{"report_id":"5ebc81e9-7433-485f-9315-888376c48e72","version":6,"status":"done","tags":[],"date":"2026-02-11T04:03:42Z","url":{"schema":"https","addr":"nexo-foundation.com/","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"172.67.182.62","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"nexo-foundation.com/","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"title":"Nexo: Your Wealth Platform for Digital Assets","dom":{"size":381,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"b77dd4da1c6c00a74dbc145d48fed07f","sha1":"910c712ebf33a6ece631b85dffe629b0dfbf6329","sha256":"f61dcc425cd59e7b0a2921cf11a62fd2b4485abf39025b3440d76878a997ce13","sha512":"3145af28a5eb7ca41486859ba43255f7042943e0e3e46e82af6a4c16557232a294bb262c4feb16e232ed2c24d25fbaf9c890ba6feaa088d7b3c4d4eb8ee58b09","ssdeep":"","tlshash":"7fe0f1a3c300c807055666c03bd1f20c400bfe1ef5419c9079b550a458de1368411984","dom_hash":"domhash2594b9861eb4a293d93889b19433d675","first_seen":"2026-02-11T03:03:21.786123Z","last_seen":"2026-02-11T04:03:52.758323Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"nexo-foundation.com/","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"172.67.182.62","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-18T04:03:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"nexo-foundation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"app.dynamicauth.com","ip":{"addr":"104.18.21.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-04-24","domain_rank":1824779,"first_seen":"2023-07-05T19:07:58Z","last_seen":"2026-02-10T10:52:34.179296Z","alert_count":0,"request_count":6,"received_data":23358,"sent_data":4210,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"dynamic-static-assets.com","ip":{"addr":"104.18.15.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-02-10","domain_rank":62467,"first_seen":"2023-06-27T20:50:44Z","last_seen":"2026-02-06T17:55:51.563711Z","alert_count":0,"request_count":2,"received_data":538039,"sent_data":961,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"spongebob.varekuta.top","ip":{"addr":"104.21.21.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-01","domain_rank":0,"first_seen":"2025-12-24T06:53:19.250994Z","last_seen":"2026-02-11T03:03:13.067602Z","alert_count":0,"request_count":2,"received_data":1715,"sent_data":1056,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"spngbeb.b-cdn.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2016-04-25","domain_rank":0,"first_seen":"2026-01-19T23:55:31.832342Z","last_seen":"2026-02-11T03:03:13.028451Z","alert_count":0,"request_count":1,"received_data":7368961,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"nexo-foundation.com","ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-08","domain_rank":0,"first_seen":"2026-02-11T03:03:12.410507Z","last_seen":"2026-02-11T03:03:12.410507Z","alert_count":20,"request_count":20,"received_data":1645088,"sent_data":9456,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-02-08T22:32:21.331091Z","alert_count":0,"request_count":2,"received_data":33359,"sent_data":1006,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"nexo.com","ip":{"addr":"104.18.20.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1998-08-22","domain_rank":51388,"first_seen":"2015-10-29T19:10:01Z","last_seen":"2026-02-08T14:59:30.974435Z","alert_count":0,"request_count":5,"received_data":570988,"sent_data":2609,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"iconic.dynamic-static-assets.com","ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-02-10","domain_rank":1804516,"first_seen":"2023-03-28T18:24:46Z","last_seen":"2026-02-06T17:55:52.31548Z","alert_count":0,"request_count":1,"received_data":2100012,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"metamask-sdk.api.cx.metamask.io","ip":{"addr":"104.18.30.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2015-07-02","domain_rank":907454,"first_seen":"2024-11-22T07:39:53Z","last_seen":"2026-02-06T17:55:51.359244Z","alert_count":0,"request_count":1,"received_data":1134,"sent_data":610,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nexo-foundation.com/","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e7e36c98685f6e9635848ea7cb7f9190","sha1":"d9daa766cc42486dd5d59dd510890ffa578944e5","sha256":"332616c33a0ca3f20b30062bcca4e7af765312dbb2d935d65b081725aa0f7894","sha512":"51e58304e02b3d10983b4a079ae41c3d20ea8f456024a8249c9fb026647ffeb8cab3e9c979c5c85523aea855092287d9c1accca7d6d4298a0e17ad1ae91d2979","ssdeep":"","tlshash":"b1019c0f817875061c7621b146052ef24de129967a3ab4f21fb820a0998bc3e3977ddd","size":736,"data":"","first_seen":"2025-08-19T02:44:28.506596Z","last_seen":"2026-08-07T02:26:45.158634Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cf86f8f4c439616585d7d5f5fa2fbd9c","sha1":"4b05428217ac6d5eba6d948c7eb4b498c95bf5b8","sha256":"08d48da713e38a21ef6027528320f1133a5f4438645a4e3b7d886c1d84b44e37","sha512":"47ddfcb1a6c43f9c2008f46800844e09164da9b603ba018b128aa733150b602b5f1c4849b012424f0a0192e9000879598b3f62c5854f0697438eee448d7d8ea4","ssdeep":"","tlshash":"4941450f08f8a502192774388eae6884a6509ab736787ce27ebc10645f46d3c37f5fe5","size":1999,"data":"","first_seen":"2025-08-19T02:44:28.494431Z","last_seen":"2026-08-07T02:26:45.152904Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5fac7e708db9b502a06051e3a6207eb0","sha1":"59e466cb4d87be8377494ad9f4e6fe88095cefe6","sha256":"36ece81885cae92c45f6470f7ba39ab86e4a51e13e3d7917591ae86a26c24453","sha512":"88f85bfd2d243f72769ca4f7dba9e4ee678689fc93eb9f57c90004d36112e9cf7d3a0f95a6ec554dbd7f9c916d3d4499c0302c8f6dd80a0c018e2337cff6228b","ssdeep":"","tlshash":"0931470f05ac60024927a530aecd18c4aab589733a3878a23ead55505f73d3937f9efd","size":1447,"data":"","first_seen":"2025-08-19T02:44:28.516181Z","last_seen":"2026-08-07T02:26:45.155088Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ca7924109339124364f204129260d7bc","sha1":"fc161d9b7168683ab67de273d0461e9eb8fc3d06","sha256":"dbbf4b1cc06dcf2f1538db3eab9df65b0bb207def89e083f47ca9bfa477fd75d","sha512":"710c2014b58dbec8b1d57b3f14035e11b578ce46f76da213002b3393fd80c5f567a9749a4cb65f21e64e3676b79606bcfab9a5ae86d384ab712a33422317568a","ssdeep":"","tlshash":"9201682f403874075c1620718d462df12d901c973a3ab8e21e7450605a4be3cb667cec","size":726,"data":"","first_seen":"2025-08-19T02:44:28.49947Z","last_seen":"2026-08-07T02:26:45.157543Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-08-07T03:00:16.518684Z","times_seen":376350,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/disable-devtool/disable-devtool.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fa174926682313cc5a067077b0bb22d","sha1":"609109d82deb0c7dd3d9d212808dcba0548ce3d1","sha256":"5a7b9b2c807f85575c9ebc1f508e849b53430870b2d0fb6c02b2de3df661cb63","sha512":"83a593d4b8648b78031259becd96b4c33226e9462c2e26013ee0746ff58a7b710159d0d380d001d7740e9485ee346491c16e3fdb0d334f5b6cfabe6f90cda9b6","ssdeep":"192:m+5ekRvDLCpBK+BpP78nPk6O9ShgzsqcSYV0GtI+uwicvsbIUiJE2KmnyKU:mLiPCvRvT8nPk6cSCzsqGVJeZcsb8S9","tlshash":"0582c4ccb48270715b77a9e9507f454ab23aae96888c8040f13ed8e42c7c56ec267f7d","size":17684,"data":"","first_seen":"2025-08-02T03:49:54.562881Z","last_seen":"2026-08-06T19:34:58.670197Z","times_seen":4934,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cf86f8f4c439616585d7d5f5fa2fbd9c","sha1":"4b05428217ac6d5eba6d948c7eb4b498c95bf5b8","sha256":"08d48da713e38a21ef6027528320f1133a5f4438645a4e3b7d886c1d84b44e37","sha512":"47ddfcb1a6c43f9c2008f46800844e09164da9b603ba018b128aa733150b602b5f1c4849b012424f0a0192e9000879598b3f62c5854f0697438eee448d7d8ea4","ssdeep":"","tlshash":"4941450f08f8a502192774388eae6884a6509ab736787ce27ebc10645f46d3c37f5fe5","size":1999,"data":"","first_seen":"2025-08-19T02:44:28.494431Z","last_seen":"2026-08-07T02:26:45.152904Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e612e14c4bb0da1aefc2e72384b485ff","sha1":"f294cdc1336719634bdd68a7859857840c8f18c4","sha256":"0d2efa1cbef7ce19124dafac2467ebeca4f7121d7571fb0f9ba2e6e05d1b9067","sha512":"7a49f565ba29c77c2f2d31a4af1013a4f6073540179ad961da5847bf3a07ff895e3059d0638c6e12b5fe172455dd117b8a9bba332c4828f7110556b00fd566ee","ssdeep":"","tlshash":"c2e0ab0f0078a0092c227171494a6df40c8426a73a3af4e69f782065ad87c3d79afcec","size":427,"data":"","first_seen":"2025-08-19T02:44:28.507783Z","last_seen":"2026-08-07T02:26:45.162385Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7b492557e3d0052aed558444b0ead3a0","sha1":"160af018b647c234986b603160f0c23238766089","sha256":"adb833737eb5bf511c874bc7298ce4f229c48e4c6b6ec09167aba37179bda887","sha512":"8cb1cfd964c4005d7bf65dfcafe07eac5151805eba7e90704166236db56ebbf268e2be3a0b70046c817bb944b05bdb1b107b49f253b8c45ca86e47f3c2efaa96","ssdeep":"96:FhsI9JmKRMQ6ZSfvkDKA8J05ddSHq2YHrKT:FhNhRMQ6ZSfvkeAk05ddSHq2YHrK","tlshash":"d1916f0b09b86103291364780e9d19849a6486b3333968937efc11689f8bd3837f9ff6","size":4467,"data":"","first_seen":"2025-08-19T02:44:28.511022Z","last_seen":"2026-08-07T02:26:45.15356Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"5e4a169c68a51f499374ba9c2f583a55","sha1":"9b8278f489ee8f3cd77615883f1bd29aa2aa5452","sha256":"99643babf4c0f6e7a396a27d108da1ba01883aa4d996bd229c23f9e476f7c443","sha512":"934991ed32d85caad6a008d9b7ef05b3525dacc0099c8db0c548d2e1debb168c1f86daec75f522adff4c5c528251558e225297d48f69d3bd2e3112a099df51d3","ssdeep":"","tlshash":"26014c0b04b8604599a270304d9d18a875545673323da8913ffd26689f8fe383bfeee9","size":725,"data":"","first_seen":"2025-08-19T02:44:28.498377Z","last_seen":"2026-08-07T02:26:45.162881Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spngbeb.b-cdn.net/assets/index.js","fqdn":"spngbeb.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4efe6fc969f3caf15ecd777c5d8233b","sha1":"bf443f0ab2f8f0f2856c779160b3d7501b59edd8","sha256":"561c7e822ce39b1f3fd062d1dfd1e69e61ba388704a404147f3bc7fdfe7d9cc4","sha512":"077725b170c3e168e7047e7c656544d7587ebbe4e76279938e9dee244025a84e2f2ddf0a889a650b34f17d90bdbd097f91a83f93aa877d353657a819ba58d309","ssdeep":"49152:Kqikw7ghPqNtFD3/bPzsjumMJYeKX/Vg7WikBnnbRGUWMVpY9aTDDbPcgd8ZWLMN:M","tlshash":"4d76ae4e69216633b26e5929898dbf0e76e18bd45e9dcb6003127cc77db4fb7092f402","size":7368002,"data":"","first_seen":"2026-02-11T03:03:21.85049Z","last_seen":"2026-02-15T03:00:44.79975Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"56bc0ee5f42510cff3f39613b60a5605","sha1":"10b4c39f1462fe633c8b1d55897ef39185b6d803","sha256":"34ef02dfd24927210bdeb9454f348fd4abd210072c85c6a90749adb6b3470c2d","sha512":"6c743a3574702ab85038946a1cc88bc5a590ee6de07ea5744a3632d1d15cc36253e63acd4098de66a3c5268ee5fab2a9aebff0dfbc1698fb2696db287451a835","ssdeep":"","tlshash":"de014c0f543d64062c16603155462de42e841aea3976b8e26fb410a0de4be2f7667ddc","size":716,"data":"","first_seen":"2025-08-19T02:44:28.505577Z","last_seen":"2026-08-07T02:26:45.15652Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"cab41828e5875109fdcf0c46b0c586d1","sha1":"c9a7593dd682236f07bf4029ab960b6233d6e013","sha256":"8df55d85107aaf49f05b8c1d9ba2213f366b2cacb456a21187b7defa9ce70af4","sha512":"bb68625f9f24743ac95baec34fa05656023e6d6b66d3ad289eaa27fb55e353cbecdeb10d1f0d943f6f389abf2d47fd8163bcfffc3fa48846526c69d64dfa67ff","ssdeep":"","tlshash":"a341790b45b86106595321324edd28e05a5654b33a387ce23fec10549f86c3c3afafe6","size":1990,"data":"","first_seen":"2025-08-19T02:44:28.504462Z","last_seen":"2026-08-07T02:26:45.155575Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f15660076a007483742cdcb58ee8736a","sha1":"1fda87a52c727ae6a09d1a669dd73794115c26bd","sha256":"7196cf013d45a5bdd4f762a92a26496ea68cfd3a4732a7fbc89640b7b168c08c","sha512":"e7fabd3ef2638f7e417d6f0e3b610c808e3ad2e29c9139b3136230e1514daa0f66978e9ba4787b25bc59635ff993bc6a9e320d41a063a74d8bd235868a51bda0","ssdeep":"","tlshash":"2e715b0f06b82503092774345e9f28a0995555bf322964ae3f9d12505f8bc3c2bf7eda","size":3629,"data":"","first_seen":"2025-08-19T02:44:28.513979Z","last_seen":"2026-08-07T02:26:45.154205Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2b1e33b96af4b21f96d88a8fc4389dcf","sha1":"1aaba03650806172e06463e6a63efc86a9c869f0","sha256":"95b0feab88f103e8cbb816f534cf93caf4c1bb287885648cd5dd7be325187adf","sha512":"869b0b960d0acb9d92f1874c4691bbb72f469748dd07fbd9e3ad80b27f5a591cdb046b0793c7ae85d635f5067cc584fb0729b7b0b489e878b620a9e6b9527a5c","ssdeep":"","tlshash":"0931462b08b430512456e0ba2a5c1c53599185b333f9aad57dbd12802f82c3c77f7afa","size":1577,"data":"","first_seen":"2025-08-19T02:44:28.512218Z","last_seen":"2026-08-07T02:26:45.157032Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0d4fe79d0bc7a5ce6e2d288caa5e81ca","sha1":"c9520c0a72709e01c40438bf4afc230291b49549","sha256":"cd204fa04d7b722e832de0928e59c9bd9808fe7d0d4d14037c49c759e4da2271","sha512":"131bb0897d33fb81f03b9311d4e76c265a59