195e94042f32f0e98d7b8cbe8ff624046f48a22cfc8a7aae1b5ac8d0a83e8c4d210c4909b30fc1becaad67ee374c31dc51","ssdeep":"","tlshash":"5af0c0472d13800904001a957478f70dd5cfdd647b53ac2078c856be88acfdd1867048","first_seen":"2025-02-23T17:36:35.625931Z","last_seen":"2026-02-14T08:17:13.70275Z","times_seen":16,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/api/spa/_/currencies?","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /api/spa/_/currencies? HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-API: neftrix.com\r\nX-Lang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:49 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncharset: utf-8\r\ncache-control: max-age=150, private\r\nx-fastcgi-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=06aG1qMQQkE3ON8hEElDy14smqkMlxMYl5tXzUJRtmkfVq93dkhNAgklX%2B%2FsfSyD5K%2FrsFr5%2FVLsXXsnVDlChnJtJIi88Szf0M%2BJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb201efc885ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":264897,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"96c2ba412961080a446a74777d56cb8e","sha1":"1c2df522cc32b0e8e6d24d08b45f3947e42a228e","sha256":"c40b6e99cefce11d1e4c3018a00799b19dcc9f064d6fca22cbb6ef0419d2d1c7","sha512":"efe3582c1b91ac6bfd31644809f17b8ea500bb9c7b76f2d24ca114f543fdc91b03a3c8b9ec5078aff5930aa23332b239eecf38429e88542032047b49b3578a3c","ssdeep":"6144:PCu2RMrm/5tXbOvHfRwiyHNn/rSzxat082yDsDaHva7MauSH61WgPYD5SwBw3+zh:PCu2RMrm/5tLOvHfKiyHNn/ezxat082N","tlshash":"ec4463fe911a5af9f440039ce99434582f2db557f7c15868c3ae8db26f906e312370ab","first_seen":"2026-02-14T08:17:13.706203Z","last_seen":"2026-02-14T08:17:13.706203Z","times_seen":1,"resource_available":false,"data":null}},"time_used":705,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":599,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/logo.62de411c3107992684f8.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/logo.62de411c3107992684f8.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 2878\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:18 GMT\r\netag: \"673854d2-b3e\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k2jUImM6W6w5FlmbNJt8y3G7OEn8Ia8c7RLoljEYn3X6KvXh%2BSqzba6BztRhi9wjHM2brt%2FYe5X3SaO4pvBJyAekSFVpAxXeWNlb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb20205bcb5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2878,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"9c41196434a7a8677da314c9f3a9720b","sha1":"4aa444bbacc80a6a0ed0c6d38d24d47dcb6edc2e","sha256":"8e2530f34089dfc1a4fcccc93e38f0c48ad20af0b8c29a63224d9c7a7e352e9d","sha512":"f56613646305596829d84f02bb6d7d9f9887af4b149490487dc06a69cf26cc37f97304656bc6d65b72f0830e4ff0dc3e1818236c86464be2e3c35efd03991735","ssdeep":"","tlshash":"00516df192934ffaa4cdcc321e1b360f97a0542fa7d53209a1d1803122339654bbfe1a","first_seen":"2025-02-23T17:36:35.596457Z","last_seen":"2026-02-14T08:17:13.709066Z","times_seen":20,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T08:16:47.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\nlast-modified: Sat, 14 Feb 2026 01:51:21 GMT\r\nx-fastcgi-cache: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mr6FeIcLdWaW9tBhVRQU%2FCkKL4HT9zhnVDiPH%2Fx0iSOcfEJuMB8YYkvcEvbTAXhPgI0LOCrJTgSpVJ6xnojURhU3T7ep%2Fllbb0Ll\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cdb201818875fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":521,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (521), with no line terminators","md5":"5a096a3b4e3607c3d640fc0d9b5bb45a","sha1":"91aac9fd6162ea1e3caa0bfe2a4d612897880a27","sha256":"b8f78be33520c8643d7186f2980b8fd1ee021c1ea29ef30e316cb924f94bdf9b","sha512":"a35940699283c572879507d0db1a81195e94042f32f0e98d7b8cbe8ff624046f48a22cfc8a7aae1b5ac8d0a83e8c4d210c4909b30fc1becaad67ee374c31dc51","ssdeep":"","tlshash":"5af0c0472d13800904001a957478f70dd5cfdd647b53ac2078c856be88acfdd1867048","first_seen":"2025-02-23T17:36:35.625931Z","last_seen":"2026-02-14T08:17:13.70275Z","times_seen":16,"resource_available":false,"data":null}},"time_used":528,"timings":{"blocked":59,"dns":40,"connect":1,"send":0,"wait":404,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/m-onramp.0d295364e4acddaeb264.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/m-onramp.0d295364e4acddaeb264.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 725\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:19 GMT\r\netag: \"673854d3-2d5\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1WWeKLAWBz6jx2m7N5bTjsW3wEmifQllrvmBJ%2FY4S%2BWDFRqFa4XXyvOzQH0nrxD94n9O%2BxqRsvBhncw9B2t5B6sAqOVu8FZsE8fR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb202009f55ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":725,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 31, 8-bit/color RGBA, non-interlaced","md5":"a5e8a3b66813095d2c8f84aba6cc3379","sha1":"fbd6b84b370da0d35e86efcf527b484ecc144d72","sha256":"47ed4c4a3ee32ca75aea54c5cdb411f0f890532629d47ae4f512589f6a05d9e9","sha512":"987c5ed562a16fd13d3e9f4e2cff1b1ee1cfcdce3e2ed1e50764f9469efc94d2a66ed7772682d029970bf4bdc77d6debe90a7124c8cccaaecafd351d1cd22aa6","ssdeep":"","tlshash":"4b0165dea9e05bf90d5c35b0a3d509f955e538dc9e49b0860a874220016dca02651f66","first_seen":"2024-08-19T22:55:39.129741Z","last_seen":"2026-04-27T20:47:21.131739Z","times_seen":55,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/m-ramp.74f071ef15aa8acbff6c.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/m-ramp.74f071ef15aa8acbff6c.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 655\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:19 GMT\r\netag: \"673854d3-28f\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6FuZZLjQP1XJVnJVhQas7Xet8gRaO4xZZdHxx0l8%2FejZCkuFi1UucRF93odajpA%2Bz61kfheLv1Wx%2FCuRQrsH4DAHWU%2F%2BVV8qlMGO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb20201a5c5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":655,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 14, 8-bit/color RGBA, non-interlaced","md5":"b9eb24da0c44b46deb73299fc5db428d","sha1":"778a8eefdd242466d7480052bcf5f326712c1eae","sha256":"31da56ad9a2685cbad0bc4831a9a536744606024f053bcecfab4d70db182fe56","sha512":"9fca87605b8f394ce211b8e92ef5716e88638808570ba9b8d30dd81d6bc956743def0422db7ae27adbd314a7a4cf64ec1dc95b78ad5e790aa8b1ebb2cdd49865","ssdeep":"","tlshash":"03f083ddc1040fa4742c0a348b2ad298c8bb783def8728052de19c70e6d9ebd4ce9290","first_seen":"2024-08-19T22:55:39.103956Z","last_seen":"2026-04-27T20:47:20.926787Z","times_seen":55,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/wiretransfer.3fc68e27c5ae2fb0c9ae.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/wiretransfer.3fc68e27c5ae2fb0c9ae.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 1059\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:30 GMT\r\netag: \"673854de-423\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=92EEhZZL%2BPaCtdA9iB6A%2FYLS59eq%2FzTg4O7BcyiHeKOk0dcAYr391KB0cmMmw5xTannt7dNbMlIFbAoIcu5vWfyLpt9VEW5KoxD%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb20201a4d5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1059,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 25, 8-bit/color RGBA, non-interlaced","md5":"0b834191ea9ca369899af3188a527615","sha1":"3896624f9c4777337389e611ef8c4279d876d2d2","sha256":"2d648bea7e1216ab18c8b1a93086ce0f1b61120443857867a606ac89623686d2","sha512":"7b405d9f94a1f19d0735f0104e83abc849f060fe9f8e28521e89aceeee9abb5c0e57b6ac762cf26e2b4565739c6559e2f1489379d088272a850972c02e0effcc","ssdeep":"","tlshash":"ba11b5eff426ac14feb10a77818e052088a80b3680995e0cfd62091c8cff5482ba89d6","first_seen":"2025-02-23T17:36:35.594373Z","last_seen":"2026-02-14T08:17:13.712555Z","times_seen":20,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/mpd-usdt.1c738769a4c5484ce032.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.710Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/mpd-usdt.1c738769a4c5484ce032.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 2025\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:21 GMT\r\netag: \"673854d5-7e9\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XOo5H9hctg6y4NBAKC4oWxpCV3h7ien5mUtZYB1D04so7abvupMoMPTJeTeSBAO6QSgh5pNKkhhPf4mNDVgaAKXWyj3zkF08NBD%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb20206be25ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2025,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced","md5":"9b3edbb9dcf57c9c4e9290c3faafe150","sha1":"3a1bedff3c13fe8f0db561f99d953292062b3acd","sha256":"0b304da2ef4ca9a28533733049b1f039134b15324d300a3eaebd0449f35c9954","sha512":"aab88d41ef30a9bd8d39acafda7e11d63fbdf10f75e7cc7370a06db001e92b9fe29628e6caa29f351371ab4fe1b8bf379dc7cffb0de5b7c86400f7555781b223","ssdeep":"","tlshash":"a6411a9e1581bc555a98ae25d308ca0c47b4855a3c162c18d1a3e796a4fa02b5952b23","first_seen":"2025-02-23T17:36:35.63697Z","last_seen":"2026-02-14T08:17:13.713406Z","times_seen":20,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/error.e3510c7af78f977e7bf6.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.869Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/error.e3510c7af78f977e7bf6.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 15490\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:03 GMT\r\netag: \"673854c3-3c82\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Geln4Jp6tZJraNJcuRFSTybBHRSNbtZSebxLVMa6543YBRMZi2WZuvrZgyGAkDCA356ubgHtRYgw0G%2FogizSYIMRYF4jvo0wGe8U\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb202138b35ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15490,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 106 x 108, 8-bit/color RGBA, non-interlaced","md5":"f6ce51ea64e2f4bef457a17c74c91a89","sha1":"9335477877210c3c9767a4c34586fc68d8d381b2","sha256":"8920fd5af989fe823f95a4ae33cb8e673601c5f083997457abeca9bfa0d657e4","sha512":"f4b0a4dfd20d6687906e1f965be74b210fc57c61877d41eec3eefea0ee21e1b57b5d7958391f588250b3085cc75369dad17aaff97dcb0d4f3e09e9aa34b5f56a","ssdeep":"192:NMSlRSAuB8UctigJV/1xCa5CX8RmlgCDGXNjjKKqH7/k3Q9lgnzpBDIy9ooKpkX1:5Xo8ptigJNHCSLFjKLbtloDIyNk8HcUb","tlshash":"3c62d0bd0e2269470e301193755fb9f91cba052ba10fb1e2b5959344aeb31d4ca8bfc4","first_seen":"2025-02-23T17:36:35.613955Z","last_seen":"2026-02-14T08:17:13.714142Z","times_seen":20,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/spei.d3dab82536d11c16b9dd.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/spei.d3dab82536d11c16b9dd.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 981\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:25 GMT\r\netag: \"673854d9-3d5\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F3AKt5XeZuPzHHIRSB6LcfZT5ijKBFU3ftPLh%2FBprxsTfZpszeDzRWSK4s1ALLVBjfr%2FSjSG%2BiwF2PFpfCQuqYAQA53XjJ62wTkk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb20200a375ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":981,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 24, 8-bit/color RGBA, non-interlaced","md5":"0cb4042864ee8404906ab14144a6f529","sha1":"516037131850fbe7c714a6213e2c7b0627be1ef3","sha256":"17de4da8e0d3c4dee38f1d2cc949d76215ba68a3b1d82775e9370b3b50f1649c","sha512":"63dbaba8ab8217c3ed423f90e34231cf36279c27e2d32fdb2615de724c28aa404f6189886f912b2ee15abf56dac70642418c5060b931e8b79bfd22f37d79950c","ssdeep":"","tlshash":"d1110c92d6e6d737132c1660515fc5eec2a3a78c1808602c3f7c4d051e854c5113f7f0","first_seen":"2024-08-19T22:55:39.101131Z","last_seen":"2026-04-27T20:47:21.177348Z","times_seen":55,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/743.3bd8b706661122578b4c.js","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:47.