{"report_id":"02ec9e89-bf8c-41ed-8e1f-7bf013bf9ea9","version":6,"status":"done","tags":[],"date":"2026-02-16T13:33:14Z","url":{"schema":"http","addr":"8d86cdef88.nxcli.io","fqdn":"8d86cdef88.nxcli.io","domain":"nxcli.io","tld":"io"},"ip":{"addr":"8.36.41.114","port":0,"asn":36444,"as":"NEXCESS-NET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"8d86cdef88.nxcli.io/","fqdn":"8d86cdef88.nxcli.io","domain":"nxcli.io","tld":"io"},"title":"8d86cdef88.nxcli.io","dom":{"size":42893,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9965)","md5":"5ede0b8c484fc83a0f82d23ab4ec9998","sha1":"b98f58866d7dfec901cdefd4f25d9864e94e7b46","sha256":"99a0e55106e2ab1bf1f1fbdc6c231c7ef5109635bd99f8d3f959a4e0b1407839","sha512":"a00baf4942f1e92127171c1f0d011f6b4c5f6a102d15ddfc1e76158eac37020a5b6066022ba0df3c348daaf0ced6c3a1de3abe5d7c1801f552246f53064e2ac9","ssdeep":"768:3bDuZdyprF71UU7RIGrLs34hPJC0r7cPEZCjflBFuo0sCa:3POypRRPQ0r7cPEZCBBF5","tlshash":"171319b1f16424763a3f47fee3963229b9aca501d60b13a6f0fe806949c4ef3056761d","dom_hash":"domhash220a210bafdd350a2c62cdc509651bd8","first_seen":"2026-02-16T13:33:16.282376Z","last_seen":"2026-02-16T13:38:17.5444Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"8d86cdef88.nxcli.io","fqdn":"8d86cdef88.nxcli.io","domain":"nxcli.io","tld":"io"},"ip":{"addr":"8.36.41.114","port":0,"asn":36444,"as":"NEXCESS-NET","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-23T13:33:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"8d86cdef88.nxcli.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"8d86cdef88.nxcli.io","ip":{"addr":"8.36.41.114","port":443,"asn":36444,"as":"NEXCESS-NET","country":"United States","country_code":"US"},"domain_registered":"2017-12-05","domain_rank":0,"first_seen":"2026-02-16T02:37:52.353671Z","last_seen":"2026-02-16T02:37:52.353671Z","alert_count":8,"request_count":8,"received_data":195975,"sent_data":3823,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Kadence WP Kadence:1.4.3","description":"Kadence WP Kadence is a multipurpose WordPress theme that is available for free download and also offers a pro version.","website":"https://www.kadencewp.com/kadence-theme","common_platform_enumeration":"","icon":"Kadence WP.svg","categories":["WordPress themes"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"8d86cdef88.nxcli.io/","fqdn":"8d86cdef88.nxcli.io","domain":"nxcli.io","tld":"io"},"ip":{"addr":"8.36.41.114","port":443,"asn":36444,"as":"NEXCESS-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"aca63831fff5d915e1d8fd6c936bb9ab","sha1":"beb6723fa1c0d27501feeb9b979eafef146d3f54","sha256":"155cc2d89a4636fe39a6b202bcf09a76629ffb09cbcfa11e9b75106809d32bfe","sha512":"3e6787ab94b5eb9ef084deab4a5b11c71a9a16651def5995601949b587c79a1e43c6f330c553308b04593d60f388c037ba553758f9119d82bb43d153784f6d3c","ssdeep":"","tlshash":"a89002a956014a7609c9044c716687e439300048e4472010405d54491120dc1d010ac4","size":53,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-08-12T05:38:17.791821Z","times_seen":13641,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8d86cdef88.nxcli.io/kadence-navigation-js-extra","fqdn":"8d86cdef88.nxcli.io","domain":"nxcli.