{"report_id":"129a9736-10ed-40ab-84da-2dff4c2e56ce","version":6,"status":"done","tags":[],"date":"2026-04-14T07:13:09Z","url":{"schema":"http","addr":"nexusair.online/","fqdn":"nexusair.online","domain":"nexusair.online","tld":"online"},"ip":{"addr":"162.159.142.117","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"nexusair.online/","fqdn":"nexusair.online","domain":"nexusair.online","tld":"online"},"title":"Nexus $WAR Token Opportunity - Join 50,000+ Members","dom":{"size":22203,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (14984)","md5":"69e6ed96ce379f97e98b17238ee13614","sha1":"be2798a53d8758e8cf03533aee88558696fc9f2c","sha256":"e1f8dce052a79b5891c0ead5031c7e9e0cd3b4646ce93d34eb09c95c583f40e3","sha512":"1a11f8f953c1eeee1704289a23c2a8903abae6a9ab15c5c78cf2ee3500cf281ec2ab863180b9eeeebcbfce826d9c3b544eb65fcadeede2273b6ca96c2b7ce032","ssdeep":"384:U48Nu5vc+d98LrgchxbYj+go4BBUX40Y6S:U48Nu5v5d9ErgchxbYj+V3Y6S","tlshash":"15a261727641703b469385d1b0a2b32e71b6d20fdb920490b6fc87ed0fe1ed9dd66506","dom_hash":"domhash0ba71f82e43564e48542bf5af1a16399","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"nexusair.online/","fqdn":"nexusair.online","domain":"nexusair.online","tld":"online"},"ip":{"addr":"162.159.142.117","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-19T07:13:09Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"nexusair.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"us-assets.i.posthog.com","ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-01-23","domain_rank":57965,"first_seen":"2024-02-22T12:48:35Z","last_seen":"2026-04-08T17:54:47.586799Z","alert_count":0,"request_count":6,"received_data":433663,"sent_data":2866,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-12T22:16:45.621325Z","alert_count":0,"request_count":1,"received_data":25287,"sent_data":565,"comment":"","tags":null,"fingerprints":null},{"fqdn":"flagcdn.com","ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-04-05","domain_rank":30920,"first_seen":"2020-04-05T08:17:33Z","last_seen":"2026-04-09T09:00:27.809604Z","alert_count":0,"request_count":3,"received_data":3075,"sent_data":1293,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-12T22:20:19.752051Z","alert_count":0,"request_count":1,"received_data":3277,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"assets.emergent.sh","ip":{"addr":"3.164.230.25","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2024-06-14","domain_rank":0,"first_seen":"2025-10-15T16:59:18.626023Z","last_seen":"2026-04-10T06:04:51.281986Z","alert_count":0,"request_count":1,"received_data":11646,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"nexusair.online","ip":{"addr":"162.159.142.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":5,"request_count":5,"received_data":344678,"sent_data":3621,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"us.i.posthog.com","ip":{"addr":"100.49.206.47","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2020-01-23","domain_rank":42193,"first_seen":"2024-02-22T12:48:36Z","last_seen":"2026-04-08T16:08:36.703276Z","alert_count":0,"request_count":3,"received_data":33491,"sent_data":1648,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nexusair.online/","fqdn":"nexusair.online","domain":"nexusair.online","tld":"online"},"ip":{"addr":"162.159.142.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6befaec569e65bd37dd868e268b7341b","sha1":"d72a200b4e28b8515aa45dc621ebdd123231ba23","sha256":"990c56a750994bc5a888dcf8b891d753294ecbc7c11323cbedcec9a597e96671","sha512":"04222e9feda2c78a8560b5c66895fce29fe94d0615462c91ba352ad41e20e55d4de521c881ba9ae344afacd259542cc7aa1e8a796c50223d9e6bdc6e4ad13db7","ssdeep":"","tlshash":"92216e1e9a060dbaf2c392453615f93c657e116e9739c505772defb10e14e8e142b43a","size":1345,"data":"","first_seen":"2026-04-14T07:13:14.758605Z","last_seen":"2026-04-14T07:13:14.758605Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/static/posthog-recorder.js?v=1.368.0","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"630871d3972335e9e503b3f51073deec","sha1":"c2a5d8cc3f724b11dfcf90a2d02a88c5fdad65d2","sha256":"dbaf32e3e6e4c8b1511a9a74f80ceafad77650e7db3dd96ba17744231255296b","sha512":"b7b81b9772e09ab62b6edad18986ec60db96b50ad8dc0128d337b538447aa229128821a420493714aa871e2c017e4c95d7b7c91e7e0e6ab9ce38e5ba243eb6ef","ssdeep":"1536:k2mkQuOdGyr3JsKyzKUzDDuMwBe6gdx+mFlquzGNKZIcZbZr90Uu:kyzuv3IxRx/FlquakDZ30v","tlshash":"3ed33cca7765a03357d2112980ab0302f6357a19704a8078f2bed9e935bc9c771b7b7e","size":136504,"data":"","first_seen":"2026-04-13T19:09:00.795023Z","last_seen":"2026-04-14T07:27:19.326241Z","times_seen":44,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/static/web-vitals.js?v=1.368.0","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e86a7e6700c57adafb02422ba2a1fa76","sha1":"4e7cb88dfb19d2815cc1b798fd9423479a0e180c","sha256":"a8f310619b2b7d92565a41b7c4e5f245a54c6ff1619ff8ccc9ec5a262c7a5279","sha512":"eb40d0dc6c5d3c2a08c497ad8b2ed59ca1e446797d94b2498215faf414372084e77219bfab0b6cbb2b62717d7d622b9b52e1bc83a2da36052b39ff04553f84a3","ssdeep":"96:t3CGETzq4Y7KBXy0I5rb9mSAJa1KUGleA1vSwrJ4c0kHemlDDp1mj3o7X1u+SBDw:tCGzg53lbB1f4T8KUT1HB1v","tlshash":"c2d1d8e5af41e53812bfd1a6d0795253333a67a25005409ce22effd018ad4c6639bb32","size":6393,"data":"","first_seen":"2026-03-23T18:11:23.132424Z","last_seen":"2026-07-19T06:19:37.142513Z","times_seen":11351,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/static/dead-clicks-autocapture.js?v=1.368.0","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c5474a8b699f42883b65297a74d9c5a7","sha1":"99af03247f4917fbf8d47c0178e3fd8d9d5c581f","sha256":"87034219dac04e1e2dab52c7f93be369ede3f4b47b364b7b137cd50d0332121c","sha512":"e34b98d272185766fb0c570ec021d8404aabb2b26f4cbd8bea3c62b27e9aed09fdf6e187d5f2830e22e1800ef05a3b678a4b092414dfa62ec1c4cd287da8ebe4","ssdeep":"384:PV/KyJqhBwq5f8H65YRgb9Rre7+xqTqF8V:js8HNgb9O+8qF8V","tlshash":"5e421a89f660e3721ed7555a80bf1702e036651ca5cac828b155fcc974acb4221aff7f","size":13086,"data":"","first_seen":"2026-04-02T08:07:54.962842Z","last_seen":"2026-07-20T21:56:46.031082Z","times_seen":2434,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/static/surveys.js?v=1.368.0","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2002c35370c41f27992690d270f7559","sha1":"c6958b645c42a68b47a089985c249ca539f7dfc7","sha256":"95cbf43396078d2ecd4aeb5ef4921e94c2ee289a9592e2b616a13ba206c71d67","sha512":"b0e8f827e3f0074f19c1fed7ec477e09526a3b7feedb7f9d6b4056a9da77b663f0471ee8aea553f13baba5c0658d49888ca01af0678e1bb4304867553792e7ac","ssdeep":"1536:WXPDY/UhiBS1tQv6JFvGhfN2SSW60PF2GWlsymuG:yrYsty6oDrPF27G","tlshash":"ea934b95f740e1ae41df81b810be4842f33d6b1afe0c4854b1579c983de5988a39ffa6","size":90040,"data":"","first_seen":"2026-04-09T21:20:14.270003Z","last_seen":"2026-07-14T12:56:23.91608Z","times_seen":1879,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusair.online/","fqdn":"nexusair.online","domain":"nexusair.online","tld":"online"},"ip":{"addr":"162.159.142.