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/743.3bd8b706661122578b4c.js HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 140129\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:15:55 GMT\r\nvary: Accept-Encoding\r\netag: \"673854bb-22361\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HC8zmdiv6CE9EFYUXU1rCQxC7%2F4UTl3RounV5r91C5wds%2FEwos2LFQkq8C0QOA9EPjFfTMixLrgB83DGD6d4ts47%2FJSDKRjf9Ws2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb201beb685ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":691784,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65454)","md5":"8d929b4aa77bbbf23ad67b41c871c3fc","sha1":"bc32968717a664126bc7624c6d79476d03841e6b","sha256":"8a28fec90aea7e59d543559ec86ddeb0bb24273f2184ab5b2703c1931bb1827e","sha512":"29b68b74609c34c5ca8bddbf93e0ba55c77323f3898435c612d3fd610d2ff4c6b5d2cfb150d3484d79efa79aa630772786766092800ccb265f95213ba85aba90","ssdeep":"6144:7ZJOTEVtPbwhuFE61CtcMtT62YjXouFmhDE+ByXFyWPrqA0:7htPbw8Gvm0uFkF9","tlshash":"c7e430a2738427a6a64909e94029a107d0f6d42d302525ccfbf6f7d7f83d9a2f82d774","first_seen":"2025-02-23T17:36:35.640209Z","last_seen":"2026-04-27T20:47:20.937857Z","times_seen":57,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":138,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-02-14","alert":"Hunting_JS_WebAssembly","trigger":"neftrix.com/web/743.3bd8b706661122578b4c.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"neftrix.com/ws/?EIO=4\u0026transport=websocket","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /ws/?EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://neftrix.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: yqZD61IGPVYMRjvb6ENAjA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 14 Feb 2026 08:16:48 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: me1MRnR6zvc5ogwKwTfbDVZa2nE=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=NUdT09aMcuJkW9AmMCGR%2BGhUQqaxmWvx5TKN%2FMhj9q6rl8xApa%2BQuCJSLau9RuqN%2FLzFedpb4wpM72e6TiFrRW7jjjqFQgKdIpx5gLuWYURXp0qbqvHB2K4R24OfKg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9cdb201f38c1dfec-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=515\u0026min_rtt=443\u0026rtt_var=209\u0026sent=5\u0026recv=8\u0026lost=0\u0026retrans=0\u0026sent_bytes=3111\u0026recv_bytes=1179\u0026delivery_rate=6188034\u0026cwnd=252\u0026unsent_bytes=0\u0026cid=5f51d1b3511c461e\u0026ts=239\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T11:34:21.534624Z","times_seen":16238222,"resource_available":true,"data":null}},"time_used":300,"timings":{"blocked":0,"dns":28,"connect":28,"send":0,"wait":224,"receive":0,"ssl":47},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/m-banxa.7c6e064cbd92f9d28edf.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/m-banxa.7c6e064cbd92f9d28edf.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 765\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:19 GMT\r\netag: \"673854d3-2fd\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kk%2FAnqQrd25upc8JADz1rgg1hvETvZuNWWvopI8Pbw66FR6teKpB8dk3%2BU%2B8O2ZeynQhq2rJULYDz9hECAO1Veo7%2BwxJFb0Jl4jY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb201ff9c15ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":765,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 31, 8-bit/color RGBA, non-interlaced","md5":"0f30e6bbed06fee3b4884d76293e35ac","sha1":"d3d3e2c7bc9f0abaf812499cb50033c21d8b3169","sha256":"a7540f61ef378ef0c3c8d7e1a070bb485c3af5b0afea4e61b0019db420dae545","sha512":"7c5f6bae8782b4b9f4dd559a76be07debb6c850544134dd96a9cec8ec1c3a6e3f014e8aeeb28b79176d1e703c0514da43b794555aced04d4b75e2a0000527030","ssdeep":"","tlshash":"af0165f1f09ae5ffe76e9e2325c54d70b4736a1f8b41328a2ab25817c108476d3176e0","first_seen":"2024-08-19T22:55:39.097052Z","last_seen":"2026-04-27T20:47:21.04055Z","times_seen":55,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/part-bg2.37252da6fbff13395c4d.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.716Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/part-bg2.37252da6fbff13395c4d.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 39528\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:22 GMT\r\netag: \"673854d6-9a68\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=867o7OwKuPZGZ5xWxf68tliULIggFxeqvHFOL6rivZwA7%2FQWU2Gq0ZMmqrbO4seRmIXQ6sm19NrJv0lQLJ0L%2B3DfolBxULUEWc%2Fh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb20206bf55ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39528,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1360 x 320, 8-bit/color RGBA, non-interlaced","md5":"cfb023d77dae085238931e3bdd8099aa","sha1":"edb62c1f13fbe1aca8569f21c9f880146dd9c417","sha256":"f44852807af10b913177ae88e64cc52a0e019bdfe1f2f5bfdb1203abcdf3a7ee","sha512":"8334724449ffb6db608625caac9f1bfc4991dba44a1ca251c6658f7a695eae0e630b53430728dda48ef3cd7aa915c264e98a42aa907d38a97f7e6c03ee245ce1","ssdeep":"768:m/WvM0fuSqRK2Lut1+AV4/wReD1FnTAdNuQFiXn/:KWvM01JhPVV4I4DL1QFiX/","tlshash":"d903e15d70d1e230e32782b3bfc45892fe208f7586f61ce6c8c7447e89a161e34ad559","first_seen":"2024-08-19T22:55:39.108984Z","last_seen":"2026-04-27T20:47:20.978813Z","times_seen":55,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/m3.7403a4877d05d1b8ad1e.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/m3.7403a4877d05d1b8ad1e.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 13981\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:20 GMT\r\netag: \"673854d4-369d\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3T4TSMFs%2FeKZayhwOeo9uzxDHeDbE8vXekEGacAk%2Bb%2BhsosHSEJTEXoZ9z2z1ik3eD0O8jSpDyLhgjY58Ot8gv%2FPBH2roByCa4ty\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb2021284b5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13981,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 319 x 440, 8-bit colormap, non-interlaced","md5":"8a9ed1f759a6973750291a900867848c","sha1":"86ab98ce83823cbdea0dad57dd19fb28c8142266","sha256":"743b5b34798589f21ad027de932e2515b71a83241654cd5ddc8bc04bdebcf493","sha512":"ab62ef17638f2bc570ec46d6f89dd5fdcfc705a3ff0c9bc315c630a69a7cec4421d6b8ece4abe18988bf51e2f259ecb7ff69b50fa6d81b9167d10b7f1c9d4da5","ssdeep":"384:Z0yl8RfdBiTMHHTQaGJ+wvaboUjHEZwkHyQ:+48byMBGFyboUjkZfSQ","tlshash":"ba52c0def0958d364f208e6a9267753583ba801d930c729d5db07626b2fd77f71202a0","first_seen":"2025-02-23T17:36:35.601173Z","last_seen":"2026-02-14T08:17:13.717789Z","times_seen":20,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/IBMPlexSans.177e36a80520ea4ad85d.ttf","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:49.751Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/IBMPlexSans.177e36a80520ea4ad85d.ttf HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:50 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\nlast-modified: Sat, 14 Feb 2026 01:51:21 GMT\r\nx-fastcgi-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zicIBGA7rMUq7vb6gqkKEfxyYHF0sOovt%2FvdkKp6Obf1lv1Dm%2FONpV1Bb9fZgKrSayXuXH7ZHDfP2qDxz2NpMfj3VsZIZVmL5Kqf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cdb2026ff0a5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":521,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (521), with no line terminators","md5":"5a096a3b4e3607c3d640fc0d9b5bb45a","sha1":"91aac9fd6162ea1e3caa0bfe2a4d612897880a27","sha256":"b8f78be33520c8643d7186f2980b8fd1ee021c1ea29ef30e316cb924f94bdf9b","sha512":"a35940699283c572879507d0db1a81195e94042f32f0e98d7b8cbe8ff624046f48a22cfc8a7aae1b5ac8d0a83e8c4d210c4909b30fc1becaad67ee374c31dc51","ssdeep":"","tlshash":"5af0c0472d13800904001a957478f70dd5cfdd647b53ac2078c856be88acfdd1867048","first_seen":"2025-02-23T17:36:35.625931Z","last_seen":"2026-02-14T08:17:13.70275Z","times_seen":16,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/banktransfer-min.13c50eb2e5b9c49f1d94.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.644Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/banktransfer-min.13c50eb2e5b9c49f1d94.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 942\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:02 GMT\r\netag: \"673854c2-3ae\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QPh37qDKl3LlifOp%2FtuPG%2Bh5WuL3nJXVkesdUFk%2BN30xIX8wjQxWBY3gEJ6QLdArD6AS9lMWmODe8pthX3cr3RrDc02Wbd6Wm5Le\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb201ff97b5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":942,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 24, 8-bit colormap, non-interlaced","md5":"1cab90300c916e5106f2b95e43f882db","sha1":"46961d0772387b00ccc829fe19d03bd92ccc7612","sha256":"32f373c3d3732a0812330fb8c1d263c3a89dc82279c1e0e35469967bc91d7011","sha512":"1cb13cd708a98a031cc0a789b30a8caa826afa1b098a9c53ab0b4749dcb3c0be85ef2cd2c04d65a87fe5ffefa7bf5f63ae8a045e8e220d73114f689dc8c9d6be","ssdeep":"","tlshash":"f11148e37342cd97895d5c210afb6293e8e79bb445c5b25deb70880415758f69358c41","first_seen":"2024-08-19T22:55:39.093775Z","last_seen":"2026-04-27T20:47:21.215117Z","times_seen":55,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/mpd-btc.568f0b5bfe8a3b1cf311.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/mpd-btc.568f0b5bfe8a3b1cf311.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 2257\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:21 GMT\r\netag: \"673854d5-8d1\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TTFWJ2zsyuOSUW0YN6MHptQZTynyYQPLVfWbe2zlG6Py%2FHdFkSNjiYUAC8TNWNctAYHAquMfXVTTzpuUwLr1259BQQzBUxT8yEgl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb20205bd65ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2257,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced","md5":"80e81fb2071a56e3358f6bf7f5f394bd","sha1":"c74b5c8a1607c7d85d0a80178b339bc494dfee51","sha256":"b9d97bd9858f249d235868518c3b8b6b690149954e939e6e38b5b918e6b511fa","sha512":"4c1b8d8b67a189c52311a7ff75d804a59ae4017064916d24c6b86b8c2ecae8370ff441593eab7d61c28b44e835ffa9971e673460a1520f5cf1bfa3b880284aa0","ssdeep":"","tlshash":"fb4129f5398ac0a2695b379e4720c91630018f33dabf35a0b87f024ac2779de1290c71","first_seen":"2025-02-23T17:36:35.597496Z","last_seen":"2026-02-14T08:17:13.719078Z","times_seen":20,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/IBMPlexSans-Bold.ffdd8696ca983efc2c20.woff2","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/IBMPlexSans-Bold.ffdd8696ca983efc2c20.woff2 HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:49 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\nlast-modified: Sat, 14 Feb 2026 01:51:21 GMT\r\nx-fastcgi-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5cos9mlA%2BcFDRQMprjAfeW9zVTbcPPLh6K2Tgnjk9RbHXNzOKiGSGjMDGZcgW5uUDjG%2Bh9iwvRlZErxuuDzOzz76rqrw3ItPE9o9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb20208cbe5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":521,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (521), with no line terminators","md5":"5a096a3b4e3607c3d640fc0d9b5bb45a","sha1":"91aac9fd6162ea1e3caa0bfe2a4d612897880a27","sha256":"b8f78be33520c8643d7186f2980b8fd1ee021c1ea29ef30e316cb924f94bdf9b","sha512":"a35940699283c572879507d0db1a81195e94042f32f0e98d7b8cbe8ff624046f48a22cfc8a7aae1b5ac8d0a83e8c4d210c4909b30fc1becaad67ee374c31dc51","ssdeep":"","tlshash":"5af0c0472d13800904001a957478f70dd5cfdd647b53ac2078c856be88acfdd1867048","first_seen":"2025-02-23T17:36:35.625931Z","last_seen":"2026-02-14T08:17:13.70275Z","times_seen":16,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/images/currencies/s/312ccb6f.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:49.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /images/currencies/s/312ccb6f.