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"37974220806d15826bd7b959dd2a9d44","sha1":"f8473e61b799d3627e48512ef4fa5ba320e193e0","sha256":"b730c536d15fd800c873c40705ae10264310e352d42a821d99dc00517ee5ccd3","sha512":"f193822e8b98241d2e0332efd67ecca8b892bc7ce6aa3679582f49ec4c81e6f5e8b4c42c6838a5d3e5aed672ad1d19f20981f3fd8e53636c7252a7ac55f29e14","ssdeep":"","tlshash":"52f05eeac94b7f3254a7bcb1547ab6a3a63e0804c3ab185f92ca0a5404943a252c7424","size":469,"data":"","first_seen":"2026-02-16T13:33:16.289402Z","last_seen":"2026-08-01T18:00:50.602247Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8d86cdef88.nxcli.io/wp-includes/js/wp-emoji-loader.min.js","fqdn":"8d86cdef88.nxcli.io","domain":"nxcli.io","tld":"io"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9a245e0c90cbebcd6c72d5a0a3a9e55","sha1":"9d83b0145f08418b281241d5d7b0d7fae7bb8a2c","sha256":"4b675710896cd95a39294baf108dd67633f74e759f8fdb22f1563ff5a8fbaf0a","sha512":"267c08df7f877c1ce9a723717518c8042348b0edfb33c0990b04291f799b66611574609f5fac679b4e4ea4a643b38691c03ef8b9f71aad1384e7060780f328b7","ssdeep":"","tlshash":"7461969ae77a38dbb2f900f2697e0d47eb614435d6c8d038c9bda3141cb5893c278a46","size":3199,"data":"","first_seen":"2026-02-16T13:33:16.290363Z","last_seen":"2026-02-16T13:38:17.550885Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8d86cdef88.nxcli.io/","fqdn":"8d86cdef88.nxcli.io","domain":"nxcli.io","tld":"io"},"ip":{"addr":"8.36.41.114","port":443,"asn":36444,"as":"NEXCESS-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"0345eab5966f4c0d5ea7b5a9f54e96ae","sha1":"ccb06f076c0ad8ae3439e1ceacb4c28d20cc7c6e","sha256":"0a82f0a2b8c8c6adda40e131b989bf788d16dc6c6359ad02fd87c13dcb353564","sha512":"4e253935e66f3b871d876ce31eeb84ed84df1a86eedc6d471538bd0b71f8e6445075ce46f559fcd1d3689964108f60a97867af92b3560f8a30214eed77f9d77f","ssdeep":"","tlshash":"36c092701030693004df990c7421e3ee3833406b7133b182a15d42985ab0ec61249eaa","size":131,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-08-12T05:38:17.79259Z","times_seen":12015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8d86cdef88.nxcli.io/wp-content/themes/kadence/assets/js/navigation.min.js?ver=1.4.3","fqdn":"8d86cdef88.nxcli.io","domain":"nxcli.io","tld":"io"},"ip":{"addr":"8.36.41.114","port":443,"asn":36444,"as":"NEXCESS-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c30ec14c84ecdb1a5d7134972459f0d6","sha1":"3d293310a9ca4e48fbe952a02319d63e7a4ad521","sha256":"3fe97ab2ce8845fcfbe5c9558d0dc7f82edee59bf1d4e2d737ca8420bdb8ecbb","sha512":"f084354015c8d6809c50e13812bacbd3af3db1ed5954e789269ceb2587a38a8771a611afb5775ea9f2a5bbd1a20fb3f75b6b0ff9caf7f34023c56ce4eee7b0fd","ssdeep":"384:+eO2r1nf7SUK9A2xzMhjuFjF0TQhzYJ6bmgbOpYHMJE3Yo7mHh3QkwWBcXDcFVFa:/O2r1nf7SUK9A2xzMhjuFjF0TQhzYJ6T","tlshash":"3f9277ae7204357700eb2fe3f2abb7c239756899f5865421116ccc0e656cec79062bf9","size":20964,"data":"","first_seen":"2025-09-26T04:25:12.93376Z","last_seen":"2026-08-09T22:23:15.187986Z","times_seen":2924,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"8d86cdef88.nxcli.io/wp-includes/js/wp-emoji-release.min.js?ver=6.9.1","fqdn":"8d86cdef88.nxcli.io","domain":"nxcli.io","tld":"io"},"ip":{"addr":"8.36.41.114","port":443,"asn":36444,"as":"NEXCESS-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-12T05:36:39.530254Z","times_seen":310927,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"8d86cdef88.nxcli.io/wp-includes/js/wp-emoji-release.min.js?ver=6.9.1","fqdn":"8d86cdef88.nxcli.io","domain":"nxcli.io","tld":"io"},"ip":{"addr":"8.36.41.114","port":443,"asn":36444,"as":"NEXCESS-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://8d86cdef88.nxcli.io/","date":"2026-02-16T13:32:54.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8d86cdef88.nxcli.