{"report_id":"096df73e-e9f2-44ac-af66-fac492a93891","version":6,"status":"done","tags":[],"date":"2026-04-18T15:06:37Z","url":{"schema":"https","addr":"nesa.pages.dev","fqdn":"nesa.pages.dev","domain":"nesa.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.186","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"nesa.pages.dev/","fqdn":"nesa.pages.dev","domain":"nesa.pages.dev","tld":"pages.dev"},"title":"Nesa - The Layer-1 for AI","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T07:24:29.939425Z","times_seen":17775129,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"nesa.pages.dev","fqdn":"nesa.pages.dev","domain":"nesa.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.186","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-23T15:06:37Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-18T15:06:14Z","timestamp":1776524774,"ip_dst":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":53302,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2026-04-18T15:06:14.020779+0000\",\"flow_id\":567294814466485,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.3\",\"src_port\":53302,\"dest_ip\":\"188.114.96.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"nesa.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":916,\"bytes_toclient\":3525,\"start\":\"2026-04-18T15:06:14.012725+0000\"}}"}],"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-18","alert":"Hunting_JS_WebAssembly","trigger":"nesa.pages.dev/c00b1521_zm.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"nesa.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-12T22:16:45.621325Z","alert_count":0,"request_count":8,"received_data":233744,"sent_data":4516,"comment":"","tags":null,"fingerprints":null},{"fqdn":"nesa.pages.dev","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-04-18T15:06:39.919689Z","last_seen":"2026-04-18T15:06:39.91969Z","alert_count":12,"request_count":11,"received_data":2419664,"sent_data":5236,"comment":"","tags":null,"fingerprints":[{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-12T22:20:19.752051Z","alert_count":0,"request_count":1,"received_data":13650,"sent_data":507,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nesa.pages.dev/","fqdn":"nesa.pages.dev","domain":"nesa.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fad7951ba7a01708d13c89435ccb454f","sha1":"3ad0f0245a82688ca3e02cfb1612cfff20be1b93","sha256":"c62878398752789075697ce5e8eb03c67a332037cc807ed94d5cf1ab23ec78d3","sha512":"e0ee4f7c3b537ad50715287eb6ca77db47a7ae5f98942040cb47bbb8ce0a0d2204560af3d196fc63f98203319ec9a824f91f910dc3c4a7b770e89b20f037aed2","ssdeep":"","tlshash":"5ec09b801d4d596614514974a71f755fd0421ef7758d5404f5ccd10257f08cd516948d","size":137,"data":"","first_seen":"2026-04-18T15:06:50.657743Z","last_seen":"2026-04-18T15:06:50.657743Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nesa.pages.dev/c00b1521_zm.js","fqdn":"nesa.pages.dev","domain":"nesa.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"af7a15fb03ad87afc03e8b39f4255c67","sha1":"d88356819981c7ebec417b4e4f1d729f32d02876","sha256":"6ae8068ba620660b9c1aa1ac959f0805256ca0152857ba2bf77d46a22f1bd632","sha512":"a61d3e95c685743edc47979cabfb197c309a1ab7ac73325aaa701af09aef8ed24492cd9a6f425e8dae4990f3a0df4052094590598780406803010c3500192290","ssdeep":"24576:XlXZ9jPJXpg1IzP2abvwuQVD0gnY7KQs+HPlthoF4evCJbeCL65Qrc59hJA1Iq:5jBXpyI6yQo7ebCNtH365Q45rFq","tlshash":"1465233477232e7edb1dc6a5e19a2b1e3c6106c3884994ddf9bc10d7c3e6e840897da9","size":1463968,"data":"","first_seen":"2025-05-30T06:44:31.701713Z","last_seen":"2026-04-18T15:06:50.659506Z","times_seen":9,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-18","alert":"Hunting_JS_WebAssembly","trigger":"nesa.pages.dev/c00b1521_zm.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"nesa.pages.dev/js/webfont.js","fqdn":"nesa.pages.dev","domain":"nesa.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c96a5f11d9741541d5e3c42ff6380d7","sha1":"d3fa2564c021cf730e58ffddb138cf6b57ed126e","sha256":"81016ac6be850b72df5d4faa0c3cec8e2c1b0ba0045712144a6766adfad40bee","sha512":"23c162a2e268951729b580e5035ad6ca9969cfcc5ce58a220817b912e76b38be6c29c3ca7680cb4e8198863d95a72ea65bd06ff7189b5c8475e4c1ce501aeab1","ssdeep":"384:i11kqRm4UjryX2DfatZrT80NCGz5r2zItrX:iEqRm4cy338m7d","tlshash":"7942c65d7652b26a825280f2177f060b9576fa2ab844c0bc7a89d8d46c74db8037ff7c","size":13188,"data":"","first_seen":"2023-03-07T01:03:17Z","last_seen":"2026-08-08T07:17:42.848395Z","times_seen":66808,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nesa.pages.dev/js/jquery-3.5.1.min.dc5e7f18c8.js","fqdn":"nesa.pages.dev","domain":"nesa.