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 3544\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 25 Apr 2023 19:05:31 GMT\r\netag: \"6448247b-dd8\"\r\nexpires: Sat, 21 Feb 2026 08:16:49 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Sbs31z3IPM7ImRoeQ1sltONOUpqB1I%2B68UNdZrF%2F7SMDkGpvzjS1jWxGm1k6AhTf38GqkAip%2BmH0%2FfigksEHrwkISEeJMz%2FX4oy5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb20266c715ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3544,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"1556c2bf9fd95b3d08f445e087097ccd","sha1":"d922fc1f66fd8fd2bce3317ff56ae9e0064c3919","sha256":"6d3ee4f47d94028e738388f3328cf7a3ad5c64680ef10f5ed0e817cfc61b9a65","sha512":"0a236ff4abb01014a59cf1a44a2e4026262c965bdab7a71ab822908355f4b1475d1e90a614f399f2d8f37d67505a32ebf4a073e9345e38a301560b90c27115f7","ssdeep":"","tlshash":"5d716d6ef69910b4fe1d7681837bc67398e16d283a0b6d3409af6f83c074c4e2155a6d","first_seen":"2024-08-19T22:55:39.125231Z","last_seen":"2026-04-27T20:47:20.99866Z","times_seen":69,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/api/spa/_/currencies/changes?","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /api/spa/_/currencies/changes? HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-API: neftrix.com\r\nX-Lang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncharset: utf-8\r\ncache-control: no-cache, private\r\nx-fastcgi-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gSKHNE1ol8ynOYThNufLW5GWDN2Qn%2B2q0eqMQrptr2D1PSiKoBTNB9AY0kdSBDUM5ghLcufRlKxij2%2BeQgsxWBzmhOn9Mz9anQHt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb201efc845ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3c43a898afb12d5088377ca2859fa638","sha1":"a2a2acf0900b9e1027320639ab0e284b2bce07cd","sha256":"56c361cf153258710e671a8235b086abb2e3776ed67d5e3fd1989d89242b8037","sha512":"4ce9c21c4a3843e1c0cf31b3b963c2aeb9be3b8e7bb4ce2eb5281a7bb76ff5d9d3a7e56325d4ba8dc02e975a2cafbbfe06d38e3c8f266d2a4e42de036ed77afb","ssdeep":"","tlshash":"3a8004403d01003055005541f40c1d40457431114314143014ccd4c1417c0573d7451f","first_seen":"2023-07-08T15:07:01Z","last_seen":"2026-05-09T07:38:55.096949Z","times_seen":119,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/IBMPlexSans-Medium.bb6bb1b56ef163ca467c.woff2","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/IBMPlexSans-Medium.bb6bb1b56ef163ca467c.woff2 HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:49 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\nlast-modified: Sat, 14 Feb 2026 01:51:21 GMT\r\nx-fastcgi-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aM%2FVU%2FI6itrQjCViNeHstUg3QlfwTfSYMkZfi%2FaboIWS3Tb%2FrhrlyCIFYSK6inm9niEtLZWXV7ObTWYOz%2BGoE%2FAoEqlsmTWiVkFN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb20209cd95ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":521,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (521), with no line terminators","md5":"5a096a3b4e3607c3d640fc0d9b5bb45a","sha1":"91aac9fd6162ea1e3caa0bfe2a4d612897880a27","sha256":"b8f78be33520c8643d7186f2980b8fd1ee021c1ea29ef30e316cb924f94bdf9b","sha512":"a35940699283c572879507d0db1a81195e94042f32f0e98d7b8cbe8ff624046f48a22cfc8a7aae1b5ac8d0a83e8c4d210c4909b30fc1becaad67ee374c31dc51","ssdeep":"","tlshash":"5af0c0472d13800904001a957478f70dd5cfdd647b53ac2078c856be88acfdd1867048","first_seen":"2025-02-23T17:36:35.625931Z","last_seen":"2026-02-14T08:17:13.70275Z","times_seen":16,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/m1.7d900c2d1c59c910feb9.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/m1.7d900c2d1c59c910feb9.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 10437\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:20 GMT\r\netag: \"673854d4-28c5\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hisFN2KY9pBFqKXCYCeQO4QE2rFNols5iS9lE2O%2BnNCv9r%2BQYPlQQViJunYyDs55bTiE7xmaQwPDP%2BXVz6EfUk2IV7e5%2BLsOrf5K\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb202128405ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10437,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 301 x 435, 8-bit colormap, non-interlaced","md5":"ac49872ab33d7e19ec14ee2b45636123","sha1":"c6fcb8ccc6f837b820180fd8ded45277a6d89441","sha256":"ef75598356439f7f9821d61a5983cca90186d1545744d5ec8b695b712cf7ba9f","sha512":"96859dbfff2a05d9605edba85a047f40fde2f56e15835b6ed68537cfdedf23af06959e59fc3df1e3185774e6d216ecc6efa148c73f4376a5ea8878cd50cb838b","ssdeep":"192:cSSCRtK8UE8uUIe7oQyYXP4XGPkTrnb9D/XnXY8tXaTDm4aZJmKTFrjqWgV5l:AAtKNAe7oAPTPkHbd3XtKvmpDNqWgnl","tlshash":"fa22b00a590a967632a32e5ecef25424062b4f67fea2741f2c0938be2d31a49d2c710d","first_seen":"2024-08-19T22:55:39.114921Z","last_seen":"2026-04-27T20:47:21.100522Z","times_seen":55,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/mastercard-min.b9857d0fdf9c151e9c97.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/mastercard-min.b9857d0fdf9c151e9c97.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 963\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:20 GMT\r\netag: \"673854d4-3c3\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MEgQnOKKOkcJalhCu9iS%2BWGi8HcaYnFLKMMePwm7Q0NRG1tsjVMHf4oFKxptxjzC8plgjEgCI2X7DfGfL6fpio08tk%2Bp5OFICWO7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb201fe9595ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":963,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 25, 8-bit/color RGBA, non-interlaced","md5":"8e61144429e289d59f613bf12942ff78","sha1":"80c548ab478d6e422c401cf392793c59a5662e7e","sha256":"ee3adcd230821125217a315b1828ba0107bac545e8c8ad33a3a6a3c332068489","sha512":"985348e450f419346d9b0ca9d81a4cb3da1c0558001c0e0a2a0c3ee146cd2845573f43887fae47efb97adfdabfd4fa88132a717fd7fc21541c234d2ef5c29bd1","ssdeep":"","tlshash":"dc1198f8184db5da9b0f02c197a34465cccb2e9d1c492a327a6cd06e5ec21d159e4759","first_seen":"2024-08-19T22:55:39.091003Z","last_seen":"2026-04-27T20:47:20.976257Z","times_seen":55,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/maestro-min.a4a0f55458ceff844806.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/maestro-min.a4a0f55458ceff844806.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 1346\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:20 GMT\r\netag: \"673854d4-542\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sblDhy2pvlD647zHrVv8RayFdjdUq64uC60fUEw%2BmU87uBiIiKfRcHQjf%2F46Qgxq5HLVB8p0ZeMnNeef42oUC5AkUjQIu%2FgsBriL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb201ff9995ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1346,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 25, 8-bit colormap, non-interlaced","md5":"b6a0417013375fc517d770c2b73effeb","sha1":"3e68af1b9f887c40e5d931c218069dd78b6099dc","sha256":"f7ba0ad35ffbee012ce868fe6f0077b76966ecc6e8635db96f25d4ace43522ef","sha512":"6fa7c7b1a414366863fe39e8a7b63fa480c96e32ffbd38f6affb2dcaae7f42f04e721efebab06e336de3af64a7b553db40bc55ce2ef38e0e7e71e6d0c1360d4c","ssdeep":"","tlshash":"2921d8f18427b437eed96067818f5207ee245e3037919feb34158515882ded3191998b","first_seen":"2025-02-23T17:36:35.580775Z","last_seen":"2026-02-14T08:17:13.722651Z","times_seen":20,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/images/currencies/s/5cab691c.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:49.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /images/currencies/s/5cab691c.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 4435\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 25 Apr 2023 19:05:31 GMT\r\netag: \"6448247b-1153\"\r\nexpires: Sat, 21 Feb 2026 08:16:49 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ov%2BqQF1DlfQ0CimQfWpAu5EzSBMBivAZ4HeDmqEx9xbSqVPMQxNC826cyfQKPNUaOiYVjVFTGJHB5m8IriDr3EBM6aDPpqJlvKLa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb20266c3f5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4435,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"b7c5c893939873015be0673f9fa98a82","sha1":"a16c0273f4dad92fea722af4e7591ec6850dbd7b","sha256":"4d89493e2136a102c1e9447fd3d6e0c8753a93dd0bed218a88ef655a5c225895","sha512":"92998a52f2ed726aa017f43f14ca0f4124d4b638fe60af50a6975d15e5817ffdc31302fcacdb6b6b7523a47d373ef7d22be8501c9f6841219b93c831bf267c5c","ssdeep":"96:DSx9Gi27S4a6MjjLGSF1lHkjMmpp+l5aroeq5gR0dYDKbK0mke:DSfGua4LGAbqMmb+l5oEx0KFve","tlshash":"4c918e9e66e80b71324ed3201148ce99a6bd8d5b8d8a054d077acc213c2c86991ba3c7","first_seen":"2024-08-19T22:55:39.122228Z","last_seen":"2026-04-27T20:47:21.207167Z","times_seen":69,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/api/spa/_/translate?language=en","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /api/spa/_/translate?language=en HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-API: neftrix.com\r\nX-Lang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncharset: utf-8\r\ncache-control: max-age=600, public\r\nx-fastcgi-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ReqplSg3xRwtuGYfEwc%2FqWG%2FPSIt2n3PM9MG8ayFrNHjbgFjy8FVf7P%2FxqsPJYsXy%2FE1TGYEszUNUsb5LB26XYsPSLQqw1mpoeBX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb201efc445ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26988,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e71aecdfca2108feb92bf735ed2b4254","sha1":"7336714563c7bd089d712e045b66176d91b8c294","sha256":"5212b5f45f99719d70389136cdc57447a76c390b839f494429a3eedbc4ebc161","sha512":"308398c5217d6e2dd0b465fee2d98beb4122f7a769d378d7874e7a561aefb5c8a48019e1212b0d6984a91109f6551ec8492e87f610185e3d3f50803763b7ca36","ssdeep":"768:hBECieeaWtiHaFUxZVAkOXmLRTuNdS8u9uqwQ0xAMCFGc:bECyaWtt0VUZIcuMC5","tlshash":"18c2a64ad2407b6d8e9172d1374ad9e939bfb6c4bd03f1a0448a407c22e563cd66b7b3","first_seen":"2025-06-30T14:28:31.868407Z","last_seen":"2026-04-27T20:47:20.969412Z","times_seen":53,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/m-moonpay.acf8e57bb930ecbd4211.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/m-moonpay.acf8e57bb930ecbd4211.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 499\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:19 GMT\r\netag: \"673854d3-1f3\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U%2FsFH88zYaBMZ3MXngZlj9bz3JzFnL71NcOkLF87BQmy5wrK74sYg5kT%2Bo7h2b%2Fc34TLqOjzZ7hxyKl7kOgCw%2F4k6dDmkQJDMrt6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb201fd9285ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":499,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 21, 8-bit/color RGBA, non-interlaced","md5":"56d9825a00f6e17884bbe819f625fb28","sha1":"6c94f1cc072edd17d615cead4aee5228f1de1add","sha256":"4aa4c4027958ef843cc61e82c5d931d80154601f7a5d47751f07c4e52723ac08","sha512":"cffdf2e943798cb4ca106873dd35731e37eba1a9270ffbcdf57cd49fc1a49252aedd31e4d6bb220a9ff0b4363a54493775bb5d6741f86f7300459241f5d3ce41","ssdeep":"","tlshash":"6cf00eed7e41e8684aa803f505dbf237b0272f2e09004004fd70b112b51ec0869892aa","first_seen":"2024-08-19T22:55:39.131837Z","last_seen":"2026-04-27T20:47:21.149273Z","times_seen":55,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/pix-min.902eca13d07c4e9f55a5.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.663Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/pix-min.902eca13d07c4e9f55a5.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 983\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:22 GMT\r\netag: \"673854d6-3d7\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zBA%2B8jMC5fF1yl8KfvZpsiInx5ylY7vjrV4MPqfxsezmVylh578lgedDf%2F3hA%2BEquoUw39QcToDzRHz0c7cqtLKTdus%2Bv2QteOJ5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb202009d65ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":983,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 24, 8-bit colormap, non-interlaced","md5":"e816609f9c890ba46c0e6cd2941d0f37","sha1":"97677f71ff343368b094bbe71c761946f4c63e0f","sha256":"7475ab06b503a7e0bbc4cb7cc3e228e640ffd91a7cde79890734168b52da79b8","sha512":"b1bfbe6a0669ee8eb03f4e85880653770da40e6b710d44bdc9103da7e42bf7bb56c3693eb5bd18b711cdb7898f4829eaedc93ab4a6d54a46ae44b5c7c45b6ae9","ssdeep":"","tlshash":"4311c8cca34fe8a0545c60f9007a75057ca673a720524c6de974c423373c066311cd09","first_seen":"2024-08-19T22:55:39.097663Z","last_seen":"2026-04-27T20:47:20.965517Z","times_seen":55,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/imps.7c81e3d3114b6d346c2a.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/imps.7c81e3d3114b6d346c2a.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 1208\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:16 GMT\r\netag: \"673854d0-4b8\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7eZ%2F8gQt9VfInwrx3VVlFykoYhIF0aEFiyy%2FdBQ0whN%2FsppfAjVsn9G%2FQBY7GNiBxiKDIaddC4BJBJz1ZFcPJKSmlOk5ffC3RhR0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb20200a215ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1208,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 38 x 24, 8-bit/color RGBA, non-interlaced","md5":"e8f7da8c4de523b0817910ecc8cfd116","sha1":"e39ccdd6f1f609845628d8064a2ef08c196005d5","sha256":"59eb7d63ae92946496da0f727da33c4324213b0c7fa3847bb07be2de27e8bc48","sha512":"ca1a760fa9a6bd68fb56d041245a3b7a83cf8f82021f3df659f01da9ff3c1787d05870cbfee7432b85cf646cdb87d1708d5bd1f6f6604f99f947b5b470beab6e","ssdeep":"","tlshash":"2521dada0b87542fca076d5587ef07644b71b8d9754b57438cfcb1307635ae5c714111","first_seen":"2025-02-23T17:36:35.590515Z","last_seen":"2026-02-14T08:17:13.726288Z","times_seen":20,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/withdraw-dark.3b6f4d9fb67d7a7eefe5.