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 14:26:38 GMT","end":"Fri, 01 May 2026 14:26:37 GMT"},"fingerprint":{"sha1":"75:11:1F:8D:FC:C6:63:9F:F9:2C:9F:E5:36:23:17:DF:54:90:DE:3C","sha256":"A9:1A:A2:72:C6:7C:83:A5:5B:07:D8:0B:75:2D:5C:A0:57:F1:6F:49:48:92:F9:2A:68:A7:5F:B2:FC:3B:DB:DF"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9.1 HTTP/1.1\r\nHost: 8d86cdef88.nxcli.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://8d86cdef88.nxcli.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Feb 2026 13:32:54 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 31 Jan 2026 15:22:12 GMT\r\netag: W/\"58ea-649b0a77461bc\"\r\nx-nocache: 1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-12T05:36:39.530254Z","times_seen":310927,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":124,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"8d86cdef88.nxcli.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8d86cdef88.nxcli.io/wp-content/themes/kadence/assets/css/global.min.css?ver=1.4.3","fqdn":"8d86cdef88.nxcli.io","domain":"nxcli.io","tld":"io"},"ip":{"addr":"8.36.41.114","port":443,"asn":36444,"as":"NEXCESS-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://8d86cdef88.nxcli.io/","date":"2026-02-16T13:32:54.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8d86cdef88.nxcli.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 14:26:38 GMT","end":"Fri, 01 May 2026 14:26:37 GMT"},"fingerprint":{"sha1":"75:11:1F:8D:FC:C6:63:9F:F9:2C:9F:E5:36:23:17:DF:54:90:DE:3C","sha256":"A9:1A:A2:72:C6:7C:83:A5:5B:07:D8:0B:75:2D:5C:A0:57:F1:6F:49:48:92:F9:2A:68:A7:5F:B2:FC:3B:DB:DF"}}},"request":{"raw":"GET /wp-content/themes/kadence/assets/css/global.min.css?ver=1.4.3 HTTP/1.1\r\nHost: 8d86cdef88.nxcli.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://8d86cdef88.nxcli.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Feb 2026 13:32:54 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 31 Jan 2026 15:22:24 GMT\r\netag: W/\"6c64-649b0a827d79c\"\r\nx-cache-nxaccel: STALE\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27748,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (27741), with no line terminators","md5":"08e13779abf7c29560b05085bffe0abe","sha1":"ec4265e93d9472b79f7507f1cae2158ad88df746","sha256":"fea67ecb0bfd3f6b2559b342f6f898255eefd07cbfbd3783f0e94f71ecd0ad8a","sha512":"fe538a2b15fab4b1daa3bfa7c64a0ea77904132f1058963683f51a48a1fd384191dc0ae9fe14e3ff1d5529dc7e2d5e85b34028f75473df9f58c7a58f9573e79d","ssdeep":"384:FHgp+vGikX6BXfPFrBPXsd0D4dDGsjvjFv8nydGTSj8F4:U+vGc4dyF4","tlshash":"05c2238052b0526e2a6f477d829fb285692c3553cb1f3b95e03ec1f442cd79e1a66e0f","first_seen":"2025-11-19T11:37:44.905905Z","last_seen":"2026-08-09T22:23:15.159837Z","times_seen":1740,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"8d86cdef88.nxcli.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8d86cdef88.nxcli.io/wp-content/themes/kadence/assets/css/header.min.css?ver=1.4.3","fqdn":"8d86cdef88.nxcli.io","domain":"nxcli.io","tld":"io"},"ip":{"addr":"8.36.41.114","port":443,"asn":36444,"as":"NEXCESS-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://8d86cdef88.nxcli.io/","date":"2026-02-16T13:32:54.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8d86cdef88.nxcli.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 14:26:38 GMT","end":"Fri, 01 May 2026 14:26:37 GMT"},"fingerprint":{"sha1":"75:11:1F:8D:FC:C6:63:9F:F9:2C:9F:E5:36:23:17:DF:54:90:DE:3C","sha256":"A9:1A:A2:72:C6:7C:83:A5:5B:07:D8:0B:75:2D:5C:A0:57:F1:6F:49:48:92:F9:2A:68:A7:5F:B2:FC:3B:DB:DF"}}},"request":{"raw":"GET /wp-content/themes/kadence/assets/css/header.min.css?ver=1.4.3 HTTP/1.1\r\nHost: 8d86cdef88.nxcli.