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"676da7b1e53763fd10daa8ebec30ce1f","sha1":"3b710ca98e1a2c3ce48b0568042f7836b41377b1","sha256":"fd06b7f14be8918d00706bfc9c7e3f9ae93e2f4a4273a1ded6185ea40f52ea6b","sha512":"7f4b588bc5a72479231ed127bcab1cf57044055afd66497e993d50aff18fd52cd2f98fdab3def0d119c77adaf45aeb5d3a730ceb607f51ec8a710889b2ca0c32","ssdeep":"","tlshash":"4d41630ef94778334b91fae174b65d8bcf5a16840338dd45e56280c99241eca862efbd","size":1970,"data":"","first_seen":"2026-02-11T03:08:25.567745Z","last_seen":"2026-07-26T17:56:29.889874Z","times_seen":275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.emergent.sh/scripts/emergent-main.js","fqdn":"assets.emergent.sh","domain":"emergent.sh","tld":"sh"},"ip":{"addr":"3.164.230.25","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f46cfcb4902bbbf39581cce7019f9e7c","sha1":"fd7eace7f1fe0b7388c66d8ad2937fd820da6f46","sha256":"64e00c3f98b1c33a7bfc9a5e8cf3873442c57b23db3b0b912f4469d1f093596a","sha512":"2b3e067deab0eafbb3a60bd2853b9c9c8f73b83cf3d428c30a79abffe912300b2ed5854f44ca6902c6d15c219606dbd5388724a8fa5acbd971f5e45ae018f532","ssdeep":"192:9Rgt6SFHgzfd+aXOD21Ds2MUUPTTXwOMs1kiNW/3MbpmbJ:iHOjU7TgIy0U","tlshash":"3332943859b210374a37e1be1bcb71863335001b6951edb4bd8c4b443fd86699af17ea","size":11101,"data":"","first_seen":"2025-10-16T18:07:38.532981Z","last_seen":"2026-06-18T12:02:08.456182Z","times_seen":422,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusair.online/static/js/main.855e8b58.js","fqdn":"nexusair.online","domain":"nexusair.online","tld":"online"},"ip":{"addr":"162.159.142.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"93f66dad8c321905ac2e2c49769c8daf","sha1":"44fb0d5eda87abc3177d1696d753cd84dabcf46d","sha256":"bd50759e1c11acd42de604bbf112448d453b5983fd682c2e00d9db322d479e45","sha512":"7d65fda83bde2a80f8f48306006984e1463b3a0d2c013f5954bc2abad4b5f6a94d43473ba16f84b2d1a9dcf3ebccbbddf1952ad129b2c0c43d42e63ab4b1e528","ssdeep":"3072:l3Ya1Dc6FiH4AqTav9X+VY8E+hY1tCbRs7PQHmn8CEyQG9:l3G6o4tUy5W7PQHOh","tlshash":"60341bd87955f6616eb302e7109f140a733d1a1b680d48b0b121fcae787849eb17bf9e","size":251518,"data":"","first_seen":"2026-04-14T07:13:14.750737Z","last_seen":"2026-04-14T07:13:14.750737Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/static/array.js","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"605e977161a355f9023ed3717ec36aaf","sha1":"f387ee7d64d2d031db446e6c339b46543269a74d","sha256":"5314a63ee13f8feb7bddd6507a35b33806ca379b7c48804a99cb4dbc0025f166","sha512":"e7e5ad451ab517589774706cfb787d2bad8dafa4c99cde2759eca6f677f6ebdbd7e31346a24a8379cb2fc33ce7bd734080c236f94ce029f0597e88e25902d431","ssdeep":"1536:u3ivfZQC4/d+G93ckNUkif8yxKn9J9qqNk4v3Zn630buEXmjClbKg9+vxZ2fiNhQ:u3m2VOX8yu/qmkKuj0bKg98xxNh3i8o","tlshash":"cd040a96f77ad0324ae580a5d0360003e72a7b4e6149c06cf66edccd359d58a727bf3a","size":182547,"data":"","first_seen":"2026-04-13T19:49:01.084461Z","last_seen":"2026-04-14T07:13:14.753604Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/array/phc_xAvL2Iq4tFmANRE7kzbKwaSqp1HJjN7x48s3vr0CMjs/config.js","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2b5888bf4718f3b67a3d9cc47f41bbe7","sha1":"24cd6e92dc7be07f39aa1e8dbe07489c811a989d","sha256":"d0b9ab2470bf717462eeea653d0c1c8a1a0eeee0f4fc3e2128b0e75afeab0276","sha512":"bb6083a3bfc4207cdac81419b6288f4457be90e65743e0bb2005e28d1d6e0dff18c0e82c3ec51dff951c7c9a152c4589f16d0a2d3e0b9bd278f5e646fa0d5060","ssdeep":"","tlshash":"8031872f1e1d2831aaaa5325e6d77f456ffe0233314c2848f8dc029452dd7db9987507","size":1566,"data":"","first_seen":"2026-04-14T07:13:14.744737Z","last_seen":"2026-07-26T17:56:29.886681Z","times_seen":278,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexusair.online/","date":"2026-04-14T07:12:48.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:38 GMT","end":"Mon, 15 Jun 2026 08:38:37 GMT"},"fingerprint":{"sha1":"C3:E4:BE:7B:38:DD:F1:59:DC:DF:FA:8A:48:52:C7:1D:D2:BF:F7:5E","sha256":"31:F4:52:B9:AA:C3:06:E9:A3:71:DA:02:A5:63:C9:78:CC:3A:04:07:E1:B4:42:F5:DC:BF:40:0F:BE:3E:6F:9E"}}},"request":{"raw":"GET /css2?family=Inter:wght@600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexusair.online/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 14 Apr 2026 07:12:48 GMT\r\ndate: Tue, 14 Apr 2026 07:12:48 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2591,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6047a041c56fc1275ceea606848dc0c8","sha1":"f0d19dbc2cec6c1c8289b577d68060115a5d98f9","sha256":"6f3fe784a8b0168bff4615d82d9e49b7fd85eaa4e5f3e5e2ea6e32bfb902ccd2","sha512":"62430268b9a04bf5edd6accda5a05513580388e26327eb693878e7352d899ad211f4e14beb9ee2518ad1e85e3ba681208f10f0083997062c7e0de2efafdeef5d","ssdeep":"","tlshash":"4351af91002ba500ab871dd673cf3f35aece72482085c5b95bfd0dc59cdae26036978e","first_seen":"2025-09-17T10:36:36.253362Z","last_seen":"2026-07-26T14:20:08.81741Z","times_seen":856,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":57,"dns":1,"connect":7,"send":0,"wait":19,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets.emergent.sh/scripts/emergent-main.js","fqdn":"assets.emergent.sh","domain":"emergent.sh","tld":"sh"},"ip":{"addr":"3.164.230.25","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexusair.online/","date":"2026-04-14T07:12:48.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"assets.emergent.sh","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Wed, 17 Sep 2025 00:00:00 GMT","end":"Fri, 16 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"32:7F:85:1D:EE:8D:63:A0:65:71:AB:DB:CE:D9:4D:23:E6:8D:C9:93","sha256":"D9:37:38:24:9C:9E:D3:58:DC:D1:82:40:0B:A1:B1:14:E0:DF:6D:C2:A7:7C:13:92:56:B7:24:0A:16:32:B6:CB"}}},"request":{"raw":"GET /scripts/emergent-main.js HTTP/1.1\r\nHost: assets.emergent.sh\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexusair.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 04 Oct 2025 14:12:00 GMT\r\nserver: AmazonS3\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\ncontent-encoding: gzip\r\ndate: Mon, 13 Apr 2026 11:07:23 GMT\r\netag: W/\"f46cfcb4902bbbf39581cce7019f9e7c\"\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 ea02abebb2a440d706b520c89c509e4e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P1\r\nx-amz-cf-id: 7N52QLgEBYMZzMceFWwfrNrK48f2wB6dwWcbUxY5DRmYdcmZMwW8_A==\r\nage: 77720\r\nvary: Accept-Encoding, Origin\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":11101,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"f46cfcb4902bbbf39581cce7019f9e7c","sha1":"fd7eace7f1fe0b7388c66d8ad2937fd820da6f46","sha256":"64e00c3f98b1c33a7bfc9a5e8cf3873442c57b23db3b0b912f4469d1f093596a","sha512":"2b3e067deab0eafbb3a60bd2853b9c9c8f73b83cf3d428c30a79abffe912300b2ed5854f44ca6902c6d15c219606dbd5388724a8fa5acbd971f5e45ae018f532","ssdeep":"192:9Rgt6SFHgzfd+aXOD21Ds2MUUPTTXwOMs1kiNW/3MbpmbJ:iHOjU7TgIy0U","tlshash":"3332943859b210374a37e1be1bcb71863335001b6951edb4bd8c4b443fd86699af17ea","first_seen":"2025-10-16T18:07:38.532981Z","last_seen":"2026-06-18T12:02:08.456182Z","times_seen":422,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":44,"dns":26,"connect":8,"send":0,"wait":9,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusair.online/static/css/main.db6f3082.css","fqdn":"nexusair.online","domain":"nexusair.online","tld":"online"},"ip":{"addr":"162.159.142.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexusair.online/","date":"2026-04-14T07:12:48.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusair.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 19:53:01 GMT","end":"Fri, 10 Jul 2026 20:52:54 GMT"},"fingerprint":{"sha1":"C0:56:77:18:CC:28:C4:78:EF:E5:55:BF:FA:34:0E:0F:BE:B9:5B:B4","sha256":"FC:82:EF:81:E1:1C:FD:57:78:72:64:51:E7:D9:69:31:7E:BB:1D:49:0C:3A:63:59:C8:60:40:4E:F1:15:45:2E"}}},"request":{"raw":"GET /static/css/main.db6f3082.css HTTP/1.1\r\nHost: nexusair.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexusair.online/\r\nCookie: __cf_bm=sAo17BLmoJkYg.UPa.tKYnABPBZ.zBmM2e1ZCilTEKE-1776150767.8089304-1.0.1.1-wkDP41UITXWOOJ9VcZLVmapn1T231AGGLnPpAwFmJByu4NmMN93bqNIvX.veS2ZZ7N.xmMMrD9noS144OWO0uNTyHrPLNEkyZOYCXjiFjsjc9_VEs63KLYUW2S__EAdb\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Apr 2026 07:12:48 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300, immutable\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\netag: W/\"fba9c520a89a9bdc79dd86bfb3a2a532\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9ec0e77f0fceb505-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76946,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (63263)","md5":"fba9c520a89a9bdc79dd86bfb3a2a532","sha1":"e8d88c83b452cc6646b19a5cd912f9f83121ef55","sha256":"08e9fdb1439ee259f21499066b238b3bcf1ad5c21613cf8fdf8fd2eddfb0afe0","sha512":"684b0fb5b00a87541cf28408c22452150bc4a4f8c3e95371ecfd1901dcd51564d2ee54c1f3c80a0f784d777769cf30ba98f55235ba9fcdbe5ae17f2406cc1603","ssdeep":"1536:GFJofh+dYJVawk2XuY4gJl9pUtnG/Wxm7hbvslHU:GFJofh+KVawk2XuY4gJl9pUtnG/Wxm7f","tlshash":"a173c71eb918602e3c67c4e992d8badc5018b0c4e93747fdb99765319ac72f21eb7708","first_seen":"2026-04-14T07:13:14.734724Z","last_seen":"2026-04-14T07:13:14.734724Z","times_seen":1,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":478,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"nexusair.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"us.i.posthog.com/e/?ip=0\u0026_=1776150769326\u0026ver=1.368.0\u0026compression=gzip-js","fqdn":"us.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"100.49.206.47","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexusair.online/","date":"2026-04-14T07:12:49.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6A:93:A0:4B:D8:27:D0:2A:1E:35:71:6C:A2:1C:2A:2C:2E:E1:A7:D7","sha256":"2A:1F:69:7F:28:B0:DA:BD:59:C5:0F:27:B3:35:6D:E9:5B:8B:A2:4A:F8:89:F1:F0:10:CD:CD:8F:62:8E:07:E6"}}},"request":{"raw":"POST /e/?ip=0\u0026_=1776150769326\u0026ver=1.368.0\u0026compression=gzip-js HTTP/1.1\r\nHost: us.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nexusair.online/\r\ncontent-type: text/plain\r\nContent-Length: 841\r\nOrigin: https://nexusair.online\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Apr 2026 07:12:49 GMT\r\ncontent-type: application/json\r\ncontent-length: 15\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: https://nexusair.online\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 23\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c86a47ac0d792e37182689c73fcbf6ad","sha1":"8fd92e4671341e79f0a3529ac5e9d59d38db9e78","sha256":"0c40bafcfdc8adc6db63a6a5bfdb3dd5201798e6163fc674dc2fcbdb2a4134f1","sha512":"827cafe34edc64ac15f9bb3d269d338f8161a08d174071ed415b8a9e78d0672327e09034445292f90b81f5a063c8606d36ee66b20e0fff0446130303d598a8d3","ssdeep":"","tlshash":"1b600000000000030fc00c00000cc03c3ff30fc0003f00c0030fc0300c030c0c00c000","first_seen":"2023-04-06T21:35:05Z","last_seen":"2026-07-26T22:53:36.6694Z","times_seen":41948,"resource_available":false,"data":null}},"time_used":616,"timings":{"blocked":249,"dns":29,"connect":93,"send":0,"wait":118,"receive":0,"ssl":123},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/static/web-vitals.js?v=1.368.0","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexusair.online/","date":"2026-04-14T07:12:49.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 21:26:10 GMT","end":"Thu, 18 Jun 2026 22:26:07 GMT"},"fingerprint":{"sha1":"D8:55:9F:68:E1:99:FD:98:F0:AC:5D:E7:78:A2:AF:7B:FB:1F:DF:A5","sha256":"48:08:E0:8C:8E:59:C4:2E:D1:65:CD:E2:A4:A4:7C:0A:63:CD:4D:E8:28:55:6A:F0:2B:96:A2:87:6B:E7:3E:EF"}}},"request":{"raw":"GET /static/web-vitals.js?v=1.368.0 HTTP/1.1\r\nHost: us-assets.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nexusair.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexusair.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Apr 2026 07:12:49 GMT\r\ncontent-type: text/javascript; charset=\"utf-8\"\r\ncf-ray: 9ec0e7862ca6c272-OSL\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 14 Apr 2026 06:04:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding, Origin\r\ncross-origin-opener-policy: same-origin\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-envoy-upstream-service-time: 3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6393,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6353)","md5":"e86a7e6700c57adafb02422ba2a1fa76","sha1":"4e7cb88dfb19d2815cc1b798fd9423479a0e180c","sha256":"a8f310619b2b7d92565a41b7c4e5f245a54c6ff1619ff8ccc9ec5a262c7a5279","sha512":"eb40d0dc6c5d3c2a08c497ad8b2ed59ca1e446797d94b2498215faf414372084e77219bfab0b6cbb2b62717d7d622b9b52e1bc83a2da36052b39ff04553f84a3","ssdeep":"96:t3CGETzq4Y7KBXy0I5rb9mSAJa1KUGleA1vSwrJ4c0kHemlDDp1mj3o7X1u+SBDw:tCGzg53lbB1f4T8KUT1HB1v","tlshash":"c2d1d8e5af41e53812bfd1a6d0795253333a67a25005409ce22effd018ad4c6639bb32","first_seen":"2026-03-23T18:11:23.132424Z","last_seen":"2026-07-19T06:19:37.142513Z","times_seen":11351,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us.i.posthog.com/flags/?v=2\u0026ip=0\u0026_=1776150769630\u0026ver=1.368.0\u0026compression=base64","fqdn":"us.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"100.49.206.47","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexusair.online/","date":"2026-04-14T07:12:49.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6A:93:A0:4B:D8:27:D0:2A:1E:35:71:6C:A2:1C:2A:2C:2E:E1:A7:D7","sha256":"2A:1F:69:7F:28:B0:DA:BD:59:C5:0F:27:B3:35:6D:E9:5B:8B:A2:4A:F8:89:F1:F0:10:CD:CD:8F:62:8E:07:E6"}}},"request":{"raw":"POST /flags/?v=2\u0026ip=0\u0026_=1776150769630\u0026ver=1.368.0\u0026compression=base64 HTTP/1.1\r\nHost: us.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nexusair.online/\r\ncontent-type: application/x-www-form-urlencoded\r\nContent-Length: 1297\r\nOrigin: https://nexusair.online\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1297,"data":"data=eyJ0b2tlbiI6InBoY194QXZMMklxNHRGbUFOUkU3a3piS3dhU3FwMUhKak43eDQ4czN2cjBDTWpzIiwiZGlzdGluY3RfaWQiOiIwMTlkOGFkNS1lZTU2LTcyYWUtYTU4OS0zMmE5ZmE4MGUyMWQiLCJncm91cHMiOnt9LCJwZXJzb25fcHJvcGVydGllcyI6eyIkaW5pdGlhbF9yZWZlcnJlciI6IiRkaXJlY3QiLCIkaW5pdGlhbF9yZWZlcnJpbmdfZG9tYWluIjoiJGRpcmVjdCIsIiRpbml0aWFsX2N1cnJlbnRfdXJsIjoiaHR0cHM6Ly9uZXh1c2Fpci5vbmxpbmUvIiwiJGluaXRpYWxfaG9zdCI6Im5leHVzYWlyLm9ubGluZSIsIiRpbml0aWFsX3BhdGhuYW1lIjoiLyIsIiRpbml0aWFsX3V0bV9zb3VyY2UiOm51bGwsIiRpbml0aWFsX3V0bV9tZWRpdW0iOm51bGwsIiRpbml0aWFsX3V0bV9jYW1wYWlnbiI6bnVsbCwiJGluaXRpYWxfdXRtX2NvbnRlbnQiOm51bGwsIiRpbml0aWFsX3V0bV90ZXJtIjpudWxsLCIkaW5pdGlhbF9nYWRfc291cmNlIjpudWxsLCIkaW5pdGlhbF9tY19jaWQiOm51bGwsIiRpbml0aWFsX2djbGlkIjpudWxsLCIkaW5pdGlhbF9nY2xzcmMiOm51bGwsIiRpbml0aWFsX2RjbGlkIjpudWxsLCIkaW5pdGlhbF9nYnJhaWQiOm51bGwsIiRpbml0aWFsX3dicmFpZCI6bnVsbCwiJGluaXRpYWxfZmJjbGlkIjpudWxsLCIkaW5pdGlhbF9tc2Nsa2lkIjpudWxsLCIkaW5pdGlhbF90d2NsaWQiOm51bGwsIiRpbml0aWFsX2xpX2ZhdF9pZCI6bnVsbCwiJGluaXRpYWxfaWdzaGlkIjpudWxsLCIkaW5pdGlhbF90dGNsaWQiOm51bGwsIiRpbml0aWFsX3JkdF9jaWQiOm51bGwsIiRpbml0aWFsX2VwaWsiOm51bGwsIiRpbml0aWFsX3FjbGlkIjpudWxsLCIkaW5pdGlhbF9zY2NpZCI6bnVsbCwiJGluaXRpYWxfaXJjbGlkIjpudWxsLCIkaW5pdGlhbF9fa3giOm51bGx9LCJ0aW1lem9uZSI6IlVUQyIsIiRkZXZpY2VfaWQiOiIwMTlkOGFkNS1lZTU2LTcyYWUtYTU4OS0zMmE5ZmE4MGUyMWQifQ%3D%3D"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Apr 2026 07:12:49 GMT\r\ncontent-type: application/json\r\nvary: origin, access-control-request-method, access-control-request-headers, Accept-Encoding\r\naccess-control-allow-origin: https://nexusair.online\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: x-posthog-rate-limit-warning\r\nx-envoy-upstream-service-time: 11\r\ncontent-encoding: gzip\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":32146,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"44c8d5fb6f6d5977e23f2c8a8baea491","sha1":"ff1d7a7c18f13d21e109285b5bd0afb1cadb1a56","sha256":"b77e5c7c154fa3a9f8adedf89cfdaf59c057fae82b728e2db2a4900c8d86182a","sha512":"cd2670011bc4e810f4d65ea7c24f670d0f1616465eb04215e1b1eb496ee5824cac2cf3f8383992530cc26b72c9976e989f651ed2df4ec118a91e371c10c9ff09","ssdeep":"192:VJANAOXAbDMyL/SATVXBk/GBuVJ4uVm9Rf/XASOL2eAKAr:TANA2ABSIXBk/SuT4uVmH/XA3NAr","tlshash":"e1e23935ac14f9b7558fc3a088adfe16477e277b0a514c500c469a3c03eb6f9ba2bc65","first_seen":"2026-04-14T07:13:14.739391Z","last_seen":"2026-04-14T07:13:14.739391Z","times_seen":1,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusair.online/favicon.ico","fqdn":"nexusair.online","domain":"nexusair.online","tld":"online"},"ip":{"addr":"162.159.142.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexusair.online/","date":"2026-04-14T07:12:49.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusair.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 19:53:01 GMT","end":"Fri, 10 Jul 2026 20:52:54 GMT"},"fingerprint":{"sha1":"C0:56:77:18:CC:28:C4:78:EF:E5:55:BF:FA:34:0E:0F:BE:B9:5B:B4","sha256":"FC:82:EF:81:E1:1C:FD:57:78:72:64:51:E7:D9:69:31:7E:BB:1D:49:0C:3A:63:59:C8:60:40:4E:F1:15:45:2E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: nexusair.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexusair.online/\r\nCookie: __cf_bm=sAo17BLmoJkYg.UPa.tKYnABPBZ.zBmM2e1ZCilTEKE-1776150767.8089304-1.0.1.1-wkDP41UITXWOOJ9VcZLVmapn1T231AGGLnPpAwFmJByu4NmMN93bqNIvX.veS2ZZ7N.xmMMrD9noS144OWO0uNTyHrPLNEkyZOYCXjiFjsjc9_VEs63KLYUW2S__EAdb; ph_phc_xAvL2Iq4tFmANRE7kzbKwaSqp1HJjN7x48s3vr0CMjs_posthog=%7B%22%24device_id%22%3A%22019d8ad5-ee56-72ae-a589-32a9fa80e21d%22%2C%22distinct_id%22%3A%22019d8ad5-ee56-72ae-a589-32a9fa80e21d%22%2C%22%24sesid%22%3A%5B1776150769785%2C%22019d8ad5-eeab-7631-b08d-dee0c2cde536%22%2C1776150769319%5D%2C%22%24initial_person_info%22%3A%7B%22r%22%3A%22%24direct%22%2C%22u%22%3A%22https%3A%2F%2Fnexusair.online%2F%22%7D%2C%22%24user_state%22%3A%22anonymous%22%7D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Apr 2026 07:12:50 GMT\r\ncontent-type: text/html\r\ncf-ray: 9ec0e7873919b505-OSL\r\ncf-cache-status: REVALIDATED\r\ncache-control: public, max-age=14400\r\nexpires: Tue, 14 Apr 2026 11:12:50 GMT\r\nlast-modified: Mon, 13 Apr 2026 05:32:33 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nvia: 1.1 google\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6969,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (4007)","md5":"8ea5e28cc236fbf043bf74805aaceb22","sha1":"e8737b2fbe315510148cb980e21e269539272f91","sha256":"a8224391bee5c2e48433331db307b31230684774dc72f05192f670f7d2466cb1","sha512":"38377d5c7ca8b9ff7f4a77c29542f4a699048330fb06001a58cccc3ce59473a715724ee979cbd5d30e3eb4aa06a64287505069e03b1c53198c93658a26488608","ssdeep":"96:zB7+oRQL19uKiOmVZ6LlV1CM8gBU108sVlwgB0JY9nFC7RtW7r9KoGUgDBTYnaMd:1tgxV1Cy1FqRtW7r9KoGUgD7MMS","tlshash":"a5e1855bae0168366291d1a178a2f22c963e210e8734dc04f75d95de4b50fcf8477e2e","first_seen":"2026-04-14T07:13:14.741537Z","last_seen":"2026-04-14T07:13:14.741537Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1043,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1043,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"nexusair.