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/withdraw-dark.3b6f4d9fb67d7a7eefe5.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 7318\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:30 GMT\r\netag: \"673854de-1c96\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z2UYcjZd4cm4RCkwjjkdHanzGHYgr%2BPr5JjKxX%2FwY7J%2FpLMNIViVn9sO8iFthVGMoWljGxLDRg18YasZTt9TEA97dq3wlrOom9Q9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb202128745ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7318,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 92 x 105, 8-bit/color RGBA, non-interlaced","md5":"93c61d7bf8cdcbc21c73f408e7815235","sha1":"bf9296e63fb6e242612e993003d01569c356f0a9","sha256":"9e86927139472b0e681a115df0ec9d7eed4a5661c7666d3e4341a17bff03d0a7","sha512":"551400312245de0add2ca48ba4bf2fea54faba0b1d15b516e34372e9c548fbd1186d10ad7adb7e844e5fbb7131dd710642562acee7999b507f72a95828fd5b50","ssdeep":"192:DE5gJXjrNCTgvkbf/hzCQWbveu3gwThGXC:F1jZlvUhSbNQrXC","tlshash":"6fe1bea4d806dc5e38ec550454e504931b2c3846aafe4b6e2aa08c47483b74dbae77be","first_seen":"2025-02-23T17:36:35.605661Z","last_seen":"2026-02-14T08:17:13.726901Z","times_seen":20,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/IBMPlexSans-Bold.0563a80e82efbad172ff.woff","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:49.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/IBMPlexSans-Bold.0563a80e82efbad172ff.woff HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:49 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\nlast-modified: Sat, 14 Feb 2026 01:51:21 GMT\r\nx-fastcgi-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=imo8BMrNkIBpSsWYggF1qIucURL4UTwdlObKMVwcmWabuWL%2B0JGLbrYHAqYYBlL1RZ%2F23quWwtjdEncIspDUqCMeTWhQrq1Of1qP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb2022989b5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":521,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (521), with no line terminators","md5":"5a096a3b4e3607c3d640fc0d9b5bb45a","sha1":"91aac9fd6162ea1e3caa0bfe2a4d612897880a27","sha256":"b8f78be33520c8643d7186f2980b8fd1ee021c1ea29ef30e316cb924f94bdf9b","sha512":"a35940699283c572879507d0db1a81195e94042f32f0e98d7b8cbe8ff624046f48a22cfc8a7aae1b5ac8d0a83e8c4d210c4909b30fc1becaad67ee374c31dc51","ssdeep":"","tlshash":"5af0c0472d13800904001a957478f70dd5cfdd647b53ac2078c856be88acfdd1867048","first_seen":"2025-02-23T17:36:35.625931Z","last_seen":"2026-02-14T08:17:13.70275Z","times_seen":16,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/IBMPlexSans-SemiBold.aa898056e8ad8de0c170.ttf","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:49.745Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/IBMPlexSans-SemiBold.aa898056e8ad8de0c170.ttf HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:49 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\nlast-modified: Sat, 14 Feb 2026 01:51:21 GMT\r\nx-fastcgi-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qCBC015om3aYDeZmzAN7D5r5GVWUGJeUnl0Ex5TLqAAmobaOWgdd4iR2OaQ7EsGXkuE4LMWa170Hpk9BFUBD0iL00BvRHRPgZhF2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cdb2026eede5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":521,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (521), with no line terminators","md5":"5a096a3b4e3607c3d640fc0d9b5bb45a","sha1":"91aac9fd6162ea1e3caa0bfe2a4d612897880a27","sha256":"b8f78be33520c8643d7186f2980b8fd1ee021c1ea29ef30e316cb924f94bdf9b","sha512":"a35940699283c572879507d0db1a81195e94042f32f0e98d7b8cbe8ff624046f48a22cfc8a7aae1b5ac8d0a83e8c4d210c4909b30fc1becaad67ee374c31dc51","ssdeep":"","tlshash":"5af0c0472d13800904001a957478f70dd5cfdd647b53ac2078c856be88acfdd1867048","first_seen":"2025-02-23T17:36:35.625931Z","last_seen":"2026-02-14T08:17:13.70275Z","times_seen":16,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/main.d8b628f5575a40c573f0.js","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:47.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/main.d8b628f5575a40c573f0.js HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 75391\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:15:57 GMT\r\nvary: Accept-Encoding\r\netag: \"673854bd-1267f\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z%2BYmOmq9BmnhkEwc%2Bsn5lfhKC1EzrHS3duOf4fRKjMgd02J%2FUxFSNRACjQ5X1WB%2Bx%2FXteo39eOfWoBRGgaCddVoNGrNVsKketeZH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb201beb735ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":416873,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"6f9cf6fd07abb9240c5228af345ede41","sha1":"1f0f1268792a0420b4ed36984c32eb6443d57010","sha256":"7f9c6e5d07861efa11c4dcf48fad32a3dd6db6e03e846274d73645de6571bcf9","sha512":"53bf508ff4a9c49face3b4266f6966672d19c8da53a932b0ac3192cd3703489737335d25e7c99cd88352c77748ffc0b1cead95952d9a96a451510ff8d5c006a3","ssdeep":"3072:dDDwIuJOe10L9CZZrIx5IfUoDUO0w2D0EeH/2GwK+OQ8J0IW73AYQGusuTTEGQVW:dY1Zi4N2GwK+OQ8JxW73AYQGFsmt18lZ","tlshash":"65941a88f6d5b0dc93735134612f340af33f3a65650884f0f2b8a8a5595fa9de227f68","first_seen":"2025-02-23T17:36:35.638834Z","last_seen":"2026-02-14T08:17:13.727556Z","times_seen":21,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/api/spa/_/config?","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /api/spa/_/config? HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-API: neftrix.com\r\nX-Lang: en\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\ncharset: utf-8\r\ncache-control: max-age=150, public\r\nx-fastcgi-cache: MISS\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KQpMAUma7keUHggG57WXLaSBKZuis7wQEVKTYT0lE4VAxaJyMRtE50Qizib4R9p1OysZlSzMoJLk2WeSSCRXfu4eKlsZoGnQNb4E\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb201efc365ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":701,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5cb4ac2ca85c1b724da19010954c3c64","sha1":"5f7182522f6a1e7fd25481544ece0fcb959a15d2","sha256":"0dfa37e61c11c0a3c4b7665b9511008e0c2a475240ffdd89edcdb539c32c183f","sha512":"29efea2f28323a18122d42c73d2661f0ccfca706c15834744194ee36489062751307e3c42ec27837887a55acfa5ea564b3dddf110113fa400c67a7f82b38d469","ssdeep":"","tlshash":"6a01760c5e1425fc5386c384f2697957463c8e33ab537868829c0b2825ffafda3b4926","first_seen":"2026-02-12T20:32:54.999383Z","last_seen":"2026-02-14T08:17:13.728311Z","times_seen":2,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/m-phemex.26ad10e59925cf82a57e.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.676Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/m-phemex.26ad10e59925cf82a57e.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 540\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:19 GMT\r\netag: \"673854d3-21c\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ds4zG%2BAKlJfPy4r%2BvTElIslqqWs3oqBgWYxJNh%2Ft77VuyK%2BlFUjx%2F8kNzShdBeXTQZuO0rEXi5HGedBMtso82BPM8nn7B%2Bj%2Ba2Yo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb20200a495ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":540,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 31, 8-bit/color RGBA, non-interlaced","md5":"494d0514b7aab4e5f3e615a017efc38f","sha1":"d265a72fb20b2c58401cc55ea0f54df1169eeab0","sha256":"06cf9375c4b2bfa841e1838cbbe702fa8ac1e85e0b1c689b6b3712802d5df4bd","sha512":"7f456c18819a07398199bbcaee0a1efe948789f70ec9a0a61b6d82ffe487c2161be8057971517d23957c7235506a40cb1edf9d3850ebd721adb676623ab38a7d","ssdeep":"","tlshash":"08f026f07b0768dbb95e8516124ec241d629e86bc301a85b1c52a71555563405944f86","first_seen":"2024-08-19T22:55:39.102432Z","last_seen":"2026-04-27T20:47:21.156467Z","times_seen":55,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/IBMPlexSans.5b67d03f5cc7578e9411.woff2","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/IBMPlexSans.5b67d03f5cc7578e9411.woff2 HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:49 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\nlast-modified: Sat, 14 Feb 2026 01:51:21 GMT\r\nx-fastcgi-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O9yi954vvUwUp0BUxK%2BvyQK6MXbeQdzcy6XE5trPbCMEkc25mwoyRJtAq8qa1Qq0EGrgCvkw9AkSAuJvoqBMOi5QtfL%2FyLxBlVyR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb20208c9d5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":521,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (521), with no line terminators","md5":"5a096a3b4e3607c3d640fc0d9b5bb45a","sha1":"91aac9fd6162ea1e3caa0bfe2a4d612897880a27","sha256":"b8f78be33520c8643d7186f2980b8fd1ee021c1ea29ef30e316cb924f94bdf9b","sha512":"a35940699283c572879507d0db1a81195e94042f32f0e98d7b8cbe8ff624046f48a22cfc8a7aae1b5ac8d0a83e8c4d210c4909b30fc1becaad67ee374c31dc51","ssdeep":"","tlshash":"5af0c0472d13800904001a957478f70dd5cfdd647b53ac2078c856be88acfdd1867048","first_seen":"2025-02-23T17:36:35.625931Z","last_seen":"2026-02-14T08:17:13.70275Z","times_seen":16,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/IBMPlexSans-Light.d1498c135c501b6edab5.woff","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:49.062Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/IBMPlexSans-Light.d1498c135c501b6edab5.woff HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:49 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\nlast-modified: Sat, 14 Feb 2026 01:51:21 GMT\r\nx-fastcgi-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BbK9rgRYNoGei5qUq3DN5O7ehav7vSQl3Z6EaHJtqJRch5pn2OrIJYMxwXHO%2FJJG7VPCxWWfqvtmIJTdoK2GGPil2PSKoYhGW%2Bpr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb2022a8b25ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":521,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (521), with no line terminators","md5":"5a096a3b4e3607c3d640fc0d9b5bb45a","sha1":"91aac9fd6162ea1e3caa0bfe2a4d612897880a27","sha256":"b8f78be33520c8643d7186f2980b8fd1ee021c1ea29ef30e316cb924f94bdf9b","sha512":"a35940699283c572879507d0db1a81195e94042f32f0e98d7b8cbe8ff624046f48a22cfc8a7aae1b5ac8d0a83e8c4d210c4909b30fc1becaad67ee374c31dc51","ssdeep":"","tlshash":"5af0c0472d13800904001a957478f70dd5cfdd647b53ac2078c856be88acfdd1867048","first_seen":"2025-02-23T17:36:35.625931Z","last_seen":"2026-02-14T08:17:13.70275Z","times_seen":16,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":335,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/images/currencies/s/e2acd857.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:49.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /images/currencies/s/e2acd857.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 3962\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 25 Apr 2023 19:05:31 GMT\r\netag: \"6448247b-f7a\"\r\nexpires: Sat, 21 Feb 2026 08:16:49 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iyrue4EIg060Y1tgF9BRTHRNSJVVULu7wc9M8Fopgsi%2BXHvT4KdaBMviaQsLtp1IlbjMpFM2glsbUP2hHcmTk0Z0imWiUQow%2FjW8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb20266c345ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3962,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"2b2c8509d7a9c699f5249f4fd52579f2","sha1":"5960eea3e3dfb2dbe3af962edb097341f1add752","sha256":"8b448aecf28bb536e4fd66c8eddafc50fc8b338ed52585402bf06d75359080ca","sha512":"3b4f6f30f6ff3aa2f6072e1c9918ee771cd1cc537778be14c459ad516f6d846597a72141dff1e379859ca880141c8f2582727dd8686879abca9be547bc1c2398","ssdeep":"","tlshash":"41818d504beb1d40db064943ec794d389fa25867bedae07109cbb4109945f56c28b943","first_seen":"2024-08-19T22:55:39.121239Z","last_seen":"2026-04-27T20:47:20.98931Z","times_seen":69,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/vietqr.70553031dfa0b0ee0a63.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/vietqr.70553031dfa0b0ee0a63.