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e321582636896fc4bb822d795da353ba","sha1":"4313afc4f3944e8e723a81c7bd0f06199b397df7","sha256":"b4b1f95f90a04d5cd38c9b72c0debff6323025ae9b4d8d3ab78bcf3d272326cf","sha512":"1e1aaa44434759ea2eb2f5803bd548458bfdb10e41d78735d60a4cd8b08fb7e453b10bb0c43526059656b0472126194fde42c182a145369420a1faae14b043bc","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvD36ip3h8cAowEjOPrBeU6QLiTFbc0QlQvakV:AYh8Kip3hubf6IidlrvakdtQ47GKl","tlshash":"179309ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bc78a4e827bf7d","size":89938,"data":"","first_seen":"2023-11-04T23:44:36Z","last_seen":"2026-06-23T16:32:11.312429Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nesa.pages.dev/js/webflow.264a14023.js","fqdn":"nesa.pages.dev","domain":"nesa.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"264a140236864b84b4aacb1b1be49eb6","sha1":"338569582f065ae7fa7739c990523b530cbd0260","sha256":"315972c107fcdc6dab247800648eebdc74c63d191b7c7b4b215026a3bc55a32d","sha512":"5bf4d5d19c62fa3a0944a92409ad3cafae35bf1259a5f10b9f71433c5e670db508d4de524e641e6d25d9c4963f54cb3efb17fee7487fa4f180be44fc01304ca5","ssdeep":"3072:dqivmeEE0n0W+f1bCSCOak6yl92xBZy1v4Boug49mXXwve/GP8YSzRCyZN7qKlAN:wivun0BIi/ug4s/GPozgyZm","tlshash":"f8d48646366125fb42ab0359f8177c41a3b811e6c60ece6cdca9cdf81aed9e84713637","size":639137,"data":"","first_seen":"2025-10-19T09:01:10.664504Z","last_seen":"2026-04-18T15:22:44.194981Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nesa.pages.dev/","date":"2026-04-18T15:06:14.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nesa.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 17 Apr 2026 23:13:44 GMT\r\nexpires: Sat, 17 Apr 2027 23:13:44 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nage: 57150\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-08T06:16:41.265363Z","times_seen":19782,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":84,"dns":1,"connect":7,"send":0,"wait":11,"receive":8,"ssl":74},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nesa.pages.dev/","date":"2026-04-18T15:06:14.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nesa.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 17 Apr 2026 23:13:44 GMT\r\nexpires: Sat, 17 Apr 2027 23:13:44 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nage: 57150\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-08T06:16:41.265363Z","times_seen":19782,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":207,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":199},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nesa.pages.dev/","fqdn":"nesa.pages.dev","domain":"nesa.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-18T15:06:13.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nesa.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 01:47:01 GMT","end":"Fri, 10 Jul 2026 02:46:37 GMT"},"fingerprint":{"sha1":"44:87:8C:11:DF:4A:DE:E8:B2:CD:FF:6F:D3:0C:65:F1:2C:21:04:78","sha256":"64:55:5F:9D:5A:2D:95:94:1A:0F:37:8B:4D:EE:38:54:1C:8B:25:14:A6:A3:CD:05:A0:C5:06:26:51:DC:6A:B4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nesa.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Apr 2026 15:06:14 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e%2BE9uRFu07JNFCk6bRI%2FW4Yk%2B1xXFyOt%2FPjJ45KI6t6i8J9pAL9RdlGsVlXv1wOQ3N5PMeIQkc7IJn8doQfP3zzKfkFtA2u0zJdU6fNxJKqxKkfpmTLyTWLfTbOywbUnsA%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ee4927dbe555ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14392,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3245)","md5":"bf580e4ccc22221632fb92cdd9731268","sha1":"a6ee49b0affc4bae823e019b96b005ff578b0879","sha256":"d1264f5d47e616db8827c43e645af261af065c30516880f16e8cedae4fff4846","sha512":"8349c1ae280f121043bfc1d61de3faafd84dee31f868992b27fa716f05323decb3440fdc56fef106b51c792d11ce8193c4f652558ef672ccb88dc40ab80df19e","ssdeep":"192:WGLUZ+3tx4txgtxpa8QNLXg8BHqxzAYP0dxCdJLb:WGLUZUtx4txgtxQXlBHMAYP0dsr","tlshash":"4452c85918e0529710238888e3fdbf19968b7543db031d99b3ec02478fc7d8dbb5ba59","first_seen":"2026-04-18T15:06:50.647377Z","last_seen":"2026-04-18T15:06:50.647377Z","times_seen":1,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":45,"dns":30,"connect":1,"send":0,"wait":120,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"nesa.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nesa.pages.dev/css/patricks-sublime-site-c0fa55.webflow.dc6c95255.min.css","fqdn":"nesa.pages.dev","domain":"nesa.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nesa.pages.dev/","date":"2026-04-18T15:06:14.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nesa.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 01:47:01 GMT","end":"Fri, 10 Jul 2026 02:46:37 GMT"},"fingerprint":{"sha1":"44:87:8C:11:DF:4A:DE:E8:B2:CD:FF:6F:D3:0C:65:F1:2C:21:04:78","sha256":"64:55:5F:9D:5A:2D:95:94:1A:0F:37:8B:4D:EE:38:54:1C:8B:25:14:A6:A3:CD:05:A0:C5:06:26:51:DC:6A:B4"}}},"request":{"raw":"GET /css/patricks-sublime-site-c0fa55.webflow.dc6c95255.min.css HTTP/1.1\r\nHost: nesa.