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuGKYAZ9hiA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexusair.online/","date":"2026-04-14T07:12:49.074Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Mar 2026 08:38:37 GMT","end":"Mon, 15 Jun 2026 08:38:36 GMT"},"fingerprint":{"sha1":"F8:24:5E:5A:B0:FB:57:E0:D6:E9:33:BD:54:27:DC:BF:50:74:4A:59","sha256":"A4:18:08:9F:87:3F:1D:A2:3B:7A:25:AA:E0:FF:C8:CB:B1:74:9C:8B:FF:A2:C5:D6:74:BB:B0:A7:97:7E:5B:02"}}},"request":{"raw":"GET /s/inter/v20/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuGKYAZ9hiA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nexusair.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24452\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Apr 2026 08:42:26 GMT\r\nexpires: Fri, 09 Apr 2027 08:42:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 426623\r\nlast-modified: Tue, 09 Sep 2025 18:36:19 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24452,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24452, version 1.0","md5":"2ede57db1a3a5f41f40467e7a43a1dd4","sha1":"e0d61f6dc511d64a072b2f4dc94e155ecf1bb6f6","sha256":"f9a06e79cd3a2a20951c0f0e28f66dd0e6d3fda73911d640a2125c8fcb78f21a","sha512":"a30d204efb2a66231f29804b8c1e467d61a741b0252eccb40aea60206bd4d5cdb0a32a76cb01d1ba8ba0c73469d10fc55df1d8e54ea3b55b6b75b17e94afc80b","ssdeep":"384:WuaNAiwkOHiuWl18daDX7+rEvHG297z5lzWMTSbXhVR7ebvio772036BhuJJRiVF:zaKfkOHiJEdWX+svP5m7R7eTio7JKWHC","tlshash":"79b2e03132ea530e5b14c43c9537287e5eca2fe78aa93e5e9fd5d004b2104d6836fe06","first_seen":"2025-05-30T14:20:15.679609Z","last_seen":"2026-07-26T22:39:20.723505Z","times_seen":5928,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":99,"dns":1,"connect":20,"send":0,"wait":21,"receive":19,"ssl":75},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/array/phc_xAvL2Iq4tFmANRE7kzbKwaSqp1HJjN7x48s3vr0CMjs/config.js","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexusair.online/","date":"2026-04-14T07:12:49.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 21:26:10 GMT","end":"Thu, 18 Jun 2026 22:26:07 GMT"},"fingerprint":{"sha1":"D8:55:9F:68:E1:99:FD:98:F0:AC:5D:E7:78:A2:AF:7B:FB:1F:DF:A5","sha256":"48:08:E0:8C:8E:59:C4:2E:D1:65:CD:E2:A4:A4:7C:0A:63:CD:4D:E8:28:55:6A:F0:2B:96:A2:87:6B:E7:3E:EF"}}},"request":{"raw":"GET /array/phc_xAvL2Iq4tFmANRE7kzbKwaSqp1HJjN7x48s3vr0CMjs/config.js HTTP/1.1\r\nHost: us-assets.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nexusair.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexusair.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Apr 2026 07:12:49 GMT\r\ncontent-type: application/javascript\r\ncache-control: public, max-age=300\r\nvary: Origin, Referer,origin, access-control-request-method, access-control-request-headers, Accept-Encoding\r\naccess-control-allow-origin: https://nexusair.online\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 0\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nlast-modified: Tue, 14 Apr 2026 07:12:49 GMT\r\ncf-cache-status: MISS\r\ncf-ray: 9ec0e783ddd9c272-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":1566,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1367)","md5":"2b5888bf4718f3b67a3d9cc47f41bbe7","sha1":"24cd6e92dc7be07f39aa1e8dbe07489c811a989d","sha256":"d0b9ab2470bf717462eeea653d0c1c8a1a0eeee0f4fc3e2128b0e75afeab0276","sha512":"bb6083a3bfc4207cdac81419b6288f4457be90e65743e0bb2005e28d1d6e0dff18c0e82c3ec51dff951c7c9a152c4589f16d0a2d3e0b9bd278f5e646fa0d5060","ssdeep":"","tlshash":"8031872f1e1d2831aaaa5325e6d77f456ffe0233314c2848f8dc029452dd7db9987507","first_seen":"2026-04-14T07:13:14.744737Z","last_seen":"2026-07-26T17:56:29.886681Z","times_seen":278,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":344,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us.i.posthog.com/i/v0/e/?ip=0\u0026_=1776150777899\u0026ver=1.368.0\u0026compression=gzip-js","fqdn":"us.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"100.49.206.47","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexusair.online/","date":"2026-04-14T07:12:57.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 16 Nov 2025 00:00:00 GMT","end":"Tue, 15 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"6A:93:A0:4B:D8:27:D0:2A:1E:35:71:6C:A2:1C:2A:2C:2E:E1:A7:D7","sha256":"2A:1F:69:7F:28:B0:DA:BD:59:C5:0F:27:B3:35:6D:E9:5B:8B:A2:4A:F8:89:F1:F0:10:CD:CD:8F:62:8E:07:E6"}}},"request":{"raw":"POST /i/v0/e/?ip=0\u0026_=1776150777899\u0026ver=1.368.0\u0026compression=gzip-js HTTP/1.1\r\nHost: us.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nexusair.online/\r\ncontent-type: text/plain\r\nContent-Length: 4842\r\nOrigin: https://nexusair.online\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Apr 2026 07:12:57 GMT\r\ncontent-type: application/json\r\ncontent-length: 15\r\nvary: origin, access-control-request-method, access-control-request-headers\r\naccess-control-allow-origin: https://nexusair.online\r\naccess-control-allow-credentials: true\r\nx-envoy-upstream-service-time: 22\r\nserver: envoy\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c86a47ac0d792e37182689c73fcbf6ad","sha1":"8fd92e4671341e79f0a3529ac5e9d59d38db9e78","sha256":"0c40bafcfdc8adc6db63a6a5bfdb3dd5201798e6163fc674dc2fcbdb2a4134f1","sha512":"827cafe34edc64ac15f9bb3d269d338f8161a08d174071ed415b8a9e78d0672327e09034445292f90b81f5a063c8606d36ee66b20e0fff0446130303d598a8d3","ssdeep":"","tlshash":"1b600000000000030fc00c00000cc03c3ff30fc0003f00c0030fc0300c030c0c00c000","first_seen":"2023-04-06T21:35:05Z","last_seen":"2026-07-26T22:53:36.6694Z","times_seen":41948,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusair.online/","fqdn":"nexusair.online","domain":"nexusair.online","tld":"online"},"ip":{"addr":"162.159.142.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-14T07:12:46.714Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusair.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 19:53:01 GMT","end":"Fri, 10 Jul 2026 20:52:54 GMT"},"fingerprint":{"sha1":"C0:56:77:18:CC:28:C4:78:EF:E5:55:BF:FA:34:0E:0F:BE:B9:5B:B4","sha256":"FC:82:EF:81:E1:1C:FD:57:78:72:64:51:E7:D9:69:31:7E:BB:1D:49:0C:3A:63:59:C8:60:40:4E:F1:15:45:2E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nexusair.