bdd3b752d5b03ea65cccb543e0e4e2f35d2a90bb91fe84d2ef415d6aaf45e02ebcc76d8c67b053af887b62b3f305","ssdeep":"192:FZThXn6JgvirA9adYm2Mlrvxcvy50FSivCf0DrXEowov30ae2XFFPJADVOTl:FHeVWRK1GfRGW4bGbiq","tlshash":"bb323a0f1ab46502296364345e9d28d4ad208db7332968e53ead21545f8bd383bf9ff2","size":11840,"data":"","first_seen":"2025-08-19T02:44:28.508937Z","last_seen":"2026-07-29T20:02:12.426043Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-08-07T03:00:16.518684Z","times_seen":376350,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"ca98953bc552394a507ee79d2ea3906c","sha1":"ce1e37fbfb3b107bf502f697f24c14525a39eaa2","sha256":"e7f4a63581d41a08dae2d2e564f05352550f55bf0e2b65c201c36adb1a06dd00","sha512":"30d690bebd80dd1a607bf122dec03df6fc1b87bd97f24633f6bc8fea57969dc21d24ffc3debf1a99c77241df66f3a3e78b53a3557fe90c327d8f63ae0af10a84","ssdeep":"","tlshash":"0d218f1f847ca401181768b11d9d3ee05d5415e3363978d23dae50b0af8bc2c3bbade9","size":1373,"data":"","first_seen":"2025-08-19T02:44:28.513227Z","last_seen":"2026-08-07T02:26:45.148226Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c26e58bb40fd10ac64e576754828cdd4","sha1":"61d2795f7fce885d06e8a5ff7d9a80b71899977a","sha256":"d70dae22b8f02ce9cc9df21df065695de36f254f5a90fd823052f17ca25a773f","sha512":"db3feb6d6fa45909feeb2076385586768066efbfc9d59e1801f4728960b0a67c3f4c49ccf22a29b3c7d72b0e64565d8fcd3c72b771c21e9d5648174cd98dfc61","ssdeep":"96:FPbHmKt8Cr6lYvC7XAo4ddreQ2vBrTqcoT:FPzht8o6lYvCLAVddreQ2vBrTqcE","tlshash":"a6b13a0b16f87002156774311e9d2895ab648af7373c68a13ead10946f8bc3837f9ef5","size":5129,"data":"","first_seen":"2025-08-19T02:44:28.515063Z","last_seen":"2026-08-07T02:26:45.154725Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/2046aaf0-63c8-4c4b-b9f0-dc890883f7ab","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"772a6d0c0225235a504d3d2c889db4c9","sha1":"1b24f2e96eca47aedb80f52f23dbb200089c0152","sha256":"5e9028f768057481fadaee5a7cac18c9876b9f8fee2a4231e2634e41b31c1df7","sha512":"245b84a4012da89dcf9559b6f8e921d6d06260df7cf45ea8d20ffcdd34d20b5e6cf5cfacaedbf3065f56597cffa618f3a98361e8d2958cd5ca966a0874aa155e","ssdeep":"98304:a/KQvew+sUOyp6mIgMdMZAgPDyW0ugLouB:a/RvewCOyp6mIgMGZAgPDyW0ugLouB","tlshash":"89468dd4b395b174479346d4943b1101f2386c44b80d80a8f6bccdeb6fb5a89a67bf3a","size":5525691,"data":"","first_seen":"2026-02-11T03:03:21.847248Z","last_seen":"2026-02-15T03:00:44.805412Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"c67fe508d0a100174b807fba9c73d514","sha1":"2a9f02dcf3e7adc49ba3b0c03e7ea76dee1b3db3","sha256":"45a0d8a5c1f1ac00c56b30a92aa74e75177dd21aaad3623fc8c168e1075b4e5e","sha512":"450c5122a96bc051b7e846bc6512c3107236b72f8d29eaf9799c1e414b77da1c9a4aa84e8c63d7895a2abd54ef423fab7511d5ab16b12ee8ce97ef3dba3394c8","ssdeep":"","tlshash":"b7319e2f893c75152c1622319d653de08f8519a6397970f22db12064964fc3c37abded","size":1828,"data":"","first_seen":"2025-11-19T22:32:11.255975Z","last_seen":"2026-07-29T20:02:12.464108Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"nexo-foundation.com/f1-digital-asset-partner.svg","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:17.410Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexo-foundation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 13:58:03 GMT","end":"Sat, 09 May 2026 14:56:52 GMT"},"fingerprint":{"sha1":"65:35:54:7C:CF:89:7B:63:F2:F7:DA:A3:16:65:57:84:5B:1F:BE:1C","sha256":"29:28:7D:A6:6B:1B:DA:35:CD:13:57:78:6C:B5:E1:6E:9C:4F:0D:FF:64:B3:21:2D:09:20:0C:B7:CA:FF:7F:F6"}}},"request":{"raw":"GET /f1-digital-asset-partner.svg HTTP/1.1\r\nHost: nexo-foundation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexo-foundation.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:03:17 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Sun, 08 Feb 2026 22:35:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 3634\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"69890f95-7bab\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XGjwH49ozYn7dC674Wnl9aT%2Bbx8KxekLmNBWj03K0veScIoTV8NS3Zj%2BBk%2FT7wHaY2bMUXnswrnqziSqo83KwPAitP8eGFZOInBhR8sFroQK%2Fyk%3D\"}]}\r\ncf-ray: 9cc0f4a1ca8a783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31659,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b84ec9730a3118729a6852f3a46cdfde","sha1":"c64e5edb945294566f9e7dc7fc8936ec088db577","sha256":"63d063f420a38317a54b18eaa8bc7a07c8e79d129db1a57017b3b7dcdf036fc5","sha512":"251d83ef6836cd0a7d322ad80477b2abd9de955508fb7e2c4096571f3cd273a1fb842ab761b3de2de27f7017d405a06295da373c1daac4e39d5a498ca234daeb","ssdeep":"768:JRTP3tWkTQMatysWEttPHztTDNf5GbXWIt:Jd8k09O/","tlshash":"95e295ee2ae45af4e845e2f6be1111dc381658bb7d86cf34c39d9f19389646c8e14cc2","first_seen":"2026-02-08T14:59:38.235836Z","last_seen":"2026-05-26T06:02:58.886243Z","times_seen":15,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"nexo-foundation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/684ff108e6721b29.css","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:16.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexo-foundation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 13:58:03 GMT","end":"Sat, 09 May 2026 14:56:52 GMT"},"fingerprint":{"sha1":"65:35:54:7C:CF:89:7B:63:F2:F7:DA:A3:16:65:57:84:5B:1F:BE:1C","sha256":"29:28:7D:A6:6B:1B:DA:35:CD:13:57:78:6C:B5:E1:6E:9C:4F:0D:FF:64:B3:21:2D:09:20:0C:B7:CA:FF:7F:F6"}}},"request":{"raw":"GET /684ff108e6721b29.css HTTP/1.1\r\nHost: nexo-foundation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexo-foundation.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:03:16 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sun, 08 Feb 2026 22:35:01 GMT\r\netag: W/\"69890f95-aa8e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 3634\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E5ZZuhzx6mGactdcljSRx3ZDsBJeF96UftcDRm1GXBwTIJNUreIfk%2Bq3X9nPST%2FYZkrIlqVS7t1A%2Be0dbjFama8ovjXLH3XkCuOJp7ARTuCTEEQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cc0f49e1a1f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43662,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (41550)","md5":"5352fa66d7e8b63ef51b4dbec558837d","sha1":"5d8a71a40ce6b72069f65b83cd9e007d0552d20d","sha256":"a56f265c9a5e705d9cc6347faf9c28e4e7d275b79895972673784f17fc3dee43","sha512":"0f2371532b21096229d13b1d2211414cf2a0fb9b10eda0b36684144bccb884489b188f7f2558951ba515f72bf153ae41086a6d68cca69b0fa053fcd4578dcdbe","ssdeep":"768:y1fDnOjQSyfD0YUqhqvpo06iXw29FZoe8jucp:ynX4iv1p","tlshash":"2613555ab140423bfed787b9e056b198b1266cc5fe379bd9e90256b082d93f32cd2344","first_seen":"2026-02-08T14:59:38.241778Z","last_seen":"2026-02-11T04:03:52.762328Z","times_seen":6,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"nexo-foundation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/disable-devtool/disable-devtool.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:16.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/disable-devtool/disable-devtool.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexo-foundation.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 0.3.9\r\nx-jsd-version-type: version\r\netag: W/\"4514-YJEJ2C3rDH3T2dISgI3LoFSM49E\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 28817\r\ndate: Wed, 11 Feb 2026 04:03:16 GMT\r\nx-served-by: cache-fra-etou8220089-FRA, cache-hel1410020-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 6646\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17684,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17663)","md5":"7fa174926682313cc5a067077b0bb22d","sha1":"609109d82deb0c7dd3d9d212808dcba0548ce3d1","sha256":"5a7b9b2c807f85575c9ebc1f508e849b53430870b2d0fb6c02b2de3df661cb63","sha512":"83a593d4b8648b78031259becd96b4c33226e9462c2e26013ee0746ff58a7b710159d0d380d001d7740e9485ee346491c16e3fdb0d334f5b6cfabe6f90cda9b6","ssdeep":"192:m+5ekRvDLCpBK+BpP78nPk6O9ShgzsqcSYV0GtI+uwicvsbIUiJE2KmnyKU:mLiPCvRvT8nPk6cSCzsqGVJeZcsb8S9","tlshash":"0582c4ccb48270715b77a9e9507f454ab23aae96888c8040f13ed8e42c7c56ec267f7d","first_seen":"2025-08-02T03:49:54.562881Z","last_seen":"2026-08-06T19:34:58.670197Z","times_seen":4934,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":51,"dns":1,"connect":26,"send":0,"wait":27,"receive":1,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/index_4.html","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:17.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexo-foundation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 13:58:03 GMT","end":"Sat, 09 May 2026 14:56:52 GMT"},"fingerprint":{"sha1":"65:35:54:7C:CF:89:7B:63:F2:F7:DA:A3:16:65:57:84:5B:1F:BE:1C","sha256":"29:28:7D:A6:6B:1B:DA:35:CD:13:57:78:6C:B5:E1:6E:9C:4F:0D:FF:64:B3:21:2D:09:20:0C:B7:CA:FF:7F:F6"}}},"request":{"raw":"GET /index_4.html HTTP/1.1\r\nHost: nexo-foundation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexo-foundation.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:03:17 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sun, 08 Feb 2026 22:35:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nage: 3634\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FL4OqorQ%2F7n1bzB6qdeFFntPdOo2VhLUvsupqx9D%2FQObGevwqqH5T170D9ULs2guE0J6RckcBJas8rQFhZD29xazHOTmJgz26rKqcitYenHE24s%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc0f49fba66783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":479,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"b8b916caf9508aa0bcb27716bbf83168","sha1":"ccb37900753f6e79ab72b92a97ea4b5d7c583cb4","sha256":"3703f9e7452226474b8ba75cb4759d2a5d76b2f0b5ee52633c91d215f6f2e813","sha512":"8a3ca3a6a146ffec769d7756e59b810ad424ca3605dc6bd1362dace420fc98929b13fa963feeeb11aa1d9f3ef62424b78dcf48db91ce0c9296b2059a0a067ab5","ssdeep":"","tlshash":"85f05ca05114b40a220030c027c7f1de8243fe4ec900eca0f69c8184cfea338c493a94","first_seen":"2026-02-08T14:59:38.21818Z","last_seen":"2026-02-11T04:03:52.76571Z","times_seen":6,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"nexo-foundation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexo.com/_next/static/media/e326cf415f11af9a-s.p.ttf","fqdn":"nexo.com","domain":"nexo.com","tld":"com"},"ip":{"addr":"104.18.20.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:17.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 01:10:47 GMT","end":"Tue, 14 Apr 2026 02:10:44 GMT"},"fingerprint":{"sha1":"67:37:75:28:94:DC:B7:E2:59:67:E0:EB:74:97:6C:32:60:EF:6B:8D","sha256":"78:C7:ED:1E:E9:E7:93:28:7D:60:92:B9:FF:75:2C:22:62:BB:FB:67:2F:89:A2:55:BE:82:A6:F1:72:EA:34:B6"}}},"request":{"raw":"GET /_next/static/media/e326cf415f11af9a-s.p.ttf HTTP/1.1\r\nHost: nexo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nexo-foundation.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexo-foundation.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Feb 2026 04:03:17 GMT\r\ncontent-type: font/ttf\r\ncf-ray: 9cc0f4a089b6a0f0-OSL\r\nreferrer-policy: strict-origin\r\nstrict-transport-security: max-age=31536000; preload\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors https://platform.nexo.io https://platform.nexo.com https://support.nexo.io https://support.nexo.com https://nexosurvey.force.com https://nexoio.lightning.force.com https://nexoio--c.visualforce.com https://nexoio.my.site.com\r\naccept-ch: Sec-CH-Prefers-Color-Scheme\r\nvary: Sec-CH-Prefers-Color-Scheme, Accept-Encoding\r\ncritical-ch: Sec-CH-Prefers-Color-Scheme\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 10 Feb 2026 16:15:59 GMT\r\netag: W/\"230b4-19c485693f7\"\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 3635\r\nset-cookie: __cf_bm=Z2J863iYaWa0FhWpQEsxIbWxWSQxre0jwLZuIFx59E0-1770782597-1.0.1.1-PCMwA_l7BTMjvyme1p4JhQLW4hnEPdGMcmB3N5zFXzVpCYpLI_g2hNESH2fC0aZ2NSV4DWbY_gvtJAQsAkbxt2_d95RyiyYWf6z_hsXduhsvJN405Pkaguq.XkDcieTb; path=/; expires=Wed, 11-Feb-26 04:33:17 GMT; domain=.nexo.com; HttpOnly; Secure; SameSite=None\r\ncontent-security-policy-report-only: default-src 'self' https://nexo.com *.nexo.com *.nexo.io cdn.segment.