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nesa.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 18 Apr 2026 15:06:14 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qm21LU8AbAb5YGXlckzGou7fJgyQ6fdFkHlooy2KREZb1YUW9pbjjE0dQs7k%2BO7w2qrRE6vE46sUkQPbIbr1A9Ed5ccOANHisxZLv2wyTYcimpquTxSYdeX9r8SFA23%2BJw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"bc95d52be542205342db5ffd26680c77\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ee4927f595349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105554,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65524), with no line terminators","md5":"832dd0615fc60ecef370d1147a5f8e9c","sha1":"f3396d50ea87fe9716a429e0b5d3d22ff92d60ac","sha256":"2af48f8468ea58e509258d6ae7286b0853a5f1dd1a73ed67995c298638b91876","sha512":"bafb844bd4d0d97a9f69c98559076c50b245a49591aac26e967d95209ce8d06b142b1590c0e91b7bc9c54401dfd7029c6b7cae9d431cde913bc45dae6684a8b2","ssdeep":"1536:N1Sff+lkAywLs39wMaiC7nx+1Mo1/EKJy+/jMffCE/PP74A:NwfzAgPC7E1Mo1cKJy+/jMnCE/PP8A","tlshash":"30a3f6316a55711cb43b8466a5d0e7ccb5298043d7978beafd12e237cace1d32b32a5c","first_seen":"2025-10-19T09:01:10.70047Z","last_seen":"2026-04-18T15:22:44.18819Z","times_seen":5,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"nesa.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Plus+Jakarta+Sans:regular,500,600,700,italic,500italic,600italic,700italic","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nesa.pages.dev/","date":"2026-04-18T15:06:14.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css?family=Plus+Jakarta+Sans:regular,500,600,700,italic,500italic,600italic,700italic HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nesa.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 18 Apr 2026 15:06:14 GMT\r\ndate: Sat, 18 Apr 2026 15:06:14 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12964,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a2591431387643ea8b4acee4893a6dcb","sha1":"6ace272d7107cccc38f16419163869e471fb9dfb","sha256":"f982b92076bb1415b9bd8d7917ca62baec7225a6ee5cdcdcba0706dceaf011fa","sha512":"f33959e3ac460717431752c4598d2bb0e782128b03c51cba4512439bc87ed09107576bbb8dd080692dacbdccccb515e9f02f7a0a52dc3f3732d0b25dd73f568e","ssdeep":"192:4kgnkwakYHKkMPgnPwaPYHKPM2gn2wa2YHK2MpgnpwapYHKpmCXbR4/CswRDmCRB:4tnuPqfIn7wqUXnw1qdKnlGqjVrNR","tlshash":"b042c2a0092fe54067831dc763cf3d368e9ea195705954b59bfd0858ec79c2a33b171c","first_seen":"2025-09-26T19:43:25.755712Z","last_seen":"2026-08-06T04:41:21.886521Z","times_seen":73,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":83,"dns":2,"connect":7,"send":0,"wait":19,"receive":0,"ssl":78},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nesa.pages.dev/fonts/6593de79fc1d07bd51a77401_Nightingale%20v2.0.ttf","fqdn":"nesa.pages.dev","domain":"nesa.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nesa.pages.dev/","date":"2026-04-18T15:06:14.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nesa.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 01:47:01 GMT","end":"Fri, 10 Jul 2026 02:46:37 GMT"},"fingerprint":{"sha1":"44:87:8C:11:DF:4A:DE:E8:B2:CD:FF:6F:D3:0C:65:F1:2C:21:04:78","sha256":"64:55:5F:9D:5A:2D:95:94:1A:0F:37:8B:4D:EE:38:54:1C:8B:25:14:A6:A3:CD:05:A0:C5:06:26:51:DC:6A:B4"}}},"request":{"raw":"GET /fonts/6593de79fc1d07bd51a77401_Nightingale%20v2.0.ttf HTTP/1.1\r\nHost: nesa.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nesa.pages.dev/css/patricks-sublime-site-c0fa55.webflow.dc6c95255.min.css\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPREFS=full\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 18 Apr 2026 15:06:14 GMT\r\ncontent-type: font/ttf\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Mxa0%2Bt1NWNvuAfv6Tga6sQHAFxgrPwJr4DTAuWudXYLML%2B6VpuoeaNXfQCib4bYXAW0Ycfhy33v6WHwqBL7inGwve1EfQ8AW04yABZ3OQfGNU90SrkFHtquDKDNgX9m2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"bdef3829c8e6776094439641f8250580\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ee492807c5a49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57388,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, digitally signed, 17 tables, 1st \"DSIG\", 19 names, Macintosh, type 1 string, DT Nightingale LightRegularDT Nightingale LightVersion 1.000DTNightingale-Light","md5":"a8ef64e3b30fcd0f32b4bb1d2ea301bb","sha1":"0fe11687016a7158998b67e9e2bb1cbd0e61d1ce","sha256":"1c09352175bbc2fde19920b085af25354a6124a751235d32e9e0eef54051ca4f","sha512":"2d4255036657459c284853ba16bc7332207b0b206cad0835f2d9b9e8899d101f8cb8c80b6af25c705dbda4ce5fab5ad87f555ec49fa538fffda488b8c2ff4348","ssdeep":"768:gtn779BSM1gkDNbuOFCk9auIjfCrlT0CJY1erHEsuNcpn+D8ywtHJraMfLb:sn7hFCkAO8qaxeOlerHEsGJD6BrfLb","tlshash":"37434c05b753b509f51aea3c8da2e2398bf0f0115f7b424df1931a73d89d2849c9b78a","first_seen":"2025-10-19T09:01:10.568162Z","last_seen":"2026-04-18T15:22:44.188676Z","times_seen":5,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"nesa.