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://8d86cdef88.nxcli.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Feb 2026 13:32:54 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 31 Jan 2026 15:22:24 GMT\r\netag: W/\"62c9-649b0a827d79c\"\r\nx-cache-nxaccel: STALE\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25289,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (25289), with no line terminators","md5":"9912047b8887ba38bc5ba9c650a52412","sha1":"743f3f0d15f7a6982ce08191f4bbcd21d1a47d53","sha256":"923c417d8f206d7741ee3b8a6e648a9765e1cb0b18fd56acb75b9f720aaff272","sha512":"48f3979ff265680284962890805b58b90fccf8601dbd14639ec2a759a134b404337284b2f6aab167ef142ec2a57bbbea750b6e4614e2ede2f97828a1c012ecb7","ssdeep":"384:7EAOqVVXjxqaZtHjS1L2WWfpFgdF/11bXZfPP4rXxPkXcC/lWh0W6aS:m11Wfwp1dfHWh05","tlshash":"fab2a691d59038340073433be3da6a952d3899c5d6a31b5bb1e7d32f4aca98493a3f7c","first_seen":"2025-08-29T19:53:05.877445Z","last_seen":"2026-08-12T05:38:17.789435Z","times_seen":7619,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"8d86cdef88.nxcli.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8d86cdef88.nxcli.io/wp-content/themes/kadence/assets/css/content.min.css?ver=1.4.3","fqdn":"8d86cdef88.nxcli.io","domain":"nxcli.io","tld":"io"},"ip":{"addr":"8.36.41.114","port":443,"asn":36444,"as":"NEXCESS-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://8d86cdef88.nxcli.io/","date":"2026-02-16T13:32:54.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8d86cdef88.nxcli.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 14:26:38 GMT","end":"Fri, 01 May 2026 14:26:37 GMT"},"fingerprint":{"sha1":"75:11:1F:8D:FC:C6:63:9F:F9:2C:9F:E5:36:23:17:DF:54:90:DE:3C","sha256":"A9:1A:A2:72:C6:7C:83:A5:5B:07:D8:0B:75:2D:5C:A0:57:F1:6F:49:48:92:F9:2A:68:A7:5F:B2:FC:3B:DB:DF"}}},"request":{"raw":"GET /wp-content/themes/kadence/assets/css/content.min.css?ver=1.4.3 HTTP/1.1\r\nHost: 8d86cdef88.nxcli.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://8d86cdef88.nxcli.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Feb 2026 13:32:54 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 31 Jan 2026 15:22:24 GMT\r\netag: W/\"863a-649b0a827d3b4\"\r\nx-cache-nxaccel: STALE\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34362,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (34362), with no line terminators","md5":"f977bc8825622085aa16456915227f4c","sha1":"e1fb39c7a7bb33a8376af58b50bf769a4ccd421b","sha256":"c229104ed2bc8870130b0b0c5c5f0fd1a6e8b4e0366b508851bc22b54ebdd6b9","sha512":"e08cf211fe6d974fdecee488e24461847f8442bdcb1301d046a1d700bac5ffd92d9bb38f7f3edb18dd91cc11ca6189172e4be21caa7ff0af5ad344d2577d3b10","ssdeep":"768:NVIzqXltEcMLz8nBl957mwZLPFwG7ZDgyAid/oYTel0Yjdi:NGq1Isjd/oYTeyYjdi","tlshash":"b1f2b6e422b25ba4debf833ec588345c9800d617c65b67eaa8d5d21449dc7c60ee1f2f","first_seen":"2025-08-29T19:53:05.869134Z","last_seen":"2026-08-12T05:38:17.777479Z","times_seen":7764,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"8d86cdef88.nxcli.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8d86cdef88.nxcli.io/wp-content/themes/kadence/assets/js/navigation.min.js?ver=1.4.3","fqdn":"8d86cdef88.nxcli.io","domain":"nxcli.io","tld":"io"},"ip":{"addr":"8.36.41.114","port":443,"asn":36444,"as":"NEXCESS-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://8d86cdef88.nxcli.io/","date":"2026-02-16T13:32:54.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8d86cdef88.nxcli.