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://nexoio.my.salesforce-scrt.com https://widget.trustpilot.com https://appleid.cdn-apple.com https://www.apple.com https://browser-intake-datadoghq.eu https://region1.analytics.google.com https://region1.google-analytics.com https://events.eu1.segmentapis.com https://www.googletagmanager.com https://accounts.google.com https://www.gstatic.com https://fonts.gstatic.com *.geetest.com wss://platform.nexo.com https://nexoio.my.site.com; frame-ancestors https://platform.nexo.io https://platform.nexo.com https://support.nexo.io https://support.nexo.com https://nexosurvey.force.com https://nexoio.lightning.force.com https://nexoio--c.visualforce.com; report-uri https://security-logging.nexo.com;\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":143540,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 40 names, Macintosh","md5":"fc57eb0147fd30086e477681a884b785","sha1":"983e237872df7276ae77d4325a4d9e3df60edc93","sha256":"d4fe3dfbfc9bbe84e11451d10862806198c4f68700d958f03b66a786327b5de9","sha512":"fdacba42b8f226245c815109bd8c3a5cefbcf3d2f495803a082eaa0e9018a6ee30e2b4cf9b828384e81c92c9515d24c423039c0641297bc68469b975cd0dfc96","ssdeep":"1536:wO3j/iLADD6G9XZwAQIkOZwuFIKI4rKm5bEAYEyWj4kZVvyGWIBIis1wF:TidG9CkPZEKhrr4kG9Q","tlshash":"14e3185bf797960ada835e759ea1e320bfa6fc31be3e571fb2404668f8c74518c01188","first_seen":"2025-02-18T06:07:21.711469Z","last_seen":"2026-05-26T06:02:58.935976Z","times_seen":34,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexo.com/apple-icon.png?4749ef0a6ce1ccdc","fqdn":"nexo.com","domain":"nexo.com","tld":"com"},"ip":{"addr":"104.18.20.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:17.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 01:10:47 GMT","end":"Tue, 14 Apr 2026 02:10:44 GMT"},"fingerprint":{"sha1":"67:37:75:28:94:DC:B7:E2:59:67:E0:EB:74:97:6C:32:60:EF:6B:8D","sha256":"78:C7:ED:1E:E9:E7:93:28:7D:60:92:B9:FF:75:2C:22:62:BB:FB:67:2F:89:A2:55:BE:82:A6:F1:72:EA:34:B6"}}},"request":{"raw":"GET /apple-icon.png?4749ef0a6ce1ccdc HTTP/1.1\r\nHost: nexo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexo-foundation.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Feb 2026 04:03:17 GMT\r\ncontent-type: image/png\r\ncf-ray: 9cc0f4a37ea6a0f0-OSL\r\naccept-ch: Sec-CH-Prefers-Color-Scheme\r\ncf-bgj: imgq:85,h2pri\r\ncf-polished: status=not_needed\r\ncritical-ch: Sec-CH-Prefers-Color-Scheme\r\ncache-control: public, max-age=31536000, immutable, no-transform\r\ncontent-security-policy: frame-ancestors https://platform.nexo.io https://platform.nexo.com https://support.nexo.io https://support.nexo.com https://nexosurvey.force.com https://nexoio.lightning.force.com https://nexoio--c.visualforce.com https://nexoio.my.site.com\r\nreferrer-policy: strict-origin\r\nstrict-transport-security: max-age=31536000; preload\r\nvary: Sec-CH-Prefers-Color-Scheme, RSC, Next-Router-State-Tree, Next-Router-Prefetch, Next-Router-Segment-Prefetch\r\nx-content-type-options: nosniff\r\nx-nextjs-cache: HIT\r\nlast-modified: Mon, 19 Jan 2026 16:02:07 GMT\r\ncf-cache-status: HIT\r\nage: 6813\r\nset-cookie: __cf_bm=XYDeS4M3sB7s2CJkE3zIigyaJsdpfDa_0Kzc957CFXg-1770782597-1.0.1.1-xY.pitO0nONnQK3pNsON9nwQTodJSq0EWUpHzosE1KbJt2QlKEQLhBrw1dVckQHgn_VUMIzI0s3Ux7tKx5D24mLTcgkafW36XFpaPfrr7G969JPGxqL5kRtfVK2_d8Qh; path=/; expires=Wed, 11-Feb-26 04:33:17 GMT; domain=.nexo.com; HttpOnly; Secure; SameSite=None\r\ncontent-security-policy-report-only: default-src 'self' https://nexo.com *.nexo.com *.nexo.io cdn.segment.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://nexoio.my.salesforce-scrt.com https://widget.trustpilot.com https://appleid.cdn-apple.com https://www.apple.com https://browser-intake-datadoghq.eu https://region1.analytics.google.com https://region1.google-analytics.com https://events.eu1.segmentapis.com https://www.googletagmanager.com https://accounts.google.com https://www.gstatic.com https://fonts.gstatic.com *.geetest.com wss://platform.nexo.com https://nexoio.my.site.com; frame-ancestors https://platform.nexo.io https://platform.nexo.com https://support.nexo.io https://support.nexo.com https://nexosurvey.force.com https://nexoio.lightning.force.com https://nexoio--c.visualforce.com; report-uri https://security-logging.nexo.com;\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":2000,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"e6ea14fb6c7ae07d69896c0033b397e6","sha1":"888a7e3d4c71873ed4bf823a9688f7e3a7fdf17f","sha256":"0e84447c2c33d8657fa28614db2d73d44c23ab666dcea3fbda0043b605fca630","sha512":"279c25a60f2e447432e75422bfb7ee60e3067d5b7494ff45e1c9ec436ca3e832604801dee6dbbb977655605c3243b36aa9823752146c30fb5042fc68c5a067f2","ssdeep":"","tlshash":"a3412cb50a401e3ec55743b8ac02a90814b3ee504ef6754dfd16518c5be943a85f4d62","first_seen":"2025-10-10T22:37:16.828011Z","last_seen":"2026-05-14T12:58:31.952997Z","times_seen":30,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/3c45b8b6-727c-4b0a-ba53-2fd2bec92fc7/sdkSettings","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.21.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:20.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 19:50:09 GMT","end":"Tue, 21 Apr 2026 20:50:02 GMT"},"fingerprint":{"sha1":"A0:DC:9F:5A:28:95:EA:E2:35:50:49:B8:A0:BC:16:A9:CB:E9:4B:DC","sha256":"CC:A8:2E:EB:4A:66:C2:67:AF:C4:EA:78:C2:78:58:E0:85:4F:F5:84:DF:45:70:0E:95:1A:34:8F:4B:A8:E2:26"}}},"request":{"raw":"POST /api/v0/sdk/3c45b8b6-727c-4b0a-ba53-2fd2bec92fc7/sdkSettings HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nexo-foundation.com/\r\nContent-Type: application/json\r\nx-dyn-request-id: 3AGBHaVUuW6fTasN7M54H22z6IH9D-ZJE_RZtAwtFxmWv_lrfJ\r\nx-dyn-version: WalletKit/4.47.3\r\nx-dyn-api-version: API/0.0.823\r\nx-dyn-is-global-wallet-popup: false\r\nContent-Length: 1590\r\nOrigin: https://nexo-foundation.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1590,"data":"{\"dynamicContextProps\":{\"settings\":{\"environmentId\":\"3c45b8b6-727c-4b0a-ba53-2fd2bec92fc7\",\"walletConnectors\":[\"XOn\"],\"evmNetworks\":[{\"chainId\":1,\"networkId\":1,\"name\":\"Ethereum\",\"nativeCurrency\":{\"name\":\"Ether\",\"symbol\":\"ETH\",\"decimals\":18},\"rpcUrls\":[\"https://eth.merkle.io\"],\"blockExplorerUrls\":[\"https://etherscan.io\"]},{\"chainId\":8453,\"networkId\":8453,\"name\":\"Base\",\"nativeCurrency\":{\"name\":\"Ether\",\"symbol\":\"ETH\",\"decimals\":18},\"rpcUrls\":[\"https://mainnet.base.org\"],\"blockExplorerUrls\":[\"https://basescan.org\"]},{\"chainId\":42161,\"networkId\":42161,\"name\":\"Arbitrum One\",\"nativeCurrency\":{\"name\":\"Ether\",\"symbol\":\"ETH\",\"decimals\":18},\"rpcUrls\":[\"https://arb1.arbitrum.io/rpc\"],\"blockExplorerUrls\":[\"https://arbiscan.io\"]},{\"chainId\":999,\"networkId\":999,\"name\":\"HyperEVM\",\"nativeCurrency\":{\"name\":\"HYPE\",\"symbol\":\"HYPE\",\"decimals\":18},\"rpcUrls\":[\"https://rpc.hyperliquid.xyz/evm\"],\"blockExplorerUrls\":[\"https://explorer.hyperliquid.xyz\"]},{\"chainId\":11155111,\"networkId\":11155111,\"name\":\"Sepolia\",\"nativeCurrency\":{\"name\":\"Sepolia Ether\",\"symbol\":\"ETH\",\"decimals\":18},\"rpcUrls\":[\"https://11155111.rpc.thirdweb.com\"],\"blockExplorerUrls\":[\"https://sepolia.etherscan.io\"]}],\"dynamicUserProfileConfiguration\":{\"showDisconnectedButton\":false},\"initialAuthenticationMode\":\"connect-only\",\"cssOverrides\":\"\\n    .goodbase-dynamic-hidden {\\n      display: none !important;\\n    }\\n    .connect-button {\\n      display: none !important;\\n    }\\n  \",\"customPrivacyPolicy\":false,\"customTermsOfServices\":false,\"policiesConsentInnerComponent\":false}},\"frameworkSettings\":{\"react\":{\"version\":\"18.3.1\"}}}"}},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Wed, 11 Feb 2026 04:03:20 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://nexo-foundation.com\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=QTuMowoMRS39H7kskoB9nUjlp5lD15kyK8SfgCZ8qgE-1770782600.3004584-1.0.1.1-LB8PhnGiq45BCoxvuUE4gZN6CZJv56A2TZJqMdyq_Tx_B5G_IxhzHzXsw7kHeExrNLTyLs0IO5DobK6v_qXkOsFICFrn3RefepIH8CAu7R9yEya6oQ4WSXElWfD04wYb; HttpOnly; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Wed, 11 Feb 2026 04:33:20 GMT\r\nx-frame-options: DENY\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9cc0f4b3db6f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T03:07:12.769099Z","times_seen":17754584,"resource_available":true,"data":null}},"time_used":500,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":499,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/bootstrap.min.css","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:16.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexo-foundation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 13:58:03 GMT","end":"Sat, 09 May 2026 14:56:52 GMT"},"fingerprint":{"sha1":"65:35:54:7C:CF:89:7B:63:F2:F7:DA:A3:16:65:57:84:5B:1F:BE:1C","sha256":"29:28:7D:A6:6B:1B:DA:35:CD:13:57:78:6C:B5:E1:6E:9C:4F:0D:FF:64:B3:21:2D:09:20:0C:B7:CA:FF:7F:F6"}}},"request":{"raw":"GET /bootstrap.min.css HTTP/1.1\r\nHost: nexo-foundation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexo-foundation.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:03:16 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sun, 08 Feb 2026 22:35:01 GMT\r\netag: W/\"69890f95-2e50\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 3634\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tZsUDIxWFF4FN%2FbPYo7LdyNlQmnLCQLN%2BMJmT2qxygGClKRSAabf2NXmXnAm6nlNqNEXMET5PhoNTnMaJ615FFwq2osikt1AQaqSvYWjnIzo3w4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cc0f49e2a25783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11856,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11763)","md5":"abc17162416e88c12c5a3033e53e4ef8","sha1":"36f905ddf0408d067afe32d0b006e0eccdc0ea24","sha256":"734ad0f82c4c4b7ed522616573c56f4ba29938cd2c311d92698145b0de7ddad2","sha512":"b189eba7a26a8174fecce7071dcb05c4d2876399587ef34b5ec456f6554c21b7a1d470eb4b2f5c8f31ed19851e32d41a0e6c304aadb3358ebe3b3c82fd3906ed","ssdeep":"96:e27fizipfmmURN0wbDT1aLVxiTw3T1c1biu1G1j1Gj1G+1+cn21+cEgD1+c1g1+R:e2Gif5Rxx23a5TMwJ1kXG1jw33p96","tlshash":"0c32dfe2832bfc6f9763301bccd2354d363a44759b62bacced8a19d643865e42763391","first_seen":"2025-09-26T18:44:58.800291Z","last_seen":"2026-08-06T14:50:48.324992Z","times_seen":2463,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"nexo-foundation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/index_2.html","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:17.108Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexo-foundation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 13:58:03 GMT","end":"Sat, 09 May 2026 14:56:52 GMT"},"fingerprint":{"sha1":"65:35:54:7C:CF:89:7B:63:F2:F7:DA:A3:16:65:57:84:5B:1F:BE:1C","sha256":"29:28:7D:A6:6B:1B:DA:35:CD:13:57:78:6C:B5:E1:6E:9C:4F:0D:FF:64:B3:21:2D:09:20:0C:B7:CA:FF:7F:F6"}}},"request":{"raw":"GET /index_2.html HTTP/1.1\r\nHost: nexo-foundation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexo-foundation.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:03:17 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sun, 08 Feb 2026 22:35:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nage: 3634\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4625LR4Rkfr%2FJptAmmUsvMTzEZ2b0XG3DHavQy1JOMwbzuo%2FLmJOKGNczRJcOmoR9SBQRTgUMFfZAhAwrVs9QDMa35vO8RiMek3v8MQ320Zxo2U%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc0f49fba68783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":144,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"c0043baabdf16fca37148f72e8555ae9","sha1":"2ef15aa1adc09bde0d07b36592914e0db26fc7d8","sha256":"fb6571d56760d1c18a9634d89797d272311844e5b92b7fc71c6f8da6743bd392","sha512":"99d092b1f8481246875dfc2c2114e4b437e491f63812b438ee7fbf02a24223fe27223351c2fe05afbdfa95cd4579dfd98e5efb7eb946d08a15250affc52b23cf","ssdeep":"","tlshash":"bfc08c229800480e29009e91cb8ae1c4c402dc2ce8215c00b862a144a9a8121c012548","first_seen":"2024-07-19T02:09:55Z","last_seen":"2026-08-06T23:22:21.671319Z","times_seen":245,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"nexo-foundation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/modal-card-cover-3.jpg","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:17.144Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexo-foundation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 13:58:03 GMT","end":"Sat, 09 May 2026 14:56:52 GMT"},"fingerprint":{"sha1":"65:35:54:7C:CF:89:7B:63:F2:F7:DA:A3:16:65:57:84:5B:1F:BE:1C","sha256":"29:28:7D:A6:6B:1B:DA:35:CD:13:57:78:6C:B5:E1:6E:9C:4F:0D:FF:64:B3:21:2D:09:20:0C:B7:CA:FF:7F:F6"}}},"request":{"raw":"GET /modal-card-cover-3.jpg HTTP/1.1\r\nHost: nexo-foundation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexo-foundation.