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nesa.pages.dev/images/65bcd5589aea1bccbc8131fa_Group%2047916.png","fqdn":"nesa.pages.dev","domain":"nesa.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nesa.pages.dev/","date":"2026-04-18T15:06:14.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nesa.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 01:47:01 GMT","end":"Fri, 10 Jul 2026 02:46:37 GMT"},"fingerprint":{"sha1":"44:87:8C:11:DF:4A:DE:E8:B2:CD:FF:6F:D3:0C:65:F1:2C:21:04:78","sha256":"64:55:5F:9D:5A:2D:95:94:1A:0F:37:8B:4D:EE:38:54:1C:8B:25:14:A6:A3:CD:05:A0:C5:06:26:51:DC:6A:B4"}}},"request":{"raw":"GET /images/65bcd5589aea1bccbc8131fa_Group%2047916.png HTTP/1.1\r\nHost: nesa.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nesa.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPREFS=full\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 18 Apr 2026 15:06:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 5074\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"871099eacf104ef6fabbedd34e434596\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Io%2FYJIrM1Z%2Be5PGYLEQTLu%2BD4d%2B0tCUSwFUuxggxhPl8RP%2Ben5eQIc7GAHANzQee%2FE7T8lo3jtFTPM%2FCzQ8tT4B%2Ba9iiUzph6M7fhL0qcjUygkt633rW4kt2xyeRNpxLQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ee492816ef049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5074,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"394cd6b4dccfed97cab2b0a46fc1fcb2","sha1":"6a4c6d8c099bd6355d38dc0ce201001e331092ba","sha256":"48fa7d5f48f2104a1946b355e78efcf52462b85f5a3305c421223aa0fe68d107","sha512":"834cc66176ed70ac568551c0254251ec3ebd4aa59c0771917aaae0fd6d657e57c1e1413b0658071105dc58dab4d1929c247b0527da1b6bc20106ec248567c579","ssdeep":"96:1SM97447fYot4nzfFEOjVRD++qPNWcH6cxLnQUYFyfYXofviTUoJY:1S074cYByORpqIczYFywYeUoJY","tlshash":"7ca12a0d866778e5363f7f89f29e249ca827b7575a40330829ed0b2210fb8db42958f1","first_seen":"2025-10-19T09:01:10.687791Z","last_seen":"2026-04-18T15:22:44.195564Z","times_seen":5,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"nesa.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nesa.pages.dev/","date":"2026-04-18T15:06:14.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nesa.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 17 Apr 2026 23:13:44 GMT\r\nexpires: Sat, 17 Apr 2027 23:13:44 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nage: 57150\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-08T06:16:41.265363Z","times_seen":19782,"resource_available":false,"data":null}},"time_used":452,"timings":{"blocked":219,"dns":1,"connect":8,"send":0,"wait":8,"receive":2,"ssl":212},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIuaomQNQcsA88c7O9yZ4KMCoOg4Koz4y6qhNnfR-EXYA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nesa.pages.dev/","date":"2026-04-18T15:06:14.657Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIuaomQNQcsA88c7O9yZ4KMCoOg4Koz4y6qhNnfR-EXYA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nesa.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 17 Apr 2026 22:21:10 GMT\r\nexpires: Sat, 17 Apr 2027 22:21:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 60304\r\nlast-modified: Tue, 09 Sep 2025 18:33:44 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29532, version 1.0","md5":"291e7d3e1fd408b2cf6fbcb28a590f08","sha1":"8f93490b55961aa59508b37251016aac163221e5","sha256":"89bc594ee3033a3d736996425a6bebe570bdd86521b77a8c13aa961ed84a96f0","sha512":"e95e86a14b11327afddb1f36dbcb6e6a33069fa8af0978026d8d180ccc4996c41c54a26b459fb16829bd5b4ab64b7e87601c07ba9dbdeb179aec9e3b6baa1ad9","ssdeep":"768:9VrigLoRKcpMRfnjFnp7Rd5ilmKPJo9BmMqkp3:frilRhpCbZplWlmd/r","tlshash":"98d2e16e9ec8ba440e517f565b61e2ee7ed7f08040094f6bf4692323d448ed90db4f02","first_seen":"2025-06-05T19:50:12.474325Z","last_seen":"2026-08-08T06:16:41.300415Z","times_seen":1367,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":58,"dns":0,"connect":0,"send":0,"wait":19,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nesa.pages.dev/c00b1521_zm.js","fqdn":"nesa.pages.dev","domain":"nesa.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nesa.pages.dev/","date":"2026-04-18T15:06:14.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nesa.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 01:47:01 GMT","end":"Fri, 10 Jul 2026 02:46:37 GMT"},"fingerprint":{"sha1":"44:87:8C:11:DF:4A:DE:E8:B2:CD:FF:6F:D3:0C:65:F1:2C:21:04:78","sha256":"64:55:5F:9D:5A:2D:95:94:1A:0F:37:8B:4D:EE:38:54:1C:8B:25:14:A6:A3:CD:05:A0:C5:06:26:51:DC:6A:B4"}}},"request":{"raw":"GET /c00b1521_zm.js HTTP/1.1\r\nHost: nesa.