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 14:26:38 GMT","end":"Fri, 01 May 2026 14:26:37 GMT"},"fingerprint":{"sha1":"75:11:1F:8D:FC:C6:63:9F:F9:2C:9F:E5:36:23:17:DF:54:90:DE:3C","sha256":"A9:1A:A2:72:C6:7C:83:A5:5B:07:D8:0B:75:2D:5C:A0:57:F1:6F:49:48:92:F9:2A:68:A7:5F:B2:FC:3B:DB:DF"}}},"request":{"raw":"GET /wp-content/themes/kadence/assets/js/navigation.min.js?ver=1.4.3 HTTP/1.1\r\nHost: 8d86cdef88.nxcli.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://8d86cdef88.nxcli.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Feb 2026 13:32:54 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 31 Jan 2026 15:22:24 GMT\r\netag: W/\"51e4-649b0a8280294\"\r\nx-cache-nxaccel: STALE\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20964,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20964), with no line terminators","md5":"c30ec14c84ecdb1a5d7134972459f0d6","sha1":"3d293310a9ca4e48fbe952a02319d63e7a4ad521","sha256":"3fe97ab2ce8845fcfbe5c9558d0dc7f82edee59bf1d4e2d737ca8420bdb8ecbb","sha512":"f084354015c8d6809c50e13812bacbd3af3db1ed5954e789269ceb2587a38a8771a611afb5775ea9f2a5bbd1a20fb3f75b6b0ff9caf7f34023c56ce4eee7b0fd","ssdeep":"384:+eO2r1nf7SUK9A2xzMhjuFjF0TQhzYJ6bmgbOpYHMJE3Yo7mHh3QkwWBcXDcFVFa:/O2r1nf7SUK9A2xzMhjuFjF0TQhzYJ6T","tlshash":"3f9277ae7204357700eb2fe3f2abb7c239756899f5865421116ccc0e656cec79062bf9","first_seen":"2025-09-26T04:25:12.93376Z","last_seen":"2026-08-09T22:23:15.187986Z","times_seen":2924,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"8d86cdef88.nxcli.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8d86cdef88.nxcli.io/wp-content/themes/kadence/assets/css/footer.min.css?ver=1.4.3","fqdn":"8d86cdef88.nxcli.io","domain":"nxcli.io","tld":"io"},"ip":{"addr":"8.36.41.114","port":443,"asn":36444,"as":"NEXCESS-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://8d86cdef88.nxcli.io/","date":"2026-02-16T13:32:54.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8d86cdef88.nxcli.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 14:26:38 GMT","end":"Fri, 01 May 2026 14:26:37 GMT"},"fingerprint":{"sha1":"75:11:1F:8D:FC:C6:63:9F:F9:2C:9F:E5:36:23:17:DF:54:90:DE:3C","sha256":"A9:1A:A2:72:C6:7C:83:A5:5B:07:D8:0B:75:2D:5C:A0:57:F1:6F:49:48:92:F9:2A:68:A7:5F:B2:FC:3B:DB:DF"}}},"request":{"raw":"GET /wp-content/themes/kadence/assets/css/footer.min.css?ver=1.4.3 HTTP/1.1\r\nHost: 8d86cdef88.nxcli.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://8d86cdef88.nxcli.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Feb 2026 13:32:54 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Sat, 31 Jan 2026 15:22:24 GMT\r\netag: W/\"4dd9-649b0a827d79c\"\r\nx-cache-nxaccel: STALE\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19929,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19929), with no line terminators","md5":"7a20740c12ffaf755d39e4cb4ecaed53","sha1":"5fd1af235eb281375d75828dd99725402878c14a","sha256":"8e073c256cf3d2798bff270bb122c32a75fe5860e82200b5e1ace4bccf8084ac","sha512":"6ac00de63b29b31242b098ec69e41a5d174cab151c8a036b6ea07315c1102d464884391d5b49cc773549004e1a913179c95189154cb7b571c47669a7d02a0266","ssdeep":"384:3EulmfE1yQ91S/IluHHgfnqCH9ol377t7146pZW:hlmfE1yu1S/IluHHGnq+9o7719ZW","tlshash":"9a92027afd612aa462e6966bb2c23e85c431c42dc9861cf936ded32305d79c6097cd0f","first_seen":"2025-08-29T19:53:05.840023Z","last_seen":"2026-08-11T22:05:21.256378Z","times_seen":7714,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"8d86cdef88.nxcli.