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:03:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 287734\r\ncast-mode: default\r\nlast-modified: Sun, 08 Feb 2026 22:35:01 GMT\r\netag: \"69890f95-463f6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 3634\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cf23IpAVavK3KSs4YchuZXXR3GxTlhRmQR4YQ5tpLkl3pGQwLeCAppkJP1cx%2BQ4B0rXCoq0IIVXL%2F8FWNcaxdabGqrO7XtC09w7fcpiR7Qr00ho%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc0f4a01a71783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":287734,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 3440x1256, components 3","md5":"fa28c7cbe23457a382757592a9d49bf5","sha1":"44554c5c1c0ea5c1e8fc77147bc19e573ff6db1b","sha256":"2d5d6cfcf8368719b020858b316354357f9aeadf526b538193f5b7375fc9fec8","sha512":"12c04529f44ddbe37066389810d2f45100522d79f9227b0b3268f52af8d0413897b3faeee03ebeed7552474ab54756230306c60d21731b3ddc5b9476dc0acc72","ssdeep":"6144:y1kbUAOErJbqsNJBFikQHcdYoF0mzCzdI3Z2:yybUarUiJHxSH","tlshash":"ab54236da4bfbcccddce7930c56d8f4385a2d197c91c0986e9bbec0654692e1f61201b","first_seen":"2026-02-08T14:59:38.225944Z","last_seen":"2026-02-11T04:03:52.770056Z","times_seen":6,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"nexo-foundation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexo.com/_next/static/media/a304e72db1b9eeb1-s.p.ttf","fqdn":"nexo.com","domain":"nexo.com","tld":"com"},"ip":{"addr":"104.18.20.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:17.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 01:10:47 GMT","end":"Tue, 14 Apr 2026 02:10:44 GMT"},"fingerprint":{"sha1":"67:37:75:28:94:DC:B7:E2:59:67:E0:EB:74:97:6C:32:60:EF:6B:8D","sha256":"78:C7:ED:1E:E9:E7:93:28:7D:60:92:B9:FF:75:2C:22:62:BB:FB:67:2F:89:A2:55:BE:82:A6:F1:72:EA:34:B6"}}},"request":{"raw":"GET /_next/static/media/a304e72db1b9eeb1-s.p.ttf HTTP/1.1\r\nHost: nexo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nexo-foundation.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexo-foundation.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Feb 2026 04:03:17 GMT\r\ncontent-type: font/ttf\r\ncf-ray: 9cc0f4a0799fa0f0-OSL\r\nreferrer-policy: strict-origin\r\nstrict-transport-security: max-age=31536000; preload\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors https://platform.nexo.io https://platform.nexo.com https://support.nexo.io https://support.nexo.com https://nexosurvey.force.com https://nexoio.lightning.force.com https://nexoio--c.visualforce.com https://nexoio.my.site.com\r\naccept-ch: Sec-CH-Prefers-Color-Scheme\r\nvary: Sec-CH-Prefers-Color-Scheme, Accept-Encoding\r\ncritical-ch: Sec-CH-Prefers-Color-Scheme\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 10 Feb 2026 16:15:56 GMT\r\netag: W/\"21d08-19c485689da\"\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 3634\r\nset-cookie: __cf_bm=dWsnQCQdnC.6OEi8ARtnnSgRTIA1MLEn4DdHFVg8x7Q-1770782597-1.0.1.1-iR9tgd7z9ITEZYHnMTjZU246s._CCMIjOwK4XFHhlcxfu7rfoAe3d05r_f44wiP2_QtYxgECMQ6afIHgR.ZLA5.RmLulEMyx1rlg3O9XYGCO6VxCmOQtl8fSjQanWR4y; path=/; expires=Wed, 11-Feb-26 04:33:17 GMT; domain=.nexo.com; HttpOnly; Secure; SameSite=None\r\ncontent-security-policy-report-only: default-src 'self' https://nexo.com *.nexo.com *.nexo.io cdn.segment.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://nexoio.my.salesforce-scrt.com https://widget.trustpilot.com https://appleid.cdn-apple.com https://www.apple.com https://browser-intake-datadoghq.eu https://region1.analytics.google.com https://region1.google-analytics.com https://events.eu1.segmentapis.com https://www.googletagmanager.com https://accounts.google.com https://www.gstatic.com https://fonts.gstatic.com *.geetest.com wss://platform.nexo.com https://nexoio.my.site.com; frame-ancestors https://platform.nexo.io https://platform.nexo.com https://support.nexo.io https://support.nexo.com https://nexosurvey.force.com https://nexoio.lightning.force.com https://nexoio--c.visualforce.com; report-uri https://security-logging.nexo.com;\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138504,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 40 names, Macintosh","md5":"4b1be56aba8f613af50d404818c0a400","sha1":"ecb0151e96be45e03fd43382c1621431861e3f34","sha256":"0928cfe0f4aa200fe2e2d3f35c5fc7c3c46637bba58fe5c424b517fa5d433072","sha512":"c5ce0ac0e8573d18212d47b668d7a1cb6308c7bc7350c5d55a8e972e11e604bd61be34a6ff8152eebc3c68fe22d2a18c44627b2178085f67b1d49717225d3472","ssdeep":"1536:WIi/iLAYEiiE8lOv5edcO5I+f3puAItHpZWzwP1BXAyCeB/7sfWP0rfqO7lEVGY:WI+idEZOR3+II5uAItH1BXAyB/IfWPoS","tlshash":"3bd34c17fb47c713c496ae399e21e331b77af5357f2b570fe6846620ac861808c6458d","first_seen":"2025-02-18T06:07:21.724693Z","last_seen":"2026-06-22T15:07:09.702072Z","times_seen":35,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":42,"dns":1,"connect":8,"send":0,"wait":15,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynamic-static-assets.com/wallet-book/v1/stable/wallet-book.json","fqdn":"dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.15.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:19.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 23:54:35 GMT","end":"Fri, 03 Apr 2026 00:54:33 GMT"},"fingerprint":{"sha1":"20:E0:7B:88:87:4A:32:1B:29:3F:68:D2:9F:B5:65:8E:D9:CE:36:B8","sha256":"2D:45:3D:1F:02:0A:67:D7:49:76:93:4D:C9:37:77:65:80:4D:57:B5:FA:5C:34:D8:9A:CE:8E:BD:B1:12:AA:78"}}},"request":{"raw":"GET /wallet-book/v1/stable/wallet-book.json HTTP/1.1\r\nHost: dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nexo-foundation.com/\r\nOrigin: https://nexo-foundation.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Feb 2026 04:03:19 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nx-static-request-id: JWEH90R3SE667HT8\r\ncf-cache-status: HIT\r\nexpires: Wed, 11 Feb 2026 04:13:19 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\naccess-control-max-age: 0\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nlast-modified: Tue, 10 Feb 2026 21:31:12 GMT\r\nage: 3635\r\ncache-control: public, max-age=600\r\netag: W/\"8c8ac3624bb31a236c65a083d3a05dab\"\r\ncontent-encoding: br\r\ncf-ray: 9cc0f4ac0c8276ef-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":536769,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8c8ac3624bb31a236c65a083d3a05dab","sha1":"3eebc364d3b45a9f8ab91c79d607e3c85cf12185","sha256":"10e5b489af58da0001ed2bb95569ba86bdc5a720cce456f404bb6acdfd2226b9","sha512":"4cfe4333f6ecabf17870f33d2e9a6a4cbdabd26746d62108cbeaa83a128e173df0c5e0dba6a4f60dae53c080930248f8fcd15975da25f42bb7b847f0cb23b6dd","ssdeep":"1536:4QHhrsHn19pSh27VRtJ9DIMsM7y1Iuvxv5Aff2RumHxKKiKXj6eEexLC7:4QBr09U27VJLsz1IuV57umxKKiK0","tlshash":"b2b40f48ca600d8310a6a359dc7e90d6a424c6578ed93d683bbc85bc4f6d92f25fc6fc","first_seen":"2026-02-11T03:03:21.812928Z","last_seen":"2026-02-11T04:03:52.771232Z","times_seen":4,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":21,"dns":4,"connect":1,"send":0,"wait":16,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/3c45b8b6-727c-4b0a-ba53-2fd2bec92fc7/sdkSettings","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.21.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:20.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 19:50:09 GMT","end":"Tue, 21 Apr 2026 20:50:02 GMT"},"fingerprint":{"sha1":"A0:DC:9F:5A:28:95:EA:E2:35:50:49:B8:A0:BC:16:A9:CB:E9:4B:DC","sha256":"CC:A8:2E:EB:4A:66:C2:67:AF:C4:EA:78:C2:78:58:E0:85:4F:F5:84:DF:45:70:0E:95:1A:34:8F:4B:A8:E2:26"}}},"request":{"raw":"OPTIONS /api/v0/sdk/3c45b8b6-727c-4b0a-ba53-2fd2bec92fc7/sdkSettings HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-dyn-api-version,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\nReferer: https://nexo-foundation.com/\r\nOrigin: https://nexo-foundation.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 11 Feb 2026 04:03:20 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://nexo-foundation.com\r\nvary: Origin, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-headers: content-type,x-dyn-api-version,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\naccess-control-max-age: 600\r\nx-frame-options: DENY\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=bwgsreaJvlLFtwh8z4dSAeBCOT1e.FH0v2.oE4Uw1bo-1770782600.1688902-1.0.1.1-0EeH0PKysmVo7Y5ca_LmkUG0zEHwwPU1DNwhE6WSCkoecJKY.D_1oc_FwFMS3xx0xdi86GO9IYPw1XPcHL7WYRnP5gd6kKAHfORjy7VEBa.i8OXE0CP1mFKype2XzBIy; HttpOnly; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Wed, 11 Feb 2026 04:33:20 GMT\r\nserver: cloudflare\r\ncf-ray: 9cc0f4b30c003181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T03:07:12.769099Z","times_seen":17754584,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":114,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/navbar-private-clients.jpg","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:17.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexo-foundation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 13:58:03 GMT","end":"Sat, 09 May 2026 14:56:52 GMT"},"fingerprint":{"sha1":"65:35:54:7C:CF:89:7B:63:F2:F7:DA:A3:16:65:57:84:5B:1F:BE:1C","sha256":"29:28:7D:A6:6B:1B:DA:35:CD:13:57:78:6C:B5:E1:6E:9C:4F:0D:FF:64:B3:21:2D:09:20:0C:B7:CA:FF:7F:F6"}}},"request":{"raw":"GET /navbar-private-clients.jpg HTTP/1.1\r\nHost: nexo-foundation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexo-foundation.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:03:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 26479\r\ncast-mode: default\r\nlast-modified: Sun, 08 Feb 2026 22:35:01 GMT\r\netag: \"69890f95-676f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 3634\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=piQbp0MWFcOCl10SeGu08SNRaxYN6jsoGL3HsDExpPTKYyokiWCG5JEJHvdgCjRH7P%2F6G4VtC982mjw1kj24Gdp6w68HxLtJ7EpMHBZUIjg2Op8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc0f4a01a6c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26479,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 956x308, components 3","md5":"a608c210953764a9d30549756b15624f","sha1":"5b91f4a34f4fb1acf3648d76dbf2c6f120a59ca9","sha256":"32cc24106d5bf3e4b63a8a14adcdba47e15da61cef03a920404822a759cb12be","sha512":"185512e97406c2196de2f7823648fad32e50a84a996e9e3dec73ba32f5fc4db824469f2a71936ec249c0acfdb62550807ec5686587045fea2b3a8d630c625f8f","ssdeep":"384:dVNwmRW0E1cSbMulUfzzq9mZOKgiQMx2KKwupBDvIwKChnqwJLRkY0D:vWr2SbM1GBKgiJ/ufbKCxqIRT4","tlshash":"64c2e0de62030764fefaac36e55b15125639cbe258f89ccce3116410a3e85f6fe5b411","first_seen":"2026-02-08T14:59:38.259424Z","last_seen":"2026-02-11T04:03:52.771861Z","times_seen":6,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"nexo-foundation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/modal-earn-cover-v02.jpg","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:17.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexo-foundation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 13:58:03 GMT","end":"Sat, 09 May 2026 14:56:52 GMT"},"fingerprint":{"sha1":"65:35:54:7C:CF:89:7B:63:F2:F7:DA:A3:16:65:57:84:5B:1F:BE:1C","sha256":"29:28:7D:A6:6B:1B:DA:35:CD:13:57:78:6C:B5:E1:6E:9C:4F:0D:FF:64:B3:21:2D:09:20:0C:B7:CA:FF:7F:F6"}}},"request":{"raw":"GET /modal-earn-cover-v02.jpg HTTP/1.1\r\nHost: nexo-foundation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexo-foundation.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:03:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 197682\r\ncast-mode: default\r\nlast-modified: Sun, 08 Feb 2026 22:35:01 GMT\r\netag: \"69890f95-30432\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 3634\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Of6aE3Z4LpG2j8GxL%2BXbNvG9aUxqSZFVggRU7uihbBeLTkLsNadVBatOLrArs1yguOrZooHbbAgbyLWQleJIw9Pu39BsBxAO5GKcDfRe8%2BXhFRQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc0f4a01a6f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":197682,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 3440x1256, components 3","md5":"e9a2360d686519b623fc826dc5f48e69","sha1":"1ff8b44303462d639c718778adfe8621df256305","sha256":"26d44df2d0f58a35ecbaa207c1a7ba0d27d77fb8fa9e9ca6198f3adb61428b44","sha512":"dc1b9c469b6dde4a7f43b661244ae7187f5f6695e160317e1908431a01cf54eb4e14a31184468bc2fc9de6a7ca7d49688eede027a59471b9f804faff2853c6e3","ssdeep":"6144:/3jPd3zco1SZQRijyhZzS9BTUWje9USsqGB:fhwo10QI2zzS9BT1K9xu","tlshash":"fd1412f34505f733f86f9bbe2587d2e5725a8cb329e12445933398b19284207ba5d4ce","first_seen":"2026-02-08T14:59:38.228244Z","last_seen":"2026-02-11T04:03:52.772451Z","times_seen":6,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"nexo-foundation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/index_3.html","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://nexo-foundation.com/index_1.html","date":"2026-02-11T04:03:17.656Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexo-foundation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 13:58:03 GMT","end":"Sat, 09 May 2026 14:56:52 GMT"},"fingerprint":{"sha1":"65:35:54:7C:CF:89:7B:63:F2:F7:DA:A3:16:65:57:84:5B:1F:BE:1C","sha256":"29:28:7D:A6:6B:1B:DA:35:CD:13:57:78:6C:B5:E1:6E:9C:4F:0D:FF:64:B3:21:2D:09:20:0C:B7:CA:FF:7F:F6"}}},"request":{"raw":"GET /index_3.html HTTP/1.1\r\nHost: nexo-foundation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexo-foundation.com/index_1.html\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:03:17 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sun, 08 Feb 2026 22:35:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nage: 3634\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DRb1MlV0prgLR3Lf4VayO0LmxHcbD8xCP5Wcor40jDcdku0ZY2Prt7AimkKN6tKBEss0jlXYsOPLsZCzx0qo%2FkQjC3ifjEBoPxF4YsYkPyidVdo%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc0f4a35aab783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":396,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"57302211dfbbe622631cb707b6159ad1","sha1":"53dbc10f8066403d874a604b132583fcef0a0cca","sha256":"957eb9f5943ffa20b1c955af0acfdeb114b28bdef53d8fa8546c4df2739e38c0","sha512":"2f7e051d2db698be106573bc3c0eec5a88052fe3febc937ef3b37f94559b3e4f24602df3100ed22fd7648b28c34d7cb78591554c9516ed12dbf310529e5f7bdd","ssdeep":"","tlshash":"74e0f1938311c807055667c13fd1f208400bff1ef5419c9079f594a8a8ee23ad416984","first_seen":"2026-02-08T14:59:38.255997Z","last_seen":"2026-02-11T04:03:52.772978Z","times_seen":6,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"nexo-foundation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/icon.svg","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:17.