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nesa.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 18 Apr 2026 15:06:14 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pGUO4vF4kmYpc0efQK8DvlKtprkCFTci557OTtVSOsn0UYsc2lV6uIpNEmYLxrWISp5AIJFRNdQfmWZyYVeunTHlQ%2BVP2LOvMiPeCeYqXYf3eQznlN7oIfjtQmBrUFH1Zg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ec0907096a0b1d6f7bfe55238b286302\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ee4927f594e49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1463968,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13366)","md5":"1a72f4429f3ee68223a54ecdd377bb15","sha1":"d3173e0c2c046ca6cec278e5db257dc72eba8f2d","sha256":"73566ef530819bd13e5fed4e3bba009efb05481a4282c5f7baf0c78e9c54eafd","sha512":"fb89eeb38e9ff44eb2238c0462b0abaf97dc011068a90325d4249b05ab18af3fc45fbaff3a6b464d6bab311754448c629e961037fbeefc0a6d72cbf5588342ce","ssdeep":"24576:XlXZ9jPJXpg1IzP2abvwuQVD0gnY7KQs+HPlthoF4evCJbf:5jBXpyI6yQo7ebCNtHf","tlshash":"98252334b7132f7eef18c7e9d286270e3c5916d3d859d4e8faac00e68396d844c9ad54","first_seen":"2025-10-19T09:01:10.729159Z","last_seen":"2026-04-18T15:22:44.187669Z","times_seen":13,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2026-04-18","alert":"Hunting_JS_WebAssembly","trigger":"nesa.pages.dev/c00b1521_zm.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"nesa.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nesa.pages.dev/js/webfont.js","fqdn":"nesa.pages.dev","domain":"nesa.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nesa.pages.dev/","date":"2026-04-18T15:06:14.301Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nesa.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 01:47:01 GMT","end":"Fri, 10 Jul 2026 02:46:37 GMT"},"fingerprint":{"sha1":"44:87:8C:11:DF:4A:DE:E8:B2:CD:FF:6F:D3:0C:65:F1:2C:21:04:78","sha256":"64:55:5F:9D:5A:2D:95:94:1A:0F:37:8B:4D:EE:38:54:1C:8B:25:14:A6:A3:CD:05:A0:C5:06:26:51:DC:6A:B4"}}},"request":{"raw":"GET /js/webfont.js HTTP/1.1\r\nHost: nesa.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nesa.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 18 Apr 2026 15:06:14 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KDLBDJTAnExOZ4ons5j8u8IkKV%2F4dWybB8eNIejTo5ZpTpOKO%2BxkQ%2BOXQr%2F603l3So5oXLgKVvDjwot1lGNHNrKgCFO1v208RaVYagh0tK5CmIsQR43Qu8AxGo7W80EbvQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"7f3658462391a37242d0bdca0496e159\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ee4927f595549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13188,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2134)","md5":"7c96a5f11d9741541d5e3c42ff6380d7","sha1":"d3fa2564c021cf730e58ffddb138cf6b57ed126e","sha256":"81016ac6be850b72df5d4faa0c3cec8e2c1b0ba0045712144a6766adfad40bee","sha512":"23c162a2e268951729b580e5035ad6ca9969cfcc5ce58a220817b912e76b38be6c29c3ca7680cb4e8198863d95a72ea65bd06ff7189b5c8475e4c1ce501aeab1","ssdeep":"384:i11kqRm4UjryX2DfatZrT80NCGz5r2zItrX:iEqRm4cy338m7d","tlshash":"7942c65d7652b26a825280f2177f060b9576fa2ab844c0bc7a89d8d46c74db8037ff7c","first_seen":"2023-03-07T01:03:17Z","last_seen":"2026-08-08T07:17:42.848395Z","times_seen":66808,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"nesa.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nesa.pages.dev/images/65bcd33a240b56a435457637_NESA-Logo%20%283%29-p-500.png","fqdn":"nesa.pages.dev","domain":"nesa.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://nesa.pages.dev/","date":"2026-04-18T15:06:14.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nesa.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 01:47:01 GMT","end":"Fri, 10 Jul 2026 02:46:37 GMT"},"fingerprint":{"sha1":"44:87:8C:11:DF:4A:DE:E8:B2:CD:FF:6F:D3:0C:65:F1:2C:21:04:78","sha256":"64:55:5F:9D:5A:2D:95:94:1A:0F:37:8B:4D:EE:38:54:1C:8B:25:14:A6:A3:CD:05:A0:C5:06:26:51:DC:6A:B4"}}},"request":{"raw":"GET /images/65bcd33a240b56a435457637_NESA-Logo%20%283%29-p-500.png HTTP/1.1\r\nHost: nesa.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nesa.