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 781\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:28 GMT\r\netag: \"673854dc-30d\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CP5ZWqi6dCd4DnZIZmiBs9tkmq%2FmAZWRTwrPTg5zYGj4VajHcvfJThwP3VUxluJoe06OvAHxoYDv7haO8GjQPp%2BF0X%2BTOLZuAco4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb20200a3b5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":781,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 38 x 24, 8-bit/color RGBA, non-interlaced","md5":"e16c4a42bd9999d026263d97f00942fa","sha1":"b3563d3e9ab528fe9af1d6e28342e6c6b328b573","sha256":"fbb2a45a0c003104bbdcb869a1bff316bdf25a1d8e6d8583f9c26a26901a586c","sha512":"57174eec2f92f18f77d31f1dd82f1402f49378a99a349d385f415e603c36052e8f0dc2d5eb2b8c0a76c331495d9e088d28101e03a2127eb6d6ef42aa2053658e","ssdeep":"","tlshash":"050175dda99c09bbd50597b60cb2819d805e7cbd0023050e3c7c8c241a43e9d7acb6b8","first_seen":"2024-08-19T22:55:39.101815Z","last_seen":"2026-04-27T20:47:21.152173Z","times_seen":55,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/images/currencies/s/bd7b6d7d.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:49.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /images/currencies/s/bd7b6d7d.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 505\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 25 Apr 2023 19:05:32 GMT\r\netag: \"6448247c-1f9\"\r\nexpires: Sat, 21 Feb 2026 08:16:49 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FBBzZhwAg9U4yqkm8i98Mj81jrm3gWL6Cm0ju7A5%2FPqvZ8W6YVL8JT4sLIuMc5w4eo4jInkcomJBW11Xm7uZ2uUKIKLfFtIPCESo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb20266c575ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":505,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGB, non-interlaced","md5":"34eb8ed79f2b56bab72aa6417154b8a1","sha1":"89042f338dab72a024948bf188aa78c21bb8bc45","sha256":"7b21ca5397fd139ea6a3fd6d62e75fb24ead705b64786d5a7a5ee7723499b4a5","sha512":"d3f1b059287fc830518036da3a73ceb3572a2298f2734cc3d63d6b16ee6e4c6d17e46fffad2d0afdab09c8bec3e03b1198be9a037cc332394194ced56fbb0724","ssdeep":"","tlshash":"67f075ee8e819ab4d10e287ab02949c67033a9bc332c478016c08124744fc48b3156e9","first_seen":"2024-08-19T22:55:39.125891Z","last_seen":"2026-04-27T20:47:21.087382Z","times_seen":55,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/exchange-dark.25e6ad828dfadfcc3ebb.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:49.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/exchange-dark.25e6ad828dfadfcc3ebb.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 7531\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:04 GMT\r\netag: \"673854c4-1d6b\"\r\nexpires: Sat, 21 Feb 2026 08:16:49 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HvrecBH4N9nYNV%2B9RelFEOFlSboPbdGde2mvRhpzym12p4SBp39%2BUHswCe7mzJs%2BLEn2z9IF2T5dKwBsTN5BzzgteP1iwWSP%2FcSh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb20266c895ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7531,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 92 x 105, 8-bit/color RGBA, non-interlaced","md5":"fe82ae72714b2c0e2da2fb15d9c577df","sha1":"dfcb125b730bbef4626b350aa3c57e4c57ded1eb","sha256":"a7496108ca00c7e9255128eb85098523da9a8f79c4a093857ab80d136808b74d","sha512":"571382fd79ab732406ea4750beb6937dd167afc55c64b9543961363ad455798469a60b560adf095f1d5b9c7c2c5b7745ecff610416b191f340d6a82736bc9ef3","ssdeep":"192:HUf+EotReUR4Zm7mK6cx0qH82dEgZI+mzZqGerttEDVWxaA1V:HHtReURV7mK6y048SOlher/EDFu","tlshash":"d0f1af56bfc06434b2d4a1275227b81ac0bcad4cc6a6181f5e1eda8cc17b8406db5fab","first_seen":"2025-02-23T17:36:35.629053Z","last_seen":"2026-02-14T08:17:13.732677Z","times_seen":16,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/samsungpay-min.6be24e529f3aac9f2d57.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/samsungpay-min.6be24e529f3aac9f2d57.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 1234\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:25 GMT\r\netag: \"673854d9-4d2\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fjlt0p7TROHy1G%2BD4yBxOIwyH3PY1SHN22KQ8zHeODU46RHIr7YnelexXQWMSZKockJIXCJQKJM6lS8jCZI4X3A1ZHPIg7Uh%2BSRw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb201ff9685ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1234,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 25, 8-bit/color RGBA, non-interlaced","md5":"91d896addd15ecbe1f7d7d30774aeff6","sha1":"2ba6fe6e16c2fc630f174234785e249a88e436f8","sha256":"4aec9b631156f82fcaef8cabf8f374da37dfb3a73079a17deb3985187ee2cc2e","sha512":"3bb8989f8f1cfe85127e6d954134c60e1514f3d3dfe2ff60b61b3056b3c9401a4408c0fafa6a95dd7f26d72d1a3a6999bc8c10d0f623733f0d1776b21161c6c9","ssdeep":"","tlshash":"512117d923caa33624fc5bbf12a52a09b8f7d109982a210c1e0b4ec14f3f004443199f","first_seen":"2025-02-23T17:36:35.63055Z","last_seen":"2026-02-14T08:17:13.733279Z","times_seen":20,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/mobikwik.95c6327d3d81fd505f44.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/mobikwik.95c6327d3d81fd505f44.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 949\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:20 GMT\r\netag: \"673854d4-3b5\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NAbArH%2BX%2BcDQAc4jbhvVnJ1KhFpD0DE0rOdiLJU%2FNj6EOKyYq5VO20hu30dnEWjLJ4DXeyLJwdcDPvQOmeFq04da6egzk38tNx1n\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb201ff9a35ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":949,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 25, 8-bit/color RGBA, non-interlaced","md5":"030a424dbc0bdcb747d621181100d2cc","sha1":"889bdec3216ef1ca13db7fb6baeeaf16690571a0","sha256":"784903df288c376616bd23cd9ccd1028968cc89579de33a2e89b65cbb54af1ab","sha512":"f744db60395d72ce5924640549e8afed83a468bd9d189f8e7577dc39039367543664e1119518927e031b94a34521f3b228df4a26e35c4b4c54505d9d4e58b17e","ssdeep":"","tlshash":"2f11c497aa9dd2a4c98e0027aa4bb1039a0dac4417a4a63923023e7b7ae80c75a44b54","first_seen":"2024-08-19T22:55:39.096423Z","last_seen":"2026-04-27T20:47:20.914528Z","times_seen":54,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/mpd-eth.e5ad21a04b559331dc50.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.708Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/mpd-eth.e5ad21a04b559331dc50.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 2107\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:22 GMT\r\netag: \"673854d6-83b\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=49C4JgysePhF%2BTmz01G0LDEGfxx3KkgkKGkh%2BVUuGMJfoBX67vtGitexjxFpRGk7gbLJ%2BusUxIUYHsnsBp%2BEepoxiCavcnFHYRJp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb20205bda5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2107,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced","md5":"1d709777fe608b9856fbb6b870efe727","sha1":"37f66d0cd66c0f8586be4beeefffe7f34daf759f","sha256":"1675204e1a04efadcd14216bd2ccef65bca623b6d98f21278631558f81a5de0a","sha512":"12d633349c4aaf9962d78c3e6eb02be61ff3ac5198dd8f33ed2c2c393b8b1c65b8dd085699bb4134cda176ad19bf1348d759ec9e23678af109b0cdb0bfe64a38","ssdeep":"","tlshash":"2f41fa4e20699c5a31168333f7889a10ad39ef76543f7550149ec5c6e9f86abb8023b9","first_seen":"2025-02-23T17:36:35.599422Z","last_seen":"2026-02-14T08:17:13.734687Z","times_seen":21,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/m-b.31a36725791158de270b.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/m-b.31a36725791158de270b.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 4248\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:19 GMT\r\nvary: Accept-Encoding\r\netag: \"673854d3-1098\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k52GYdZbyiZ5hzOVinXDEN%2FTE2wZm6bYely2RODe55TURaW2ztr5GNXoIEnfvTv9roCpoEn5AUzJTjG0dtam1%2FYx65Tx7VKoL2TP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb20206be65ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4928,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 27 x 28, 8-bit/color RGBA, interlaced","md5":"1db65e4b439d1d81bce6fbd8495ec076","sha1":"e1562a38b35f5ea721cda9740297c58d06b4f172","sha256":"b7eeb4f1ad84c08dacece7ced349dde7a037fa36886e8c1bc51cb35f8eb9be24","sha512":"7d681d706c30eb6e451bb0cd5019f50aedc4981e9d1967576aa286be63d583817c74e730b83d65cade5762c288c7abaa1daca5570360e36c18754db32f112133","ssdeep":"96:gllcHitlIxv9vk7C1+I4wWHLihk/xZSuknmWpFCLv/I4HxHz7hCQn5:TIIHUCD4wa3SuknqI4R5Dn5","tlshash":"fba13c4cee159c91100ae7d936edf3074b3f979083846d48fcee840b85258b59c6d6e7","first_seen":"2025-02-23T17:36:35.637838Z","last_seen":"2026-02-14T08:17:13.73537Z","times_seen":20,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/IBMPlexSans-Bold.b6e48200888cf96927aa.ttf","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:49.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/IBMPlexSans-Bold.b6e48200888cf96927aa.ttf HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:50 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\nlast-modified: Sat, 14 Feb 2026 01:51:21 GMT\r\nx-fastcgi-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eyUSYhvIA2Iim65xcfJqYedIpWZgRXVMWfDFatNfLg1upwr1YESEyf%2BPQH7YsE98di8%2BDzxHInfl5rHECFM4%2BTmXmYpw%2BctfMn0R\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cdb2026ff2f5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":521,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (521), with no line terminators","md5":"5a096a3b4e3607c3d640fc0d9b5bb45a","sha1":"91aac9fd6162ea1e3caa0bfe2a4d612897880a27","sha256":"b8f78be33520c8643d7186f2980b8fd1ee021c1ea29ef30e316cb924f94bdf9b","sha512":"a35940699283c572879507d0db1a81195e94042f32f0e98d7b8cbe8ff624046f48a22cfc8a7aae1b5ac8d0a83e8c4d210c4909b30fc1becaad67ee374c31dc51","ssdeep":"","tlshash":"5af0c0472d13800904001a957478f70dd5cfdd647b53ac2078c856be88acfdd1867048","first_seen":"2025-02-23T17:36:35.625931Z","last_seen":"2026-02-14T08:17:13.70275Z","times_seen":16,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/main.dcf2967b39ff44fe303f.css","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:47.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/main.dcf2967b39ff44fe303f.css HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 30804\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:15:57 GMT\r\nvary: Accept-Encoding\r\netag: \"673854bd-7854\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2iYg5FVjwGDiii8uYT%2FJkrnjTG%2Fg2YiKzJIgm%2FOUKJmPbjrYoiloTerrOT4xKDWoQjMvM1V9TGSeOf9%2Fpm6sHyhKjnudvK1ugyDt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb201beb7f5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162708,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65409)","md5":"7284a4dc088336f64ed97390a1ce80a2","sha1":"185b51211f85ce8061c88167cadb64581869f5a3","sha256":"eaca4a66a4439be75d0014b281983ac0e45e445a909245c44d9d55c7d64b6567","sha512":"b1265343045f6b8ad25526a31338017005ae29d3706e6f175038a94558a2faf1de287513b70530ab2669bfbeff14c93a0b364f87e7fa99a8776239794d8f66da","ssdeep":"768:OtBtnUeHuGkDumwdgCdJPNPlL3P3J+i41ZjndNIEfI3RYMHTRNQyXGBXJv7qSBX9:Oyw9mwLkBXJv7qSBX7YdmVk8yDSKufr","tlshash":"1cf3f6702262b03cf937daa2b7d0ae9db019d202da7382edd6956178c5cb2e7173175c","first_seen":"2025-06-30T14:28:31.877498Z","last_seen":"2026-04-27T20:47:21.166181Z","times_seen":55,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/en.97dad0732ba6ff4485ab.svg","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/en.97dad0732ba6ff4485ab.svg HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1668\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:03 GMT\r\nvary: Accept-Encoding\r\netag: \"673854c3-684\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dy7qv4%2BeOb%2F46%2B5EUR1Hwp8u4uDeUmBTJf05EBcTmZqFnM8pNTm7t4KIAeE18qHxum4RBpTlzDQWdlOzkdBlxPWX6RWFnBKloGnc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb201f3de45ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15810,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"25ca7a0462e20d1bd351c275b5289ed6","sha1":"b14224389998d472b9b9c30bae14545733325334","sha256":"e0d3fe2e62ec67c66a23f4e942a951b5993fdc52a0bf96bd613b2d65016a4dd2","sha512":"b9285b0c55687f428718e1f9de328710a3d33807694784577b047ecf0a0a0569f215ed70180ba231a5b2c723e88c680db602f0aeb48c263daa8d83f10f63621d","ssdeep":"192:O7kb3r9mPWXVM3vOEtC0BiA9c3xrlQ2pcLeccIchG6B4YmmbzAbOCINR0tVGNoy:UVe","tlshash":"82623aa507f898916d5d03b8c73f2bd2705958efd680cd49725f6ca46f42fa42e2cac2","first_seen":"2025-02-23T17:36:35.633768Z","last_seen":"2026-04-27T20:47:21.008404Z","times_seen":54,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":173,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lottie.host/24e92ff8-9777-49dc-924f-09d54b2b6606/BOFyLGbARF.json","fqdn":"lottie.host","domain":"lottie.host","tld":"host"},"ip":{"addr":"3.164.230.30","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:49.