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexo-foundation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 13:58:03 GMT","end":"Sat, 09 May 2026 14:56:52 GMT"},"fingerprint":{"sha1":"65:35:54:7C:CF:89:7B:63:F2:F7:DA:A3:16:65:57:84:5B:1F:BE:1C","sha256":"29:28:7D:A6:6B:1B:DA:35:CD:13:57:78:6C:B5:E1:6E:9C:4F:0D:FF:64:B3:21:2D:09:20:0C:B7:CA:FF:7F:F6"}}},"request":{"raw":"GET /icon.svg HTTP/1.1\r\nHost: nexo-foundation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexo-foundation.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:03:17 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=6,i=?0\r\ncast-mode: default\r\nlast-modified: Sun, 08 Feb 2026 22:35:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 3634\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"69890f95-a20\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yVMro6o0UvhV%2FwOcgI4CfjLYzTD1HWEBgl1nJlG4KyywIiMxeGJ9LPO9Hl2tx2SKJ5h17GJS2ilN7%2FZRJvZxk4StiL%2B8tca%2FQXX7%2BxTv6QYrEdY%3D\"}]}\r\ncf-ray: 9cc0f4a37aae783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2592,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"22e5e7b7216a73890c27e6503b71b045","sha1":"e318ba2412a1f3d583e758c1c3040314074cfa3b","sha256":"fd536f40970a0566ab94c776c83ca843ee2cb3aff9e9da374f99b3b1a672a818","sha512":"bb67c94eefc5fad7962ecd8b7175688d23296b5cc79b6037770bba391f1ddd719bfcf92032e3a4259655f2cc4d393eaf3604e8e9d94382228cde74508493a14f","ssdeep":"","tlshash":"e051a690237a73f8a011fbf8d63258babd2334d476259ca9c3618d14a002029dee88a6","first_seen":"2025-10-10T22:37:16.780392Z","last_seen":"2026-05-26T06:02:58.889666Z","times_seen":31,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"nexo-foundation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iconic.dynamic-static-assets.com/icons/sprite.svg","fqdn":"iconic.dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:19.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 23:54:35 GMT","end":"Fri, 03 Apr 2026 00:54:33 GMT"},"fingerprint":{"sha1":"20:E0:7B:88:87:4A:32:1B:29:3F:68:D2:9F:B5:65:8E:D9:CE:36:B8","sha256":"2D:45:3D:1F:02:0A:67:D7:49:76:93:4D:C9:37:77:65:80:4D:57:B5:FA:5C:34:D8:9A:CE:8E:BD:B1:12:AA:78"}}},"request":{"raw":"GET /icons/sprite.svg HTTP/1.1\r\nHost: iconic.dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexo-foundation.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Feb 2026 04:03:19 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 10 Feb 2026 21:31:13 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=600\r\nexpires: Wed, 11 Feb 2026 04:13:19 GMT\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 23525\r\nx-static-request-id: DQFTDM4YTXF3PHYQ\r\naccess-control-allow-methods: GET, HEAD\r\netag: W/\"b20ae0f2276dd786b6c049170db3aa7a\"\r\ncontent-encoding: br\r\ncf-ray: 9cc0f4ae8cf81525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2099418,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c625a62e9693e8a13813ae62135c3f8c","sha1":"4111a62fc5826e4dd472847bd28ec0cce597b68e","sha256":"e47eb4a794961e2c48e5548e3e02b330a8304c67915af635449228f9d0476fc8","sha512":"d3d6fa7f4125d8a089db4e1583b9eedfe7f4d921239818c65c9dfb3a7309ab699d230231c8a2db9d43803973ddcd660f009468a62c8fa41eeb255eafcce04069","ssdeep":"12288:Ly7gdGeNiQ0x2Z1AIqYHeo+mVLXdddAOkYS6F5fpF02CJNVGQ:9dn4Q0x2Z1AIqYP+mV7dd6OEgfA2CJHX","tlshash":"2825d6ba5d1c6b4e777a4d2ddb12247d2e4b70eeb20881dfa9df72ecc162441e521ca0","first_seen":"2026-02-06T17:56:03.106343Z","last_seen":"2026-05-04T09:11:07.265618Z","times_seen":42,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":30,"dns":4,"connect":4,"send":0,"wait":44,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynamic-static-assets.com/wallet-book/v1/stable/wallet-book.json","fqdn":"dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.15.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:19.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 23:54:35 GMT","end":"Fri, 03 Apr 2026 00:54:33 GMT"},"fingerprint":{"sha1":"20:E0:7B:88:87:4A:32:1B:29:3F:68:D2:9F:B5:65:8E:D9:CE:36:B8","sha256":"2D:45:3D:1F:02:0A:67:D7:49:76:93:4D:C9:37:77:65:80:4D:57:B5:FA:5C:34:D8:9A:CE:8E:BD:B1:12:AA:78"}}},"request":{"raw":"GET /wallet-book/v1/stable/wallet-book.json HTTP/1.1\r\nHost: dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexo-foundation.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Feb 2026 04:03:19 GMT\r\ncontent-type: application/json\r\nlast-modified: Tue, 10 Feb 2026 21:31:12 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=600\r\nexpires: Wed, 11 Feb 2026 04:13:19 GMT\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 23525\r\nx-static-request-id: 4N4W9A5ZZ64BPYFR\r\naccess-control-allow-methods: GET, HEAD\r\netag: W/\"8c8ac3624bb31a236c65a083d3a05dab\"\r\ncontent-encoding: br\r\ncf-ray: 9cc0f4ae8dc8b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T03:07:12.769099Z","times_seen":17754584,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":27,"dns":1,"connect":1,"send":0,"wait":9,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"metamask-sdk.api.cx.metamask.io/socket.io/?EIO=4\u0026transport=websocket","fqdn":"metamask-sdk.api.cx.metamask.io","domain":"metamask.io","tld":"io"},"ip":{"addr":"104.18.30.173","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:21.341Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.cx.metamask.io","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 15 Dec 2025 18:37:34 GMT","end":"Sun, 15 Mar 2026 18:37:33 GMT"},"fingerprint":{"sha1":"AA:9D:89:79:2B:B1:09:B1:21:E1:A0:24:A1:B7:6A:2E:03:D5:A0:7F","sha256":"68:F7:46:6A:38:8C:99:3E:23:08:14:70:D3:9F:A1:00:74:02:F6:7C:F1:9B:6B:DB:E6:7A:C0:97:06:93:4F:77"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: metamask-sdk.api.cx.metamask.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://nexo-foundation.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: fXb/nOMzXchy61uBzQtofA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Wed, 11 Feb 2026 04:03:21 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 0basmrGO5DtTjJ1apEA3BcvJytg=\r\nAccess-Control-Allow-Origin: https://nexo-foundation.com\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\ncf-cache-status: DYNAMIC\r\nSet-Cookie: AWSALB=6619RiYCOIRNJrlLI5nVW87wmSjmURKwZy5fXK2PfK3shFxIkeoqgYkqnpWswVmYgH5/mNpf0r6fmqoKmqTweXVplVly37Dv9UfVIqJIG8/vRP7tI5HdW80/Nvo8; Expires=Wed, 18 Feb 2026 04:03:21 GMT; Path=/\nAWSALBCORS=6619RiYCOIRNJrlLI5nVW87wmSjmURKwZy5fXK2PfK3shFxIkeoqgYkqnpWswVmYgH5/mNpf0r6fmqoKmqTweXVplVly37Dv9UfVIqJIG8/vRP7tI5HdW80/Nvo8; Expires=Wed, 18 Feb 2026 04:03:21 GMT; Path=/; SameSite=None; Secure\n__cf_bm=_96SCkYKIftq7nTx8GzFtP3OVQQf3dkng3S9588jVnI-1770782601-1.0.1.1-tYUR3FiqSf0dYg9kAXtO2Mk6OMv4.TOuAHONyDCqzRgZSKeuYp0Fawky9zoCGWqUA8U8lr1QmuLkv7urGb4mGMOj73jJCOjSTY1AMPQe78g; path=/; expires=Wed, 11-Feb-26 04:33:21 GMT; domain=.api.cx.metamask.io; HttpOnly; Secure; SameSite=None\r\nStrict-Transport-Security: max-age=15552000; includeSubDomains\r\nX-Content-Type-Options: nosniff\r\nServer: cloudflare\r\nCF-RAY: 9cc0f4ba9f280883-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon ALB","description":"Amazon Application Load Balancer (ALB) distributes incoming application traffic to increase availability and support content-based routing.","website":"https://aws.amazon.com/elasticloadbalancing/","common_platform_enumeration":"","icon":"Amazon ELB.svg","categories":["Load balancers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T03:07:12.769099Z","times_seen":17754584,"resource_available":true,"data":null}},"time_used":444,"timings":{"blocked":0,"dns":17,"connect":19,"send":0,"wait":391,"receive":1,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/883ce2b13657fbbf.css","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:16.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexo-foundation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 13:58:03 GMT","end":"Sat, 09 May 2026 14:56:52 GMT"},"fingerprint":{"sha1":"65:35:54:7C:CF:89:7B:63:F2:F7:DA:A3:16:65:57:84:5B:1F:BE:1C","sha256":"29:28:7D:A6:6B:1B:DA:35:CD:13:57:78:6C:B5:E1:6E:9C:4F:0D:FF:64:B3:21:2D:09:20:0C:B7:CA:FF:7F:F6"}}},"request":{"raw":"GET /883ce2b13657fbbf.css HTTP/1.1\r\nHost: nexo-foundation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexo-foundation.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:03:16 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sun, 08 Feb 2026 22:35:01 GMT\r\netag: W/\"69890f95-4dcf\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 3634\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QV5kk7UEE1VkLb5trRbkcXWZmfs8v76Vk6uBTT02Q7a2VadNEd4xMFlJ2W9X4CxLwM9UbUiUoKHDqqYdACBd2as9v4uhzR3Qt7IZ8rC8LSX4eaY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cc0f49e2a22783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19919,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19919), with no line terminators","md5":"5150a0ab5632871c7205e57ef92276bb","sha1":"fa4bb38c936b413d40ecbdec86fd3445289fa36b","sha256":"cb09d3c166cb72be4c9a1af9b1c5c88aab10bbe332b722fb5e7df69413352276","sha512":"c76ef579adbf0f98f66a1cf6243658404b30329634716e84d1121cf34bc1ddc54d215ea7b5b10349a1048606566c9c5e24d56eee758203028e3c1d5bf65ec4b6","ssdeep":"384:XgYPEug3xoys3EScVsI1OS76OutbI0pNpEncGYxRC0K5cu3k:XgYPEN3Wys0FsxS76ft00FPRD2c2k","tlshash":"0b9262dce68150321c4390bbd7dda40d952a61f0ee36aef7e5e2128d43c63e22ba3755","first_seen":"2026-01-01T20:02:11.555951Z","last_seen":"2026-03-04T18:41:36.541597Z","times_seen":12,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"nexo-foundation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/navbar-personal-loyalty-program.png","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:17.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexo-foundation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 13:58:03 GMT","end":"Sat, 09 May 2026 14:56:52 GMT"},"fingerprint":{"sha1":"65:35:54:7C:CF:89:7B:63:F2:F7:DA:A3:16:65:57:84:5B:1F:BE:1C","sha256":"29:28:7D:A6:6B:1B:DA:35:CD:13:57:78:6C:B5:E1:6E:9C:4F:0D:FF:64:B3:21:2D:09:20:0C:B7:CA:FF:7F:F6"}}},"request":{"raw":"GET /navbar-personal-loyalty-program.png HTTP/1.1\r\nHost: nexo-foundation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexo-foundation.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:03:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 119525\r\ncast-mode: default\r\nlast-modified: Sun, 08 Feb 2026 22:35:01 GMT\r\netag: \"69890f95-1d2e5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 3634\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=giJefegp7rgCBCRuXOAOoBCMOLlm63iUVRjHFODM6MpjN5tH%2BPHH4BGt9YX9%2BrAFir%2FitRyXgV7NSpvYhSfZ7KoHGSKK1LFvk3kwBF4yIj1xbGY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc0f4a01a6e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":119525,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 955 x 306, 8-bit/color RGBA, non-interlaced","md5":"ef9748ee1c83283609f4a788187fa160","sha1":"53e40dc81a1cf93d4cba75125726d68571ec6c4c","sha256":"47d931e6480414a8d5a4e53421364d8185ce2d01f7f2e7ed3726e9015fd8aa98","sha512":"731ffc435fd51b0e0406959896fc14942228360bf6e2bc5212d9b1158ed6c71f48ce3cbbf8106fa09da04bfa550ded1d0dc42abe35da34e294e23e948e6718b2","ssdeep":"3072:CDSJSpwDlaJrNmG9VT2ZL4aWc20WKYGVAi3SNTK:C+4uMJrNmCVSZLLWF0j4+","tlshash":"79c312b4f8803712ccf70193e128fc0a2da727d5ba46b61b7a065fb248a795487117bf","first_seen":"2026-02-08T14:59:38.238077Z","last_seen":"2026-02-11T04:03:52.780977Z","times_seen":6,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"nexo-foundation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/3c45b8b6-727c-4b0a-ba53-2fd2bec92fc7/settings?sdkVersion=ClientSDK%2F0.1.0-alpha.32","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.21.