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 18 Apr 2026 15:06:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 7913\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"783d5c0daf6cc851f4c5afd5646ec9e7\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=25dRJJAWzbK0I3MLwa4RP6dMxrg03i4zcu7UNtlj3CSL8S%2FVSiIdE7GyGfKv2CO%2FlsR3bffAMphJxQynWWxmpvfxsipsK94uccn3qa6U2Rv7rgMlN4FJzA6b4t%2BG3NFE1A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ee4927f595749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7913,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 118, 8-bit colormap, non-interlaced","md5":"5023e69cd5623608cd019dae36c9cd06","sha1":"bbe5922e56bf799e390eea1690ddfca640bd272f","sha256":"012835d84dbe847a1b61dee7b0d489b9f71ee3b3918ec4645800797f8b3274d2","sha512":"0c19afa8c643ef694a747e6861137da8e3fbc6ad339a45fecc587cb15134917eb3a656d5974ab85655f29b10ec85bd6e6fdabb01cb59b62989f893d777901de9","ssdeep":"192:+S1fRtRLSqPkQKvV55giIhv9gJlq0x90M8:h6qPk7vVnLIJ9AxKM8","tlshash":"4df18df0b9f0762fd7d4b7491f6320f440d312fc206167a175e46a2193aee392d141ae","first_seen":"2025-10-19T09:01:10.480485Z","last_seen":"2026-04-18T15:22:44.19443Z","times_seen":5,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"nesa.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nesa.pages.dev/","date":"2026-04-18T15:06:14.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIoaomQNQcsA88c7O9yZ4KMCoOg4Ko20yyghfvaZ-E.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nesa.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 17 Apr 2026 23:13:44 GMT\r\nexpires: Sat, 17 Apr 2027 23:13:44 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:38:58 GMT\r\ncontent-type: font/woff2\r\nage: 57150\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27236,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27236, version 1.0","md5":"a8c28b27501f763423d96717c43243df","sha1":"e845ac57b3fee2c68ec6cdb95114ef3541fa3d11","sha256":"b6698c39332c51112c720e8a92608b4eeed502f654b63fc1693b8cccfc856d4d","sha512":"3e3af79fd415b3e4d3cbcd7f9bce2a7fa5c09b1ad5a38c6f2e971852c7973eae1b8ac85a4664f8c7af34f6c489f563cc35f82aecd32b1be8af70ce2612b0e3d3","ssdeep":"384:TOfiFJZpa1LuoEeC5s2xCWnEgdMqCF+FSe5LuxyrPyP2hbgBizhxCvw9k3kwA0y2:XW1l+s2xC8LSs2P2yitawWU50Z","tlshash":"f5c2e0676b05362dbcc47380135b8f262a5071b5566cca61787bef4e3a9b03a903cba5","first_seen":"2025-06-03T19:01:05.870661Z","last_seen":"2026-08-08T06:16:41.265363Z","times_seen":19782,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":125,"dns":4,"connect":8,"send":0,"wait":13,"receive":2,"ssl":98},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nesa.pages.dev/images/65bcd4e22f9d3b1bf3d887fb_Group%2047915%20%281%29.png","fqdn":"nesa.pages.dev","domain":"nesa.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nesa.pages.dev/","date":"2026-04-18T15:06:14.622Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nesa.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 01:47:01 GMT","end":"Fri, 10 Jul 2026 02:46:37 GMT"},"fingerprint":{"sha1":"44:87:8C:11:DF:4A:DE:E8:B2:CD:FF:6F:D3:0C:65:F1:2C:21:04:78","sha256":"64:55:5F:9D:5A:2D:95:94:1A:0F:37:8B:4D:EE:38:54:1C:8B:25:14:A6:A3:CD:05:A0:C5:06:26:51:DC:6A:B4"}}},"request":{"raw":"GET /images/65bcd4e22f9d3b1bf3d887fb_Group%2047915%20%281%29.png HTTP/1.1\r\nHost: nesa.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nesa.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPREFS=full\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 18 Apr 2026 15:06:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 766\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"c34fe04be59f5ba1e08b87bb937cc721\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UQkxL9mgEIU88fUhInk7k9VA6YCZ0acvlzYKqf1E4hFRp2YPt%2BvRdusSSGKmEjI7O%2F3YaPF1D9cO%2FagEE8JKPhXmbmv5sTAanZ8wRBlSq5xOBI%2BfDSXypYyFicui1EbuQQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ee492816ef349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":766,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"d91ba9e1c51fca5e96635ce2291ebcbc","sha1":"42c6fa041ccb3a8e55f2fafe0eafab6c623fc72a","sha256":"1139fd2a26075d84be7059c24467f185d67ccb5bff89c4447b76619c45ea0ffa","sha512":"616774bc23f3132c24e47d3e17d57e3ca082d0850609013e7a8bd9cb586a0d0a907790cf7191a05e7a8f78c316dce18ebb017e803b2e6f43ee9c14ae74f47b2d","ssdeep":"","tlshash":"b501b5d4270e2ded4c0f957e9b6b0d548baf0cbd4b8aa20264ac0419912cd44bbebd58","first_seen":"2025-10-19T09:01:10.642775Z","last_seen":"2026-04-18T15:22:44.190263Z","times_seen":5,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"nesa.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nesa.pages.dev/js/webflow.264a14023.js","fqdn":"nesa.pages.dev","domain":"nesa.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nesa.pages.dev/","date":"2026-04-18T15:06:14.305Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nesa.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 01:47:01 GMT","end":"Fri, 10 Jul 2026 02:46:37 GMT"},"fingerprint":{"sha1":"44:87:8C:11:DF:4A:DE:E8:B2:CD:FF:6F:D3:0C:65:F1:2C:21:04:78","sha256":"64:55:5F:9D:5A:2D:95:94:1A:0F:37:8B:4D:EE:38:54:1C:8B:25:14:A6:A3:CD:05:A0:C5:06:26:51:DC:6A:B4"}}},"request":{"raw":"GET /js/webflow.264a14023.js HTTP/1.1\r\nHost: nesa.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nesa.