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Apr 2026 07:12:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300\r\nset-cookie: __cf_bm=sAo17BLmoJkYg.UPa.tKYnABPBZ.zBmM2e1ZCilTEKE-1776150767.8089304-1.0.1.1-wkDP41UITXWOOJ9VcZLVmapn1T231AGGLnPpAwFmJByu4NmMN93bqNIvX.veS2ZZ7N.xmMMrD9noS144OWO0uNTyHrPLNEkyZOYCXjiFjsjc9_VEs63KLYUW2S__EAdb; HttpOnly; Secure; Path=/; Domain=nexusair.online; Expires=Tue, 14 Apr 2026 07:42:48 GMT\r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\netag: W/\"8ea5e28cc236fbf043bf74805aaceb22\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9ec0e77acb79b505-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6969,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (4007)","md5":"8ea5e28cc236fbf043bf74805aaceb22","sha1":"e8737b2fbe315510148cb980e21e269539272f91","sha256":"a8224391bee5c2e48433331db307b31230684774dc72f05192f670f7d2466cb1","sha512":"38377d5c7ca8b9ff7f4a77c29542f4a699048330fb06001a58cccc3ce59473a715724ee979cbd5d30e3eb4aa06a64287505069e03b1c53198c93658a26488608","ssdeep":"96:zB7+oRQL19uKiOmVZ6LlV1CM8gBU108sVlwgB0JY9nFC7RtW7r9KoGUgDBTYnaMd:1tgxV1Cy1FqRtW7r9KoGUgD7MMS","tlshash":"a5e1855bae0168366291d1a178a2f22c963e210e8734dc04f75d95de4b50fcf8477e2e","first_seen":"2026-04-14T07:13:14.741537Z","last_seen":"2026-04-14T07:13:14.741537Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2699,"timings":{"blocked":1093,"dns":1074,"connect":1,"send":0,"wait":512,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"nexusair.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/static/posthog-recorder.js?v=1.368.0","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexusair.online/","date":"2026-04-14T07:12:49.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 21:26:10 GMT","end":"Thu, 18 Jun 2026 22:26:07 GMT"},"fingerprint":{"sha1":"D8:55:9F:68:E1:99:FD:98:F0:AC:5D:E7:78:A2:AF:7B:FB:1F:DF:A5","sha256":"48:08:E0:8C:8E:59:C4:2E:D1:65:CD:E2:A4:A4:7C:0A:63:CD:4D:E8:28:55:6A:F0:2B:96:A2:87:6B:E7:3E:EF"}}},"request":{"raw":"GET /static/posthog-recorder.js?v=1.368.0 HTTP/1.1\r\nHost: us-assets.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nexusair.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexusair.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Apr 2026 07:12:49 GMT\r\ncontent-type: text/javascript; charset=\"utf-8\"\r\ncf-ray: 9ec0e7860c5bc272-OSL\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 14 Apr 2026 06:04:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding, Origin\r\ncross-origin-opener-policy: same-origin\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-envoy-upstream-service-time: 4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":136504,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"630871d3972335e9e503b3f51073deec","sha1":"c2a5d8cc3f724b11dfcf90a2d02a88c5fdad65d2","sha256":"dbaf32e3e6e4c8b1511a9a74f80ceafad77650e7db3dd96ba17744231255296b","sha512":"b7b81b9772e09ab62b6edad18986ec60db96b50ad8dc0128d337b538447aa229128821a420493714aa871e2c017e4c95d7b7c91e7e0e6ab9ce38e5ba243eb6ef","ssdeep":"1536:k2mkQuOdGyr3JsKyzKUzDDuMwBe6gdx+mFlquzGNKZIcZbZr90Uu:kyzuv3IxRx/FlquakDZ30v","tlshash":"3ed33cca7765a03357d2112980ab0302f6357a19704a8078f2bed9e935bc9c771b7b7e","first_seen":"2026-04-13T19:09:00.795023Z","last_seen":"2026-04-14T07:27:19.326241Z","times_seen":44,"resource_available":true,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/static/surveys.js?v=1.368.0","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexusair.online/","date":"2026-04-14T07:12:49.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 21:26:10 GMT","end":"Thu, 18 Jun 2026 22:26:07 GMT"},"fingerprint":{"sha1":"D8:55:9F:68:E1:99:FD:98:F0:AC:5D:E7:78:A2:AF:7B:FB:1F:DF:A5","sha256":"48:08:E0:8C:8E:59:C4:2E:D1:65:CD:E2:A4:A4:7C:0A:63:CD:4D:E8:28:55:6A:F0:2B:96:A2:87:6B:E7:3E:EF"}}},"request":{"raw":"GET /static/surveys.js?v=1.368.0 HTTP/1.1\r\nHost: us-assets.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nexusair.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexusair.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Apr 2026 07:12:49 GMT\r\ncontent-type: text/javascript; charset=\"utf-8\"\r\ncf-ray: 9ec0e7861c7ac272-OSL\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 14 Apr 2026 06:04:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding, Origin\r\ncross-origin-opener-policy: same-origin\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-envoy-upstream-service-time: 3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90040,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d2002c35370c41f27992690d270f7559","sha1":"c6958b645c42a68b47a089985c249ca539f7dfc7","sha256":"95cbf43396078d2ecd4aeb5ef4921e94c2ee289a9592e2b616a13ba206c71d67","sha512":"b0e8f827e3f0074f19c1fed7ec477e09526a3b7feedb7f9d6b4056a9da77b663f0471ee8aea553f13baba5c0658d49888ca01af0678e1bb4304867553792e7ac","ssdeep":"1536:WXPDY/UhiBS1tQv6JFvGhfN2SSW60PF2GWlsymuG:yrYsty6oDrPF27G","tlshash":"ea934b95f740e1ae41df81b810be4842f33d6b1afe0c4854b1579c983de5988a39ffa6","first_seen":"2026-04-09T21:20:14.270003Z","last_seen":"2026-07-14T12:56:23.91608Z","times_seen":1879,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/static/dead-clicks-autocapture.js?v=1.368.0","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexusair.online/","date":"2026-04-14T07:12:49.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 21:26:10 GMT","end":"Thu, 18 Jun 2026 22:26:07 GMT"},"fingerprint":{"sha1":"D8:55:9F:68:E1:99:FD:98:F0:AC:5D:E7:78:A2:AF:7B:FB:1F:DF:A5","sha256":"48:08:E0:8C:8E:59:C4:2E:D1:65:CD:E2:A4:A4:7C:0A:63:CD:4D:E8:28:55:6A:F0:2B:96:A2:87:6B:E7:3E:EF"}}},"request":{"raw":"GET /static/dead-clicks-autocapture.js?v=1.368.0 HTTP/1.1\r\nHost: us-assets.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nexusair.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexusair.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Apr 2026 07:12:49 GMT\r\ncontent-type: text/javascript; charset=\"utf-8\"\r\ncf-ray: 9ec0e7861c84c272-OSL\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 14 Apr 2026 06:04:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding, Origin\r\ncross-origin-opener-policy: same-origin\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-envoy-upstream-service-time: 4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":13086,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13033)","md5":"c5474a8b699f42883b65297a74d9c5a7","sha1":"99af03247f4917fbf8d47c0178e3fd8d9d5c581f","sha256":"87034219dac04e1e2dab52c7f93be369ede3f4b47b364b7b137cd50d0332121c","sha512":"e34b98d272185766fb0c570ec021d8404aabb2b26f4cbd8bea3c62b27e9aed09fdf6e187d5f2830e22e1800ef05a3b678a4b092414dfa62ec1c4cd287da8ebe4","ssdeep":"384:PV/KyJqhBwq5f8H65YRgb9Rre7+xqTqF8V:js8HNgb9O+8qF8V","tlshash":"5e421a89f660e3721ed7555a80bf1702e036651ca5cac828b155fcc974acb4221aff7f","first_seen":"2026-04-02T08:07:54.962842Z","last_seen":"2026-07-20T21:56:46.031082Z","times_seen":2434,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w20/za.