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lottie.host","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 09 May 2025 00:00:00 GMT","end":"Mon, 08 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C8:90:78:AA:BB:31:D5:32:A7:E8:1D:B9:19:25:F0:88:76:85:1F:FA","sha256":"3E:25:D5:0D:11:B5:9F:2A:55:CF:30:1B:2F:A9:60:25:F7:05:6C:70:C7:3A:12:7C:C8:66:CD:27:4E:0C:F3:8A"}}},"request":{"raw":"GET /24e92ff8-9777-49dc-924f-09d54b2b6606/BOFyLGbARF.json HTTP/1.1\r\nHost: lottie.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://neftrix.com/\r\nOrigin: https://neftrix.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ndate: Sat, 14 Feb 2026 08:16:50 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST\r\naccess-control-max-age: 1800\r\nlast-modified: Fri, 02 Aug 2024 21:45:58 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: kCobLU5syybAw6B7dM4tZ0xbxI6ZC_OL\r\ncontent-encoding: br\r\netag: W/\"a87512a76547aaac373b31a1ed805745\"\r\nvary: Origin,accept-encoding\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 410991d185a8360cd416b5fbcf493074.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: iNJJ2Spi35cLoW-F-ZIip5iQ8RnKGIWP_BG0rQcaZoCYNkrX_SCDtw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":7677,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"a87512a76547aaac373b31a1ed805745","sha1":"b5fd266499fa10b6fcce29f4f2ff087d0f5c92c5","sha256":"1e5855edd333e31f118c5b4f2d311b09ac8117c2a971fbaba2b520a6f0d3059b","sha512":"b5f6eee4183e9eadec089c76267e42e8a11a420302bc52d4b5f32cc74d9d99f2eb0470ce223fef2231a0bd9f6d552893c3e0293fe2eecd1c5f1dd4a1c939245c","ssdeep":"192:u38Nh8xhgpbPlXT7oHi8Nh8xhxPEjbPlXUju7oHfLPOjEJx:BOKpbtXPANOrPEjbtXTAajsx","tlshash":"01f1b8c5477202fceb4668c0cb8330c59fc8a8466fc641eeeabd5d149bea96d1311e17","first_seen":"2025-06-23T06:51:10.33644Z","last_seen":"2026-04-27T20:47:21.159213Z","times_seen":67,"resource_available":false,"data":null}},"time_used":475,"timings":{"blocked":40,"dns":20,"connect":8,"send":0,"wait":390,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/visa-min.33292c62f9bd14518b37.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/visa-min.33292c62f9bd14518b37.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 1065\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:29 GMT\r\netag: \"673854dd-429\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YMHdsjhp0MoNlJT3MwQXApwexLmaHc34g%2FyQFqrcTwaWV7JfPzIRaUS8ehPdChkicHvmi8q%2FdBWF3O98ucBoQFnKjS5tNzre%2FjSZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb201fe9535ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1065,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 25, 8-bit colormap, non-interlaced","md5":"dab2812295605cce85dce997a022ac21","sha1":"dc9988fa2a0a3412bd912cf0ac62152e590aee7f","sha256":"a1a4214db83ff95f93ef7675a9992386fec03b934446bf57f8569cece10737fe","sha512":"dfbedd58dbbfe7cd68d5fab0a097e759510c2122a044775eb4714b6946659c1d551b69017dd4c565758822a300a3d89e5424c6332cf54a19233cebb1838cb352","ssdeep":"","tlshash":"c411e5f52e308dfacc0b04a0009c04412a13bf252c03300b90382aa819bdebb27543ba","first_seen":"2025-02-23T17:36:35.634472Z","last_seen":"2026-02-14T08:17:13.737959Z","times_seen":20,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/applepay-min.11671a6ba0b35458e8a4.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/applepay-min.11671a6ba0b35458e8a4.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 834\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:01 GMT\r\netag: \"673854c1-342\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QyM7acg1QkNvPnSGk8uHHFFxwOv5YsII58%2BZVqXMXBQTf6mSLUOSxP2lIiDNCu2aod5zFwQ2LQd7wmCPZIkpvgEknPVZJyQaXWam\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb201ff96f5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":834,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 24, 8-bit colormap, non-interlaced","md5":"f4ad09dbcccc65c11c4de14de41f1ad5","sha1":"8117008ac01a9c15754e0142bfa08ea5c4910d53","sha256":"a7249103dd20a9675bd8db35631341595f18770789cb093bf7d97ba207e4be1f","sha512":"3a5b32221ba5712736e3bb822ada53f0eca78af7a4214b6e55968b8f01d83f575f26c31a40874a55d6c092640ae7195d671fc54b83445f34c0d1102104a497c8","ssdeep":"","tlshash":"eb0186dc663cfcdba4792793944fab6b4edda0d8f0907104743958106fb8a098aad4d1","first_seen":"2024-08-19T22:55:39.091714Z","last_seen":"2026-04-27T20:47:20.9454Z","times_seen":55,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/upi%201.0dc9658005d1daefa490.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/upi%201.0dc9658005d1daefa490.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 895\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:27 GMT\r\netag: \"673854db-37f\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AU9l2H7bR3YErDSVMoi%2F1iWm84%2BE1iPfyUVd25TLXNrVUUCEoN%2BRHOeOSxP8qnq20L2pkLMyMdCiLFAsszJLoe1YgX2Tz8VrNC4E\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb20200a1c5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":895,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 35 x 24, 8-bit/color RGBA, non-interlaced","md5":"d8de50224bb58571978cfd7149162a0e","sha1":"bea8cf80a7a6ef1a1a0092ec6b28ab43f06c9da9","sha256":"d403924817cfae4f12b1a1f881390d316979e8494ecf1c33200874a2907c9ad9","sha512":"12dc5252d924967207271c08bf80f5b2500eea231b3048252cdc5e1fd2971fcf83b76c75c52d03ec13f066c71981333de6453ac7615911be0b123537076821a2","ssdeep":"","tlshash":"4811b7db22a7a0730b383e5a0355e340ae4507458e42288ccc6674445238b7405e12d1","first_seen":"2024-08-19T22:55:39.098952Z","last_seen":"2026-04-27T20:47:21.217389Z","times_seen":55,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/m-sardine.a4769595be458a8e95c3.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/m-sardine.a4769595be458a8e95c3.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 653\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:19 GMT\r\netag: \"673854d3-28d\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WQetACS09v5OzrCT%2F%2FHuUDGwZELDv2QkwsUgSzfqag0T%2B6e0SdRW%2FWjpwq8V1hFpFR%2FCHcQBsn7RVX3c9xHypMgWjUk0Xyj9V8Ir\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb20201a555ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":653,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 31, 8-bit/color RGBA, non-interlaced","md5":"e871b8f044a7faac11210e188b364274","sha1":"0ebd03809661d2946532f72d55c05ad075b6d99a","sha256":"cae7e6bb7bc09bcf7be9d5eba982260dffe922541e87bc35deafc7f805e57542","sha512":"4f4e67b2670e1613a253c7edb4644ef5d30f7796dd39b78156f8aac10f2d60f57f5b49f62950b7cd020d1e310e9b4cb977cb3fb7d2f2243ca3d41a1eaa84f08d","ssdeep":"","tlshash":"bef023de8e0d2c3d03b79032f25a4a08d976589ec391b8124773ac0a3456ec97d3e2d6","first_seen":"2024-08-19T22:55:39.103287Z","last_seen":"2026-04-27T20:47:20.923939Z","times_seen":55,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/IBMPlexSans-SemiBold.a2a5260f7afea34fcadb.woff2","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/IBMPlexSans-SemiBold.a2a5260f7afea34fcadb.woff2 HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:49 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\nlast-modified: Sat, 14 Feb 2026 01:51:21 GMT\r\nx-fastcgi-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FxjaYOxx29hKxUzzXcgAepDgoeTAaID9K64Zl9mSxOMlgDCIKiKRMDx7gUvsIkP3zwtRDFl8nGsuK5fzYj3XWgjTb%2BY5E2KSgisZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb20208ca85ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":521,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (521), with no line terminators","md5":"5a096a3b4e3607c3d640fc0d9b5bb45a","sha1":"91aac9fd6162ea1e3caa0bfe2a4d612897880a27","sha256":"b8f78be33520c8643d7186f2980b8fd1ee021c1ea29ef30e316cb924f94bdf9b","sha512":"a35940699283c572879507d0db1a81195e94042f32f0e98d7b8cbe8ff624046f48a22cfc8a7aae1b5ac8d0a83e8c4d210c4909b30fc1becaad67ee374c31dc51","ssdeep":"","tlshash":"5af0c0472d13800904001a957478f70dd5cfdd647b53ac2078c856be88acfdd1867048","first_seen":"2025-02-23T17:36:35.625931Z","last_seen":"2026-02-14T08:17:13.70275Z","times_seen":16,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/images/currencies/s/e541cb7d.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:49.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /images/currencies/s/e541cb7d.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 8231\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 25 Apr 2023 19:05:32 GMT\r\netag: \"6448247c-2027\"\r\nexpires: Sat, 21 Feb 2026 08:16:49 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sG3BBvStAHDyGnYq%2BhDPSSLwKbyLENariQmih2V%2BKBae4%2FSot1Dowmg7yMx%2BS5AXSSNKQCOJkV2Kvg5FEUtY5HQhjnk3A%2FvvDpsF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb20266c7d5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8231,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"1ebcb9bff903582c51f40af5c45223b5","sha1":"82105596ad5c7afe3bf204e7d1f982d40b4f5d76","sha256":"23ff36f69f0f0e8a218cbb1830df4f512dc5d6879f8943e64aa40a768713bfbc","sha512":"479dab663305f5a178500cd73414fdb97c33e2d80e1cb7cd95bf79e5d1e4b59a827c03decc82177d154d2fb60395edd911ebf39e84bf8d41dd74ceecfb8f6b33","ssdeep":"192:DS0izJXnQiDhP/M184Ejav4Pk3203inA4LJ1g/3qk9CuTp:20kgilPCuk/iJLc3h99Tp","tlshash":"77029fea5cbe62b8da00e153ede4be806f4143d45da35e901edac436bb78c43d0368d6","first_seen":"2024-08-19T22:55:39.132566Z","last_seen":"2026-04-27T20:47:21.052443Z","times_seen":69,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/IBMPlexSans-Medium.56adf7eff2eb278eece8.ttf","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:49.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/IBMPlexSans-Medium.56adf7eff2eb278eece8.ttf HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:50 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\nlast-modified: Sat, 14 Feb 2026 01:51:21 GMT\r\nx-fastcgi-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=foqGJtzk7znzi9znI6KLHbE5o7bweXcCMVYVg8ul9hm9uWh3xBw8N0Nsws5PKqMF%2FKnESp0cAC2yaMAih1gp6yL8WBldLYJ1maeZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cdb2026fef15ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":521,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (521), with no line terminators","md5":"5a096a3b4e3607c3d640fc0d9b5bb45a","sha1":"91aac9fd6162ea1e3caa0bfe2a4d612897880a27","sha256":"b8f78be33520c8643d7186f2980b8fd1ee021c1ea29ef30e316cb924f94bdf9b","sha512":"a35940699283c572879507d0db1a81195e94042f32f0e98d7b8cbe8ff624046f48a22cfc8a7aae1b5ac8d0a83e8c4d210c4909b30fc1becaad67ee374c31dc51","ssdeep":"","tlshash":"5af0c0472d13800904001a957478f70dd5cfdd647b53ac2078c856be88acfdd1867048","first_seen":"2025-02-23T17:36:35.625931Z","last_seen":"2026-02-14T08:17:13.70275Z","times_seen":16,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=DM+Sans:ital,opsz,wght@0,9..40,100..1000;1,9..40,100..1000\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=DM+Sans:ital,opsz,wght@0,9..40,100..1000;1,9..40,100..1000\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 08:16:48 GMT\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1729,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"5ffc15542a2c42f67876d646f086f9eb","sha1":"a075c5d2469c886c1e4c2aeb9be62dcb436c26d6","sha256":"fb05ad76b6b4f1c851a30b94a677bae20d3d99203e83ebdfc3772aa6accc55f2","sha512":"a19fb78fa78c8a5c6fba1a37f25e4860f7011ca00f209d840890ee156fabef593c7de21a57116c0777eec28568fe4a3337afdef886414fa08831d7885b88259c","ssdeep":"","tlshash":"9231df81087b6114e7571dc122ce7e32ef1fa1906454a874bbfe2894fc56c6e5371b4d","first_seen":"2025-09-12T01:48:17.883282Z","last_seen":"2026-06-08T11:53:07.53185Z","times_seen":12040,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":119,"dns":1,"connect":21,"send":0,"wait":33,"receive":0,"ssl":95},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/n-simplex.e5916b0b80b022d5a117.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/n-simplex.e5916b0b80b022d5a117.