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 18 Apr 2026 15:06:14 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wiBcvKWVENXmnUF6kTZIoDKwbEJ5ZmN%2BxFn6Cm4nM%2F82KzTbUrmFtxfOb09p5M6uhGpekIerWlGpzMAl3EJtTVtUUFivODJcOSYuroLwE%2BojKM1YHT0N61%2FhajG9%2BoMlMw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d327ae3d4e20bdd08fa58c113eb64f16\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ee4927f595e49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":639137,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39269)","md5":"264a140236864b84b4aacb1b1be49eb6","sha1":"338569582f065ae7fa7739c990523b530cbd0260","sha256":"315972c107fcdc6dab247800648eebdc74c63d191b7c7b4b215026a3bc55a32d","sha512":"5bf4d5d19c62fa3a0944a92409ad3cafae35bf1259a5f10b9f71433c5e670db508d4de524e641e6d25d9c4963f54cb3efb17fee7487fa4f180be44fc01304ca5","ssdeep":"3072:dqivmeEE0n0W+f1bCSCOak6yl92xBZy1v4Boug49mXXwve/GP8YSzRCyZN7qKlAN:wivun0BIi/ug4s/GPozgyZm","tlshash":"f8d48646366125fb42ab0359f8177c41a3b811e6c60ece6cdca9cdf81aed9e84713637","first_seen":"2025-10-19T09:01:10.664504Z","last_seen":"2026-04-18T15:22:44.194981Z","times_seen":5,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"nesa.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nesa.pages.dev/images/65c63c6429a65a2682193f1b_NESA-Icon-2%202%20%281%29.png","fqdn":"nesa.pages.dev","domain":"nesa.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nesa.pages.dev/","date":"2026-04-18T15:06:14.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nesa.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 01:47:01 GMT","end":"Fri, 10 Jul 2026 02:46:37 GMT"},"fingerprint":{"sha1":"44:87:8C:11:DF:4A:DE:E8:B2:CD:FF:6F:D3:0C:65:F1:2C:21:04:78","sha256":"64:55:5F:9D:5A:2D:95:94:1A:0F:37:8B:4D:EE:38:54:1C:8B:25:14:A6:A3:CD:05:A0:C5:06:26:51:DC:6A:B4"}}},"request":{"raw":"GET /images/65c63c6429a65a2682193f1b_NESA-Icon-2%202%20%281%29.png HTTP/1.1\r\nHost: nesa.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nesa.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPREFS=full\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 18 Apr 2026 15:06:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 13948\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"24ff6a8259e209c95bb158fcbe3ac9b9\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0%2By6eYcfQ2Btzs%2FOBV2ar6oj8xwC3rNNULhkBb3p58s7LgvGTNtxdEI0Wzi8%2FuRBVmDlwjzXDker24z%2B5EiLASEu6geefqkeyTLyJj7yKn6IjB5kMRipsyzVJf%2Bppj1f5Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ee49280acea49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13948,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 132 x 132, 8-bit/color RGBA, non-interlaced","md5":"d2380f942df11fed618d5cd48c51f17d","sha1":"6041d7c85db09a77ded78d9afe1a4cfc340c38bb","sha256":"0b5d494194c402297e3cf909073a6e3c4d40e35e4350abbf3d84a2d6c624bd85","sha512":"32b22a35b641afe7296f7f50fff758953d2b67b42bf88e1272543d569fe8874c9ede899f6d5e7b75694f5f1c1ccf534d1d3edefb5b08f019f430f39340854844","ssdeep":"384:DwL1bFG7XqUsC501cfoKemjUt45LyeB/gRp:E5bFGTqUZ035K9FoH","tlshash":"de52c08068b73957e79ecb24ee23a4410d94dfad13838b4b8103ad7c6e15486ab87ad1","first_seen":"2025-10-19T09:01:10.632405Z","last_seen":"2026-04-18T15:22:44.191391Z","times_seen":5,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"nesa.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIuaomQNQcsA88c7O9yZ4KMCoOg4Koz4y6qhNnfR-EXYA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nesa.pages.dev/","date":"2026-04-18T15:06:14.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIuaomQNQcsA88c7O9yZ4KMCoOg4Koz4y6qhNnfR-EXYA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nesa.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 17 Apr 2026 22:21:10 GMT\r\nexpires: Sat, 17 Apr 2027 22:21:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 60304\r\nlast-modified: Tue, 09 Sep 2025 18:33:44 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29532, version 1.0","md5":"291e7d3e1fd408b2cf6fbcb28a590f08","sha1":"8f93490b55961aa59508b37251016aac163221e5","sha256":"89bc594ee3033a3d736996425a6bebe570bdd86521b77a8c13aa961ed84a96f0","sha512":"e95e86a14b11327afddb1f36dbcb6e6a33069fa8af0978026d8d180ccc4996c41c54a26b459fb16829bd5b4ab64b7e87601c07ba9dbdeb179aec9e3b6baa1ad9","ssdeep":"768:9VrigLoRKcpMRfnjFnp7Rd5ilmKPJo9BmMqkp3:frilRhpCbZplWlmd/r","tlshash":"98d2e16e9ec8ba440e517f565b61e2ee7ed7f08040094f6bf4692323d448ed90db4f02","first_seen":"2025-06-05T19:50:12.474325Z","last_seen":"2026-08-08T06:16:41.300415Z","times_seen":1367,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":64,"dns":1,"connect":21,"send":0,"wait":19,"receive":5,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIuaomQNQcsA88c7O9yZ4KMCoOg4Koz4y6qhNnfR-EXYA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nesa.pages.dev/","date":"2026-04-18T15:06:14.