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8d86cdef88.nxcli.io/favicon.ico","fqdn":"8d86cdef88.nxcli.io","domain":"nxcli.io","tld":"io"},"ip":{"addr":"8.36.41.114","port":443,"asn":36444,"as":"NEXCESS-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://8d86cdef88.nxcli.io/","date":"2026-02-16T13:32:54.730Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8d86cdef88.nxcli.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 14:26:38 GMT","end":"Fri, 01 May 2026 14:26:37 GMT"},"fingerprint":{"sha1":"75:11:1F:8D:FC:C6:63:9F:F9:2C:9F:E5:36:23:17:DF:54:90:DE:3C","sha256":"A9:1A:A2:72:C6:7C:83:A5:5B:07:D8:0B:75:2D:5C:A0:57:F1:6F:49:48:92:F9:2A:68:A7:5F:B2:FC:3B:DB:DF"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 8d86cdef88.nxcli.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://8d86cdef88.nxcli.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Feb 2026 13:32:54 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\ncontent-length: 0\r\nlast-modified: Sat, 31 Jan 2026 15:22:44 GMT\r\netag: \"0-649b0a9511900\"\r\nx-cache-nxaccel: STALE\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T06:40:39.05877Z","times_seen":17850651,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"8d86cdef88.nxcli.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"8d86cdef88.nxcli.io/","fqdn":"8d86cdef88.nxcli.io","domain":"nxcli.io","tld":"io"},"ip":{"addr":"8.36.41.114","port":443,"asn":36444,"as":"NEXCESS-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-16T13:32:53.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"8d86cdef88.nxcli.io","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 31 Jan 2026 14:26:38 GMT","end":"Fri, 01 May 2026 14:26:37 GMT"},"fingerprint":{"sha1":"75:11:1F:8D:FC:C6:63:9F:F9:2C:9F:E5:36:23:17:DF:54:90:DE:3C","sha256":"A9:1A:A2:72:C6:7C:83:A5:5B:07:D8:0B:75:2D:5C:A0:57:F1:6F:49:48:92:F9:2A:68:A7:5F:B2:FC:3B:DB:DF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 8d86cdef88.nxcli.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 16 Feb 2026 13:32:54 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nlink: \u003chttps://8d86cdef88.nxcli.io/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-cache-nxaccel: BYPASS\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Kadence WP Kadence:1.4.3","description":"Kadence WP Kadence is a multipurpose WordPress theme that is available for free download and also offers a pro version.","website":"https://www.kadencewp.com/kadence-theme","common_platform_enumeration":"","icon":"Kadence WP.svg","categories":["WordPress themes"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":42819,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (9965)","md5":"b9eb7a3f5d2c777aa3907b3065776560","sha1":"cc107f9903a3d19cc2aa5e829369ec1d5f232571","sha256":"7a2cb4001b56c470b352af9066a4940466deabdc139db5bb8701c4b7240ed994","sha512":"25272989d458de1e4d54e965693e10d752db073b561ad53b58bc930c791f7a1fd72ea8efdd2479f7faa0b2e2f7ed36cd5426d6f0590608ec03abad8560fc8018","ssdeep":"768:TKduZdyprdG71UU7RIGrLs3ehPJD0r7cPEZC1SleFuo0sCi:TSOyp5GnP10r7cPEZCaeF9","tlshash":"151319b1f16424762a3f47fee3963269b9aca501d60b13a6f0fec06849c4ef3056761d","first_seen":"2026-02-16T13:33:16.287795Z","last_seen":"2026-02-16T13:38:17.545321Z","times_seen":2,"resource_available":false,"data":null}},"time_used":936,"timings":{"blocked":254,"dns":13,"connect":117,"send":0,"wait":428,"receive":0,"ssl":121},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-16","alert":"Sinkholed","trigger":"8d86cdef88.nxcli.io","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}