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nexusair.online/","date":"2026-04-14T07:13:05.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 00:11:00 GMT","end":"Wed, 01 Jul 2026 01:07:18 GMT"},"fingerprint":{"sha1":"C8:69:8A:42:A7:65:30:FC:2B:96:6F:1C:2E:61:EE:CA:AB:37:13:00","sha256":"D2:18:D4:96:65:1F:B8:63:37:4A:75:E6:73:AE:25:C5:92:3E:94:BB:C1:94:90:ED:4D:E8:7A:A2:17:6B:4E:1E"}}},"request":{"raw":"GET /w20/za.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexusair.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Apr 2026 07:13:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 293\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-125\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2091356\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bs98VW%2FChCsDQrApK%2BJmSEGpAHeTFUIXKnFBMUPm3enUu6gyBSmWvJuWXRDUqOhfR99%2ByR2YWZqaiTro0kOwdt2h1G4etZEqlmLlcvbPAjYyCRULxipOm5pVeHtxAg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9ec0e7ebd8ad56bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":293,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 13, 8-bit colormap, non-interlaced","md5":"158fcc41714e51949cd1636cdb94fdc7","sha1":"4ea5ab2a617d6bb550b02f749fd07736e29cd03d","sha256":"99dd93714bef3b72d377b17c071dabba4179a96af3b9a3b3efda7df9af6c40cf","sha512":"036bf878cf3e36d5f1ade4061e3b11965ef94595859d0087d82b5a45c8fe0bb72f4941291eb4499e24cc09abc2ed91da54368ec0e1422df7bd36a1683b63d9d4","ssdeep":"","tlshash":"38e0ebc285334c3dbe83a3a583a412a0d292b833c2012142129eac220e2b200f0ac2c7","first_seen":"2025-11-01T12:08:21.059516Z","last_seen":"2026-07-23T14:06:34.118148Z","times_seen":64,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusair.online/static/js/main.855e8b58.js","fqdn":"nexusair.online","domain":"nexusair.online","tld":"online"},"ip":{"addr":"162.159.142.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexusair.online/","date":"2026-04-14T07:12:48.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusair.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 19:53:01 GMT","end":"Fri, 10 Jul 2026 20:52:54 GMT"},"fingerprint":{"sha1":"C0:56:77:18:CC:28:C4:78:EF:E5:55:BF:FA:34:0E:0F:BE:B9:5B:B4","sha256":"FC:82:EF:81:E1:1C:FD:57:78:72:64:51:E7:D9:69:31:7E:BB:1D:49:0C:3A:63:59:C8:60:40:4E:F1:15:45:2E"}}},"request":{"raw":"GET /static/js/main.855e8b58.js HTTP/1.1\r\nHost: nexusair.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexusair.online/\r\nCookie: __cf_bm=sAo17BLmoJkYg.UPa.tKYnABPBZ.zBmM2e1ZCilTEKE-1776150767.8089304-1.0.1.1-wkDP41UITXWOOJ9VcZLVmapn1T231AGGLnPpAwFmJByu4NmMN93bqNIvX.veS2ZZ7N.xmMMrD9noS144OWO0uNTyHrPLNEkyZOYCXjiFjsjc9_VEs63KLYUW2S__EAdb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Apr 2026 07:12:48 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300, immutable\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-allow-headers: Content-Type\r\netag: W/\"93f66dad8c321905ac2e2c49769c8daf\"\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: 9ec0e77f0fcab505-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":251518,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"93f66dad8c321905ac2e2c49769c8daf","sha1":"44fb0d5eda87abc3177d1696d753cd84dabcf46d","sha256":"bd50759e1c11acd42de604bbf112448d453b5983fd682c2e00d9db322d479e45","sha512":"7d65fda83bde2a80f8f48306006984e1463b3a0d2c013f5954bc2abad4b5f6a94d43473ba16f84b2d1a9dcf3ebccbbddf1952ad129b2c0c43d42e63ab4b1e528","ssdeep":"3072:l3Ya1Dc6FiH4AqTav9X+VY8E+hY1tCbRs7PQHmn8CEyQG9:l3G6o4tUy5W7PQHOh","tlshash":"60341bd87955f6616eb302e7109f140a733d1a1b680d48b0b121fcae787849eb17bf9e","first_seen":"2026-04-14T07:13:14.750737Z","last_seen":"2026-04-14T07:13:14.750737Z","times_seen":1,"resource_available":true,"data":null}},"time_used":450,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"nexusair.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"us-assets.i.posthog.com/static/array.js","fqdn":"us-assets.i.posthog.com","domain":"posthog.com","tld":"com"},"ip":{"addr":"104.20.17.167","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexusair.online/","date":"2026-04-14T07:12:48.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.i.posthog.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 20 Mar 2026 21:26:10 GMT","end":"Thu, 18 Jun 2026 22:26:07 GMT"},"fingerprint":{"sha1":"D8:55:9F:68:E1:99:FD:98:F0:AC:5D:E7:78:A2:AF:7B:FB:1F:DF:A5","sha256":"48:08:E0:8C:8E:59:C4:2E:D1:65:CD:E2:A4:A4:7C:0A:63:CD:4D:E8:28:55:6A:F0:2B:96:A2:87:6B:E7:3E:EF"}}},"request":{"raw":"GET /static/array.js HTTP/1.1\r\nHost: us-assets.i.posthog.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nexusair.online\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexusair.online/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Apr 2026 07:12:49 GMT\r\ncontent-type: text/javascript; charset=\"utf-8\"\r\ncf-ray: 9ec0e7824903c272-OSL\r\ncf-cache-status: MISS\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=300\r\ncontent-encoding: gzip\r\nlast-modified: Tue, 14 Apr 2026 06:04:06 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding, Origin\r\ncross-origin-opener-policy: same-origin\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-envoy-upstream-service-time: 3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":182547,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"605e977161a355f9023ed3717ec36aaf","sha1":"f387ee7d64d2d031db446e6c339b46543269a74d","sha256":"5314a63ee13f8feb7bddd6507a35b33806ca379b7c48804a99cb4dbc0025f166","sha512":"e7e5ad451ab517589774706cfb787d2bad8dafa4c99cde2759eca6f677f6ebdbd7e31346a24a8379cb2fc33ce7bd734080c236f94ce029f0597e88e25902d431","ssdeep":"1536:u3ivfZQC4/d+G93ckNUkif8yxKn9J9qqNk4v3Zn630buEXmjClbKg9+vxZ2fiNhQ:u3m2VOX8yu/qmkKuj0bKg98xxNh3i8o","tlshash":"cd040a96f77ad0324ae580a5d0360003e72a7b4e6149c06cf66edccd359d58a727bf3a","first_seen":"2026-04-13T19:49:01.084461Z","last_seen":"2026-04-14T07:13:14.753604Z","times_seen":29,"resource_available":true,"data":null}},"time_used":173,"timings":{"blocked":19,"dns":3,"connect":1,"send":0,"wait":135,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexusair.online/api/track-visit","fqdn":"nexusair.online","domain":"nexusair.online","tld":"online"},"ip":{"addr":"162.159.142.117","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexusair.online/","date":"2026-04-14T07:12:49.