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:20.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 19:50:09 GMT","end":"Tue, 21 Apr 2026 20:50:02 GMT"},"fingerprint":{"sha1":"A0:DC:9F:5A:28:95:EA:E2:35:50:49:B8:A0:BC:16:A9:CB:E9:4B:DC","sha256":"CC:A8:2E:EB:4A:66:C2:67:AF:C4:EA:78:C2:78:58:E0:85:4F:F5:84:DF:45:70:0E:95:1A:34:8F:4B:A8:E2:26"}}},"request":{"raw":"GET /api/v0/sdk/3c45b8b6-727c-4b0a-ba53-2fd2bec92fc7/settings?sdkVersion=ClientSDK%2F0.1.0-alpha.32 HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nexo-foundation.com/\r\nContent-Type: application/json\r\nx-dyn-api-version: API/0.0.823\r\nx-dyn-request-id: -9he_9hhHn7FGGxdzjsAzk3WNOOFesqPdjcY8g2aACtR3B38pz\r\nx-dyn-version: WalletKit/4.47.3\r\nx-dyn-is-global-wallet-popup: false\r\nOrigin: https://nexo-foundation.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Feb 2026 04:03:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://nexo-foundation.com\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"4500-sMLD3wcRPwZXuEPGBdaxRzFk0UQ\"\r\ncontent-encoding: br\r\ncache-control: max-age=30\r\nx-frame-options: DENY\r\ncf-cache-status: EXPIRED\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=Rlt3pSlEGbiUTxDdBZvKHuSrA94Xrnlq0awR4FZYe.o-1770782599.9669569-1.0.1.1-Z3v3EQHDzqUR.5GYkAbhibf3dv.GcCti4Z8UrCRtsLAECI__1djDq48DOZVhYr8357HxjuWv8i6gdrchv8PDc.ayH.Tlh7pUmV9S_BeRo3PjvuRwi4hlK537pf1tyl7c; HttpOnly; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Wed, 11 Feb 2026 04:33:20 GMT\r\nserver: cloudflare\r\ncf-ray: 9cc0f4b1c9b03181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":17664,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"69d678f78ea2854fbb97c78e61bdbf46","sha1":"b0c2c3df07113f0657b843c605d6b1473164d144","sha256":"4b7b8a3f8b72ae1cf9ec4eadd694d4cd1e83f31dfd1276cc35bfb00ad01e1f53","sha512":"b218871bbce07f3c421cd0e6af00a490ee479de212629cd67f3b9f6c73b7d76d1cb0dc195e25b59ff6be63d1492c4dfa92eb0298c3b0234706e4715c3922a471","ssdeep":"384:wTzPQJg72DLYr5BJCGvuVXOp+ATNpjFjp:pgVMGv6OpnZpjT","tlshash":"f482fc9e6d542cbe5b02d98cd05a260b42264d31b2a738fdc0a5ceb8e1dbdb54735e33","first_seen":"2026-02-01T10:29:14.322172Z","last_seen":"2026-02-11T04:03:52.781559Z","times_seen":11,"resource_available":false,"data":null}},"time_used":435,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":435,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/3c45b8b6-727c-4b0a-ba53-2fd2bec92fc7/nonce","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.21.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:20.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 19:50:09 GMT","end":"Tue, 21 Apr 2026 20:50:02 GMT"},"fingerprint":{"sha1":"A0:DC:9F:5A:28:95:EA:E2:35:50:49:B8:A0:BC:16:A9:CB:E9:4B:DC","sha256":"CC:A8:2E:EB:4A:66:C2:67:AF:C4:EA:78:C2:78:58:E0:85:4F:F5:84:DF:45:70:0E:95:1A:34:8F:4B:A8:E2:26"}}},"request":{"raw":"GET /api/v0/sdk/3c45b8b6-727c-4b0a-ba53-2fd2bec92fc7/nonce HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nexo-foundation.com/\r\nContent-Type: application/json\r\nx-dyn-request-id: a31odQKJEJCy9FL8hhzZ3HhfymdloKxG2XWvgk7LBOQtwymL1l\r\nx-dyn-version: WalletKit/4.47.3\r\nx-dyn-api-version: API/0.0.823\r\nx-dyn-is-global-wallet-popup: false\r\nOrigin: https://nexo-foundation.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 11 Feb 2026 04:03:20 GMT\r\ncontent-type: application/json; charset=utf-8\r\npriority: u=4,i=?0\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://nexo-foundation.com\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"2c-onzl3MY1s8S4VRS+AfNePo1+qKg\"\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=dc9yNqP8us_znI0SY2TlmTgFoXfhjdqARp7YggDLu5E-1770782600.6874716-1.0.1.1-_OH9pZUiafsmVV8hc4LGvasGYtjRDlV85snRwU.vERWSg_nTPZfrEFNqLzfISYtf6tyMGaO8zenbh.8pk4fHAVGGO2MiKIDkl30nkaPuy1wBC1iMp0FznjMRzeKWNTE2; HttpOnly; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Wed, 11 Feb 2026 04:33:20 GMT\r\nx-frame-options: DENY\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cc0f4b64f0a23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":44,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a60965f69d1e980e86c554f2db3b3b84","sha1":"a27ce5dcc635b3c4b85514be01f35e3e8d7ea8a8","sha256":"a3b0c2bc283c0e3003e2e3e79a41ca7b541b8f317ffd0fc2a9d34a972c7dc60e","sha512":"41551a1ab7b813dc32d37b1b376d38ac9acf64fa55adc027d14944ff8c09974858331e6001acb80cc03b2d68a6a316ab1088492d19024233b3fd125290d359aa","ssdeep":"","tlshash":"66900450001415c45f5d157f40f50177440510135151c40c007ff311730434005c1504","first_seen":"2026-02-11T04:03:52.782198Z","last_seen":"2026-02-11T04:03:52.782198Z","times_seen":1,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@fontsource/dm-sans/files/dm-sans-latin-400-normal.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:20.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@fontsource/dm-sans/files/dm-sans-latin-400-normal.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nexo-foundation.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexo-foundation.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 14200\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5.2.7\r\nx-jsd-version-type: version\r\netag: W/\"3778-fPihwUbFN/KHGQYBbTcAfGHH/mw\"\r\naccept-ranges: bytes\r\nage: 6235\r\ndate: Wed, 11 Feb 2026 04:03:20 GMT\r\nx-served-by: cache-fra-etou8220087-FRA, cache-hel1410024-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14200,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14200, version 1.0","md5":"a220a32881ae190f4784c437c1e467e0","sha1":"7cf8a1c146c537f2871906016d37007c61c7fe6c","sha256":"4ab51eb2cd7305d177187908d6397474d4520663f6c6e572feb0a64f4fa80006","sha512":"bf6503a157d8bb1c221812e845136fdfc4344e3c67802023647b0ff9be233ef2a1035a0a188e0a3612911b695cc142f5d8a874e27a0ec51da7b2a120f78c8e2e","ssdeep":"384:Po4q0QKjXsVLZ0e3mUS+4to3EXf/S5IXxVlU:Q4bFcVL4Uh4W3AHNBVlU","tlshash":"b852d1cded244eeec1744676038cc21996a9f36326f1b955bd90bf86937a8145f043b3","first_seen":"2025-09-12T00:51:45.933668Z","last_seen":"2026-08-07T02:26:45.147751Z","times_seen":2954,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":49,"dns":9,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/lockup-black.png","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:16.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexo-foundation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 13:58:03 GMT","end":"Sat, 09 May 2026 14:56:52 GMT"},"fingerprint":{"sha1":"65:35:54:7C:CF:89:7B:63:F2:F7:DA:A3:16:65:57:84:5B:1F:BE:1C","sha256":"29:28:7D:A6:6B:1B:DA:35:CD:13:57:78:6C:B5:E1:6E:9C:4F:0D:FF:64:B3:21:2D:09:20:0C:B7:CA:FF:7F:F6"}}},"request":{"raw":"GET /lockup-black.png HTTP/1.1\r\nHost: nexo-foundation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexo-foundation.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:03:16 GMT\r\ncontent-type: image/png\r\ncontent-length: 2529\r\ncast-mode: default\r\nlast-modified: Sun, 08 Feb 2026 22:35:01 GMT\r\netag: \"69890f95-9e1\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 3634\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hQZF4xXeGZ1zEHKFxK9B4J%2FCL3LTVae7c2kspy40%2BKTxNpibJniRNbAwdVrlAtZEEJxoqHAFsggCpm%2FsZJDWhYj73ytmOHgJFVFDueXodJeoJac%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc0f49e2a26783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2529,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 64, 8-bit colormap, non-interlaced","md5":"a2e4901710adebed7d73afe1d8d16761","sha1":"99667b4216f79b9c25054bb0837fabda9c79625b","sha256":"60a4170aa0956eb89b5f8beb65f6a93e0e8767588e544e65f01b34f827cece38","sha512":"0d76fe008470fc5dd60c7c860226f1902fdec1cfb6b586d1214b21b41a0924381a6ab4859f49559b991a7648d9ecd9dfb5184bf2bffd639dd6d7c8655bef875a","ssdeep":"","tlshash":"10512db3ed0f8a09c4d132f9a7d60ad26553b16a59a99f130314c95ad8508c8fc2380c","first_seen":"2025-02-18T06:07:21.68996Z","last_seen":"2026-06-22T15:07:09.652046Z","times_seen":36,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"nexo-foundation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/index_1.html","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:17.106Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexo-foundation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 13:58:03 GMT","end":"Sat, 09 May 2026 14:56:52 GMT"},"fingerprint":{"sha1":"65:35:54:7C:CF:89:7B:63:F2:F7:DA:A3:16:65:57:84:5B:1F:BE:1C","sha256":"29:28:7D:A6:6B:1B:DA:35:CD:13:57:78:6C:B5:E1:6E:9C:4F:0D:FF:64:B3:21:2D:09:20:0C:B7:CA:FF:7F:F6"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: nexo-foundation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexo-foundation.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:03:17 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Sun, 08 Feb 2026 22:35:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nage: 3634\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mkot1BmDOQTd2QJkg1mPPDW392irzTY1cPLmacoagVR0qN%2B7mhVTyQxjztjX6l%2BHFJVpeWHUillKA1YkNjp7Mz1Ve8za68qeKWJiKX45h147CCc%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc0f49fba67783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":244,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"c7c1e01c73f0dfd877bfb32a6294af12","sha1":"0a51375bae31e5f8c47a105d33b67a05baf53c78","sha256":"b2dc1dab75ac996f2a3af7cdb627d970358fd59fb0f91277ac64b81ba690b571","sha512":"e3ba21ed856f2a3a9ab50a13e8ec65f8fa4436748f3d645566a778450f0162d5371329a0a20a5d82bdd57fc762f54c7a26277656ab6ad6db0dd8b03cbb708a75","ssdeep":"","tlshash":"14d09722d105480e98018ad2caeae2c8c443d82cfb106d24bcf23720a66c223842263c","first_seen":"2025-06-28T16:48:34.945511Z","last_seen":"2026-02-11T04:03:52.785057Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"nexo-foundation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-11T04:03:16.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexo-foundation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 13:58:03 GMT","end":"Sat, 09 May 2026 14:56:52 GMT"},"fingerprint":{"sha1":"65:35:54:7C:CF:89:7B:63:F2:F7:DA:A3:16:65:57:84:5B:1F:BE:1C","sha256":"29:28:7D:A6:6B:1B:DA:35:CD:13:57:78:6C:B5:E1:6E:9C:4F:0D:FF:64:B3:21:2D:09:20:0C:B7:CA:FF:7F:F6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nexo-foundation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Feb 2026 04:03:16 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 08 Feb 2026 22:35:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ckFr0SIOZMpTkxDCLW0Qksc5V7pgwwUReS7dT8fNZrJNM3Id4bsDnQu0uluo4JESMjbMAgVHjntYAO4H74CxxVjyEnmG9fqpoIYSiQ9Frg6oq1w%3D\"}]}\r\nage: 3634\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cc0f49cfb7376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":379019,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (43730)","md5":"8e0f13400ad67980b075361525b92f77","sha1":"9a4faa4cff78aedd89eaefdc1de4d17bc3957df7","sha256":"d1b64a9726d9691ba6e10b48ce1d0f33cce8b2a82374ecf70994d2c97769ec95","sha512":"cf925a8f0daed569bf24a588ad8e511b568b25ce95b18e6c13807747f6a53d2085c12ebc9da2072e69216141df27cfd1e871a04fd34c99bf581ce890905408eb","ssdeep":"3072:GtO31XeRSD4MrPHsycKaRyNKaYN3nWbfAFjDK+TcDMOu7U+seTTcuTCOYCQ5hDuS:YhsCTLWpCADuU5","tlshash":"c684e8b76290232ee2838799e5227b587026e95ffe338ddcf24c437057cdae98d15648","first_seen":"2026-02-11T03:03:21.807585Z","last_seen":"2026-02-11T04:03:52.785781Z","times_seen":2,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":19,"dns":6,"connect":1,"send":0,"wait":20,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"nexo-foundation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/49c334581b960a10.css","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:16.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexo-foundation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 13:58:03 GMT","end":"Sat, 09 May 2026 14:56:52 GMT"},"fingerprint":{"sha1":"65:35:54:7C:CF:89:7B:63:F2:F7:DA:A3:16:65:57:84:5B:1F:BE:1C","sha256":"29:28:7D:A6:6B:1B:DA:35:CD:13:57:78:6C:B5:E1:6E:9C:4F:0D:FF:64:B3:21:2D:09:20:0C:B7:CA:FF:7F:F6"}}},"request":{"raw":"GET /49c334581b960a10.css HTTP/1.1\r\nHost: nexo-foundation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexo-foundation.