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 772\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:21 GMT\r\netag: \"673854d5-304\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Bo43x4ptTTDmERQ05FoNBYWaM2oWEn2Z1%2BlC1l%2Bw7Wo7arzoYGj7Unaq6tnjZdkG0PPGZe1IIwCpw64fQA6jZkQRIlCB6oC9kBR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb201ff9955ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":772,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 31, 8-bit/color RGBA, non-interlaced","md5":"4860290aaac9f5e327038861c0f7f2ff","sha1":"8362097705965d1f9cea6647bd5423d5703cb41f","sha256":"21a31a38c5dd4247332f9a29881d716b24a705ab164baffe061e47e34ac24bed","sha512":"0d090a4b1061fa0c36b345e19bd5c45e92f59f173d8f58db44e374568789e1a97783c6bd8a9aece3c6e8f1f02187adcf30efab0ee2ea0c3670def6014bf8fa1f","ssdeep":"","tlshash":"820170e20d10cafa006ec6c552229251e039816b9fa5014c1a8fa1050152c1fc69277b","first_seen":"2024-08-19T22:55:39.094433Z","last_seen":"2026-04-27T20:47:21.082948Z","times_seen":55,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/banktransfer.6f4c9672379367211d35.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/banktransfer.6f4c9672379367211d35.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 1057\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:02 GMT\r\netag: \"673854c2-421\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J9OdSxGW3%2FpDafuS6j5VPYg84UPOBN62Kad4wrCOA1xwEeo7G08pCfaAO%2FJelBv32%2Fwvz43bgszIOFSVJwgSmQkl8ahV0oCvhLGr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb20200a405ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1057,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 24, 8-bit/color RGBA, non-interlaced","md5":"957532930186e600a03536f6ee4a8655","sha1":"0c1e4eb7aac1e6447e0c22539817104aed51369b","sha256":"189ea01aaf99abcaaf62d59d3205025b5318a3fe2f4d9877706469b821d150cb","sha512":"faae26e923e2f38a39295cefcbbdd229e088b48a4ea32d6efe51da48c050f3bac976bf808d114f8d6597092fadc3a6c78de0c97e43e45c1e26a824e2aad94537","ssdeep":"","tlshash":"1311b68802c7d8334c6fba2a0c3253319b2300852ac90b9a3a5c5ce80518396a144be9","first_seen":"2025-02-23T17:36:35.585785Z","last_seen":"2026-02-14T08:17:13.742559Z","times_seen":20,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@lottiefiles/dotlottie-web@0.32.0/dist/dotlottie-player.wasm","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/@lottiefiles/dotlottie-web@0.32.0/dist/dotlottie-player.wasm HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://neftrix.com/\r\nOrigin: https://neftrix.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: application/wasm\r\ncontent-length: 482342\r\ncf-ray: 9cdb2020890d4e4c-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.32.0\r\nx-jsd-version-type: version\r\netag: W/\"113381-mWkMy66B/YKVhRUUMP8ZIzhdDMQ\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230160-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 12907799\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=tp2OJGR5ghjfc6hihFDyxhkpdsPt9Kb54sDXszVu%2FJZOXwV63RQFWk0RKbkS7WauyFLrbLjaUpsfIvCSmJP5Av%2Ban2bG%2Fcl%2BM9TqgpS8nqQR96wLk8jNpe52uim7GhiFa8s%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WebAssembly","description":"WebAssembly (abbreviated Wasm) is a binary instruction format for a stack-based virtual machine. Wasm is designed as a portable compilation target for programming languages, enabling deployment on the web for client and server applications.","website":"https://webassembly.org/","common_platform_enumeration":"","icon":"WebAssembly.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1127297,"size_decoded":0,"mime_type":"application/wasm","magic":"WebAssembly (wasm) binary module version 0x1 (MVP)","md5":"c41339dea2d5506e8331cf3460343be4","sha1":"4eb48ed2031b61561773dc6c39cdfa40a98dec4e","sha256":"b6fe944e1b229f3e20364cfc41e23a58e1425d665c9b543696ade3c4cfc441ab","sha512":"42ce8907ad4e69aacd66a9ce75284408ef2d9bf7ddd5d064fc0535b250e25277c47fb554c777bd65ed50ec375e9e7c741cc5bcdc08fc2f1a8e2ca8ce0f9ee601","ssdeep":"24576:4+99UBZ4I/EkspR9exUeawsBiBCp8j+wpM6yb0S0ASvSxW43/fDGFqUgVDmTbEtx:Pqa","tlshash":"b925fb13b21aa969f000e8671a0dd5772b67d580b2a4b0b9df8d2aa77cffc057487770","first_seen":"2024-09-08T01:36:36Z","last_seen":"2026-05-13T20:23:25.539418Z","times_seen":48,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":16,"receive":48,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/gift.9a8fdfde80fc75e18b67.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/gift.9a8fdfde80fc75e18b67.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 22663\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:06 GMT\r\netag: \"673854c6-5887\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EvS6e9VfTmdxhwVj9TG43WJA%2BFAy3j%2FRjaGTTscDhqYHakunZL0aCEDSJXiKQABXRmGgM9vPSq4%2F5UnAwl4ZdN7sFiXrHHlvccu1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb202138cd5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22663,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 132 x 135, 8-bit/color RGBA, non-interlaced","md5":"fee1a6a6e4f36a979c75d4f25fdbaa40","sha1":"425426b9ce25ceac1efa0fe244fbd7d31caff746","sha256":"70e6ec7c2a5afb35a90b3a9f689edb7e366f1928a60cd8c8d0e2e9c9bab807af","sha512":"694cb254f72debafe081900173475ca0f46125c325ee9c6a34f6142fd4cd2270b6b5dfc9ddf2fa25a7bd92bdfd32f3dbce3eb96e7228283888acdb7952719980","ssdeep":"384:a59/8NHujRxlKT5A+uPJfn5FQoJ5YRZAHCq/Wtz7+2j4YTHLLDk0r4pTs:EYONjM5IfnQZ+yt284yrLTrZ","tlshash":"2ca2e1122f8010b663bccd17d38a409c71cdbe2d154bd4ae3a9f21d8fe0d1269b75259","first_seen":"2025-02-23T17:36:35.614808Z","last_seen":"2026-02-14T08:17:13.743878Z","times_seen":20,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/IBMPlexSans.9f2053ee915629980221.woff","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:49.025Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/IBMPlexSans.9f2053ee915629980221.woff HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:49 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\nlast-modified: Sat, 14 Feb 2026 01:51:21 GMT\r\nx-fastcgi-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WC9gAlz9DX774MfQjYW%2F1WHPTbTxucTyCBF5je5QFopz54b0kvppMCOH9EDX2AR6Tgvj3B0ezwOcJ1TXCfqtsk2p%2FVjdGI1FMH%2B0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb20226f735ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":521,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (521), with no line terminators","md5":"5a096a3b4e3607c3d640fc0d9b5bb45a","sha1":"91aac9fd6162ea1e3caa0bfe2a4d612897880a27","sha256":"b8f78be33520c8643d7186f2980b8fd1ee021c1ea29ef30e316cb924f94bdf9b","sha512":"a35940699283c572879507d0db1a81195e94042f32f0e98d7b8cbe8ff624046f48a22cfc8a7aae1b5ac8d0a83e8c4d210c4909b30fc1becaad67ee374c31dc51","ssdeep":"","tlshash":"5af0c0472d13800904001a957478f70dd5cfdd647b53ac2078c856be88acfdd1867048","first_seen":"2025-02-23T17:36:35.625931Z","last_seen":"2026-02-14T08:17:13.70275Z","times_seen":16,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/IBMPlexSans-Medium.ec22ea3142b488f48c8b.woff","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:49.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/IBMPlexSans-Medium.ec22ea3142b488f48c8b.woff HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:49 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\nlast-modified: Sat, 14 Feb 2026 01:51:21 GMT\r\nx-fastcgi-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GjQtTmyy14fJJogds2vzsWNK4Q8EVqtOSxLzkyuSMMhq2BD44%2FwBD6k07QxAC4n64iQzTfxKXycX0hPO6Hm6J8wuiF5xGgKaEEvP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb202298a25ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":521,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (521), with no line terminators","md5":"5a096a3b4e3607c3d640fc0d9b5bb45a","sha1":"91aac9fd6162ea1e3caa0bfe2a4d612897880a27","sha256":"b8f78be33520c8643d7186f2980b8fd1ee021c1ea29ef30e316cb924f94bdf9b","sha512":"a35940699283c572879507d0db1a81195e94042f32f0e98d7b8cbe8ff624046f48a22cfc8a7aae1b5ac8d0a83e8c4d210c4909b30fc1becaad67ee374c31dc51","ssdeep":"","tlshash":"5af0c0472d13800904001a957478f70dd5cfdd647b53ac2078c856be88acfdd1867048","first_seen":"2025-02-23T17:36:35.625931Z","last_seen":"2026-02-14T08:17:13.70275Z","times_seen":16,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/images/currencies/s/395f877e.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:49.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /images/currencies/s/395f877e.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:49 GMT\r\ncontent-type: image/png\r\ncontent-length: 3150\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 08 May 2024 03:05:54 GMT\r\netag: \"663aec12-c4e\"\r\nexpires: Sat, 21 Feb 2026 08:16:49 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a2%2BzNg3n38jBqx%2FLiR%2BjS75iQ%2FvDzXPvHXcWDvZxYEeG1hQVvk7tb37RU11NP6cge4Ng920l1eqdXXnSY8lV2r3oqw5flL1BYxKO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb20266c8e5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3150,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"50cda183020bdebffe4d8145b4c059d9","sha1":"c2e930f2a32b6cdc25e2e2086e73b69de9f02375","sha256":"ea9f80508c4ad5252f9a615509ec1f5c2921caa0cc4dc1b76a6cec99c6e0ad3c","sha512":"2879ce06df48cce28dfd590149c2433412ae12bd0d015fdc5c11ffb446b2cb83e336a85b17b855b9b93c017bc871c2ae0d70745f207481dc56ef6b32e5f96f1f","ssdeep":"","tlshash":"4d515c5a2e58a7828084bdfd434553a25665aa207787eaa2c330bcd16b3351c60b3fcf","first_seen":"2024-08-19T22:55:39.123657Z","last_seen":"2026-04-27T20:47:21.057834Z","times_seen":55,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/googlepay-min.caceff66e44239d4af8f.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/googlepay-min.caceff66e44239d4af8f.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 1080\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:06 GMT\r\netag: \"673854c6-438\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uZ6OMgIbe3WuZEWexJog%2BNMjmvXXjPf%2Bje%2Bc7QEf6aUj1Pmn8JLDQZuPL9ht5EFL7oHcF1g0Fcf89SCD6fJFeX%2FMvPNLWUM4u8Qn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb201ff96b5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1080,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 24, 8-bit colormap, non-interlaced","md5":"b33c0e01c2fc02df5e06443c61e8b6b6","sha1":"2635e769370fb9d5235ed35762702141818bd7a7","sha256":"0c0ef1523490b207617b78843b969cf9c10563ea9d0ef090e7254d17b0e9a873","sha512":"ac94e749af50e85eaae2c9b321c9d52d6600c273024cdb86b7a94e2e466dd9baf08616a319436fb086aa36e1d3901d18ba217550514013177269020bd3b2ee69","ssdeep":"","tlshash":"6e1175d2b3df39132b45026b407663b3b089d7770448c4699de6015932fe9ebb12fa17","first_seen":"2025-02-23T17:36:35.627909Z","last_seen":"2026-02-14T08:17:13.74523Z","times_seen":20,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/bg.b6b6edba03baaf967c63.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/bg.b6b6edba03baaf967c63.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 31409\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:02 GMT\r\netag: \"673854c2-7ab1\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y050BXCd7NRd%2BFytkneaTY5KgV1fxFKv4EgV8UWjmLpeN41N4FQPGL4S5nm2r0jbnaYFYnF%2F9tCakQQwwsiqPuM2zh6dpMDgVc0L\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb20206be85ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31409,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1524 x 710, 8-bit colormap, non-interlaced","md5":"d328ccbb6aa1c2830a1703be4cd93fc6","sha1":"159524a5849adbf9a511fa5ca2b48cba8ce35ce9","sha256":"cb758dba6df2fd5c241aaee85583b2f9663a7a2a9653b8a9159300da18aac38b","sha512":"7c863a913a7d861caf4cb6a3748a0da805ab80a1a250635cfeaca19b90ffec9b4538dc6588f8be881d9d22a3617fc0b881144eca1a1af90b4776299c9d6b81b4","ssdeep":"768:HrNewf9u+0NGC9YhgpJZyCH8A7qYVS3YDL/:L0wuGC9bwCH8AmYVb/","tlshash":"29e2e18c5e2c52f9b39f4cb09d2d3ff1ae6a5b77930ace79b415a1096c80240be75681","first_seen":"2024-08-19T22:55:39.110319Z","last_seen":"2026-04-27T20:47:21.097818Z","times_seen":55,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/user.032a7e4eccc29151ea8f.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/user.032a7e4eccc29151ea8f.