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIuaomQNQcsA88c7O9yZ4KMCoOg4Koz4y6qhNnfR-EXYA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nesa.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 17 Apr 2026 22:21:10 GMT\r\nexpires: Sat, 17 Apr 2027 22:21:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 60304\r\nlast-modified: Tue, 09 Sep 2025 18:33:44 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29532, version 1.0","md5":"291e7d3e1fd408b2cf6fbcb28a590f08","sha1":"8f93490b55961aa59508b37251016aac163221e5","sha256":"89bc594ee3033a3d736996425a6bebe570bdd86521b77a8c13aa961ed84a96f0","sha512":"e95e86a14b11327afddb1f36dbcb6e6a33069fa8af0978026d8d180ccc4996c41c54a26b459fb16829bd5b4ab64b7e87601c07ba9dbdeb179aec9e3b6baa1ad9","ssdeep":"768:9VrigLoRKcpMRfnjFnp7Rd5ilmKPJo9BmMqkp3:frilRhpCbZplWlmd/r","tlshash":"98d2e16e9ec8ba440e517f565b61e2ee7ed7f08040094f6bf4692323d448ed90db4f02","first_seen":"2025-06-05T19:50:12.474325Z","last_seen":"2026-08-08T06:16:41.300415Z","times_seen":1367,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":60,"dns":1,"connect":22,"send":0,"wait":28,"receive":2,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/plusjakartasans/v12/LDIuaomQNQcsA88c7O9yZ4KMCoOg4Koz4y6qhNnfR-EXYA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nesa.pages.dev/","date":"2026-04-18T15:06:14.658Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"8B:DF:9C:24:AB:AD:AB:73:3F:51:0F:25:2B:18:76:79:1A:C5:63:A0","sha256":"BF:5C:B4:F2:20:4F:D0:E5:76:81:59:52:5F:3E:D2:4F:8D:33:B3:30:36:84:C8:7E:0E:AB:58:1E:7D:D6:E2:6D"}}},"request":{"raw":"GET /s/plusjakartasans/v12/LDIuaomQNQcsA88c7O9yZ4KMCoOg4Koz4y6qhNnfR-EXYA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nesa.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 17 Apr 2026 22:21:10 GMT\r\nexpires: Sat, 17 Apr 2027 22:21:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 60304\r\nlast-modified: Tue, 09 Sep 2025 18:33:44 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":29532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29532, version 1.0","md5":"291e7d3e1fd408b2cf6fbcb28a590f08","sha1":"8f93490b55961aa59508b37251016aac163221e5","sha256":"89bc594ee3033a3d736996425a6bebe570bdd86521b77a8c13aa961ed84a96f0","sha512":"e95e86a14b11327afddb1f36dbcb6e6a33069fa8af0978026d8d180ccc4996c41c54a26b459fb16829bd5b4ab64b7e87601c07ba9dbdeb179aec9e3b6baa1ad9","ssdeep":"768:9VrigLoRKcpMRfnjFnp7Rd5ilmKPJo9BmMqkp3:frilRhpCbZplWlmd/r","tlshash":"98d2e16e9ec8ba440e517f565b61e2ee7ed7f08040094f6bf4692323d448ed90db4f02","first_seen":"2025-06-05T19:50:12.474325Z","last_seen":"2026-08-08T06:16:41.300415Z","times_seen":1367,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":26,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nesa.pages.dev/js/jquery-3.5.1.min.dc5e7f18c8.js","fqdn":"nesa.pages.dev","domain":"nesa.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nesa.pages.dev/","date":"2026-04-18T15:06:14.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nesa.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 01:47:01 GMT","end":"Fri, 10 Jul 2026 02:46:37 GMT"},"fingerprint":{"sha1":"44:87:8C:11:DF:4A:DE:E8:B2:CD:FF:6F:D3:0C:65:F1:2C:21:04:78","sha256":"64:55:5F:9D:5A:2D:95:94:1A:0F:37:8B:4D:EE:38:54:1C:8B:25:14:A6:A3:CD:05:A0:C5:06:26:51:DC:6A:B4"}}},"request":{"raw":"GET /js/jquery-3.5.1.min.dc5e7f18c8.js HTTP/1.1\r\nHost: nesa.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nesa.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 18 Apr 2026 15:06:14 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PEiscy9ziUrb3g7XFYE%2FDUTlkTZ6aYU%2FQlHO2nwxIRF%2BVrmD%2FdV%2FpOFPKycynIjvDG24%2FVvDUQlSZAJb1sLT2sZoCdeg8kDosdAdJYH8sD5j5Q%2BegDdWQdwuuH1t14dwwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c31ec229eeb985dbe0b8027660d761e7\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ee4927f595c49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89938,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"e321582636896fc4bb822d795da353ba","sha1":"4313afc4f3944e8e723a81c7bd0f06199b397df7","sha256":"b4b1f95f90a04d5cd38c9b72c0debff6323025ae9b4d8d3ab78bcf3d272326cf","sha512":"1e1aaa44434759ea2eb2f5803bd548458bfdb10e41d78735d60a4cd8b08fb7e453b10bb0c43526059656b0472126194fde42c182a145369420a1faae14b043bc","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvD36ip3h8cAowEjOPrBeU6QLiTFbc0QlQvakV:AYh8Kip3hubf6IidlrvakdtQ47GKl","tlshash":"179309ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bc78a4e827bf7d","first_seen":"2023-11-04T23:44:36Z","last_seen":"2026-06-23T16:32:11.312429Z","times_seen":47,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-18","alert":"Sinkholed","trigger":"nesa.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}