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:03:16 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sun, 08 Feb 2026 22:35:01 GMT\r\netag: W/\"69890f95-1240c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 3634\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=edF67iYLhiSmjSEHQJOzlsEFONmqylVqHABnXxd7rcJZUlEtxTtpA5oJ7HNxWBZpGD79%2F4ItJYW7X74GDRic39SJPSTCbEByaIbSETLaDOWv0HE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cc0f49e1a20783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74764,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (63243)","md5":"124a291da10a60f9dbf1247cbecd8e46","sha1":"d0fbce5a00e56869d764008e873cf1302dc3e64d","sha256":"090c0b5162b9d1a5799553c10cc42e51146ea5291825479bbcf44e6e70e6502d","sha512":"f52e0d07bb2b6fa4dacbb7502f0e9465dd4e971838edd53908232ede738163221ab99260fa962a2c3f88160c81386f10b60b912dd43177547a100a83dddc9ff5","ssdeep":"1536:GwpfUfOU66z91yhYEeeBq7PBbCJXoR2mp8oZG1Ic:Gw1UfL66z91yhYEeeBq7PB4w2mp8oZGH","tlshash":"9e73739e6f42013f6c6381f6d294ab9ca11bb0c1ef2616fbf99255018fd03f72d66624","first_seen":"2026-02-08T14:59:38.251195Z","last_seen":"2026-02-11T04:03:52.787107Z","times_seen":6,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"nexo-foundation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/01a4748c34ee3248.css","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:16.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexo-foundation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 13:58:03 GMT","end":"Sat, 09 May 2026 14:56:52 GMT"},"fingerprint":{"sha1":"65:35:54:7C:CF:89:7B:63:F2:F7:DA:A3:16:65:57:84:5B:1F:BE:1C","sha256":"29:28:7D:A6:6B:1B:DA:35:CD:13:57:78:6C:B5:E1:6E:9C:4F:0D:FF:64:B3:21:2D:09:20:0C:B7:CA:FF:7F:F6"}}},"request":{"raw":"GET /01a4748c34ee3248.css HTTP/1.1\r\nHost: nexo-foundation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexo-foundation.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:03:16 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sun, 08 Feb 2026 22:35:01 GMT\r\netag: W/\"69890f95-20a2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 3634\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GsSSuHaA1FndPBnK3ccCdmpog%2F2cEjWRr%2BZU2qoFiVwqO6wUvmoLdzn9%2FwoyL9Xt3MtiB1cEq2HlKiGyoQ5%2Fzesf2zcO3v7B4tYqDOCpup7wBR0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cc0f49e2a23783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8354,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8354), with no line terminators","md5":"282aff559cf7ec6a79420ded0370ec99","sha1":"7134734c7f9c22fdc59f65e4509d2cede45605ec","sha256":"d5b5993255dbfcc3158ca9959808f858c36f87cadfa7c2c9129e9d9d8b744de5","sha512":"00530959fb3455065d7888fcd35bd789985362339fe9a71d1fbca64b1fc2c32d647f76957656015b3dd14a1015dad49bec7f77f70add873a85df4ed817ca1eb6","ssdeep":"192:jCsf6EsfZ0bQ6Z/Qz6xM6xxsfj2ysfq/85sfBUM:jPpJI/OM","tlshash":"6e027114e259903b1c63e0d5e7dd994d903e70c6ff3a3ebabb91018147c12fa2dab649","first_seen":"2026-01-01T20:02:11.552464Z","last_seen":"2026-03-04T18:41:36.502543Z","times_seen":12,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"nexo-foundation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexo.com/_next/static/media/042a00f4b3c474b9-s.p.ttf","fqdn":"nexo.com","domain":"nexo.com","tld":"com"},"ip":{"addr":"104.18.20.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:17.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 01:10:47 GMT","end":"Tue, 14 Apr 2026 02:10:44 GMT"},"fingerprint":{"sha1":"67:37:75:28:94:DC:B7:E2:59:67:E0:EB:74:97:6C:32:60:EF:6B:8D","sha256":"78:C7:ED:1E:E9:E7:93:28:7D:60:92:B9:FF:75:2C:22:62:BB:FB:67:2F:89:A2:55:BE:82:A6:F1:72:EA:34:B6"}}},"request":{"raw":"GET /_next/static/media/042a00f4b3c474b9-s.p.ttf HTTP/1.1\r\nHost: nexo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nexo-foundation.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexo-foundation.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Feb 2026 04:03:17 GMT\r\ncontent-type: font/ttf\r\ncf-ray: 9cc0f4a06982a0f0-OSL\r\nreferrer-policy: strict-origin\r\nstrict-transport-security: max-age=31536000; preload\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors https://platform.nexo.io https://platform.nexo.com https://support.nexo.io https://support.nexo.com https://nexosurvey.force.com https://nexoio.lightning.force.com https://nexoio--c.visualforce.com https://nexoio.my.site.com\r\naccept-ch: Sec-CH-Prefers-Color-Scheme\r\nvary: Sec-CH-Prefers-Color-Scheme, Accept-Encoding\r\ncritical-ch: Sec-CH-Prefers-Color-Scheme\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 10 Feb 2026 20:03:04 GMT\r\netag: W/\"21e34-19c49267bb8\"\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 3634\r\nset-cookie: __cf_bm=xnq_IUDnfMwgNm8DhxTKN9rcorUgidpzjiJm9l_u3O4-1770782597-1.0.1.1-.HpkQWRNxOf_JyAVsf5G.xBWzeiMl_t2lzb2F_5qrNYxkr48sfpXInkQNReIFS5eov8fI5wBsL_EqXKa_tFkDlsIIMYSEEMKI.yUFkK7nfEArJjDGdBDV3VSH27ovidZ; path=/; expires=Wed, 11-Feb-26 04:33:17 GMT; domain=.nexo.com; HttpOnly; Secure; SameSite=None\r\ncontent-security-policy-report-only: default-src 'self' https://nexo.com *.nexo.com *.nexo.io cdn.segment.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://nexoio.my.salesforce-scrt.com https://widget.trustpilot.com https://appleid.cdn-apple.com https://www.apple.com https://browser-intake-datadoghq.eu https://region1.analytics.google.com https://region1.google-analytics.com https://events.eu1.segmentapis.com https://www.googletagmanager.com https://accounts.google.com https://www.gstatic.com https://fonts.gstatic.com *.geetest.com wss://platform.nexo.com https://nexoio.my.site.com; frame-ancestors https://platform.nexo.io https://platform.nexo.com https://support.nexo.io https://support.nexo.com https://nexosurvey.force.com https://nexoio.lightning.force.com https://nexoio--c.visualforce.com; report-uri https://security-logging.nexo.com;\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":138804,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 40 names, Macintosh","md5":"daa1324825c8ed8cc6e66ffa594f14bc","sha1":"9d5d73e867441c769e920fb2b0065d9538028b73","sha256":"624818e1ac54c05dc9ca0b266c020d54f82e7b56597b9890b075524b5f11831a","sha512":"4a1d2dc8ec668826e97726c84593da6bbf0362e28c100bc160d5b65abf50466725089da4473dbd11e53290a09cf6b4eb471b5ac92e5aae1c0f2d21f56fe3b24b","ssdeep":"1536:xzRA/iLAMgPUSDbEaAdKdwYV4Eh2TTiuRDKJRp0mFI/jHGs85JPz/bTe:hRwiebEZdKdwYWtiZSHSFC","tlshash":"b1d34b47f75ac316d1926e758e22e3317f79f834bf2b2b1fba415264ac8a4804c94798","first_seen":"2025-02-18T06:07:21.702351Z","last_seen":"2026-06-22T15:07:09.721927Z","times_seen":34,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":43,"dns":4,"connect":1,"send":0,"wait":27,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/3c45b8b6-727c-4b0a-ba53-2fd2bec92fc7/settings?sdkVersion=ClientSDK%2F0.1.0-alpha.32","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.21.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:19.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 19:50:09 GMT","end":"Tue, 21 Apr 2026 20:50:02 GMT"},"fingerprint":{"sha1":"A0:DC:9F:5A:28:95:EA:E2:35:50:49:B8:A0:BC:16:A9:CB:E9:4B:DC","sha256":"CC:A8:2E:EB:4A:66:C2:67:AF:C4:EA:78:C2:78:58:E0:85:4F:F5:84:DF:45:70:0E:95:1A:34:8F:4B:A8:E2:26"}}},"request":{"raw":"OPTIONS /api/v0/sdk/3c45b8b6-727c-4b0a-ba53-2fd2bec92fc7/settings?sdkVersion=ClientSDK%2F0.1.0-alpha.32 HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-dyn-api-version,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\nReferer: https://nexo-foundation.com/\r\nOrigin: https://nexo-foundation.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 11 Feb 2026 04:03:19 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://nexo-foundation.com\r\nvary: Origin, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-headers: content-type,x-dyn-api-version,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\naccess-control-max-age: 600\r\nx-frame-options: DENY\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=mSmUdDynSqJqn2gUcw7wygeZfBztE1McctnzbgKjFPs-1770782599.6535761-1.0.1.1-pg1G0QOlWAyeW0TqXyntGyXkYB.n5E418qIzxoOgfJhg_m.FQ3u0JC53v5e3edPbP6s_EjiKapWUSSiWMvUQ23E_eik1hGlk.WgiCYDVroK4RepPM9PmUNK.5HbPRe1Z; HttpOnly; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Wed, 11 Feb 2026 04:33:19 GMT\r\nserver: cloudflare\r\ncf-ray: 9cc0f4afde8b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T03:07:12.769099Z","times_seen":17754584,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":22,"dns":7,"connect":1,"send":0,"wait":125,"receive":76,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/3c45b8b6-727c-4b0a-ba53-2fd2bec92fc7/nonce","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.21.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:20.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 19:50:09 GMT","end":"Tue, 21 Apr 2026 20:50:02 GMT"},"fingerprint":{"sha1":"A0:DC:9F:5A:28:95:EA:E2:35:50:49:B8:A0:BC:16:A9:CB:E9:4B:DC","sha256":"CC:A8:2E:EB:4A:66:C2:67:AF:C4:EA:78:C2:78:58:E0:85:4F:F5:84:DF:45:70:0E:95:1A:34:8F:4B:A8:E2:26"}}},"request":{"raw":"OPTIONS /api/v0/sdk/3c45b8b6-727c-4b0a-ba53-2fd2bec92fc7/nonce HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-dyn-api-version,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\nReferer: https://nexo-foundation.com/\r\nOrigin: https://nexo-foundation.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 11 Feb 2026 04:03:20 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://nexo-foundation.com\r\nvary: Origin, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-headers: content-type,x-dyn-api-version,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\naccess-control-max-age: 600\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=P3JxCl0HJP2mVobaqmzOJExkyFmsxlNfDKA1q4JNY6s-1770782600.1710176-1.0.1.1-SkF.VU6WjjQZLvp8uuJflqSSFtQmrBoK2O8aZvyt7tOH6cCQqZBVf42UsMoqa3aZaXJd7XQe3V9kRItoyLOAjWQL6P53jjFr60qyBuVq2aMdmDT3qkPkwYEnYcJza2AS; HttpOnly; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Wed, 11 Feb 2026 04:33:20 GMT\r\nx-frame-options: DENY\r\nserver: cloudflare\r\ncf-ray: 9cc0f4b31c083181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T03:07:12.769099Z","times_seen":17754584,"resource_available":true,"data":null}},"time_used":514,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":514,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexo.com/_next/static/media/0ddfd6b1e257170f-s.p.ttf","fqdn":"nexo.com","domain":"nexo.com","tld":"com"},"ip":{"addr":"104.18.20.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:17.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 14 Jan 2026 01:10:47 GMT","end":"Tue, 14 Apr 2026 02:10:44 GMT"},"fingerprint":{"sha1":"67:37:75:28:94:DC:B7:E2:59:67:E0:EB:74:97:6C:32:60:EF:6B:8D","sha256":"78:C7:ED:1E:E9:E7:93:28:7D:60:92:B9:FF:75:2C:22:62:BB:FB:67:2F:89:A2:55:BE:82:A6:F1:72:EA:34:B6"}}},"request":{"raw":"GET /_next/static/media/0ddfd6b1e257170f-s.p.ttf HTTP/1.1\r\nHost: nexo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nexo-foundation.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexo-foundation.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Feb 2026 04:03:17 GMT\r\ncontent-type: font/ttf\r\ncf-ray: 9cc0f4a0799ba0f0-OSL\r\nreferrer-policy: strict-origin\r\nstrict-transport-security: max-age=31536000; preload\r\nx-content-type-options: nosniff\r\ncontent-security-policy: frame-ancestors https://platform.nexo.io https://platform.nexo.com https://support.nexo.io https://support.nexo.com https://nexosurvey.force.com https://nexoio.lightning.force.com https://nexoio--c.visualforce.com https://nexoio.my.site.com\r\naccept-ch: Sec-CH-Prefers-Color-Scheme\r\nvary: Sec-CH-Prefers-Color-Scheme, Accept-Encoding\r\ncritical-ch: Sec-CH-Prefers-Color-Scheme\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Tue, 10 Feb 2026 19:56:09 GMT\r\netag: W/\"21a8c-19c49202665\"\r\ncontent-encoding: gzip\r\ncf-cache-status: HIT\r\nage: 3635\r\nset-cookie: __cf_bm=F_xuieaOyTYN2Pc_YchxukH8BpknuQPeJzoQUjUZ1LE-1770782597-1.0.1.1-_2xuUq52G8azHFsUZZJRZGzdOkL52LBRGvnlz5obHxzJbUeiThj_Lf4spDDsB.uD4mh5dHmTKJRl6v9X1aQNZ62Zo1W9GPgXjtn_LlOU0qWUcDLLakxesAq2cts3Mh85; path=/; expires=Wed, 11-Feb-26 04:33:17 GMT; domain=.nexo.com; HttpOnly; Secure; SameSite=None\r\ncontent-security-policy-report-only: default-src 'self' https://nexo.com *.nexo.com *.nexo.io cdn.segment.com https://cdn.cookielaw.org https://geolocation.onetrust.com https://nexoio.my.salesforce-scrt.com https://widget.trustpilot.com https://appleid.cdn-apple.com https://www.apple.com https://browser-intake-datadoghq.eu https://region1.analytics.google.com https://region1.google-analytics.com https://events.eu1.segmentapis.com https://www.googletagmanager.com https://accounts.google.com https://www.gstatic.com https://fonts.gstatic.com *.geetest.com wss://platform.nexo.com https://nexoio.my.site.com; frame-ancestors https://platform.nexo.io https://platform.nexo.com https://support.nexo.io https://support.nexo.com https://nexosurvey.force.com https://nexoio.lightning.force.com https://nexoio--c.visualforce.com; report-uri https://security-logging.nexo.com;\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":137868,"size_decoded":0,"mime_type":"font/ttf","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 40 names, Macintosh","md5":"a55adfa82ace257bd61c26c2a86b8852","sha1":"f2ce5fdbff510c5fd8e138ab4d2f94d07b007039","sha256":"00c14d4ce441993e3413162f60a006701f53f8245922899f420e0ab32f02aa8f","sha512":"adb0eac7133d8d015fd5a8ffe1f54ad51b2155bac52ea7ac4c28c78b93a0a71a6b682354f71f07e162f9d7abedff97051296fae1a05d31fae41b7b3873b27084","ssdeep":"1536:v3a/iLAuTFylGEj29ggA2QB7gVWh26egbsEFaYVYK2JTIgZO:vWidT9OtgAjXhAgoEFa74","tlshash":"afd34a47f74bc70ad5d6ae358e62e338b775f9387f2f170baa445660ad870948c24388","first_seen":"2025-02-18T06:07:21.695785Z","last_seen":"2026-06-22T15:07:09.686623Z","times_seen":33,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":42,"dns":3,"connect":8,"send":0,"wait":17,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/home-atf_full-f1-d-01-02.jpg","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:17.