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 7627\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:28 GMT\r\netag: \"673854dc-1dcb\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mPaq4ZJBhuUubaVKwI69%2BwUGtF%2BBG8kp5ZRA49NQMQXpNOWWkgILGaGFAlFIBtZbsfYxwqgcqIO2%2BBNysdYAzFkQkDaPkhDxWnLy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb202128265ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7627,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 95 x 95, 8-bit/color RGBA, non-interlaced","md5":"2f9dbafa7af74504158b82e2e0e7081a","sha1":"21a3b839d6412e6dc008316eaadb34d1a8ddafe6","sha256":"09575e97332ed77ad5d21c2d9dd627eda56c3c99f8dafe725a22d62490f6ae77","sha512":"dffc414faa4d4b135cbb9800cd70c9bda3bcda25c4f89c8a9584a1c5178ed5d9910e77c9e03ceb88ca798a0919263183d6b4cac13cbec5699d332cd5beab996d","ssdeep":"192:HSgF3CBly9vVuNJoiNiSxqhMqb5v5UWzcgi7CJ/COAv5WvHlOiS:ySA+NWuiNiScWkcgiuQ09xS","tlshash":"43f18e4c4c90e72e92ce05a5191e808fbd4fbc9668f95ed0757d6cc24d2e7c8aa45206","first_seen":"2025-02-23T17:36:35.607988Z","last_seen":"2026-02-14T08:17:13.74655Z","times_seen":20,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/IBMPlexSans-SemiBold.be20edc8f3385060c0c1.woff","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:49.063Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/IBMPlexSans-SemiBold.be20edc8f3385060c0c1.woff HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:49 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\nx-powered-by: Express\r\nlast-modified: Sat, 14 Feb 2026 01:51:21 GMT\r\nx-fastcgi-cache: MISS\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xbdD%2BF9WQMTfZfyOk8DGym8hZBvjHsAQl1fopde7Poew57Y2gPq%2BKjRS3HnsKCYrjPoAgP2wj9dTerr9lM7SSUL3RkZWHvSNRC7y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb2022a8ba5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":521,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (521), with no line terminators","md5":"5a096a3b4e3607c3d640fc0d9b5bb45a","sha1":"91aac9fd6162ea1e3caa0bfe2a4d612897880a27","sha256":"b8f78be33520c8643d7186f2980b8fd1ee021c1ea29ef30e316cb924f94bdf9b","sha512":"a35940699283c572879507d0db1a81195e94042f32f0e98d7b8cbe8ff624046f48a22cfc8a7aae1b5ac8d0a83e8c4d210c4909b30fc1becaad67ee374c31dc51","ssdeep":"","tlshash":"5af0c0472d13800904001a957478f70dd5cfdd647b53ac2078c856be88acfdd1867048","first_seen":"2025-02-23T17:36:35.625931Z","last_seen":"2026-02-14T08:17:13.70275Z","times_seen":16,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/favicon.dce5a170e9a9617c55aa.ico","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:49.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/favicon.dce5a170e9a9617c55aa.ico HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:49 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 1937\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:05 GMT\r\nvary: Accept-Encoding\r\netag: \"673854c5-791\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 21 Feb 2026 08:16:49 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kzMGFY66AGjeeW76mwZYH55TL%2FJwOW1T%2FhbQBxX3L5%2Fo1IZG9mumCr88Bj00mQdUwyfYnOwPYISwCWT%2BR6fjgVSKy6bNrj9Qjt1M\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb20257ee05ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67646,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, -128x-128, 32 bits/pixel","md5":"576ab5eec86723fc67017db3c53f04e6","sha1":"76e3fe0545588d9346a9f05d84ad1b968d21927b","sha256":"6e88f180b93e446c44aafc7a54ca27eb8b0720251390c7d4ba6749fd70171721","sha512":"24e47c7de8469f2e9a36117ad5a0fe7e491c1912f156228180da135d672877040c38250a1596ae47b7575fdddd22a3a085fe1dc9f38d45838b5035f8b2021d15","ssdeep":"96:ZXRxROs2HOGo4EJK0/NUACgxLcOINtBRZew35H5H5H5H5H5HttRoC93OSXHKgH+u:ZXP4YOnDf","tlshash":"b863496320075417e879f6b34565cd7dd1aceeef31e06c8bb5a87b0e1039662a884f17","first_seen":"2024-08-19T22:55:39.133284Z","last_seen":"2026-04-27T20:47:21.036142Z","times_seen":53,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/m-mercuryo.7710f67810c7342e9efc.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/m-mercuryo.7710f67810c7342e9efc.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 872\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:19 GMT\r\netag: \"673854d3-368\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=azxPUuns7dMPomv8xYundvArVP%2BP72RsJeIobzcWwNwOCzDWyi5MhSmf77QUCtPAsb5vuVgFKzUTlbF4gJ0t4mPn%2FVDn7euuIXhx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb20200a455ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":872,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 31, 8-bit/color RGBA, non-interlaced","md5":"17d3d7c8e2ef88d6a1d1720c32cd9aee","sha1":"ee303b8a18fd6db19fb9ff2702f46a105e40e02f","sha256":"bf7e574aea52d79064adeef0bb383abe1963271a41807e98afc42ade0d4f76eb","sha512":"c2c91f867a5bfe7a36edb22818d0650f89fe078ea894cea5b58d9e2b74a1a04bc317f6004f8a72c3ed8b180fc8162b994cdf416825700e91315bdb9a2c49ebc8","ssdeep":"","tlshash":"af1196fb2a5e1a7cd0acbb7568228744f18b5d8906a900516a52b810838b0664b67382","first_seen":"2024-08-19T22:55:39.100415Z","last_seen":"2026-04-27T20:47:21.013411Z","times_seen":55,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/table-empty.7213cd3a9eee317cc16a.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/table-empty.7213cd3a9eee317cc16a.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 12280\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:29 GMT\r\netag: \"673854dd-2ff8\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ktq5u6IchsQa47xaGhk9RAcOh5x5AxreLCdQ6r7nAHNgBtXzMOKY2%2BUv9Rf9L2YflIcHS4BR7KlNqg0qRi0yLI%2B%2FBJQh3jxh%2Bt8O\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb202128295ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12280,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 185 x 185, 8-bit/color RGBA, non-interlaced","md5":"9490fe14d45ef0b1afa42aa48981c432","sha1":"9d0644e62afcc48564cb62b9e2673ce2688c6024","sha256":"073855fb452ac0ac70e053337327700335ae83eb7d00e8105956a8c86fc07259","sha512":"a694fc2f4cdb1d668dd3159998acdd86207c0be54c129721a5f668293fa089f8c605da67733404f839cd31c72f454384e1396bee203f9fc78e5bae36b5cb6bc7","ssdeep":"192:aSdDeHMOqfL6RwFgjDKhaw1KN1NL/rJNVm7412I7yMY1dGKfIEP/HcJbF8tLLxIJ:VheHrAL6xj+haw1KN7L/r4EJ2fIcEWLC","tlshash":"f842c0b9c5a764efffd279334a860fe3a4f5e4c909de1c7c56c0880495b60015652aca","first_seen":"2025-02-23T17:36:35.602091Z","last_seen":"2026-02-14T08:17:13.748685Z","times_seen":20,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/m2.5c3b4bfb109b309ffb18.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.862Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/m2.5c3b4bfb109b309ffb18.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 10340\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:20 GMT\r\netag: \"673854d4-2864\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AHwwf%2BhLYXvIegZcsJfMHZkZXPmfNQB2XvX5Z2Eq7eGJ8iXrXPJ7QAPmU6RdTp0nfaPlOUrOLAqY2RIFS6tTLcwcNcDpS%2F60mW%2Bq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb202128445ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10340,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 301 x 444, 8-bit colormap, non-interlaced","md5":"b067fb894656494b4c9d62b877b738e0","sha1":"be1787818acdbdf435799ed3bdccd9ed95f67b2e","sha256":"8d07291566c82bc4dd8818b36618d675128277fb46dce75af8800c1ecfb4306d","sha512":"7896491d56d8dfa4ab6edb5e4e738f585fdec8bf1def7bb330b854debb0847394fe76da351549a1961ad4decbf11854d22ed386fb20192cbdb8b6a2d83519253","ssdeep":"192:QS3nX2o5/qBlaPN/2fFbgFZj4oFcBU2/iFbaS0GxZYov9GrMOM:33nXpZPN/2fFbgFZkoFcBUrdvxgrM5","tlshash":"eb22c0847b826043ab58837d55f31eaa67a19ed4f3e4cb451f2a771e3074d75c482417","first_seen":"2024-08-19T22:55:39.113528Z","last_seen":"2026-04-27T20:47:21.232827Z","times_seen":55,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/deposit-dark.232fcace609985ead5f8.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/deposit-dark.232fcace609985ead5f8.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 7232\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:03 GMT\r\netag: \"673854c3-1c40\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JYc8GkUKccK%2BItNNoOM49Sp3tiXL6gPMJv0wF8mlvwIgaKuLWpWA0C0iZkWJBVe9JunYiTBOl2nKaD5uAvBeiy2BrWJFlgJWZNBR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb2021285e5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7232,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 92 x 106, 8-bit/color RGBA, non-interlaced","md5":"abdd222da61ac6d4a5d96c3c6af2ccd4","sha1":"c7066a6b525c38224d2092482cc294963e1ce6d7","sha256":"37581cda2d045d957e1c0fa9eec70374237d861072c95f15e328c0b8e9e248e7","sha512":"11a7ec3e089064446a699389e22c1257212d38338d9b23189119c3d147bd2fe3e5a0c6c327ff76441f1487e3fe05f1549123eda695799d3a09eb13896acc817a","ssdeep":"96:woZdSz46Zna9W0RILRiSR6V5+xaRMGIn2Wnq0i/eIE2zlg0BJTf:7dH6daEwwRve8apjWq0yeIEugslf","tlshash":"a4e1bf16d88f50b2fb117cd4e66c2f10899a3094da488bb04e459e3a2e589b1f530f67","first_seen":"2025-02-23T17:36:35.608932Z","last_seen":"2026-02-14T08:17:13.750186Z","times_seen":20,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/fast.eb019ad670eca0686130.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/fast.eb019ad670eca0686130.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 656\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:05 GMT\r\netag: \"673854c5-290\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=St0YbTDvOOiQvpFtTY%2B3FlnEAgdnpoW7E62xFQKjB2C5JKPsP%2B6Z5bpQ0lhshA6MCnHgP8xkshVOpDuRan8fjLqCfjXUdpfs%2FxNQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb20200a335ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":656,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 36 x 24, 8-bit/color RGBA, non-interlaced","md5":"c04115d1a3dd19352f0447746bb9a884","sha1":"9d9b4f922b03a378a09607a6fc201d3d3d2cb00f","sha256":"f5c69351a5fb179e18841735cb33fdc073dd38e59b12265eb3ce6887503c654d","sha512":"b29b9001a4bbe68acc67dad60c612c20569750ae642b6ea131f610af34ced6f4881fa8704068e6d7627396853aa15495513ff549560f8b43871d5ac9e4c89f98","ssdeep":"","tlshash":"0df083be230cacd8916f4f3ac97bda6419bd2ff8100c500c7000c4281aa2c5d64c6601","first_seen":"2024-08-19T22:55:39.09968Z","last_seen":"2026-04-27T20:47:21.022109Z","times_seen":55,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"neftrix.com/web/assets/steps-d.e9171849c0069a31df3f.png","fqdn":"neftrix.com","domain":"neftrix.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://neftrix.com/","date":"2026-02-14T08:16:48.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"neftrix.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 17 Jan 2026 13:50:21 GMT","end":"Fri, 17 Apr 2026 14:48:47 GMT"},"fingerprint":{"sha1":"23:16:D7:88:35:00:33:11:77:A1:30:A4:90:DA:DA:D3:E2:FC:2B:8B","sha256":"1C:C8:F1:C6:6F:E2:2F:23:B6:DD:1E:23:11:52:E5:4B:44:79:70:75:B7:40:B5:71:01:EA:66:34:96:47:0F:C4"}}},"request":{"raw":"GET /web/assets/steps-d.e9171849c0069a31df3f.png HTTP/1.1\r\nHost: neftrix.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://neftrix.com/web/main.dcf2967b39ff44fe303f.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 08:16:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 66561\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Sat, 16 Nov 2024 08:16:27 GMT\r\netag: \"673854db-10401\"\r\nexpires: Sat, 21 Feb 2026 08:16:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9AGpepgInkTauFmEmIQpzr5%2B7kFdwfnY3tJci7pkURS5Di%2FhgI0JFUzE5G9D04D7tS95ZAJPOsgf01G4KT9uiPSWhHh3aBqp7MVz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdb20206bed5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":66561,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1521 x 853, 8-bit colormap, non-interlaced","md5":"a281eaecc3a386982d0a3068f5b47b92","sha1":"5652bfeca868f94bf8c184688201ee2ace68c27f","sha256":"6dfd7207852cb4427b710868add7f130ac7b05cf34790f9e8eec66f05a4ceab5","sha512":"ed3b03edaff33a7480f4bb6b20dce504e8f07da20a7622c5a48a170b720bfdad05230e6d3772d1ecf0f7d484d7a1c57e60aa61a36099ae31d2d7810ec70dc9f8","ssdeep":"1536:HvjObN0cq1Rm6nWmldMoStr+tQ2xQMFcGLNrxkaM:HvjmHqXmxYV2r+tQ267GLBxQ","tlshash":"e85302bac4c498b7c998293f145ebb9ade69dc5c6bc188058f71b3f00c7d59dd1d28a0","first_seen":"2024-08-19T22:55:39.110956Z","last_seen":"2026-04-27T20:47:21.002826Z","times_seen":55,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"neftrix.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}