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexusair.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 11 Apr 2026 19:53:01 GMT","end":"Fri, 10 Jul 2026 20:52:54 GMT"},"fingerprint":{"sha1":"C0:56:77:18:CC:28:C4:78:EF:E5:55:BF:FA:34:0E:0F:BE:B9:5B:B4","sha256":"FC:82:EF:81:E1:1C:FD:57:78:72:64:51:E7:D9:69:31:7E:BB:1D:49:0C:3A:63:59:C8:60:40:4E:F1:15:45:2E"}}},"request":{"raw":"POST /api/track-visit HTTP/1.1\r\nHost: nexusair.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nexusair.online/\r\nContent-Type: application/json\r\nContent-Length: 296\r\nOrigin: https://nexusair.online\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: __cf_bm=sAo17BLmoJkYg.UPa.tKYnABPBZ.zBmM2e1ZCilTEKE-1776150767.8089304-1.0.1.1-wkDP41UITXWOOJ9VcZLVmapn1T231AGGLnPpAwFmJByu4NmMN93bqNIvX.veS2ZZ7N.xmMMrD9noS144OWO0uNTyHrPLNEkyZOYCXjiFjsjc9_VEs63KLYUW2S__EAdb\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":296,"data":"{\"visitor_id\":\"anon_mnyab4l3_xcwmdc\",\"source\":\"direct\",\"utm_source\":null,\"utm_medium\":null,\"utm_campaign\":null,\"utm_content\":null,\"utm_term\":null,\"referrer\":null,\"device\":\"desktop\",\"browser\":\"Firefox\",\"os\":\"Windows\",\"screen\":\"1280x1024\",\"language\":\"en-US\",\"page\":\"#home\",\"variant\":\"high_urgency\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Apr 2026 07:12:49 GMT\r\ncontent-type: application/json\r\ncf-ray: 9ec0e7835cd6b505-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: https://nexusair.online\r\nserver: cloudflare\r\nvary: Origin\r\nvia: 1.1 google\r\naccess-control-allow-credentials: true\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":52,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"260b337d6a873f1ba5533d3db3a2c74e","sha1":"05f0dd5ce707209ba15f51fbc41e3e193886ea79","sha256":"5c83cd56806562180d5427795bc530e956154c30f50db28ce94be6a42ade1b4c","sha512":"753a819dc644d223ef6c4d242d9d50847398bc4bd7beb5f75c1f576d2b5d709f33e276acea51e0139e79f611a8ab26e56327a78f9fb9ffde473b6e56c7165067","ssdeep":"","tlshash":"fe900297e02151a3f654262285391e4b24aede978864050c645c1048571920112935da","first_seen":"2026-04-14T07:13:14.754633Z","last_seen":"2026-04-14T07:13:14.754633Z","times_seen":1,"resource_available":false,"data":null}},"time_used":460,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":460,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-14","alert":"Sinkholed","trigger":"nexusair.online","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w20/id.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nexusair.online/","date":"2026-04-14T07:12:52.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 00:11:00 GMT","end":"Wed, 01 Jul 2026 01:07:18 GMT"},"fingerprint":{"sha1":"C8:69:8A:42:A7:65:30:FC:2B:96:6F:1C:2E:61:EE:CA:AB:37:13:00","sha256":"D2:18:D4:96:65:1F:B8:63:37:4A:75:E6:73:AE:25:C5:92:3E:94:BB:C1:94:90:ED:4D:E8:7A:A2:17:6B:4E:1E"}}},"request":{"raw":"GET /w20/id.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexusair.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Apr 2026 07:12:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 97\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-61\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2177447\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vwv7FIjZ8H%2FZwzXsroZYxidIVKA1LisONvooGzFgwgSAc2SrBDy31%2BJuhTMf0Fi3n7A%2FUo1H8DQWzSbKuJM8NUU%2BiawCSy%2BdcitrHCcxEKcLkj48DYxMUV%2B2U9U3%2Fg%3D%3D\"}]}\r\ncf-ray: 9ec0e7964c1ab51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 13, 8-bit/color RGBA, non-interlaced","md5":"7e80735862fdb6b8c77292499020fc9c","sha1":"fadc0bf5cd2e2e13db325b65791c878a067c13da","sha256":"eb5601cf5782b16d7ce3d833c7ae33920187d72a17231b96afc9b8a9f80e8221","sha512":"d6a98f648346f58ba5a60f39d81493ef8f79cea35c7531b82a0db8acbaba035c772b6fcba02b29518d76c7664614a8e47f27fbeb84567058fb3c794cb56abcbe","ssdeep":"","tlshash":"96b012d37371c82dc7868472e122c070da7d53001576015903089c3510077c408c06d3","first_seen":"2025-01-02T03:50:15.884376Z","last_seen":"2026-07-24T16:21:15.286575Z","times_seen":646,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":26,"dns":6,"connect":1,"send":0,"wait":8,"receive":1,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w20/my.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"104.21.31.228","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nexusair.online/","date":"2026-04-14T07:12:57.434Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Apr 2026 00:11:00 GMT","end":"Wed, 01 Jul 2026 01:07:18 GMT"},"fingerprint":{"sha1":"C8:69:8A:42:A7:65:30:FC:2B:96:6F:1C:2E:61:EE:CA:AB:37:13:00","sha256":"D2:18:D4:96:65:1F:B8:63:37:4A:75:E6:73:AE:25:C5:92:3E:94:BB:C1:94:90:ED:4D:E8:7A:A2:17:6B:4E:1E"}}},"request":{"raw":"GET /w20/my.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexusair.online/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Apr 2026 07:12:57 GMT\r\ncontent-type: image/png\r\ncontent-length: 200\r\nlast-modified: Tue, 01 Jul 2025 15:39:52 GMT\r\netag: \"68640148-c8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nage: 2422695\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3INibUwAmq1J9Y3iZCWoctWEFs9l37sfnrfG0GAjLq9V2MJzhFrpOsL%2Fwl8LR6uaLE9JCU%2FkArtAK3hf6HoIy7MmbVuwmua5ZfZ4%2F7bKR28D0kVEniks8lykRkI8aA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: 9ec0e7b6fe2056bb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 10, 8-bit colormap, non-interlaced","md5":"666f15b744be5b3dad32235cdd61df39","sha1":"41ca553b4918d2ad815e3532689918ee94eb7da7","sha256":"fa2539339d22f981a443718d0273aaa9e3575d8a02fad6729d642915d04f4a40","sha512":"f3c65ddd214f06eae76e0198eb66c5c63245867feb084b2180784609a7ab5267c9cbd344d37d7039dd464a72c0a9e1d2dae8ab50b8d3401f62f909fbf04e030d","ssdeep":"","tlshash":"c2d022c192721c7fc6872e22802d0009bcf882260e68cc5ea7d9fa59dec8c0ee0d9482","first_seen":"2025-01-30T07:30:54.872157Z","last_seen":"2026-07-18T16:25:50.905619Z","times_seen":581,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}