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexo-foundation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 13:58:03 GMT","end":"Sat, 09 May 2026 14:56:52 GMT"},"fingerprint":{"sha1":"65:35:54:7C:CF:89:7B:63:F2:F7:DA:A3:16:65:57:84:5B:1F:BE:1C","sha256":"29:28:7D:A6:6B:1B:DA:35:CD:13:57:78:6C:B5:E1:6E:9C:4F:0D:FF:64:B3:21:2D:09:20:0C:B7:CA:FF:7F:F6"}}},"request":{"raw":"GET /home-atf_full-f1-d-01-02.jpg HTTP/1.1\r\nHost: nexo-foundation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexo-foundation.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:03:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 213313\r\ncast-mode: default\r\nlast-modified: Sun, 08 Feb 2026 22:35:01 GMT\r\netag: \"69890f95-34141\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 3634\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Bpovw7si%2BToAzJOIDwmOD1YgT8CL1pRE5hMJEXnMffiAzY2YC7fjV%2B33jBMM14Uu29OogykcX8MXBXlKZPQD%2FREhG15k8qO0Rcat%2BbHXyTLpzA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc0f4a1ca8b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":213313,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 3808x2128, components 3","md5":"f3b90c7071d461fce6d5c5b61ed3f898","sha1":"5d6923e4b9e2cea25f250d2c23be9df616304bbd","sha256":"8b197df5bc44e780d1ca742f895da0b3ee408acc60a85ae7103f24f20bb987b3","sha512":"73db0856347f8d0add2cb4fef3593d4624c9126309e447fb7d2ceaac0b20cbbd00628ae35d31858834532838835266ffd272dfbb2cfb38afe0d742c23e286f7c","ssdeep":"6144:A5kGQoF7njWlhW9zkhdgN5UWHYSXTYBy6o2VtH6:H7k7nMEzJN5U4pkBy6oSH6","tlshash":"49241263e6b8747ad11ecb35d1570f657bb272a68ebc1787f868c461b0d13ac2ca1680","first_seen":"2026-02-08T14:59:38.254477Z","last_seen":"2026-03-18T23:37:37.449507Z","times_seen":10,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"nexo-foundation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spongebob.varekuta.top/api/config","fqdn":"spongebob.varekuta.top","domain":"varekuta.top","tld":"top"},"ip":{"addr":"104.21.21.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:20.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"varekuta.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 00:13:33 GMT","end":"Sun, 29 Mar 2026 01:11:02 GMT"},"fingerprint":{"sha1":"0A:61:C8:3B:E7:70:E3:CA:33:2F:4F:03:F0:25:F0:96:F6:6D:42:24","sha256":"70:DC:2B:3E:19:D6:69:02:FE:38:FA:FD:6D:20:F0:16:B7:05:BA:DE:EC:24:27:AE:39:DF:CB:7D:88:29:A8:15"}}},"request":{"raw":"OPTIONS /api/config HTTP/1.1\r\nHost: spongebob.varekuta.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://nexo-foundation.com/\r\nOrigin: https://nexo-foundation.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 11 Feb 2026 04:03:20 GMT\r\nserver: cloudflare\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,POST,OPTIONS\r\naccess-control-allow-headers: Content-Type,Authorization\r\naccess-control-max-age: 86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yLsa9vp%2Fn5S4PbSf4XVMi1yW74hHEjM%2B4ZOMvTub451%2BPtxE7PxDGcIvvo8W9Fye3IUY0NRE2Nbj6ArYZ1IYEM596%2BG41HiOh02lhxzWgV1SkU9R4cs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cc0f4b38bcf723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T03:07:12.769099Z","times_seen":17754584,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":72,"dns":54,"connect":1,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"spngbeb.b-cdn.net/assets/index.js","fqdn":"spngbeb.b-cdn.net","domain":"b-cdn.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:16.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.b-cdn.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 06 Nov 2025 00:00:00 GMT","end":"Wed, 11 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"92:9B:37:29:B4:2D:AB:EB:68:07:7B:03:B2:80:2E:5B:53:CE:AD:E7","sha256":"51:6F:86:36:A1:23:32:72:AA:0F:28:1A:81:F4:92:F8:82:35:42:13:BA:4C:21:2D:80:C5:BB:BF:19:04:1D:32"}}},"request":{"raw":"GET /assets/index.js HTTP/1.1\r\nHost: spngbeb.b-cdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://nexo-foundation.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexo-foundation.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Feb 2026 04:03:16 GMT\r\ncontent-type: application/javascript\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 5007570\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncontent-encoding: br\r\netag: \"698a2353-706d42\"\r\nlast-modified: Mon, 09 Feb 2026 18:11:31 GMT\r\ncdn-storageserver: DE-1139\r\ncdn-fileserver: 1151\r\ncdn-proxyver: 1.43\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 02/11/2026 03:02:42\r\ncdn-edgestorageid: 830\r\ncdn-requestid: c42768b694d0e4c52349cbc24bf67ed8\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":7368002,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"2ad8f9be61d4f27b4d141a551241df9b","sha1":"c69d68ef1b3b95e3bc37f95348dd3dbd2d667c15","sha256":"253f75aa488128323d374a6c93a46bae77cb718ab6b609a0864276efb7e600a6","sha512":"1a3528fa1b1f35f1265f3dcd167a03495ae17a4fd50251afab97395cfe8f916c0a4649ddda76ef5b989866ce4974c8435a9c55b3bdd429243fd53ffb7c12745a","ssdeep":"12288:Kqikw2YghPZ+D1MRd/4Rn88NtVnnDSrrpn42mb5:Kqikw7ghPo1uQ188NtFD3/b5","tlshash":"db25ae4e49155533232f96288d4a7e5e37e15bec9ea9cb6003127cc7f9b8fb7252e801","first_seen":"2026-02-11T03:03:21.791589Z","last_seen":"2026-02-15T03:00:44.792574Z","times_seen":7,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":115,"dns":29,"connect":1,"send":0,"wait":3,"receive":0,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/powered_by_logo.svg","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:16.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexo-foundation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 13:58:03 GMT","end":"Sat, 09 May 2026 14:56:52 GMT"},"fingerprint":{"sha1":"65:35:54:7C:CF:89:7B:63:F2:F7:DA:A3:16:65:57:84:5B:1F:BE:1C","sha256":"29:28:7D:A6:6B:1B:DA:35:CD:13:57:78:6C:B5:E1:6E:9C:4F:0D:FF:64:B3:21:2D:09:20:0C:B7:CA:FF:7F:F6"}}},"request":{"raw":"GET /powered_by_logo.svg HTTP/1.1\r\nHost: nexo-foundation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexo-foundation.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:03:16 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Sun, 08 Feb 2026 22:35:01 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 3634\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"69890f95-144a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gtN3bmWqbcRqCiBE1dC9J6aWZ6uTTlQBIV5cJMU%2FOKeCcfS8%2B8QD5oQNtLjkidFAIS1%2BX%2FvtD4%2BoScTXhQyLNlM5i%2B2ZHzKjDq1LEWkqetFDhqw%3D\"}]}\r\ncf-ray: 9cc0f49e2a27783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5194,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"63e737d3544164d2b7f4fbca416ac807","sha1":"030370aa38715e4c41589633f69d0bfe8255d46c","sha256":"5fa00d047acd959697b9d7772c31dcd37bec33c70c6fbf80ab8316205d1d286d","sha512":"31ee1bb536c0e50f5568a415ea3308367bfcfd11d2a6f7dff1c8e3a982f7be790c240a603cd4c6e187672824b8e5d07646049a28c6a88a7b001eb9a0142f312b","ssdeep":"96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV","tlshash":"93b1a9f5aa45d29c391e8984ce37a964551fb4eb7bfe83d06192d332e40ede0f900c18","first_seen":"2023-05-04T19:47:29Z","last_seen":"2026-08-07T03:04:31.575054Z","times_seen":121164,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"nexo-foundation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nexo-foundation.com/modal-exchange-cover-1.jpg","fqdn":"nexo-foundation.com","domain":"nexo-foundation.com","tld":"com"},"ip":{"addr":"104.21.75.217","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:17.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nexo-foundation.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 08 Feb 2026 13:58:03 GMT","end":"Sat, 09 May 2026 14:56:52 GMT"},"fingerprint":{"sha1":"65:35:54:7C:CF:89:7B:63:F2:F7:DA:A3:16:65:57:84:5B:1F:BE:1C","sha256":"29:28:7D:A6:6B:1B:DA:35:CD:13:57:78:6C:B5:E1:6E:9C:4F:0D:FF:64:B3:21:2D:09:20:0C:B7:CA:FF:7F:F6"}}},"request":{"raw":"GET /modal-exchange-cover-1.jpg HTTP/1.1\r\nHost: nexo-foundation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://nexo-foundation.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Wed, 11 Feb 2026 04:03:17 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 201421\r\ncast-mode: default\r\nlast-modified: Sun, 08 Feb 2026 22:35:01 GMT\r\netag: \"69890f95-312cd\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 3634\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AMScAM2I3Q7qoOnMQ89Q5JaWgciQlUf1ZFaGccqEPhbsTmIb8Y%2FGQtPsK%2Br2qHNmlfDglr%2BIYSFswtauE8tlV0KcrK3AbwJJCqKM%2Bx%2BUMwdt6SI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cc0f4a01a70783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":201421,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 3440x1256, components 3","md5":"988850522737076891de094730defffe","sha1":"cf5169d38e382077c7d4bedddcf1a8abb7f3e146","sha256":"71c4c77512a9f7cfb8fbfaf96c3e66d412578733dc87f6c79e65853fbe5ba18a","sha512":"e92475a94365e81296d080c58066d28abc451b48c085d81a6caece67ca43e537b839583b74387cc7ba00169816e2ba20d194c47717413250791b7b30adaf1e18","ssdeep":"3072:lpvGIaa3ohiAcF1GeIvBRTAxB0CGMGpm30ZdkA1S3kkxO0tAVcEaqTOiTt:lgwog6jjT9M13jTQcDiTt","tlshash":"301412286822720af4dd333649c33738771361b0d3a5e5a5954e242898ebf899f71f5f","first_seen":"2026-02-08T14:59:38.261539Z","last_seen":"2026-03-18T23:37:37.434113Z","times_seen":10,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":71,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-11","alert":"Sinkholed","trigger":"nexo-foundation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"spongebob.varekuta.top/api/config","fqdn":"spongebob.varekuta.top","domain":"varekuta.top","tld":"top"},"ip":{"addr":"104.21.21.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://nexo-foundation.com/","date":"2026-02-11T04:03:20.316Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"varekuta.top","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 29 Dec 2025 00:13:33 GMT","end":"Sun, 29 Mar 2026 01:11:02 GMT"},"fingerprint":{"sha1":"0A:61:C8:3B:E7:70:E3:CA:33:2F:4F:03:F0:25:F0:96:F6:6D:42:24","sha256":"70:DC:2B:3E:19:D6:69:02:FE:38:FA:FD:6D:20:F0:16:B7:05:BA:DE:EC:24:27:AE:39:DF:CB:7D:88:29:A8:15"}}},"request":{"raw":"POST /api/config HTTP/1.1\r\nHost: spongebob.varekuta.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nexo-foundation.com/\r\nContent-Type: application/json\r\nContent-Length: 18\r\nOrigin: https://nexo-foundation.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":18,"data":"{\"payload\":\"e30=\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 11 Feb 2026 04:03:20 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Content-Type,Authorization\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ansfzsZnvMNddWtfLUs5HUfUb%2FXa%2Bi23BbKZT6iejL4c47xp2q4LN8zP8FtuWi2RJRADhbVa8ZAXWJxf10KWnm7EThkDi1JD2rD3IuZpvu70gIErqL8%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9cc0f4b3ec6f723c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":420,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"bbc7ffb6f1c39b5707c332b85127a2ac","sha1":"4123892a9c2056a36152435faf96637a8d14633e","sha256":"f417211f5543f88146e287b260d0d7da87f552ef21f4bb919db3cf0c0e62832f","sha512":"59e1defeba3d3e0316116b0caa3fc8e00935c5939287d97ba8cf4d7ed27e4448bbe4d941dea14b2a0717e962e9977fd15c64f8ad7eaf027666a0f044ba5d4933","ssdeep":"","tlshash":"cde0ab0687592f67866ecb00b0172eb7148002a423c40c3a17988dbc63ecfc8b8c339f","first_seen":"2026-02-11T04:03:52.793339Z","last_seen":"2026-02-11T04:03:52.793339Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}